Secure channel password application strategy updating method and device

Abstract

The invention provides a secure channel password application strategy updating method and equipment. The method comprises the following steps: establishing a secure channel with an unmanned aerial vehicle; obtaining unmanned aerial vehicle state information of the unmanned aerial vehicle; analyzing the unmanned aerial vehicle state information to obtain a target password application strategy; and updating the password application strategy of the secure channel as the target password application strategy. By adopting the method, the resource utilization rate, the real-time performance and the safety can be improved.

Description

Technical Field

[0001] This disclosure relates to the field of network security technology, and in particular to a method and device for updating secure channel password application policies. Background Technology

[0002] In related technologies, with the rapid development of internet and drone technologies, drones have been widely used in logistics, agricultural monitoring, emergency rescue, security patrols, and many other fields. To ensure the security of drone data and control, a security mechanism is needed to guarantee communication security between the drone and the management platform. Currently, the built-in security components of drones can access the network-side management platform through a secure channel based on IPsec VPN (Internet Protocol Security Virtual Private Network) (or a zero-trust IPsec VPN). IPsec VPN can use preset high-security cryptographic algorithms to complete authentication and establish secure communication. However, due to the potentially complex flight environment of drones, using fixed high-security cryptographic algorithms can lead to high resource consumption and low real-time performance. Summary of the Invention

[0003] This disclosure provides a method and device for updating secure channel password application policies.

[0004] According to a first aspect of this disclosure, a method for updating a secure channel password application policy is provided, applied to a management platform, comprising: Establish safe passages with drones; Obtain the drone status information; The target cryptographic application strategy is obtained by analyzing the state information of the UAV. Update the cryptographic application policy of the secure channel to the target cryptographic application policy.

[0005] According to a second aspect of this disclosure, a secure channel cryptographic application policy update method is provided, applied to an unmanned aerial vehicle (UAV), comprising: Connect to the management platform and establish a secure channel with the management platform; Collect drone status information while the drone is in flight; The drone status information is sent to the management platform through the secure channel, so that the management platform can analyze the drone status information, obtain the target cryptographic application policy, and generate negotiation information based on the target cryptographic application policy and send it to the drone. The system receives negotiation information sent by the management platform and updates the positioning algorithm switching and key application strategy of the secure channel based on the negotiation information.

[0006] According to a third aspect of this disclosure, a secure channel cryptographic application policy update device is provided, applied to a management platform, comprising: A secure communication module is used to establish a secure channel with the drone; and to acquire the drone's status information; The cryptographic application management module is used to analyze the UAV's status information to obtain the target cryptographic application strategy; The secure communication module is also used to update the cryptographic application policy of the secure channel to the target cryptographic application policy.

[0007] According to a fourth aspect of this disclosure, a secure channel cryptographic application policy update apparatus is provided for use in a drone, comprising: The secure communication module is used to access the management platform and establish a secure channel with it. The cryptographic application security module is used to collect drone status information during drone flight and send the drone status information to the secure communication module. The secure communication module is further configured to send the UAV status information to the management platform through the secure channel, so that the management platform can analyze the UAV status information, obtain the target cryptographic application policy, generate negotiation information based on the target cryptographic application policy, and send it to the UAV; and receive the negotiation information sent by the management platform; and update the positioning algorithm switching and key application policy of the secure channel according to the negotiation information.

[0008] According to a fifth aspect of this disclosure, an electronic device is provided, comprising: At least one processor; and, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the method described in the first aspect above.

[0009] According to a sixth aspect of this disclosure, a non-transitory computer-readable storage medium is provided storing computer instructions, wherein the computer instructions are configured to cause the computer to perform the method described in the first aspect above.

[0010] According to a seventh aspect of this disclosure, a computer program product is provided, comprising a computer program that, when executed by a processor, implements the method described in the first aspect above.

[0011] In the embodiments of this disclosure, a secure channel is established with the drone; drone status information is obtained through the secure channel; the drone status information is analyzed to obtain a target cryptographic application policy; and the cryptographic application policy of the secure channel is updated to the target cryptographic application policy. In this way, the management platform can perform cryptographic application analysis and decision-making based on the drone status information, and dynamically update and adjust the cryptographic application policy of the secure channel. This not only effectively reduces resource consumption and improves resource utilization and real-time performance, but also enhances the security and reliability of drone communication.

[0012] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of this disclosure, nor is it intended to limit the scope of this disclosure. Other features of this disclosure will become readily apparent from the following description. Attached Figure Description

[0013] The accompanying drawings are provided to better understand this solution and do not constitute a limitation of this disclosure. Wherein: Figure 1 A schematic diagram illustrating communication between a drone and a management platform, provided for related technologies; Figure 2 A flowchart illustrating a secure channel password application policy update method provided in this embodiment of the disclosure; Figure 3 A flowchart illustrating another secure channel password application policy update method provided in this disclosure embodiment; Figure 4 This is a schematic diagram of a secure channel password application policy update device provided in an embodiment of the present disclosure. Detailed Implementation

[0014] The exemplary embodiments of this disclosure are described below with reference to the accompanying drawings, including various details of the embodiments to aid understanding, and should be considered merely exemplary. Therefore, those skilled in the art will recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of this disclosure. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.

[0015] As the background technology indicates, with the rapid development of internet technology, the network security risks of information systems continue to increase, and the threats and challenges are becoming increasingly severe. Cryptographic security is a crucial foundation of information security and can be used to effectively protect the data security of network information systems. Cryptographic technology is a core technology and important means of protecting network information systems. Meanwhile, drone technology is developing rapidly and is widely used in logistics transportation, agricultural monitoring, emergency rescue, security patrols, and other fields. With the increasing complexity of application scenarios (such as multi-drone collaboration, intensive airspace operations, and cross-network communication), in order to ensure the security of drone control and data, relevant security mechanisms are adopted between drones and management platforms to ensure secure communication. For secure communication in related technologies, please refer to [link to relevant technologies]. Figure 1 ,like Figure 1 As shown, the drone's built-in security component (secure communication module) can access the network-side management platform via an IPsec VPN secure channel (or a zero-trust IPsec VPN). The IPsec VPN may use preset cryptographic algorithms (such as AES (Advanced Encryption Standard), RSA (Rivest–Shamir–Adleman, RSA public-key cryptography algorithm), etc.) to complete identity authentication and establish a secure channel. For example, a certificate-based authentication method can be used, where the drone's security component and the management platform achieve two-way authentication through a PKI (Public Key Infrastructure) system. This method has at least the following technical problems: 1. Once a secure channel is established between the drone and the management platform, a fixed cryptographic algorithm is unsuitable for the complex scenarios in which drones fly. For example, the establishment of a secure channel between the drone and the management platform is often based on static configuration and a fixed cryptographic algorithm. However, the drone's flight environment is complex. For instance, when the drone flies in an area with high interference in the communication link or high channel latency, data needs frequent retransmission or encryption / error correction. If the default high-security cryptographic algorithm is still used, the following problems arise: Excessive consumption of computational resources, affecting real-time performance: Frequent data retransmission or encryption / error correction significantly increases the processor's computational load. For drones with limited resources, this may lead to CPU exhaustion, causing command response delays, or even flight control failure due to insufficient real-time performance; Communication latency exacerbates channel environment degradation: When the communication link already has high latency, the processing time of the high-security cryptographic algorithm itself may increase the timeout and packet loss rate, disrupting the continuity of control commands; Excessive energy consumption accelerates power consumption. When the drone's battery is low, continuous high-intensity encryption operations will accelerate battery depletion, shorten mission endurance, and even trigger an emergency landing risk.

[0016] 2. A fixed or non-updated update cycle for the security channel protection key between the drone and the management platform is unsuitable for complex drone flight scenarios. For example, the update strategy for the security channel protection key between the drone and the management platform is generally based on static configuration, which may result in no updates or a fixed update cycle. However, the drone flight environment is complex. For instance, when the drone experiences location anomalies, strong communication link interference, or detected attacks, failure to update the key in a timely manner poses the following problems: If an attacker has already obtained the current security channel key, they can exploit the window of non-updated keys to continuously decrypt communication content and obtain sensitive data (such as aerial images and control commands); if the drone has entered a high-risk area with strong communication link interference, the frequency of attacks may be high, and an excessively long key update cycle increases the risk of the key being cracked.

[0017] Based on this, embodiments of this disclosure provide a method, apparatus, and device for updating secure channel cryptographic application policies. The management platform can perform cryptographic application analysis and decision-making based on collected UAV status information, dynamically adjusting the cryptographic algorithms and keys for the secure channel and automatically switching to appropriate secure channel cryptographic suites and key application policies. This effectively reduces resource consumption, improves resource utilization, and thus enhances real-time performance.

[0018] The following description, with reference to the accompanying drawings, outlines a method, apparatus, and device for updating secure channel password application policies according to embodiments of this disclosure.

[0019] Figure 2 This is a flowchart illustrating a secure channel password application policy update method provided in an embodiment of this disclosure. Figure 2 As shown, the method includes the following steps: Step 201: Establish a safe passage with the drone.

[0020] In embodiments of this disclosure, the management platform can establish a secure connection with the drone via a suggested secure channel. For example, during the drone's initialization phase, the drone's built-in secure communication module can utilize pre-set cryptographic algorithms (such as authentication credentials based on pre-set keys or pre-set certificates) to access the management platform via an IPsec VPN or zero-trust security architecture on the network side, establishing an end-to-end initial secure channel.

[0021] Step 202: Obtain the drone status information.

[0022] The UAV status information includes at least one of the following: environmental perception data, equipment status data, and security situation data. Environmental perception data includes at least one of the following: positioning information, meteorological parameters, and electromagnetic environment parameters; equipment status data includes at least one of the following: power system parameters, communication quality parameters, and payload status parameters; and security situation data includes at least one of the following: security status parameters, abnormal behavior data, and hardware parameters.

[0023] In the embodiments of this disclosure, during the flight of the UAV, the UAV's cryptographic application security module can collect multi-dimensional UAV status information in real time and send the UAV status information to its secure communication module. This UAV status information can be transmitted to the secure communication module of the management platform via an established secure channel, so that the management platform can obtain the UAV status information through the secure channel. The UAV status information may include, but is not limited to, at least one of the following: environmental perception data, device status data, and security situation data. Environmental perception data may include: three-dimensional coordinates (such as longitude, latitude, and altitude), heading angle, flight speed, and other positioning information; real-time meteorological parameters such as wind speed, wind direction, temperature, humidity, and air pressure (which can be collected by airborne meteorological sensors to assess communication quality and flight stability); and electromagnetic environment parameters such as signal strength, channel interference index, spectrum occupancy rate, and surrounding wireless signal strength maps. Equipment status data can include: power system parameters such as battery voltage / current / temperature, remaining power, voltage fluctuation curve, motor speed and temperature, and propeller status; communication quality indicators such as signal quality (QoS), packet loss rate, bit error rate, and channel switching records; and payload status parameters such as camera / sensor operating temperature and remaining storage space. Security posture data can include: security status parameters such as cryptographic algorithm runtime load, key lifecycle, encryption / decryption operation frequency, cryptographic algorithm switching records, and security chip temperature; abnormal behavior detection results (abnormal behavior data) such as unauthorized protocol connection attempts, packet replay attack characteristics, unexpected position deviations, abnormal control command frequency, and sensor data conflict alarms; and hardware integrity evidence (hardware parameters) such as the trusted platform module (TPM)'s trust metric values. Understandably, UAV status information can be sent along with other routine business messages (such as operational status synchronization messages) to reduce communication overhead.

[0024] Step 203: Analyze the UAV status information to obtain the target cryptographic application strategy.

[0025] The target cryptographic application policy is used to indicate at least one of the target cryptographic suite and the target key application policy for the secure channel.

[0026] In the embodiments of this disclosure, the secure communication module of the management platform can forward the received UAV status information to the cryptographic application management module or the cryptographic application intelligent policy engine. The cryptographic application management module or the cryptographic application intelligent policy engine then performs real-time analysis of the UAV status information and executes cryptographic application decisions, outputting a target cryptographic application policy to guide secure channel updates. For example, the target cryptographic application policy can include at least one of two types of decisions: a target cryptographic suite and a target key application policy. Specifically, the dynamic switching rule for the cryptographic suite can be: automatically switching to a specified secure channel cryptographic suite based on channel instructions; the key application policy can be: updating the key and adjusting the key update cycle based on the current environmental state of the UAV.

[0027] Step 204: Update the password application policy of the secure channel to the target password application policy.

[0028] In the embodiments of this disclosure, after obtaining the target cryptographic application policy, the cryptographic application policy of the established secure channel can be updated. For example, the original cryptographic application policy of the secure channel can be updated to the target cryptographic application policy. This can be achieved by updating at least one of the following: updating the cipher suite or updating the key application policy.

[0029] In the embodiments of this disclosure, a secure channel is established with the drone; drone status information is obtained through the secure channel; the drone status information is analyzed to obtain a target cryptographic application strategy; and the cryptographic application strategy of the secure channel is updated to the target cryptographic application strategy. In this way, the management platform can perform cryptographic application analysis and decision-making based on the collected multi-dimensional drone status information, including environmental perception, device status, and security posture, and dynamically update and adjust the cryptographic application strategy of the secure channel. This not only effectively reduces resource consumption and improves resource utilization and real-time performance, but also enhances the security and reliability of drone communication.

[0030] In some possible implementations, updating the cryptographic application policy of the secure channel to the target cryptographic application policy includes at least one of the following: Update the secure channel's cipher suite to the target cipher suite; Update the key application policy of the secure channel to the target key application policy.

[0031] In a further possible implementation, after updating the cryptographic application policy of the secure channel to the target cryptographic application policy according to the cryptographic application policy, the method further includes: Generate negotiation information based on the target cryptographic application strategy; The negotiation information is sent to the drone so that the drone can update the positioning algorithm switching and key application strategy of the secure channel based on the negotiation information.

[0032] In the embodiments of this disclosure, after obtaining the target cryptographic application policy, the security communication module of the management platform can trigger a dynamic update of the secure channel based on the target cryptographic application policy fed back by the cryptographic application management module, generate corresponding negotiation information (such as IPsec Security Association (SA) parameters), and send the negotiation information to the UAV's security communication module through the secure channel. For example, updating the cryptographic application policy of the secure channel to the target cryptographic application policy can include updating the cryptographic suite of the secure channel to the target cryptographic suite, or updating the key application policy of the secure channel to the target key application policy. It is understood that if the negotiation algorithm changes, the management platform can initiate a re-handshake and establish a completely new secure channel based on the new cryptographic suite; if only the secure channel cryptographic algorithm changes while the negotiation algorithm remains unchanged, the existing key of the current secure channel is reused, and only the new cryptographic algorithm is used to protect subsequent transmitted data; if the key application policy changes, a key update process is initiated or the key update cycle is adjusted; after receiving and parsing the negotiation information, the UAV's security communication module can execute the corresponding cryptographic algorithm switch and key application policy change, completing the synchronous update of the cryptographic suite or key of the secure channel between the UAV and the management platform.

[0033] In some possible implementations, the drone's state information is analyzed to obtain the target cryptographic application strategy, including: Determine channel quality based on UAV status information; The target cryptographic suite is determined based on the channel quality; wherein the target cryptographic suite includes at least one of a first security cryptographic suite, a second security cryptographic suite, and a third security cryptographic suite; the third security cryptographic suite is more secure than the first security cryptographic suite; Determine the current environmental status based on the drone's status information; The target key application strategy is determined based on the current environmental status; the target key application strategy includes at least one of the following: forcibly updating the key and shortening the key update cycle, or restoring the preset key update cycle.

[0034] In the embodiments of this disclosure, when analyzing the UAV status information to obtain the target cryptographic application strategy, the cryptographic application management module of the management platform can perform fusion analysis on the communication quality parameters, electromagnetic environment data, and meteorological parameters in the received UAV status information to determine the signal quality of the secure channel. Then, the target cryptographic suite can be determined based on the channel quality. For example, different channel qualities can correspond to different cryptographic suites. The target cryptographic suite can be one of a first security cryptographic suite, a second security cryptographic suite, and a third security cryptographic suite. The current environmental state can also be determined based on the UAV status information. For example, the positioning information, abnormal behavior detection data, security module status, and device status in the UAV status information can be jointly analyzed to identify the security threat level and resource constraint status of the current environment, and obtain the current environmental state. For example, a description of the current environmental state containing security threat level, positioning credibility, and resource health labels can be generated as the decision basis for key policy adjustment. Afterward, the matching decision of the key application strategy can be performed based on the current environmental state to determine the target key application strategy. The target key application strategy is determined differently depending on the current environmental state. For example, it can be to force a key update and shorten the key update cycle, or restore the preset key update cycle. The target key application strategy and target cipher suite can together constitute a complete cryptographic application strategy, which is then distributed to the UAV via the secure communication module of the management platform to synchronously update the key management parameters and cipher suite configuration of the secure channel. In this way, by analyzing the UAV's status information in a hierarchical manner, channel quality and environmental conditions can be perceived. Furthermore, based on the matching mechanism of multi-level cipher suites and dynamic key strategies, the secure channel can adaptively switch, effectively balancing security, real-time performance, and energy efficiency. This significantly enhances the UAV's communication security adaptability and threat response speed under complex flight environments and resource constraints.

[0035] In a further possible implementation, determining the target cryptographic suite based on channel quality includes: When the environmental perception data and equipment status data in the UAV status information indicate that the current channel quality is the first channel quality, the target cryptographic suite is determined to be the first security cryptographic suite. When the environmental perception data and equipment status data in the UAV status information indicate that the current channel quality is the second channel quality, the target cryptographic suite is determined to be the second security cryptographic suite. When the environmental perception data and equipment status data in the UAV status information indicate that the current channel quality is the third channel quality, the target cryptographic suite is determined to be the third security cryptographic suite.

[0036] In a further possible implementation, the target cryptographic suite includes a negotiation algorithm and a secure channel cryptographic algorithm; The negotiation algorithm of the first security cryptographic suite is a hybrid negotiation algorithm. The secure channel cryptographic algorithm includes at least one of the Advanced Encryption Standard (AES) and block cipher algorithms. The hybrid negotiation algorithm includes at least one of the elliptic curve cryptography algorithm, elliptic curve-based public-key cryptography algorithm, and post-quantum cryptography algorithm. The negotiation algorithm for the second security cryptographic suite is to reuse the key of the established secure channel or to use a public-key cryptographic negotiation algorithm. The secure channel cryptographic algorithm includes stream cipher algorithms. The negotiation algorithm for the third security cryptographic suite includes a dedicated public-key cryptographic algorithm or a high-security cryptographic algorithm. The high-security cryptographic algorithm includes at least one of a dedicated cryptographic algorithm and a hybrid algorithm of multiple post-quantum cryptography. The secure channel cryptographic algorithm includes a dedicated cryptographic algorithm.

[0037] In the embodiments of this disclosure, environmental perception data and device status data in the UAV status information can be jointly analyzed. For example, channel quality assessment indicators can be extracted. For instance, link stability can be judged by monitoring signal quality (QoS), packet loss rate, bit error rate, and channel switching frequency; the degree of electromagnetic interference can be assessed by signal strength, channel interference index, and spectrum occupancy rate; and the effects of channel attenuation and multipath effects can be predicted by combining real-time meteorological parameters such as wind speed, temperature, humidity, and air pressure. The channel quality score or channel quality level can be comprehensively calculated to provide a quantitative basis for the selection of cryptographic suites. If the environmental perception data and device status data in the UAV status information indicate that the current channel quality is the first channel quality, for example when the channel is stable and the bandwidth is sufficient, then switch to a high-security cryptographic suite (first-security cryptographic suite), such as using a hybrid negotiation algorithm (such as a mixture of traditional public-key cryptography and PQC (Post-Quantum Cryptography)) and high-security cryptographic algorithms such as AES-256 (Advanced Encryption Standard-256) or SM4 (SM4 Block Cipher Algorithm) to provide strong security protection. If the environmental perception data and device status data in the UAV's status information indicate that the current channel quality is the second channel quality—for example, when the UAV is in a high-latency channel environment, the communication link interference intensity exceeds a preset threshold (e.g., packet loss rate ≥15% or signal-to-noise ratio ≤10dB), or device resources are limited (e.g., remaining battery power is less than 20%), then a lightweight cryptographic suite (second security cryptographic suite) can be switched to. This could involve reducing the handshake negotiation frequency to reuse established secure channels or using traditional public-key cryptographic negotiation algorithms such as ECC (Elliptic Curve Cryptography) / SM2 (SM2 Cryptographic Algorithm) and lightweight cryptographic algorithms such as ChaCha20 to reduce computational power consumption and additional computational latency caused by retransmission. If the environmental perception data and device status data in the UAV's status information indicate that the current channel quality is the third channel quality—for example, when the UAV flies into a permitted special area or high-risk airspace—a dedicated or higher security level cryptographic suite (third security cryptographic suite) can be switched to. This could involve using industry-specific cryptographic algorithms or multi-PQC hybrid algorithms to meet the security requirements of the special area.

[0038] Thus, by classifying channel quality into three levels and constructing a three-level cryptographic suite system that precisely maps to various channel qualities, intelligent dynamic switching of cryptographic suites can be achieved. This effectively solves the problem that traditional UAV communication using fixed cryptographic strategies cannot adapt to the rapid changes in flight environment and mission requirements. This can significantly improve the matching accuracy of cryptographic application strategies and environmental adaptability, optimize computing resources and energy efficiency while ensuring security strength, and enhance the communication security resilience and compliance assurance capabilities of UAVs in diverse flight scenarios.

[0039] In a further possible implementation, the target key application strategy is determined based on the current environmental state, including: When the UAV status information indicates that the current environmental state is the first environmental state, the target key application strategy is determined to be to force key update and shorten the key update cycle; wherein, the first environmental state includes at least one of the following: environmental perception data indicating abnormal positioning information, electromagnetic environment parameters indicating that the communication link interference intensity is greater than the preset intensity, and security situation data indicating the presence of attack behavior. When the UAV status information indicates that the current environment is in the second environment state, the target key application strategy is determined to restore the preset key update cycle; wherein, the second environment state includes at least one of the following: electromagnetic environment parameters indicating no interference in the communication link, security situation data indicating no attack behavior, and device status data indicating limited device resources.

[0040] In the embodiments of this disclosure, if the UAV status information indicates that the current environmental state is a first environmental state, such as abnormal positioning information (e.g., positioning offset greater than a threshold (e.g., 50 meters) and duration exceeding the threshold (e.g., 10 seconds)), electromagnetic environment parameters indicating communication link interference strength greater than a preset strength (communication link interference strength is relatively large), or security situation data indicating the presence of attack behavior (attack behavior detected), then the target key application strategy can be determined to be to force key update and shorten the key update cycle. For example, the current session key can be marked as expired and a new key negotiation can be triggered, while the key update cycle is shortened from the default cycle (e.g., 3600 seconds) to a first shortened cycle (e.g., between 900 seconds and 1800 seconds, such as 1200 seconds; the specific value can be set as needed). If the UAV status information indicates that the current environment is in the second environmental state, such as electromagnetic environment parameters indicating no communication link interference, security situation data indicating no attack behavior (e.g., no communication link interference, no abnormal behavior such as location attacks detected), or device status data indicating limited device resources (e.g., battery voltage drops by 20% or remaining power <15%), then the target key application strategy can be determined to restore the preset key update cycle. For example, the key update cycle can be restored to the default cycle (e.g., 3600 seconds, or other cycles). In this way, the key lifecycle can be dynamically adjusted in real time according to location anomalies, link interference, and attack detection. This can effectively solve the shortcomings of traditional fixed key update cycles that cannot adapt to the highly dynamic flight environment and changing security situation of UAVs, significantly improve the matching accuracy of key management strategies and real-time security requirements, and further reduce computing resource consumption and energy consumption.

[0041] In some possible implementations, switching the cipher suite of the secure channel to the target cipher suite and changing the key application policy to the target key application policy, based on the cipher application policy, includes: If the negotiation algorithm changes, the handshake is re-initiated and a new secure channel is established based on the target cipher suite; If the negotiation algorithm remains unchanged, but only the cryptographic algorithm of the secure channel changes, then the key of the current secure channel is reused, and the new cryptographic algorithm is used to transmit data. If the key application policy changes, at least one of the following is performed: key update or key update cycle change.

[0042] In the embodiments of this disclosure, the secure communication module of the management platform can parse the cryptographic application policy fed back by the cryptographic application management module. If it detects that the key negotiation algorithm in the target cipher suite is inconsistent with the negotiation algorithm used by the current secure channel, it is determined that the negotiation algorithm has changed, and the secure channel reconstruction process can be initiated. For example, a channel renegotiation notification message can be sent to the drone through the established secure channel. This message contains a new cipher suite list and a negotiation algorithm change indicator. Subsequently, a complete handshake protocol is triggered, using a hybrid negotiation algorithm (such as an ECC+PQC hybrid algorithm) or a dedicated negotiation algorithm specified in the target cipher suite for two-way authentication and key exchange, establishing a new secure channel. All subsequent data communication is transmitted through this new secure channel, ensuring that the change in the negotiation algorithm and the upgrade of the security policy are fully implemented. If the negotiation algorithm remains unchanged from the current negotiation algorithm, and only the encryption / authentication algorithm of the secure channel changes, the key of the current secure channel can be reused, and the new algorithm can be used to encrypt and authenticate the data payload transmitted subsequently. If the key application policy changes, the specific parameters of the target key application policy can be parsed and corresponding operations can be performed. For example, if the target key application policy is to force a key update and shorten the key update cycle, a key update command can be sent to the drone through the current secure channel to update the key. If the target key application policy is to restore the preset key update cycle, a cycle adjustment message can be sent to the drone to restore the key update cycle timer to the preset key update cycle. Thus, by distinguishing between changes in the negotiation algorithm, changes in only the cryptographic algorithm, and changes in the key policy, the problems of long communication interruption times, high computational overhead, and slow response caused by the need for a full reconstruction of the traditional secure channel when the cryptographic policy changes can be solved. This further improves response speed and execution efficiency, and optimizes resource utilization.

[0043] Based on the same inventive concept, a method for updating the secure channel password application policy for unmanned aerial vehicles is also provided, including: Connect to the management platform and establish a secure channel with the management platform; During drone flight, drone status information is collected, including environmental perception data, equipment status data, and security situation data. The drone's status information is sent to the management platform through a secure channel, so that the management platform can analyze the drone's status information, obtain the target cryptographic application policy, and generate negotiation information based on the target cryptographic application policy and send it to the drone. Receive negotiation information sent by the management platform, and update the positioning algorithm switching and key application strategy of the secure channel according to the negotiation information.

[0044] In the embodiments disclosed herein, upon startup, the UAV can use a pre-set key or digital certificate to access the management platform via an IPsec VPN or zero-trust architecture, completing two-way authentication and key negotiation to establish an initial secure channel. During flight, the UAV can collect real-time UAV status information, including environmental perception data (location coordinates, meteorological parameters, electromagnetic environment), device status data (battery, communication quality, payload status), and security posture data (security module status, abnormal behavior detection, hardware integrity). The collected UAV status information can then be sent to the management platform through the secure channel. The management platform can analyze this information, assess channel quality and security threats, generate cryptographic application policies (including cipher suites and key policies), and return negotiation information (such as security association parameters) to the UAV. After receiving the negotiation information, the UAV can perform corresponding operations. For example, if the negotiation algorithm changes, a new channel is re-established; if only the cryptographic algorithm changes, the key is reused and the new algorithm is enabled; if the key policy changes, the key is updated or the update cycle is adjusted. Thus, by real-time perception of flight status and dynamic adjustment of cryptographic policies, the UAV can adapt to different environments and threats, improving communication security and resource efficiency.

[0045] To make the methods provided in this disclosure clearer, the following examples will be used for illustration.

[0046] This example uses IPsec VPN as an example, but the secure tunneling protocol can also be applied to other secure tunneling protocols such as SSL VPN (Secure Sockets Layer Virtual Private Network). For an example, see [link to example]. Figure 3 The secure channel password application policy update method provided in this embodiment may include the following processing: 1. During drone initialization, the drone's secure communication module uses a pre-set cryptographic algorithm (based on a pre-set key / certificate, etc.) to access the network-side management platform via an IPsec VPN (or zero trust) and establish a secure channel with the management platform's secure communication module.

[0047] 2. During flight, the drone's security application module collects real-time drone status information and sends it to the drone's secure communication module. The collected information mainly includes: 2.1. Environmental perception data, including: Location information: three-dimensional coordinates (longitude, latitude, altitude), heading angle, flight speed, etc.; Meteorological parameters: real-time wind speed, wind direction, temperature, humidity, air pressure, etc. (collected by airborne meteorological sensors to assess communication quality and flight stability); Electromagnetic environment parameters: signal strength, channel interference index, spectrum occupancy, surrounding wireless signal strength map, etc. (used to detect wireless attack risks).

[0048] 2.2. Equipment status data, including: Power system parameters: battery voltage / current / temperature, remaining battery capacity, voltage fluctuation curve, motor speed and temperature, and blade status; Communication quality parameters: signal quality (QoS), packet loss rate, bit error rate, channel handover records; Load status parameters: camera / sensor operating temperature, remaining storage space.

[0049] 2.3. Security situation data, including: Security module status: cryptographic algorithm runtime load, key lifecycle, encryption / decryption operation frequency, cryptographic algorithm switching records, and security chip temperature; Anomaly detection: unauthorized protocol connection attempts, packet replay attack characteristics, unexpected positional offsets, abnormal control command frequency, and sensor data conflict alarms; Hardware integrity: If a Trusted Chip (TPM) is used, a trust metric should be included.

[0050] 3. The UAV's secure communication module sends UAV status information to the management platform's secure communication module via a secure channel. UAV status information can be sent along with other existing messages, such as synchronization messages between the UAV and the management platform.

[0051] 4. The secure communication module of the management platform sends the UAV status information to the cryptographic application management module (or cryptographic application intelligent policy engine) of the management platform.

[0052] 5. The cryptographic application management module of the management platform performs cryptographic application analysis and decision-making based on the collected UAV status information, outputs cryptographic application policies, and feeds them back to the secure communication module of the management platform. The cryptographic application analysis and decision-making rules are as follows: 5.1 Dynamic Switching of Secure Channel Cipher Suite: Automatically switches to a suitable secure channel cipher suite based on channel quality, as detailed below: 5.1.1. Switch to a high-security cipher suite (first-security cipher suite), as follows: 5.1.1.1. Password Application Strategy: 5.1.1.1.1. Negotiation Algorithm: A hybrid negotiation algorithm (traditional + PQC) is adopted. 5.1.1.1.2. Secure channel cryptographic algorithm: AES-256 or SM4 or other high-security cryptographic algorithms are used.

[0053] 5.1.1.2. Purpose: To provide high security protection.

[0054] 5.1.1.3. Scenario: An environment with stable channels and sufficient bandwidth.

[0055] 5.1.2. Switch to the lightweight cipher suite (second security cipher suite), as follows: 5.1.2.1. Cryptographic Application Strategy: 5.1.2.1.1. Negotiation Algorithm: Reduce the frequency of handshake negotiation and reuse established secure channels; or use traditional public-key cryptography negotiation algorithms (such as ECC or SM2). 5.1.2.1.2. Secure channel cryptographic algorithm: Lightweight cryptographic algorithms such as ChaCha20 are adopted.

[0056] 5.1.2.2. Objective: To reduce computing power consumption and the additional computing latency caused by retransmission while ensuring basic security.

[0057] 5.1.2.3. Scenarios: High-latency channel environment, detection of communication link interference intensity exceeding the threshold (such as packet loss rate ≥15% or signal-to-noise ratio ≤10dB), limited equipment resources (such as battery level below 20%).

[0058] 5.1.3. Switch to a dedicated or higher security level cipher suite (third-security cipher suite), as follows: 5.1.3.1. Password Application Strategy: 5.1.3.1.1. Negotiation Algorithm: Use a dedicated public-key cryptographic algorithm or a high-security cryptographic algorithm (such as an industry-specific cryptographic algorithm or a multi-PQC hybrid algorithm, etc.). 5.1.3.1.2. Secure channel cryptographic algorithm: Use dedicated cryptographic algorithms or high-security cryptographic algorithms.

[0059] 5.1.3.2. Purpose: To provide security protection for special areas.

[0060] 5.1.3.3. Scenario: Flying into designated areas or high-risk airspace where entry is permitted.

[0061] 5.2. Key Application Policy Change: Based on the current environmental status of the UAV, update the key and adjust the key update cycle as follows: 5.2.1. Force key updates and shorten key update cycles: 5.2.1.1. Purpose: To prevent risks such as data leakage caused by the cracking of session keys.

[0062] 5.2.1.2. Scenario: 5.2.1.2.1. Location anomaly: The location offset is greater than the threshold (e.g., 50 meters) and the duration exceeds the threshold (e.g., 10 seconds).

[0063] 5.2.1.2.2. The communication link has relatively high interference intensity.

[0064] 5.2.1.2.3. Attack behavior detected, etc.

[0065] 5.2.2. Restore the default key update cycle: 5.2.2.1. Objective: To reduce computing resource consumption while ensuring basic security.

[0066] 5.2.2.2. Scenario: 5.2.2.2.1. No interference in the communication link, no abnormal behavior such as location attacks detected.

[0067] 5.2.2.2.2. Equipment resources are limited (battery voltage drops by 20% or remaining power is less than 15%).

[0068] 6. Based on the cryptographic application policy fed back by the cryptographic application management module, the secure communication module of the management platform actively triggers dynamic switching of the secure channel cryptographic suite and changes in the key application policy, and sends the negotiation information (such as the Security Association (SA)) to the UAV secure communication module through the secure channel.

[0069] 6.1. If the negotiation algorithm changes, a new handshake is initiated and a new secure channel is established based on the corresponding cipher suite.

[0070] 6.2. If only the cryptographic algorithm of the secure channel changes, the key of the current secure channel can be reused, and the new cryptographic algorithm can be used to protect the transmitted data.

[0071] 6.3. If the key application policy changes, initiate a key update or change the key update cycle.

[0072] 7. Based on the received negotiation information, the UAV's secure communication module performs dynamic switching of the secure channel positioning cryptographic algorithm and changes to the key application strategy to update the cryptographic suite or key of the secure channel between the UAV's secure communication module and the management platform's secure communication module.

[0073] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods according to the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method.

[0074] According to embodiments of this disclosure, this disclosure also provides a secure channel password application policy update device, which can be applied to a management platform. Figure 4This is a schematic diagram of a secure channel cryptographic application policy update device provided in an embodiment of the present disclosure. The secure channel cryptographic application policy update device 400 includes: The secure communication module 410 is used to establish a secure channel with the drone and to acquire the drone status information of the drone. The cryptographic application management module 420 is used to analyze the UAV status information to obtain the target cryptographic application strategy; The secure communication module 410 is also used to update the cryptographic application policy of the secure channel to the target cryptographic application policy.

[0075] Furthermore, the secure communication module 410 is also used for at least one of the following: Update the cipher suite of the secure channel to the target cipher suite; Update the key application policy of the secure channel to the target key application policy.

[0076] Furthermore, the secure communication module 410 is also used for: Generate negotiation information based on the target cryptographic application strategy; The negotiation information is sent to the drone so that the drone updates the positioning algorithm switching and key application strategy of the secure channel based on the negotiation information.

[0077] Furthermore, the UAV status information includes at least one of environmental perception data, equipment status data, and security situation data; the environmental perception data includes at least one of positioning information, meteorological parameters, and electromagnetic environment parameters; the equipment status data includes at least one of power system parameters, communication quality parameters, and payload status parameters; and the security situation data includes at least one of security status parameters, abnormal behavior data, and hardware parameters.

[0078] Furthermore, the target cryptographic application policy is used to indicate at least one of the target cryptographic suite and the target key application policy of the secure channel; the cryptographic application management module 420 is used to: Determine the channel quality based on the UAV status information; A target cryptographic suite is determined based on the channel quality; wherein the target cryptographic suite includes at least one of a first security cryptographic suite, a second security cryptographic suite, and a third security cryptographic suite; the third security cryptographic suite is more secure than the first security cryptographic suite; The current environmental state is determined based on the drone status information; The target key application strategy is determined based on the current environment status; wherein the target key application strategy includes at least one of the following: forcibly updating the key and shortening the key update cycle, or restoring the preset key update cycle.

[0079] Furthermore, the cryptographic application management module 420 is used for: If the environmental perception data and the device status data in the UAV status information indicate that the current channel quality is the first channel quality, then the target cryptographic suite is determined to be the first security cryptographic suite. If the environmental perception data and the device status data in the UAV status information indicate that the current channel quality is the second channel quality, then the target cryptographic suite is determined to be the second security cryptographic suite. If the environmental perception data and the device status data in the UAV status information indicate that the current channel quality is the third channel quality, then the target cryptographic suite is determined to be the third security cryptographic suite.

[0080] Furthermore, the cryptographic application management module 420 is used for: When the UAV status information indicates that the current environment is in the first environment state, the target key application strategy is determined to be to force key update and shorten the key update cycle; wherein, the first environment state includes at least one of the following: the environmental perception data indicates abnormal positioning information, the electromagnetic environment parameters indicate that the communication link interference intensity is greater than a preset intensity, and the security situation data indicates the presence of attack behavior. When the UAV status information indicates that the current environment is in the second environment state, the target key application strategy is determined to restore the preset key update cycle; wherein, the second environment state includes at least one of the following: the electromagnetic environment parameters indicate that the communication link is free from interference, the security situation data indicates that there is no attack behavior, and the device status data indicates that the device resources are limited.

[0081] Furthermore, the target cryptographic suite includes a negotiation algorithm and a secure channel cryptographic algorithm; The negotiation algorithm of the first security cryptographic suite is a hybrid negotiation algorithm, and the secure channel cryptographic algorithm includes at least one of the Advanced Encryption Standard (AES) and block cipher algorithms; the hybrid negotiation algorithm includes at least one of the elliptic curve cryptography algorithm, elliptic curve-based public-key cryptography algorithm, and post-quantum cryptography algorithm. The negotiation algorithm for the second security cryptographic suite is to reuse the key of the established secure channel or to use a public-key cryptographic negotiation algorithm. The secure channel cryptographic algorithm includes stream cipher algorithms. The negotiation algorithm of the third security cryptographic suite includes a dedicated public-key cryptographic algorithm or a high-security-level cryptographic algorithm. The high-security-level cryptographic algorithm includes at least one of a dedicated cryptographic algorithm and a multi-post-quantum cryptographic hybrid algorithm. The secure channel cryptographic algorithm includes a dedicated cryptographic algorithm.

[0082] Furthermore, the secure communication module 410 is also used for: If the negotiation algorithm changes, the handshake is re-initiated and a new secure channel is established based on the target cipher suite; If the negotiation algorithm remains unchanged, but only the cryptographic algorithm of the secure channel changes, then the key of the current secure channel is reused, and the new cryptographic algorithm is used to transmit data. If the key application policy changes, at least one of the following is performed: key update or key update cycle change.

[0083] Based on the same inventive concept, a secure channel password application policy update device is also provided, applicable to drones, including: The secure communication module is used to access the management platform and establish a secure channel with it. The cryptographic application security module is used to collect drone status information during drone flight and send the drone status information to the secure communication module. The secure communication module is further configured to send the UAV status information to the management platform through the secure channel, so that the management platform can analyze the UAV status information, obtain the target cryptographic application policy, generate negotiation information based on the target cryptographic application policy, and send it to the UAV; and receive the negotiation information sent by the management platform; and update the positioning algorithm switching and key application policy of the secure channel according to the negotiation information.

[0084] It should be noted that the description of the features in the embodiment corresponding to the secure channel password application policy update device can be found in the relevant description of the embodiment corresponding to the secure channel password application policy update method, and will not be repeated here.

[0085] Embodiments of this disclosure also provide an electronic device including a memory and a processor, the memory storing a computer program and the processor being configured to run the computer program to perform the steps in any of the above method embodiments.

[0086] Embodiments of this disclosure also provide a computer-readable storage medium storing a computer program configured to perform the steps in any of the above method embodiments when executed.

[0087] In one exemplary embodiment, the aforementioned computer-readable storage medium may include, but is not limited to, various media capable of storing computer programs, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard disk, magnetic disk, or optical disk.

[0088] Embodiments of this disclosure also provide a computer program product, which includes a computer program that, when executed by a processor, implements the steps in any of the above method embodiments.

[0089] Embodiments of this disclosure also provide another computer program product, including a non-volatile computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps in any of the above method embodiments.

[0090] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

[0091] The foregoing has provided a detailed description of a secure channel cryptographic application strategy update method. Specific examples have been used to illustrate the principles and implementation methods of this disclosure. The descriptions of the embodiments above are merely for the purpose of helping to understand the method and its core ideas. It should be noted that those skilled in the art can make various improvements and modifications to this disclosure without departing from its principles, and these improvements and modifications also fall within the protection scope of the claims of this disclosure.

Claims

1. A method for updating a secure channel password application policy, characterized in that, Applied to a management platform, the method includes: Establish safe passages with drones; Obtain the drone status information; The target cryptographic application strategy is obtained by analyzing the state information of the UAV. Update the cryptographic application policy of the secure channel to the target cryptographic application policy.

2. The secure channel password application policy update method according to claim 1, characterized in that, The cryptographic application policy for updating the secure channel is the target cryptographic application policy, including at least one of the following: Update the cipher suite of the secure channel to the target cipher suite; Update the key application policy of the secure channel to the target key application policy.

3. The secure channel password application policy update method according to claim 1, characterized in that, After updating the cryptographic application policy of the secure channel to the target cryptographic application policy, the method further includes: Generate negotiation information based on the target cryptographic application strategy; The negotiation information is sent to the drone so that the drone updates the positioning algorithm switching and key application strategy of the secure channel based on the negotiation information.

4. The secure channel password application policy update method according to claim 1, characterized in that, The UAV status information includes at least one of environmental perception data, equipment status data, and security situation data.

5. The secure channel password application policy update method according to claim 4, characterized in that, The target cryptographic application policy is used to indicate at least one of the target cryptographic suite and the target key application policy of the secure channel; The step of analyzing the UAV's state information to obtain the target cryptographic application strategy includes: Determine the channel quality based on the UAV status information; A target cryptographic suite is determined based on the channel quality; wherein the target cryptographic suite includes at least one of a first security cryptographic suite, a second security cryptographic suite, and a third security cryptographic suite; the third security cryptographic suite is more secure than the first security cryptographic suite; The current environmental state is determined based on the drone status information; The target key application strategy is determined based on the current environment status; wherein the target key application strategy includes at least one of the following: forcibly updating the key and shortening the key update cycle, or restoring the preset key update cycle.

6. The secure channel password application policy update method according to claim 5, characterized in that, The step of determining the target cryptographic suite based on the channel quality includes: If the environmental perception data and the device status data in the UAV status information indicate that the current channel quality is the first channel quality, then the target cryptographic suite is determined to be the first security cryptographic suite. If the environmental perception data and the device status data in the UAV status information indicate that the current channel quality is the second channel quality, then the target cryptographic suite is determined to be the second security cryptographic suite. If the environmental perception data and the device status data in the UAV status information indicate that the current channel quality is the third channel quality, then the target cryptographic suite is determined to be the third security cryptographic suite.

7. The secure channel password application policy update method according to claim 5, characterized in that, The step of determining the target key application strategy based on the current environment state includes: When the UAV status information indicates that the current environment is in the first environment state, the target key application strategy is determined to be to force key update and shorten the key update cycle; wherein, the first environment state includes at least one of the following: environmental perception data indicating abnormal positioning information, electromagnetic environment parameters indicating that the communication link interference intensity is greater than a preset intensity, and security situation data indicating the presence of attack behavior. When the UAV status information indicates that the current environment is in the second environment state, the target key application strategy is determined to restore the preset key update cycle; wherein, the second environment state includes at least one of the following: the electromagnetic environment parameters indicate that the communication link is free from interference, the security situation data indicates that there is no attack behavior, and the device status data indicates that the device resources are limited.

8. The secure channel cryptographic application policy update method according to any one of claims 5-7, characterized in that, The target cryptographic suite includes a negotiation algorithm and a secure channel cryptographic algorithm; The negotiation algorithm of the first security cryptographic suite is a hybrid negotiation algorithm, and the secure channel cryptographic algorithm includes at least one of the Advanced Encryption Standard (AES) and block cipher algorithms; the hybrid negotiation algorithm includes at least one of the elliptic curve cryptography algorithm, elliptic curve-based public-key cryptography algorithm, and post-quantum cryptography algorithm. The negotiation algorithm for the second security cryptographic suite is to reuse the key of the established secure channel or to use a public-key cryptographic negotiation algorithm. The secure channel cryptographic algorithm includes stream cipher algorithms. The negotiation algorithm of the third security cryptographic suite includes a dedicated public-key cryptographic algorithm or a high-security-level cryptographic algorithm. The high-security-level cryptographic algorithm includes at least one of a dedicated cryptographic algorithm and a multi-post-quantum cryptographic hybrid algorithm. The secure channel cryptographic algorithm includes a dedicated cryptographic algorithm.

9. The secure channel password application policy update method according to claim 8, characterized in that, The step of switching the cipher suite of the secure channel to the target cipher suite and changing the key application policy to the target key application policy according to the cipher application policy includes: If the negotiation algorithm changes, the handshake is re-initiated and a new secure channel is established based on the target cipher suite; If the negotiation algorithm remains unchanged, but only the cryptographic algorithm of the secure channel changes, then the key of the current secure channel is reused, and the new cryptographic algorithm is used to transmit data. If the key application policy changes, at least one of the following is performed: key update or key update cycle change.

10. A method for updating a secure channel password application policy, characterized in that, Applied to drones, the method includes: Connect to the management platform and establish a secure channel with the management platform; Collect drone status information while the drone is in flight; The drone status information is sent to the management platform through the secure channel, so that the management platform can analyze the drone status information, obtain the target cryptographic application policy, and generate negotiation information based on the target cryptographic application policy and send it to the drone. The system receives negotiation information sent by the management platform and updates the positioning algorithm switching and key application strategy of the secure channel based on the negotiation information.

11. A secure channel password application policy update device, characterized in that, Applications in management platforms include: A secure communication module is used to establish a secure channel with the drone; and to acquire the drone's status information; The cryptographic application management module is used to analyze the UAV's status information to obtain the target cryptographic application strategy; The secure communication module is also used to update the cryptographic application policy of the secure channel to the target cryptographic application policy.

12. A secure channel password application policy update device, characterized in that, Applied to drones, including: The secure communication module is used to access the management platform and establish a secure channel with it. The cryptographic application security module is used to collect drone status information during drone flight and send the drone status information to the secure communication module. The secure communication module is further configured to send the UAV status information to the management platform through the secure channel, so that the management platform can analyze the UAV status information, obtain the target cryptographic application policy, generate negotiation information based on the target cryptographic application policy, and send it to the UAV; and receive the negotiation information sent by the management platform; and update the positioning algorithm switching and key application policy of the secure channel according to the negotiation information.

13. An electronic device, characterized in that, include: At least one processor; as well as, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1-10.

14. A non-transitory computer-readable storage medium storing computer instructions, characterized in that, The computer instructions are used to cause the computer to perform the method described in any one of claims 1-10.

15. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, performs the method described in any one of claims 1-10.

Images