Robot passive capture prevention system and self-destruction method thereof
By employing multiple self-destruct preparation activation conditions and a combined trigger judgment design, along with GPS positioning and audible and visual warnings, the robot achieves precise self-destruction in complex environments. This solves the problems of insufficient intelligent triggering and protection in existing technologies, and improves the reliability of self-destruction and the security of data hardware.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- CHENGDU JINFA EDGE INTELLIGENT TECHNOLOGY CO LTD
- Filing Date
- 2025-12-27
- Publication Date
- 2026-04-28
AI Technical Summary
Existing robot anti-capture solutions lack intelligent triggering, accurate judgment, multiple protections, and efficient destruction capabilities. They cannot effectively protect confidential data and hardware security in complex environments and are prone to loss due to accidental triggering or misoperation.
It adopts multiple self-destruct preparation activation conditions and combined trigger judgment design, combining multiple self-destruction methods such as software overwriting, physical breakdown and chemical corrosion. Through GPS positioning and audible and visual warning mechanisms, it achieves accurate self-destruction and prevents false triggering, and supports flexible configuration and encrypted communication.
It improves the self-destruct reliability of robots in complex environments, ensures the security of core data and hardware, reduces the risk of accidental triggering, adapts to different operating scenarios and provides status feedback, and achieves full-process information security.
Smart Images
Figure CN121928540A_ABST
Abstract
Description
Technical Field
[0001] This invention belongs to the field of robotics technology, specifically referring to a robot anti-passive capture system and its self-destruction method. Background Technology
[0002] With the widespread application of robotics technology in military reconnaissance and classified scientific research experiments, the core data carried by robots (such as tactical deployment information and sensitive experimental parameters) and specialized hardware modules (such as customized sensors and encrypted communication units) face the risk of being illegally captured and leaked. Currently, civilian robots, due to low security requirements, are not equipped with self-destruct functions; and the few existing anti-capture solutions for specific scenarios also have significant shortcomings: First, the triggering mechanism is rigid and lacks intelligent recognition capabilities. Most anti-capture solutions rely on purely manual remote command triggering, which cannot respond promptly to capture risks in complex environments such as radio interference and communication interruptions; some solutions are triggered only by a single disconnection condition, which is prone to false triggering due to signal fluctuations or temporary malfunctions, causing unnecessary losses. Second, the self-destruct condition design is crude and lacks targeted protection. These technologies do not accurately define "illegal dismantling," making it difficult to distinguish between legitimate maintenance and malicious dismantling; they lack logic for judging abnormal robot movement and cannot cope with scenarios where the robot is taken away from the preset area after capture. Third, the self-destruction methods are limited and have limited effectiveness. Existing solutions mostly rely on software data deletion, leaving core hardware vulnerable to reverse engineering. Some physical destruction methods lack precision, easily resulting in damage to non-core components while leaving core information intact. Fourth, there is a lack of status feedback and error correction mechanisms. The self-destruct preparation state and triggering process lack clear feedback, making it impossible for the control unit to monitor the robot's status in real time. Furthermore, the absence of multiple verification mechanisms makes it difficult to eliminate error-induced triggering problems caused by momentary interference or operational mistakes.
[0003] Therefore, there is an urgent need for a robot-based passive capture prevention solution with intelligent triggering, accurate judgment, multiple protections, and efficient destruction capabilities to address the shortcomings of existing technologies in terms of adaptability, security, and reliability in complex environments, and to ensure the absolute security of confidential data and hardware. Summary of the Invention
[0004] The purpose of this invention is to overcome the shortcomings of current robots in that they lack intelligent triggering, accurate judgment, multiple protection, and efficient destruction capabilities, and to provide a robot passive capture prevention system and its self-destruction method.
[0005] The objective of this invention is achieved through the following technical solution: a robot passive capture prevention system, comprising a state control module for managing self-destruct preparation, cancellation, and triggering states, and a trigger detection module, a self-destruct execution module, an early warning module, a communication module, and a GPS positioning module, all connected to the state control module. The GPS positioning module and the early warning module are both connected to the communication module. The trigger detection module detects dismantling actions and command signals; the self-destruct execution module performs software, physical, or chemical destruction operations; the early warning module issues and provides feedback on early warning information; the communication module ensures signal interaction between the modules; and the GPS positioning module provides accurate location information support for the system.
[0006] A method for preventing self-destruction of a robot passive capture system includes the following steps:
[0007] S1. Configure the conditions for triggering the self-destruct preparation state;
[0008] S2. Real-time detection of self-destruct trigger conditions and determination of whether the self-destruct trigger conditions are met;
[0009] S3. When the self-destruct trigger condition is met, before the self-destruct program is triggered, a local warning is given by sound and light signals, and an encrypted status message is sent to the remote control terminal.
[0010] S4. Activate the self-destruct program to self-destruct the core data storage area and critical hardware modules.
[0011] Furthermore, the "self-destruct preparation state triggering conditions" mentioned in step S1 include the following: (A) before the robot performs a preset high-risk task, it is activated by a local button or a remote encrypted command; (B) the robot loses contact with the remote control terminal for a set configuration threshold time; (C) the robot is activated by receiving a wired or wireless encrypted command.
[0012] The "determine whether the self-destruct trigger condition is met" mentioned in step S2 refers to meeting any one of the following conditions or any combination of two or more of the following conditions: ( Unauthorized disassembly actions were detected, including failure to follow the preset screw disassembly sequence and violation of the preset component disassembly procedure; The self-destruct preparation state was not exited via a preset method before disassembly; ) Receives local self-destruct button trigger signals or remote encrypted self-destruct commands; The GPS module detects that the robot has left the preset area and that the out-of-bounds state lasts for ≥3 seconds.
[0013] The "self-destruction of the core data storage area and key hardware modules" mentioned in step S4 can be achieved in any of the following ways: software destruction, which involves repeatedly overwriting the core data storage area with random data streams to destroy the encryption key; physical destruction, which involves melting the heating wire and breaking down the key paths of the core hardware with high-voltage discharge; or chemical destruction, which involves releasing a preset corrosive medium to act on the core hardware.
[0014] In the phrase “(B) The time when the robot loses contact with the remote control terminal reaches the set configuration threshold”, the time when the robot loses contact with the remote control terminal is configured to be 10 minutes, and the remote control terminal can modify it through encrypted commands.
[0015] The "( In the message "GPS module detects robot leaving preset area", the preset area is a polygonal or circular boundary, and the boundary judgment delay is ≤3 seconds.
[0016] To prevent the self-destruct trigger condition from being triggered accidentally, when the self-destruct trigger condition is a single condition, it must be triggered continuously for ≥2 seconds.
[0017] The key hardware module is one or any combination of a processor, an encrypted communication unit, a data storage module, and a dedicated sensor.
[0018] As a preferred method, the audio-visual signal in step S3 is a low-frequency red light flash and an intermittent buzzing.
[0019] Compared with the prior art, the present invention has the following advantages and beneficial effects:
[0020] (1) The present invention adopts multiple self-destruct preparation activation conditions and combined trigger judgment design. It covers all high-risk scenarios through task activation, disconnection timeout, encryption instructions, etc., and avoids unnecessary self-destruction caused by signal interference and misoperation through the anti-accidental touch mechanism of "single condition continuous ≥2 seconds trigger, cross-boundary delay ≤3 seconds judgment". This greatly improves the reliability of system operation.
[0021] (2) This invention supports three self-destruction methods: software overwriting of core data, physical penetration of key hardware, and chemical corrosion of core components. It can accurately target core components such as processors, encrypted communication units, and storage modules to carry out irreversible destruction, thereby eliminating the risk of core data leakage and hardware reuse from the root and adapting to different security level requirements.
[0022] (3) Before self-destruction, the present invention simultaneously activates the sound and light warning of "local low-frequency red light flashing + intermittent buzzing" and pushes the remote encrypted status message, which not only deters illegal capturers, but also reserves an emergency intervention window for authorized personnel, achieving a balance between "preventing passive capture" and "avoiding accidental damage", reducing the risk of equipment loss without cause.
[0023] (4) The parameters of the present invention, such as the disconnection threshold (which can be remotely modified after 10 minutes) and the preset area (polygon / circle), can be flexibly configured to adapt to different work scenarios such as high-risk tasks and routine inspections; the communication process is encrypted throughout, and the self-destruction trigger, execution and early warning process form a closed loop, which not only ensures the diversity of system adaptation, but also strengthens the security of information transmission and execution throughout the process. Attached Figure Description
[0024] Figure 1 This is a schematic diagram of the overall structure of the present invention.
[0025] Figure 2 This is a schematic diagram of the self-destruct method of the present invention.
[0026] The reference numerals in the above figures are as follows: 1-Trigger detection module, 2-Status control module, 3-Self-destruct execution module, 4-Early warning module, 5-Communication module, 6-GPS positioning module. Detailed Implementation
[0027] The present invention will be further described in detail below with reference to embodiments, but the implementation of the present invention is not limited thereto.
[0028] Example
[0029] like Figure 1 As shown, the robot passive capture prevention system described in this embodiment comprises the following six main parts: a trigger detection module 1 for detecting dismantling actions and command signals; a state control module 2 for managing self-destruct preparation, cancellation, and triggering states; a self-destruct execution module 3 for performing software, physical, or chemical destruction operations; an early warning module 4 for issuing and feeding back early warning information; a communication module 5 for ensuring signal interaction between the above modules; and a GPS positioning module 6 for providing accurate location information support for the system. When connected, the trigger detection module 1, self-destruct execution module 3, early warning module 4, communication module 5, and GPS positioning module 6 are all connected to the state control module 2, and simultaneously, the GPS positioning module 6 and the early warning module 4 are both connected to the communication module 5.
[0030] Based on the above structure, the process of the robot's method for preventing self-destruction of the passive capture system is as follows: Figure 2 As shown, it includes the following steps.
[0031] S1. Configure the self-destruct preparation state trigger conditions. This configuration process is completed in the state control module 2. The self-destruct preparation state trigger conditions include the following three aspects:
[0032] (A) Before the robot performs a preset high-risk task, it is activated via a local button or a remote encrypted command. This configuration condition is for high-risk task scenarios. In the state control module 2, a "task association activation rule" is preset. When the robot is about to perform a preset high-risk task (such as military reconnaissance or classified data transmission), authorized personnel can activate the self-destruct preparation in two ways: one is to directly operate the robot's local physical button, and the other is to send an encrypted command through the remote control terminal (to avoid unauthorized activation). After triggering, the system enters the self-destruct preparation state.
[0033] (B) The robot loses contact with the remote control terminal for a set time threshold. This configuration condition is set in the status control module 2 as a "loss of contact timeout threshold," with a default setting of 10 minutes, which can be modified by the remote control terminal via encrypted commands. Simultaneously, a loss of contact determination logic is preset: if the communication module 5 fails to receive a signal from the remote control terminal for an extended period, it is considered to be out of contact. When the time the robot loses contact with the remote control terminal reaches this loss of contact timeout threshold, the self-destruct preparation state is automatically activated.
[0034] (C) The robot is activated upon receiving a wired or wireless encrypted command. This configuration condition is a preset "encrypted command reception rule," which supports two command reception methods: wired encrypted commands (such as input through a dedicated data interface) and wireless encrypted commands (such as transmission via an encrypted communication link). As long as the robot receives any valid encrypted command of this type, it will immediately enter the self-destruct preparation state without any other conditions.
[0035] In other words, the system will only enter the self-destruct preparation state when any one of the three conditions A, B, and C mentioned above is met. At this time, the system does not directly self-destruct, but only lays the groundwork for subsequent self-destruction.
[0036] S2. Real-time detection of self-destruct trigger conditions and determination of whether the self-destruct trigger conditions are met.
[0037] This step is the core decision-making process after the system enters the self-destruct preparation state, continuously monitoring and determining whether to initiate the self-destruct procedure. Specifically, the state control module 2, in conjunction with the trigger detection module 1 and GPS positioning module 6, collects relevant signals in real time and compares them against the following four preset scenarios to determine whether the threshold for "truly self-destructing" is met. The self-destruct triggering conditions described in this embodiment are any one of the following scenarios or any combination of two or more of the following scenarios.
[0038] ( If an illegal disassembly action is detected, including failure to follow the preset screw disassembly sequence or violation of the preset component disassembly procedure, the trigger detection module 1 monitors the robot's disassembly behavior in real time through built-in pressure sensors, limit switches, and other devices. For example, if the preset screw disassembly requires following the order of "left to right, top to bottom," and the sensor detects a disordered order, or if the preset component disassembly requires unlocking the latches before separation, and the robot directly forces its way apart, it is determined to be an "illegal disassembly action," and a trigger signal will be sent to the status control module 2.
[0039] ( The self-destruct preparation state was not exited through a preset method before disassembly. This condition is that disassembly was performed without exiting the self-destruct preparation state. The system has a preset logic that "self-destruct preparation must be exited before disassembly". If authorized personnel need to legally disassemble the robot, they must first unlock it with local permissions or remotely encrypt the command to make the status control module 2 exit the self-destruct preparation state. If the trigger detection module 1 detects the disassembly action and the status control module 2 is still in the self-destruct preparation state (without receiving the exit command), then the condition is directly determined to be met.
[0040] ( The status control module 2 receives either a local self-destruct button trigger signal or a remote encrypted self-destruct command. Under this condition, the status control module 2 receives two types of legitimate trigger signals in real time: one is the trigger signal of the local self-destruct button (which requires authorized personnel to unlock the button permission before pressing), and the other is the encrypted self-destruct command transmitted by the remote control terminal through the communication module 5 (encrypted by AES-256 to prevent hijacking and tampering). Receiving either signal determines that the condition is met.
[0041] ( If the GPS module detects that the robot has left the preset area and the boundary crossing state lasts for ≥3 seconds, the GPS positioning module 6 will compare the robot's current position with the preset area in real time. If the robot is detected to have left the preset area and the boundary crossing state lasts for ≥3 seconds (the boundary crossing judgment delay is ≤3 seconds), then the condition is met (to avoid misjudgment caused by brief signal drift).
[0042] In summary, the status control module 2 comprehensively judges the above four types of signals. If any one condition is met and a single condition is continuously triggered for ≥2 seconds (to prevent accidental touch), or any combination of two conditions is met, the final judgment is "the self-destruct trigger condition is met", and the warning and self-destruct execution process will then begin. If the condition is not met, the detection state will continue.
[0043] S3. When the self-destruct trigger condition is met, before the self-destruct program is triggered, a local warning is issued through sound and light signals, and an encrypted status message is sent to the remote control terminal.
[0044] This step involves local deterrence and remote synchronization, which is coordinated by the status control module 2 and executed collaboratively by the early warning module 4 and the communication module 5. The specific details are as follows:
[0045] First, after the status control module 2 determines in step S2 that the self-destruct trigger condition is met, it does not immediately initiate self-destruction, but instead triggers the early warning process to reserve a window period for authorized intervention.
[0046] Secondly, the status control module 2 sends a command to the early warning module 4 to activate the preset audio-visual warning mode, specifically "low-frequency red light flashing" (flashing frequency 1-2 times / second, conspicuous but not dazzling) + "intermittent buzzing" (buzzing interval 1 second, volume ≥80dB, ensuring that surrounding personnel can perceive it), continuing until the self-destruct program is initiated or a cancellation command is received. Its purpose is twofold: first, to deter unauthorized dismantling or capture personnel, informing them that "self-destruction is about to begin, please do not continue operation"; and second, to remind nearby friendly personnel to stay away to avoid accidental injury during self-destruction.
[0047] Finally, the local early warning is synchronized. The status control module 2 integrates key information (such as the type of self-destruct trigger condition met, the robot's current GPS location, the remaining time of the self-destruct countdown, and the current system status) and generates an encrypted status message (using a high-strength encryption protocol such as AES-256 to prevent interception or tampering during transmission), which is then sent to the remote control terminal through the communication module 5.
[0048] The core function of the message is to inform the backend of the capture risks and current status of the robot in real time, providing data support for authorized personnel to determine whether to send a "self-destruct cancellation command".
[0049] In this step, local audible and visual warnings and remote message transmissions are initiated completely synchronously, without any order, ensuring that "on-site deterrence" and "back-end awareness" are achieved simultaneously. This prevents illegal capturers from ignoring the warnings and also ensures that the back-end does not miss the opportunity to intervene.
[0050] S4. Activate the self-destruct program to self-destruct the core data storage area and critical hardware modules.
[0051] This step is the final execution process of the self-destruct procedure. Its core is that the state control module 2 issues an instruction to select one of three preset methods, namely software destruction, physical destruction and chemical destruction, to irreversibly destroy the robot's core data and key hardware, ensuring that the data cannot be recovered and the hardware cannot be reused.
[0052] The key hardware module described herein is one or any combination of a processor, an encrypted communication unit, a data storage module, and a dedicated sensor.
[0053] The aforementioned software destruction refers to repeatedly overwriting the core data storage area with random data streams to destroy the encryption keys. This method can completely destroy the data layer. Specifically, it generates massive random data streams to overwrite the core data storage area (such as hard drives, flash memory, and encryption chips) at least three times (the number of overwrites can be preset), completely erasing classified data, operation logs, core algorithms, and other critical information; at the same time, it automatically destroys the data encryption keys (including backup keys). Even if the storage medium is not physically damaged, no valid data can be recovered by technical means, thus preventing data leakage at its source.
[0054] The physical damage refers to the destruction of critical hardware pathways through the melting of a heating wire and high-voltage discharge. This physical damage is a precise hardware-level destruction, targeting key hardware modules (processors, encrypted communication units, data storage modules, dedicated sensors, etc.). The melting of the heating wire involves activating a built-in miniature heating wire (pre-installed at a critical hardware circuit), instantly heating and melting the pins of the core chip and circuit board lines, resulting in a complete circuit break. The high-voltage discharge involves releasing pre-stored high-voltage electrical energy (such as capacitor discharge), breaking down the core logic circuits and signal transmission paths of the hardware, rendering the hardware completely inoperable and unrepairable.
[0055] The chemical damage refers to the release of a pre-set corrosive medium onto the core hardware. This chemical damage occurs in scenarios requiring irreversible corrosion of the hardware layer and high security. The self-destruct execution module 3 triggers the valve of a miniature sealed container, releasing the pre-set corrosive medium (such as a specialized slightly acidic corrosive agent, effective only on electronic components and circuit boards, with no risk of large-scale spread). The medium flows directionally to critical parts of the core hardware (such as chip surfaces and circuit board solder joints), chemically corroding and destroying the hardware structure, rendering it completely inoperable and preventing the recovery of any usable components through disassembly.
[0056] The core principle of self-destruction in this embodiment is: regardless of the method chosen, focus on core data and key hardware, do not damage the robot's non-core structure (such as shell, ordinary sensors), avoid unnecessary safety risks (such as fire, explosion); the self-destruction process is completed quickly (≤5 seconds in total) to prevent unauthorized interference.
[0057] As described above, the present invention can be well implemented.
Claims
1. A robot system for preventing passive capture, characterized in that, The system includes a state control module (2) for managing self-destruct preparation, cancellation and triggering states, and a trigger detection module (1), a self-destruct execution module (3), an early warning module (4), a communication module (5) and a GPS positioning module (6) all connected to the state control module (2). The GPS positioning module (6) and the early warning module (4) are both connected to the communication module (5). The trigger detection module (1) is used to detect dismantling actions and command signals, the self-destruct execution module (3) is used to perform software, physical or chemical destruction operations, the early warning module (4) is used to issue and provide feedback early warning information, the communication module (5) is used to ensure signal interaction between the above modules, and the GPS positioning module (6) is used to provide accurate location information support for the system.
2. The method for preventing self-destruction of a robot passive capture system according to claim 1, characterized in that, Includes the following steps: S1. Configure the conditions for triggering the self-destruct preparation state; S2. Real-time detection of self-destruct trigger conditions and determination of whether the self-destruct trigger conditions are met; S3. When the self-destruct trigger condition is met, before the self-destruct program is triggered, a local warning is given by sound and light signals, and an encrypted status message is sent to the remote control terminal. S4. Activate the self-destruct program to self-destruct the core data storage area and critical hardware modules.
3. The method for preventing self-destruction of a robot from passive capture according to claim 2, characterized in that, The "self-destruct preparation state triggering conditions" mentioned in step S1 include the following: (A) before the robot performs a preset high-risk task, it is activated by a local button or a remote encrypted command; (B) the robot loses contact with the remote control terminal for a set configuration threshold time; (C) the robot is activated by receiving a wired or wireless encrypted command.
4. A method for preventing self-destruction of a robot from passive capture according to claim 2, characterized in that, The "determine whether the self-destruct trigger condition is met" mentioned in step S2 refers to meeting any one of the following conditions or a combination of any two or more of the following conditions: ( Unauthorized disassembly actions were detected, including failure to follow the preset screw disassembly sequence and violation of the preset component disassembly procedure; The self-destruct preparation state was not exited via a preset method before disassembly; ) Receives local self-destruct button trigger signals or remote encrypted self-destruct commands; The GPS module detects that the robot has left the preset area and that the out-of-bounds state lasts for ≥3 seconds.
5. A method for preventing self-destruction of a robot from passive capture according to claim 2, characterized in that, The "self-destruction of the core data storage area and key hardware modules" described in step S4 can be achieved in any of the following ways: software destruction, which involves repeatedly overwriting the core data storage area with random data streams to destroy the encryption key; physical destruction, which involves melting the heating wire and breaking down the key paths of the core hardware with high-voltage discharge; or chemical destruction, which involves releasing a pre-set corrosive medium to act on the core hardware.
6. A method for preventing self-destruction of a robot from passive capture according to claim 3, characterized in that, In the phrase "(B) The time when the robot loses contact with the remote control terminal reaches the set configuration threshold", the time threshold is configured to be 10 minutes and can be modified by the remote control terminal through encrypted commands.
7. A method for preventing self-destruction of a robot from passive capture according to claim 4, characterized in that, The "( In the message "GPS module detects robot leaving preset area", the preset area is a polygonal or circular boundary, and the boundary judgment delay is ≤3 seconds.
8. A method for preventing self-destruction of a robot from passive capture according to claim 4, characterized in that, When the self-destruct trigger condition is a single condition, it must be triggered continuously for ≥2 seconds.
9. A method for preventing self-destruction of a robot from passive capture according to claim 5, characterized in that, The key hardware module is one or any combination of a processor, an encrypted communication unit, a data storage module, and a dedicated sensor.
10. A method for preventing self-destruction of a robot from passive capture according to claim 9, characterized in that, The audio-visual signal mentioned in step S3 is a low-frequency red light flash and an intermittent buzzing.