2151 results about "Session key" patented technology

The invention provides a block chain-based distributed device identity authentication and access control method and system, and relates to the technical field of block chains, and the method comprises the steps: generating a target device fingerprint by a to-be-accessed device based on a physical cloning-free function of the to-be-accessed device, binding the target device fingerprint with a device public key to generate device identity information, and sending the device identity information to the to-be-accessed device; carrying out block chain evidence storage on the equipment identity information through an identity authentication smart contract; the authentication node queries corresponding equipment identity information based on an equipment fingerprint sent by the to-be-accessed equipment, and verifies the digital signature in the access authentication request by using the equipment public key; the access device which passes the authentication and obtains the encrypted session key obtains an access control strategy pre-configured by an administrator through an access control smart contract; and when needing to access network resources, the access equipment accesses the network resources based on the access control strategy.

The invention relates to the technical field of firmware protection, in particular to a firmware protection method and system based on a security coprocessor. The method comprises the following steps: acquiring characteristic data of the coprocessor; extracting hardware entropy source data according to the coprocessor feature data; generating a hardware trust root key based on the hardware entropy source data; performing partition processing on the firmware based on the hardware trust root key to obtain firmware partition data; constructing hierarchical verification structure data according to the firmware partition data; implementing firmware starting security verification based on the hierarchical verification structure data to obtain integrity verification data; establishing a secure communication channel between the processors according to the integrity verification data; executing a bidirectional authentication process based on the secure communication channel, and generating session key data; a firmware runtime environment is monitored based on the session key data. According to the method, the hardware entropy source is extracted by measuring the physical characteristics of the coprocessor, and an unforgeable hardware trust root is established, so that the security is improved fundamentally.

The invention relates to a data access method and system of an intelligent Internet of Things gateway. The method comprises the following steps: performing feature matching and protocol identification on a plurality of sensors and terminal equipment connected to the intelligent Internet of Things gateway by using an equipment feature library to obtain an equipment protocol type; analyzing the original data to obtain standardized data; performing encryption processing to obtain an encrypted security data packet and an encrypted session key; performing multi-factor transmission channel selection to obtain an optimal transmission channel combination; and based on the optimal transmission channel combination, sending the encrypted security data packet to the Internet of Things platform, verifying the received data confirmation information based on a consensus algorithm, and outputting a data access state report through a data visual interface and an AI voice assistant. The processing strategy can be dynamically adjusted according to the equipment characteristics, the data characteristics and the network environment, and the flexibility and adaptability of the system are improved.

A distributed intelligent authentication method based on dynamic multi-modal fusion relates to the field of network security, and adopts an alliance chain + DAG hybrid block chain architecture, combines a threshold signature to realize secret key fragment management, and switches among PBFT, Raft and probabilistic algorithms through a dynamic consensus mechanism to improve authentication efficiency. The multi-mode authentication module is based on a dynamic weight distribution algorithm, integrates biological characteristics, behavior analysis, equipment fingerprints and environmental factors, and combines an LSTM-GAN model and a quantum random number driven challenge-response mechanism to realize zero-trust verification under environmental perception. The session management module generates a session key by using a chaotic mapping algorithm. In the aspect of privacy protection, CKKS homomorphic encryption, zero-knowledge proof and attribute-based encryption are fused. According to the method, the block chain technology, the secure multi-party computing technology, the machine learning technology and the quantum cryptography technology are fused, and a high-performance, high-security and strong-privacy-protection distributed authentication solution is provided.

Disclosed in the present invention is a Chinese national cryptographic algorithm-based identity authentication and data encryption method for CoAP, comprising: pre-configuring identity authentication data of a client and a server; and performing identity authentication on the basis of the pre-configured information, determining the security of the client and the server, performing key agreement to obtain a session key, and if it is determined that the security meets a requirement, completing data transmission on the basis of the session key. According to the present invention, identity tables are established for a client and a server respectively, and important data can only be accessed by both the client and the server by looking up the tables; by means of a pre-shared key, SM4 and SM3 algorithms are used to complete bidirectional identity authentication and key agreement before data transmission between the client and the server, and by using only two handshake messages, the confidentiality of the important data and the integrity of messages during identity authentication can still be guaranteed; replay attacks are prevented by using timestamps and random numbers; and data transmission is performed by using an observer mode that reduces overhead to the greatest extent.

The invention relates to the technical field of information security, and discloses an authentication method and system based on a Ksession shared session key MAC, and the method comprises the steps: obtaining to-be-encrypted data in a power monitoring system, dividing the to-be-encrypted data into key data and real-time data, and encrypting the key data and the real-time data; the method comprises the following steps: dynamically generating a Ksession key by using an ECDH protocol and an identity-based IBC technology, generating a message authentication code by using the Ksession key, carrying out integrity and authenticity verification on data in transmission through the message authentication code, transmitting encrypted data through a TLS / SSL protocol, and destroying the Ksession key at the end of a session; a quantum security digital certificate is generated by fusing quantum key distribution and a quantum security signature algorithm, and verification of the digital certificate is realized through a multi-party verification mechanism. The quantum security technology and the advanced encryption theory are integrated, and qualitative leap is achieved in the aspects of identity authentication, data encryption, integrity verification and access control.

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

The invention relates to a secure communication method between an edge server and terminal equipment. The secure communication method comprises the following steps: establishing a physical layer channel state information database, generating a multi-dimensional feature vector and encoding the multi-dimensional feature vector into a terminal equipment identifier, generating an identity authentication request by the terminal equipment, and performing hash operation to obtain a first hash value; the identity authentication request and the first hash value are sent to the edge server, the edge server verifies the identity authentication request and queries a corresponding device key, performs hash operation to obtain a second hash value, generates an authentication response message after successfully comparing the second hash value with the first hash value, encrypts the authentication response message by using the device key, and sends the encrypted authentication response message to the edge server; and sending the encrypted authentication response message to the terminal equipment. And the terminal equipment decrypts by using the equipment key to obtain the session key, and communicates with the edge server based on the session key. By using the physical layer channel information and the equipment hardware characteristics, the security communication method fusing dynamic identity authentication and efficient key management improves the security, reliability and anti-attack ability of communication between the edge server and the terminal equipment.

The invention discloses a data transmission protection method and a computer device. The method comprises the following steps: initializing a target system; disturbing an initial public key in the generated temporary key pair based on a preset differential privacy mechanism in initialization to obtain a first public key; the temporary key pair comprises an own private key and an initial public key; a first public key is exchanged through the initialized secure communication channel, and zero-knowledge proof information is generated; verifying the received first public key based on an initialized preset zero-knowledge proof system and zero-knowledge proof information, if the verification is passed, calculating a shared key according to the own private key and the received first public key, and obtaining a session key based on a key derivation function and the shared key; and encrypting to-be-transmitted original data based on the session key to obtain an encrypted data packet, and sending the encrypted data packet to a receiving end through the secure communication channel. According to the method, high efficiency, high security and high privacy of data transmission can be ensured.

A method for data processing, a readable medium, and an electronic device are provided. The method for data processing includes: receiving a data processing task; determining target data corresponding to the data processing task and a target first key corresponding to the target data; decrypting the target first key according to the first session key via a target computing node to obtain the first key, and decrypting the target data based on the first key to obtain the data to be processed; and determining a data processing result according to a target model and the data to be processed. The target computing node is executed in a trusted execution environment. The target model is obtained by decrypting an encrypted target model based on a model key, the model key is stored in a key management service, and the key management service is executed in the trusted execution environment.

The invention discloses an RFID anti-tracking bidirectional authentication method and system based on a lightweight hash chain, and relates to the technical field of wireless radio frequency identification security. The system comprises a label initialization module, a bidirectional authentication module, an anti-tracking mechanism module, a hash chain updating module, a secure communication module and a system feedback optimization module. The label initialization module generates initial hash chain data; the bidirectional authentication module adopts a bidirectional challenge-response mechanism to generate a dynamic authentication certificate; the anti-tracking mechanism module generates an untraceable session key through Hash chain value dynamic rotation and randomization mask technology; the Hash chain updating module iteratively updates the Hash chain value; the secure communication module adopts a lightweight encryption algorithm to protect communication data; and the system feedback optimization module dynamically adjusts the hash chain length and the key strength. The real-time performance and the anti-attack capability of the RFID system are remarkably improved, and a high-safety and low-power-consumption bidirectional authentication solution is provided for Internet of Things equipment.

Systems and methods for the generation and use of session keys supporting secure communications between a client and server device are disclosed. The client hashes each of a series of passwords a first number of times. The hashed passwords are sent to a server. The server applies the hashed password to an array of PUF devices, and receives an initial response bitstream which is stored. The client later hashes each of the series of passwords a second number of times, which is less than the first number, and these are sent to the server. The server continues to hash the second message digest, generate PUF responses, and compare the result to the initially stored responses. For each password, the number of hashes necessary to achieve a match is a partial session key. Latency is improved by an array of separately addressable PUFs, each producing a partial session key.

The invention discloses a session key capture and security event analysis method, device, equipment and medium, and relates to the technical field of network communication and information security, a data security protection system is established, a probe service is deployed at a security event monitoring end, and an eBPF technology is utilized to capture a TLS session key in a network stack of an operating system according to analysis of a TLS handshake message; and the probe service combines time features, session features and the captured secret key to generate a mapping relation, and the mapping relation is stored into a persistent file. According to the method, the HASH structure is used for storing the secret key file, the mapping relation between the quintuple and the session time point and the mapping relation between the quintuple and the session secret key are increased, searching and symmetric decryption of the mapping relation between the encrypted traffic and the session secret key can be efficiently completed at the decryption server end, the decryption performance is greatly improved, meanwhile, the session generation time and the session secret key are stored in the HASH value, and the decryption efficiency is improved. The method can solve the problem that the old connection is released and the quintuple of the new connection and the old connection is consistent in a high-concurrency scene, and can improve the decryption accuracy.

The invention relates to a control method for a multi-protocol switching anti-quantum security gateway, and the method comprises the steps: carrying out the safety self-inspection of a hardware environment after the security gateway is powered on, generating a unique root key of equipment based on a physical unclonable function, continuously collecting and analyzing the network traffic characteristics, and carrying out the self-inspection of the hardware environment. Based on a machine learning model, a quantum attack mode is identified and an encryption algorithm mode is dynamically decided, protocol analysis is carried out on a communication data packet, dynamic conversion and adaptation are carried out between a traditional protocol and an anti-quantum cryptography protocol according to an instruction and a preset rule, and an anti-quantum cryptography engine is called to carry out encryption or signature operation. And dynamically deriving and managing a session key in a complete period based on a root key, switching an algorithm mode, a communication protocol and a key in a linkage manner according to a quantum attack detection result, and starting anti-side channel attack protection and hardware security response. According to the method, active protection of the security gateway on quantum attacks, multi-protocol seamless compatibility and full-life-cycle security management of keys are realized.

The invention relates to the technical field of Internet of Things security, and provides a security authentication method and system for an Internet of Things device, a medium and a device, and the method comprises the steps: responding to an authentication request of the Internet of Things device, the authentication request comprising a unique identifier, a current timestamp and a comprehensive feature vector of the Internet of Things device; after the current timestamp and the comprehensive feature vector are connected, generating a random challenge value through a random function and sending the random challenge value to obtain a returned Internet of Things equipment response value; after the authentication key, the comprehensive feature vector and the random challenge value are connected, an expected response value is generated through a secure hash function, and whether the Internet of Things equipment is successfully authenticated or not is judged through comparison; and if the authentication is successful, generating a session key, connecting the authentication key with the session key, and updating the authentication key through a secure hash function. The common security threats such as replay attack and man-in-the-middle attack are effectively prevented, and the uniqueness and security of each authentication are ensured.

The invention relates to an intelligent device safe networking method and system based on a dynamic secret key, and the method comprises the steps: obtaining a device identifier and an initial secret key of an intelligent device, recording a current timestamp when the intelligent device is started, and generating a dynamic secret key through a Hash algorithm in combination with the device identifier and the initial secret key; generating a corresponding networking request based on the dynamic key, and sending the dynamic key and the networking request to a corresponding gateway; verifying the received networking request and the dynamic key through the gateway to obtain a verification result, and sending the verification result to the intelligent device; and generating a corresponding session key through the intelligent device according to a preset Diffie-Hellman algorithm in combination with the verification result, performing encrypted communication with the gateway based on the session key, and sending corresponding encrypted data to the gateway. According to the invention, flexible key management and efficient encryption communication can be realized.

The invention discloses an interface authentication method, system and device based on a national cryptographic algorithm and a medium, belongs to the technical field of computer security, and aims to solve the technical problem of how to realize identity authentication, data encryption, integrity verification and replay attack protection of interface interaction and meet the security requirement of a key information system. According to the technical scheme, the method comprises the following steps: system initialization: a server and a client respectively generate SM2 key pairs, the client and the server exchange public keys through a secure channel, and a mapping relation between the public key of the opposite side and an identity label is stored; session key negotiation: exchanging a temporary public key based on an SM2-ECDH algorithm, calculating a shared secret value, and deriving an SM4 session key through a KDF; the client side carries out SM3 hash and SM2 signature on request parameters, and the server side verifies the signature and verifies a timestamp and a random number to resist replay attacks; and session key updating: triggering key updating according to a preset condition, and encrypting the new key negotiation message by using the original session key.

Disclosed is an identity authentication system for distributed Internet of vehicles (IoV), including a core cloud, a plurality of edge clouds, a plurality of road side units (RSUs) and a plurality of terminal vehicles. The core cloud stores registration information about the terminal vehicles and the RSUs; the edge cloud performs identity verification on the RSUs according to the registration information, and after the verification is passed, the edge cloud generates a temporary shared session key and sends the same to the RSU and the terminal vehicle, and the RSU and the terminal vehicle establish encrypted communication according to the temporary shared session key, to provide a network communication service for the terminal vehicle. In the present disclosure, a vehicle identity authentication efficiency in a scene with a large traffic density can be effectively improved.

The invention discloses a hardware cryptographic module based on a domestic commercial cryptographic algorithm and an implementation method of the hardware cryptographic module. The hardware cryptographic module comprises a security chip, a central control unit, a memory unit, a key management module, an encryption and decryption module, a multi-interface support unit, a bus interface unit and an indicator light module, the implementation method comprises the following steps: activating multi-layer encryption when a module is started, verifying the integrity of a master key through an SM3 algorithm, and ensuring the secure storage and management of the key; generating a session key by using an SM2 algorithm, and distributing the session key through a secure channel; performing multi-level encryption and decryption operation on the data, and introducing multiple authentication in key access; according to the invention, through multilayer encryption and multi-factor authentication, the security of key management is significantly enhanced, and through optimizing encryption and decryption processes and hardware configuration, the problem of performance bottleneck in a high-load environment is effectively solved, and efficient and safe operation of the system in a complex application scene is ensured.

The invention discloses a method and system for quickly constructing a national secret encryption channel, and the method comprises the steps: a client and a server respectively generate a client private key and a server private key based on a sensitive data transmission scene, and apply for an SM2 algorithm certificate; based on the private key and the digital certificate, the client and the server perform a handshake process, and the handshake process comprises that the client and the server perform identity verification and negotiation by exchanging certificates, temporary public keys and signature information; based on temporary public key information exchanged between the client and the server, performing key negotiation through an SM2 elliptic curve algorithm to obtain negotiation data; and based on the session key in the negotiation data, encrypting and decrypting the communication data by using a GCM mode of the SM4 algorithm. According to the method, various negotiation parameters are optimized and simplified based on a domestic encryption algorithm, rapid establishment of the secure channel is realized, only one round-trip delay is needed in the whole process, and time and bandwidth are saved on the premise of ensuring communication security.

A method performed by a user equipment to establish a secured connection with an application entity in an enterprise network. The method comprises sending an establishment request to a secure access secure edge (SASE) entity: receiving an establishment response from the application entity if the SASE entity determines to allow the establishment request and authorizes Generic Bootstrapping Architecture / Authenticated Key Management for Application (GBA / AKMA) platform to share a session key with the application entity; and establishing a connection with the application entity based on the session key.

The invention relates to a secure communication method for an edge node and terminal equipment based on dynamic key negotiation. The method comprises the following steps: the terminal equipment sends an initial signal when initiating a communication request; the edge node generates a scenarized first key negotiation parameter and feeds back the scenarized first key negotiation parameter after passing dual identity and state verification; after the terminal device decrypts the parameter, a dynamic entropy value is collected by combining a network adaptive sensor, and a second key negotiation parameter associated with the first parameter feature is generated; the two parties calculate session keys based on an ECDH algorithm, and the consistency of the keys is ensured through dynamic entropy verification and Hash comparison; and after the key negotiation succeeds, entering a hierarchical encrypted data transmission stage, and dynamically updating a session key based on a multi-dimensional trigger mechanism. According to the method, through hardware credibility verification, a scenarized key strategy, dynamic entropy enhancement and national secret algorithm adaptation, dynamic management of keys and adaptive matching of terminal resources are achieved, attacks such as equipment counterfeiting and parameter tampering are effectively resisted, and the high-security and compliance requirements in the fields of industrial control and the like are met.

The invention discloses a hybrid encryption method based on an industrial bus, and the method comprises the following steps: S1, generating an initial session key through a multiple elliptic curve algorithm, and generating an initial key pair through a pseudo-random number generator; s2, encrypting the control data by using a first-level key; s3, generating a secondary key to encrypt common transmission data; s4, dynamically generating a third-level temporary session key by using a pseudo-random number generator, and encrypting real-time transmission data of a large data volume; s5, realizing collaborative key generation and synchronous updating of a plurality of communication nodes through a distributed key management system; s6, periodically utilizing a probability density regression forest algorithm to dynamically update the key, and triggering key re-negotiation when communication abnormity is detected; and S7, integrating a classifier based on the combination of a deep forest and a gradient boosting decision tree, automatically classifying the data and dynamically adjusting an encryption strategy. According to the method, a multiple elliptic curve algorithm, dynamic key management and the like are combined, and efficient encryption in industrial bus communication is achieved.

The invention discloses an archive digitization full-life-cycle encryption integrity verification method and system, relates to the field of digital archive safety management, and is used for solving the problem of integrity and safety guarantee in archive digitization management. Logic units are divided through a semantic analysis engine, non-uniform blocks are generated based on sensitivity dynamic partitioning, local hash values are calculated, and a multi-level verification tree is constructed to generate root hash and a hash path mapping table; acquiring visitor identities, terminal environments and timestamps in each stage of an archive life cycle, generating state snapshots in combination with a hash path, and constructing a life cycle state snapshot chain; reconstructing a target logic unit verification path according to the access request, analyzing the structural difference between a current path and a historical snapshot chain through a path reconstruction type difference verification algorithm, and identifying structural offset, node tampering or path loss; and response control is triggered for abnormal verification, including session key updating and permission freezing, so that the security integrity guarantee of the digital archive in the full life cycle is improved.

A hardware device comprising an accelerator enclave and a hardware security module, HSM, the HSM including a first true random number generator, TRNG. The accelerator enclave includes a second TRNG and an accelerator. The HSM is configured to: generate a first session key using the first TRNG; establish a first secure communication channel with a cloud user using the first session key; receive an encrypted hardware configuration bitstream through the first secure communication channel; decrypt the hardware configuration bitstream; configure functional blocks in the at least one accelerator based on the hardware configuration bitstream. The accelerator enclave is configured to: generate a second session key using the second TRNG; establish a second secure communication channel with the cloud user using the second session key as encryption key; receive encrypted input data through the second secure communication channel; decrypt the encrypted input data; process the input data using the functional blocks.

The invention belongs to the technical field of network security, and discloses an encrypted enterprise network data security access method and system, and the method comprises the steps: constructing a biological recognition unit and an equipment binding unit, recognizing multi-dimensional biological data through the biological recognition unit, and carrying out the identity authentication of a user through the combination of a dynamic token generation time binding mechanism; the equipment binding unit associates the identity authentication result with the hardware fingerprint of the security access terminal to generate a digital identity certificate; a basic key is generated and updated in a rolling mode through a quantum random number generator; dual protection is carried out on the multi-dimensional biological data through a hierarchical encryption unit, the hierarchical encryption unit comprises an application layer and a transmission layer, the application layer adopts an SM4 algorithm to encrypt service content data in the multi-dimensional biological data, and the transmission layer adopts an SM2 algorithm to generate a session key to carry out forward secrecy; the security access of enterprise network data is ensured, and the security protection capability of the enterprise network is comprehensively enhanced.

The invention relates to a QUIC protocol-based distributed node unified identity authentication method and system, belongs to the technical field of network security, is applied to a client, and comprises the following steps: registering a client domain name identity through a certificate authority, obtaining a client certificate, and pre-storing a server certificate chain; generating a QUIC initial data packet according to the target server domain name identifier and the client certificate, and sending the QUIC initial data packet to the server; receiving a QUIC handshake data packet returned by the server; verifying the legality of the server certificate based on the server certificate chain, and if the server certificate is legal, calculating a pre-master key according to the client DH private key and the server DH public key; deriving a 1-RTT session key based on the pre-master key; generating a signature verification message, and sending the client certificate and the signature verification message to a server; and synchronously using the 1-RTT session key to encrypt the application layer data with the server, and transmitting the data to the server in the 1-RTT encryption space of the QUIC protocol. According to the invention, the reliability of node identities and the confidentiality of data are ensured.

The invention provides a real estate full life cycle intelligent management method and system based on Internet of Things perception, and the method comprises the steps: distributing a unique hardware identifier of equipment, combining a lightweight digital certificate with a pre-shared key to achieve two-factor authentication, and storing a root certificate in a cloud end; an access authentication process is optimized, an identity label and a certificate signature request need to be submitted when a node accesses for the first time, a temporary session key is generated after the gateway verifies, and abnormal access is immediately isolated and reported; data integrity verification is implemented, and after a sensor collects data, an abstract is generated and data encryption transmission is carried out; after decryption, the receiving end recalculates the abstract for comparison, and if not, the abstract is discarded and nodes are marked to be abnormal; a data anomaly detection model is constructed, energy consumption fluctuation is determined based on historical data, a frequency baseline is collected, data reasonability is monitored in real time, secondary authentication is triggered when the data is abnormal, and node data access is suspended if the data fails; a hierarchical key system is established, hardware is solidified by a root key, session keys are alternated for 24 hours, and data encryption keys are dynamically derived and distributed through encryption channels.

The invention relates to the technical field of information security, in particular to a hybrid key packaging method and system, and the method comprises the steps: determining a first encryption key, a sub-key and a second encryption key according to a public key of an anti-quantum key pair and a public key of a national secret key pair corresponding to an obtained to-be-encrypted information request; generating a first symmetric encryption session key according to the sub-key, the first random number and a second cryptographic algorithm; encrypting a message plaintext corresponding to the to-be-encrypted message request by using the first symmetric encryption session key; a receiving end carries out decryption based on the same mode, and an anti-quantum key packaging technology is added to a traditional national secret key packaging scheme, so that the key has an anti-quantum attack function after being packaged; when the anti-quantum key packaging technical scheme loses efficacy on a classical computer, the security of the session key can still be protected by using a national cryptographic algorithm in hardware, the semantic security required by a current public key encryption algorithm is met, and the security of data is improved.

The invention relates to the technical field of unmanned aerial vehicle network information security, in particular to an expandable unmanned aerial vehicle Internet of Things authentication key negotiation method, which comprises the following steps: initializing system parameters, and completing base station authorization and user registration; responding to successful user login and sending a request message, and sending the first encrypted request message to the key base station; the key base station sends the connection request to a base station corresponding to each unmanned aerial vehicle; each base station sends the second encryption request message to the target unmanned aerial vehicle; each target unmanned aerial vehicle determines a secret message and sends the secret message to the key base station; the key base station determines a target session message and a target secret message, sends the target session message to each target unmanned aerial vehicle, and sends the target secret message to the user; and each target unmanned aerial vehicle determines a target session key based on the target session message, and the user determines the target session key based on the target secret message. According to the invention, security negotiation of the session key between the user and the unmanned aerial vehicle can be realized, and the base station is effectively kept secret.