应急场景下无人机网络中的指令安全下发协议

Secure command delivery protocol for drone networks in emergency scenarios

无人机在应急场景中发挥着越来越重要的作用。无人机执行远程任务时,飞行距离长,导致地面管控中心无法直接与无人机通信。而应急场景如突发的火灾地震等,需要及时下达指令应对。针对应急场景下的无人机网络数据指令安全下发场景,设计了一种基于多接收者加密协议的指挥权限下发机制和基于代理签密的指令安全下发机制。在地面管控中心下发指挥权限时,通过多接收者加密协议,向若干移动指挥中心下发指挥权限,并将其派往应急现场。在指令安全下发时,移动指挥中心将签密后的指令发送给空中平台,空中平台验证移动指挥中心的身份和指挥权限,并将指令签密后发送给无人机。网络中的无人机预先配置在空中平台的管辖下,无人机验证空中平台的身份,解密并执行指令。采用形式化验证工具Scyther、BAN逻辑和非形式化安全分析等多种方法对方案进行了安全性分析,结果表明,所提出的方案能够满足必要安全需求。与多个方案进行性能对比,结果表明,所提出的方案具有良好的性能表现。

Drones play an increasingly important role in emergency scenarios.When drones perform long-distance missions,the flight distance is long,which makes it impossible for the ground control center to communicate directly with the drones.Emergency scenarios such as sudden fires and earthquakes require timely instructions to respond.Aiming at the scenario of secure issuance of drone network data instructions in emergency scenarios,a command authority issuance mechanism based on a multi-receiver encryption protocol and a secure instruction issuance mechanism based on proxy signcryption are designed.When the ground control center issues command authority,it issues command authority to several mobile command centers through a multi-receiver encryption protocol and dispatches them to the emergency site.When the instruction is securely issued,the mobile command center sends the signed instruction to the aerial platform which verifies the identity and command authority of the mobile command center and sends the signed instruction to the drone.The drones in the network are pre-configured under the jurisdiction of the aerial platform.The drone verifies the identity of the aerial platform,decrypts and executes the instruction.A security analysis of the scheme is carried out using a variety of methods such as the formal verification tool Scyther,BAN logic and informal security analysis.The results show that the proposed scheme can meet the necessary security requirements.Compared with multiple schemes,the results show that the proposed scheme has a good performance.