Uav authentication method and system

Abstract

An authentication method includes sending, by a device of an unmanned aerial vehicle (UAV), a device identification (ID) of the device and a randomly generated random number to an authentication apparatus of the UAV; receiving, by the device from the authentication apparatus, an encrypted session key and an encrypted random number that are obtained by the authentication apparatus based on the device identification; decrypting, by the device according to a device key of the device, the encrypted session key and the encrypted random number to obtain decrypted session key and decrypted random number, respectively; and determining, by the device, whether an authentication of the authentication apparatus is passed based on the randomly generated random number and the decrypted random number.

What is claimed is: 
     
         1 . An authentication method comprising:
 sending, by a device of an unmanned aerial vehicle (UAV), a device identification (ID) of the device and a randomly generated random number to an authentication apparatus of the UAV;   receiving, by the device from the authentication apparatus, an encrypted session key and an encrypted random number that are obtained by the authentication apparatus based on the device identification;   decrypting, by the device according to a device key of the device, the encrypted session key and the encrypted random number to obtain decrypted session key and decrypted random number, respectively; and   determining, by the device, whether an authentication of the authentication apparatus is passed based on the randomly generated random number and the decrypted random number.   
     
     
         2 . The method of  claim 1 , further comprising:
 sending, by the device, a message command to the authentication apparatus in response to determining that the authentication of the authentication apparatus is passed.   
     
     
         3 . The method of  claim 2 , further comprising:
 generating, by the device, the message command using the decrypted session key and the device key.   
     
     
         4 . The method of  claim 1 , wherein the device key is generated based on at least the device ID of the device. 
     
     
         5 . The method of  claim 4 , wherein the device key is generated based on the device ID of the device and an authentication key of the authentication apparatus. 
     
     
         6 . The method of  claim 5 , wherein:
 the device belongs to one of a plurality of groups of devices; and   each of the plurality of groups of devices corresponds to a device type having a device type ID identifying the device type.   
     
     
         7 . The method of  claim 6 , wherein the device key is generated based on the device ID of the device, the authentication key of the authentication apparatus, and a device type key of a device type corresponding to the one of the plurality of groups of devices to which the device belongs. 
     
     
         8 . The method of  claim 4 , wherein the device key is generated in real time. 
     
     
         9 . The method of  claim 1 , wherein the device key is pre-programmed in a storage chip of the UAV and/or solidified in firmware of the UAV. 
     
     
         10 . The method of  claim 1 , wherein determining whether an authentication of the authentication apparatus is passed based on the randomly generated random number and the decrypted random number includes:
 determining that the authentication of the authentication apparatus is passed in response to the decrypted random number being consistent with the randomly generated random number; and   determining that the authentication with the authentication apparatus is failed in response to the decrypted random number being inconsistent with the randomly generated random number.   
     
     
         11 . The method of  claim 1 , further comprising:
 receiving, from the authentication apparatus, an encrypted command sequence number that is obtained by the authentication apparatus encrypting a command sequence number according to the device key of the device, the command sequence number being generated by the authentication apparatus when a session key corresponding to the encrypted session key is generated; and   decrypting the encrypted command sequence number to obtain decrypted command sequence number.   
     
     
         12 . The method of  claim 11 , wherein:
 the command sequence number is automatically incremented by a preset value at a preset time interval or every time a command is sent.   
     
     
         13 . The method of  claim 1 , wherein:
 the encrypted session key is obtained by the authentication apparatus by encrypting a session key, the session key being generated by the authentication apparatus for the device in response to the UAV being powered up or reset.   
     
     
         14 . The method of  claim 1 , wherein sending the device ID of the device and the randomly generated random number to the authentication apparatus of the UAV includes:
 sending the device ID of the device and the randomly generated random number to the authentication apparatus of the UAV in a plaintext manner.   
     
     
         15 . An functional assembly of an unmanned aerial vehicle (UAV), the functional assembly being configured to:
 send a device identification (ID) of the functional assembly and a randomly generated random number to a flight controller of the UAV;   receiving, by the functional assembly from the flight controller, an encrypted session key and an encrypted random number that are obtained by the flight controller based on the device identification;   decrypt, according to a device key of the functional assembly, the encrypted session key and the encrypted random number to obtain decrypted session key and decrypted random number, respectively; and   determine whether an authentication of the flight controller is passed based on the randomly generated random number and the decrypted random number.   
     
     
         16 . An unmanned aerial vehicle (UAV), comprising:
 a flight controller; and   a functional assembly coupled to the flight controller, the functional assembly being configured to:
 send a device identification (ID) of the functional assembly and a randomly generated random number to the flight controller; 
 receive, from the flight controller, an encrypted session key and an encrypted random number that are obtained by the flight controller based on the device identification; 
 decrypt, according to a device key of the functional assembly, the encrypted session key and the encrypted random number to obtain decrypted session key and decrypted random number, respectively; and 
 determine whether an authentication of the flight controller is passed based on the randomly generated random number and the decrypted random number. 
   
     
     
         17 . The UAV of  claim 16 , wherein the functional assembly is further configured to:
 send a message command to the flight controller in response to determining that the authentication of the flight controller is passed.   
     
     
         18 . The UAV of  claim 17 , wherein the functional assembly is further configured to:
 generate the message command using the decrypted session key and the device key.   
     
     
         19 . The UAV of  claim 16 , wherein the functional assembly is further configured to:
 determine that the authentication of the flight controller is passed in response to the decrypted random number being consistent with the randomly generated random number; and   determine that the authentication with the flight controller is failed in response to the decrypted random number being inconsistent with the randomly generated random number.   
     
     
         20 . The UAV of  claim 16 , wherein the functional assembly is further configured to:
 receive, from the flight controller, an encrypted command sequence number that is obtained by the flight controller encrypting a command sequence number according to the device key of the functional assembly, the command sequence number being generated by the flight controller when a session key corresponding to the encrypted session key is generated; and   decrypt the encrypted command sequence number to obtain decrypted command sequence number.