WO2020132978A1

WO2020132978A1 - Encrypted communication method, apparatus and system, and computer storage medium

Info

Publication number: WO2020132978A1
Application number: PCT/CN2018/124015
Authority: WO
Inventors: 高阳; 张海
Original assignee: 深圳市大疆创新科技有限公司
Priority date: 2018-12-26
Filing date: 2018-12-26
Publication date: 2020-07-02
Also published as: CN111406390A

Abstract

An encrypted communication method, apparatus and system, and a computer readable storage medium. The encrypted communication method is applied in an RTK device of an unmanned aerial vehicle, and comprises: obtaining an identification of the RTK device from the RTK device (S31), the identification comprising a serial number of the RTK device and/or ephemeris data thereof; using the identification to request a certificate to a security server (S32); receiving the encryption information fed back by the security server, the encryption information comprising the certificate encrypted on the basis of the identification (S35); and sending the encryption information to the RTK device (S36). Subsequently, only the real RTK device having the identification can use the local identification to generate a correct key which can be used for decrypting the certificate so that the real RTK device can pass the security certification of the security server by using the certificate, and establishes a communication with the security server.

Description

Encrypted communication method, device, system and computer storage medium

Technical field

The present application belongs to the field of communication, and in particular relates to an encrypted communication method, device, system, and computer-readable storage medium.

Background technique

In the field of communication, in order to prevent the information exchanged between multiple network communication devices from being stolen, encryption measures will be taken on the communication link. This can ensure the security of the interactive information. For example, in the application scenarios of drones, a real-time dynamic positioning (RealKinemati, RTK) device and a continuously running reference station (Continuously Operating Reference Stations, CORS) establish an encrypted communication chain based on the Secure Socket Layer (SSL) Then, the CORS station can deliver encrypted RTCM (RadioTechnical Commission for Maritime) data to the RTK device, so that the RTK device can use the RTCM data for positioning. So as to ensure the transmission security of the RTCM data.

However, in the prior art, RTK equipment can be forged to establish a communication connection with a CORS station to steal information such as RTCM data.

Summary of the invention

The purpose of this application is to provide an encrypted communication method to ensure that only real RTK equipment can establish a communication security certification.

In the first aspect, the present application provides an encrypted communication method, which is applied to a drone's RTK equipment; the encrypted communication method includes:

Acquiring the identifier of the RTK device from the RTK device, the identifier including the serial number SN of the RTK device and/or the ephemeris data of the RTK device;

Use the identifier to request an authentication certificate from the security server;

Receiving encrypted information fed back by the security server, the encrypted information including an authentication certificate encrypted based on the identifier;

Sending the encrypted information to the RTK device.

In a second aspect, the present application provides an encrypted communication method, which is applied to a drone's RTK equipment; the encrypted communication method includes:

The RTK device receives encrypted information generated by a security server, and the encrypted information includes an authentication certificate encrypted based on the identifier of the RTK device, and the identifier includes the serial number SN of the RTK device and/or the RTK device’s Ephemeris data

The RTK device uses the ID of the RTK device to generate a key for decrypting the encrypted information;

The RTK device uses the generated key to decrypt the authentication certificate from the encrypted information;

The RTK device uses the authentication certificate to establish communication with the security server.

In a third aspect, the present application provides an encrypted communication method, which is applied to a drone's RTK equipment; the encrypted communication method includes:

The security server receives the request carrying the identifier of the RTK device, the identifier including the serial number SN of the RTK device and/or the ephemeris data of the RTK device;

The security server generates an authentication certificate;

The security server encrypts the authentication certificate based on the identification;

The security server feeds back encrypted information carrying the encrypted authentication certificate.

According to a fourth aspect, the present application provides an encrypted communication device, which is applied to a drone's RTK equipment. The encrypted communication device includes:

An obtaining unit, configured to obtain an identifier of the RTK device from the RTK device, the identifier including a serial number SN of the RTK device and/or ephemeris data of the RTK device;

A requesting unit for requesting an authentication certificate from the security server using the identifier;

A receiving unit, configured to receive encrypted information fed back by the security server, where the encrypted information includes an authentication certificate encrypted based on the identifier;

The sending unit sends the encrypted information to the RTK device.

In a fifth aspect, the present application provides an encrypted communication device, which is applied to a drone's RTK equipment; the encrypted communication device includes:

A receiving unit, configured to receive encrypted information generated by a security server, the encrypted information including an authentication certificate encrypted based on an identifier of the RTK device, the identifier including the serial number SN of the RTK device and/or the RTK device Ephemeris data;

A using unit, for generating a key for decrypting the encrypted information using the identifier of the RTK device, decrypting the authentication certificate from the encrypted information using the generated key, and establishing and using the authentication certificate The communication of the security server.

In a sixth aspect, the present application provides an encrypted communication device, which is applied to a drone's RTK equipment; the encrypted communication device includes:

A receiving unit, configured to receive a request carrying an identifier of the RTK device, the identifier including the serial number SN of the RTK device and/or ephemeris data of the RTK device;

Generating unit, used to generate authentication certificate;

An encryption unit for encrypting the authentication certificate based on the identification;

The feedback unit is used for feeding back encrypted information carrying the encrypted authentication certificate.

In a seventh aspect, the present application provides an encrypted communication system. The encrypted communication system includes: an RTK device, a security server, and a parameter adjustment device;

The parameter adjustment device is used to obtain the identification of the RTK device from the RTK device, use the identification to request an authentication certificate from a security server, receive the encrypted information fed back by the security server, and send the RTK device the said Encrypted information, the encrypted information including an authentication certificate encrypted based on the identifier, the identifier including the serial number SN of the RTK device and/or ephemeris data of the RTK device;

The security server is configured to receive a request carrying an ID of the RTK device from the assistant device, generate an authentication certificate, encrypt the authentication certificate based on the identifier, and feed back the encrypted device with the encrypted Encrypted information of authentication certificate;

The RTK device is configured to receive encrypted information generated by the security server from the assistant device, and the encrypted information includes an authentication certificate encrypted based on the identifier of the RTK device;

The RTK device is also used to generate a key for decrypting the encrypted information using the ID of the RTK device, use the generated key to decrypt the authentication certificate from the encrypted information, and use the authentication The certificate establishes communication with the security server.

In an eighth aspect, the present application provides a parameter adjustment device, including a processor and a memory; the memory stores computer instructions; and the processor executes the computer instructions in the memory, so that the encryption communication method provided in the first aspect of the parameter adjustment device.

In a ninth aspect, the present application provides an RTK device, including a processor and a memory; the memory stores computer instructions; the processor executes the computer instructions in the memory, so that the RTK device performs the encrypted communication method provided in the second aspect.

In a tenth aspect, the present application provides a security server, including a processor and a memory; the memory stores computer instructions; the processor executes the computer instructions in the memory, so that the security server executes the encrypted communication method provided in the third aspect.

According to an eleventh aspect, the present application provides a computer-readable storage medium that stores computer instructions that instruct the assistant device to perform the encrypted communication method provided in the first aspect.

In a twelfth aspect, the present application provides a computer-readable storage medium that stores computer instructions that instruct an RTK device to perform the encrypted communication method provided in the second aspect.

In a thirteenth aspect, the present application provides a computer-readable storage medium that stores computer instructions that instruct a security server to perform the encrypted communication method provided in the third aspect.

Beneficial effect of this application: The security server encrypts the authentication certificate using the identifier of the RTK device, and the identifier includes the serial number SN of the RTK device and/or the ephemeris data of the RTK device. Correspondingly, only a real RTK device with this identification can use the local identification to generate the correct key, which can be used to decrypt the authentication certificate. Therefore, the real RTK device can use the authentication certificate to pass the security authentication of the security server and establish communication with the security server.

BRIEF DESCRIPTION

In order to more clearly explain the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings used in the embodiments or the description of the prior art. Obviously, the drawings in the following description are only for the application In some embodiments, for those of ordinary skill in the art, without paying creative labor, other drawings may be obtained based on these drawings.

FIG. 1 is an example diagram of an application scenario of a drone provided by an embodiment of the present application;

2 is a flowchart of a system interaction of an encrypted communication system provided by an embodiment of the present application;

FIG. 3 is a flowchart of an encryption communication method provided for a parameter adjustment device 102 according to an embodiment of the present application;

4 is a flowchart of an encrypted communication method for the security server 103 provided by an embodiment of the present application;

5 is a flowchart of an encrypted communication method provided for an RTK device 101 provided by an embodiment of the present application;

6 is a schematic structural diagram of an encrypted communication device 60 provided by an embodiment of the present application;

7 is a schematic structural diagram of an encrypted communication device 70 provided by an embodiment of the present application;

8 is a schematic structural diagram of an encrypted communication device 80 provided by an embodiment of the present application;

9 is a schematic structural diagram of a parameter adjustment device 102 provided by an embodiment of the present application;

10 is a schematic structural diagram of a security server 103 provided by an embodiment of the present application;

FIG. 11 is a schematic structural diagram of an RTK device 101 provided by an embodiment of the present application.

detailed description

The embodiments of the present application are described in detail below. Examples of the embodiments are shown in the drawings, in which the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the drawings are exemplary, and are only used to explain the present application, and cannot be construed as limiting the present application.

FIG. 1 provides an example of an application scenario of a drone provided by this application.

Referring to FIG. 1, the RTK device 101 and the assistant device 102 have established a communication connection. The RTK device 101 and the assistant device 102 may be an encrypted communication connection, or may be a non-encrypted communication connection.

The security server 103 and the assistant device 102 have established a communication connection. The security server 103 and the assistant device 102 may be an encrypted communication connection, or may be a non-encrypted communication connection.

Optionally, the assistant device 102 may be integrated into the security server 103. Or, the assistant device 102 is independently deployed outside the security server 103.

Alternatively, the security server 103 may be a CORS station.

In this application, the security server 103 is used to perform security authentication on the RTK device 101 and establish an encrypted communication connection with the RTK device 101.

The assistant device 102 serves as an intermediary between the security server 103 and the RTK device 101, so that the RTK device 101 can obtain the authentication certificate and/or key generated by the security server 103 according to the identifier of the RTK device 101, the identifier including the RTK Serial number (SN) of the device and/or ephemeris data of the RTK device. The authentication certificate and/or key is used by the RTK device 101 to request the security server 103 to establish an encrypted communication connection, for example, to establish an SSL-based communication connection.

RTK equipment 101 can be used to manage drones. Subsequent drone remote controllers can plan the flight path of the drone based on the hit data generated by the RTK device 101.

Based on the system of FIG. 1, an embodiment of system interaction is provided, as shown in FIG. 2.

In step S31, the assistant device 102 obtains the identifier of the RTK device 101.

The identifier of the RTK device 101 includes: a serial number (SN) of the RTK device 101 and/or ephemeris data of the RTK device 101. Optionally, the ephemeris data of the RTK device 101 refers to the ephemeris data received by the RTK device 101 from the Global Navigation Satellite System (Global Navigation Satellite System, GNSS).

In a possible acquisition method, the assistant device 102 directly accesses the RTK device 101, and acquires the RTK device 101 identifier from the RTK device 101.

In a possible acquisition method, the RTK device 101 directly sends the identifier of the RTK device 101 to the assistant device 102.

In step S32, the assistant device 102 uses the ID of the RTK device 101 to request an authentication certificate from the security server 103.

Specifically, the assistant device 102 sends a request to the security server 103, the request carries the identifier of the RTK device 101, and the request is specifically used to request the security server 103 for an authentication certificate.

In step S33, the security server 103 generates an authentication certificate.

In response to the request sent by the assistant device 102, the security server 103 generates an authentication certificate for performing security authentication on the RTK device 101. With this authentication certificate, the RTK device 101 can request to establish a communication connection with the security server 103.

Optionally, in response to the request sent by the assistant device 102, the security server 103 uses the ID of the RTK device 101 to generate a key. Combining the key and the authentication certificate, the RTK device 101 may request to establish an encrypted communication connection with the security server 103, for example, establish an encrypted communication connection based on SSL.

It should be understood that different RTK devices 101 have different identifications, that is, each RTK device 101 has a unique identification. Therefore, the keys generated based on the identifications of different RTK devices 101 are also different and unique. In contrast, the fake RTK device does not have an identification, and therefore does not have a key corresponding to the identification, so that it is impossible to establish an encrypted communication connection with the security server 103.

For example, different RTK devices 101 have different SNs, that is, each RTK device 101 has a unique SN. Therefore, the keys generated based on the SNs of different RTK devices 101 are also different and unique. In contrast, a fake RTK device does not have an SN, and therefore does not have a key corresponding to the SN, so that an encrypted communication connection with the security server 103 cannot be established.

In step S34, the security server 103 encrypts the authentication certificate based on the identification.

The security server 103 has an encryption algorithm, and this application does not limit which encryption algorithm is specifically used for encryption.

Optionally, the encryption algorithm is a symmetric encryption algorithm. For example, the symmetric encryption algorithm can be Data Encryption Standard (DES), Triple Data Encryption Algorithm (Triple Data Encryption Algorithm, TDEA), or Advanced Encryption Standard (Advanced Encryption Standard, AES).

For example, calculate the hash value of the SN of the RTK device, convert the calculated hash value into the first binary number of M bits; calculate the hash value of the ephemeris data of the RTK device, and calculate the hash The value is converted to a second binary number of M bits, where M is a positive integer. The process of encrypting the authentication certificate is as follows: first divide the authentication certificate into N data fragments according to M bits; then perform the exclusive OR operation on the N data fragments and the first binary number; and then the N pieces after the exclusive OR operation The data fragments are ORed with the second binary number to obtain the encrypted certificate. N is a positive integer.

Optionally, the encryption algorithm is an asymmetric encryption algorithm. For example, the asymmetric encryption algorithm may be the RSA algorithm, or may be the DSA (Digital Signature Algorithm) algorithm, or the elliptic curve cryptography (Elliptic curve cryptography, ECC) algorithm.

The security server 103 uses the encryption algorithm to encrypt the authentication certificate based on the identification of the RTK device 101. For example, the identifier of the RTK device 101 is used as a parameter of an asymmetric encryption algorithm, and the asymmetric encryption algorithm is used to generate a key pair, and the key pair includes a public key and a private key. It should be understood that the public key and the private key are a pair. If the public key is used to encrypt the authentication certificate, the RTK device 101 needs to generate the private key corresponding to the public key based on the identifier, because only the Only the private key corresponding to the public key can decrypt the authentication certificate; if the private key is used to encrypt the authentication certificate, the RTK device 101 needs to generate the public key corresponding to the private key based on the identifier, because only the Only the public key corresponding to the private key can decrypt the authentication certificate.

Optionally, for the key for establishing encrypted communication generated based on the identifier of the RTK device 101, the security server 103 still uses the encryption algorithm to encrypt the key based on the identifier of the RTK device 101.

Alternatively, the security server 103 may simultaneously encrypt the key and the authentication certificate used to establish encrypted communication. Alternatively, the security server 103 may separately encrypt the key and the authentication certificate used to establish the encrypted communication.

In this application, the security server 103 generates encrypted information carrying an encrypted authentication certificate. Optionally, the security server 103 also carries the encrypted key used to establish encrypted communication in the encrypted information.

In step S35, the security server 103 feeds back the encrypted information carrying the encrypted authentication certificate to the assistant device 102.

Specifically, the security server 103 sends the encrypted information to the assistant device 102. The encrypted information carries an encrypted authentication certificate. Optionally, the encrypted information carries both the encrypted key used to establish encrypted communication and the authentication certificate.

In step S36, the assistant device 102 sends the encrypted information to the RTK device 101.

The encrypted information carries an encrypted authentication certificate. Optionally, the encrypted information carries both the encrypted key used to establish encrypted communication and the authentication certificate.

The RTK device 101 stores this encrypted information.

In step S37, the RTK device 101 uses the ID of the RTK device 101 to generate a key for decrypting the encrypted information.

It should be understood that the identifier described in step S31 and the identifier described in step S37 are the same identifier. That is, the identifier used to generate the decryption key in step S37 is the same as the identifier acquired by the assistant device 102 in step S31.

Optionally, the RTK device 101 acquires the ID of the RTK device, performs legality verification on the acquired ID, and uses the ID of the RTK device to generate a key for decrypting the encrypted information after the legality verification is passed.

For example, when the RTK device 101 is started, the ID of the RTK device 101 is first obtained from a loader (such as a bootloader). Then, the legality verification is performed on the obtained identification. After the verification of the legality is passed, the identification can be used to generate a key for decrypting the encrypted information. If the legality verification fails, no processing is required. Optionally, after the ID of the RTK device 101 passes the legality verification, the ID is used to generate a key for decrypting the encrypted information, and the generated key is stored in the storage module SPRAM to facilitate subsequent use of the key.

In step S38, the RTK device 101 decrypts the authentication certificate from the encrypted information using the generated key.

For example, calculate the hash value of the SN of the RTK device, convert the calculated hash value into the first binary number of M bits; calculate the hash value of the ephemeris data of the RTK device, and calculate the hash The value is converted to a second binary number of M bits, where M is a positive integer. The first binary number and the second binary number are the keys used to decrypt the encrypted information. The process of decrypting the authentication certificate is as follows: first divide the encrypted information into Q data fragments according to M bits; and then perform an OR operation on the Q data fragments and the second binary number; and then perform the XOR operation on the Q Each piece of data is XORed with the first binary number to obtain the decrypted information. The decrypted information includes the authentication certificate in plain text, and the decrypted information may also include a key used to establish encrypted communication. Q is a positive integer.

In step S39, the RTK device 101 uses the authentication certificate to establish communication with the security server 103.

In this application, through step S37, step S38, and step S39, the RTK device 101 may generate a decryption key according to the identifier of the RTK device 101, and use the key to decrypt the authentication certificate from the encrypted information. In this way, the RTK device 101 can use the authentication certificate to establish a legal communication connection with the security server 103.

Optionally, the RTK device 101 uses the key for decryption generated according to the identifier of the RTK device 101 to decrypt the key and the authentication certificate for establishing encrypted communication from the encrypted information. In this way, the RTK device 101 can use the authentication certificate to establish an encrypted communication connection with the security server 103, for example, to establish an encrypted communication connection based on SSL.

Optionally, the security server 103 is a continuously running reference station (Continuously Operating Reference Stations, CORS). After the RTK device 101 establishes SSL-based encrypted communication with CORS, CORS can send the encrypted RTCM data to the RTK device 101. The RTCM data carries global navigation satellite system (Global Navigation Satellite System, GNSS) differential data, and the GNSS differential data can also be replaced with differential global positioning system (Differential Global Positioning System, DGPS) differential data; that is, the RTCM data carries GNSS differential Data or DGPS differential data.

The following uses the data format of the RTCM SC-104 protocol as an example.

The basic frame format of RTCM data consists of a variable number of 30-bit words, with 25 to 30 bits of each word being parity bits. The first two words of each frame are called headers. The contents of the header are as follows:

The guide word can be composed of a fixed sequence of 01100110, which is used for user search synchronization.

Frame identification (frame ID), used to identify the type of message.

The base station identification (base station ID) records the serial number of the base station.

Revise the Z counter to record the time reference of DGPS differential data (or DGPS differential data) with a resolution of 0.6s and a range of 0 to 3599.4s; so that the user can determine the accurate GPS time corresponding to the Z counter based on the time of the RTK device 101.

The serial number is increased by each frame and is used to verify frame synchronization.

The frame length indicates the number of words in this frame except for the header, which also identifies the end position of this frame.

The health status of the base station indicates whether the base station is working properly and whether the transmission of the base station is monitored.

The payload is used to record GNSS differential data or DGPS differential data.

DGPS differential data, record "scale factor", "UDRE", "satellite identification", "pseudorange and its rate of change correction value" and "data period number". GNSS differential data is similar to DGPS differential data records.

The decryption algorithm is exemplified by the data format of the RTCM SC-104 protocol.

The first step in decryption is byte scanning. Specifically, in RTCM data, usually only the lower 6 bits are valid bits, the 7 and 8 bits are padding bits, the 7 position is "1", and the 8 position is "0". Therefore, the received byte value is only valid between 64 and 127, otherwise it will be deleted.

The second step of decryption, byte rolling. Specifically, because the Universal Asynchronous Receiver/Transmitter (UART) is asynchronous communication, priority is given to sending or receiving low-level data. The lower 6 bits of the received RTCM byte must be byte-rolled, but both 7 and 8 Bit does not participate in scrolling.

In the third step of decryption, the bytes are complemented. Specifically, after processing 5 consecutive RTCM bytes according to the above steps, the lower 6 bits of each byte are connected to obtain a complete RTCM word. Similar to the GPS navigation message, if the last bit of the previous word d30 is 1, the first 24 bits d1 to d24 of the current word need to be complemented; if d30 is 0, the current word remains unchanged.

The fourth step of decryption, byte page jumping. When logical left shift operation is required, page jump processing is adopted.

In the fifth step of decryption, the message is synchronized. Specifically, in RTCM data, the start of each frame is the leading word 01100110, first find the sequence in the data string, and then perform parity check. If the parity check passes, the decoding starts. If it can be decoded correctly, the pilot word is considered correct and the message synchronization is completed; if it cannot be decoded correctly, the pilot word needs to be searched again.

The sixth step of decryption, parity. Specifically, the parity check is to calculate a new parity bit according to the received RTCM data, and compare it with the currently received parity bit. If the two are consistent, the verification is passed; if the two are not consistent, the verification is not passed, and the pilot word must be searched again for synchronization.

If the above six steps for decrypting RTCM data all pass, the GNSS differential data or DGPS differential data carried in the RTCM data can be decrypted from the RTCM data. The GNSS differential data or DGPS differential data can be used to perform operations such as hand-held hitting on the UAV.

Based on the foregoing system interaction embodiment provided based on FIG. 2, the present application provides an encrypted communication system, as shown in FIG. 1.

As shown in FIG. 1, in the encrypted communication system, the encrypted communication system includes: an RTK device 101, a security server 103, and a parameter adjustment device 102.

The RTK device 101, the security server 103, and the assistant device 102 each have a function of executing the steps in the above-mentioned system interaction embodiment.

The following provides an example of functions of the RTK device 101, the security server 103, and the assistant device 102.

The assistant device 102 is used to obtain the identifier of the RTK device 101 from the RTK device 101, use the identifier to request an authentication certificate from the security server 103, receive the encrypted information fed back by the security server 103, and send the RTK device 101 Send the encrypted information, the encrypted information including an authentication certificate encrypted based on the identifier.

The security server 103 is configured to receive a request carrying the identifier of the RTK device 101 from the assistant device 102, generate an authentication certificate, encrypt the authentication certificate based on the identifier, and feed back to the assistant device 102 Encrypted information of encrypted authentication certificate.

The RTK device 101 is configured to receive the encrypted information generated by the security server 103 from the assistant device 102, and the encrypted information includes an authentication certificate encrypted based on the identifier of the RTK device 101.

The RTK device 101 is also used to generate a key for decrypting the encrypted information using the ID of the RTK device 101, use the generated key to decrypt the authentication certificate from the encrypted information, and use the authentication The certificate establishes communication with the security server 103.

Optionally, the RTK device 101 is configured to decrypt the key used to establish communication with the security server 103 from the encrypted information using the generated key, and the encrypted information further includes encryption based on the identifier Key.

Optionally, the RTK device 101 is configured to use the authentication certificate and the decrypted key to establish an encrypted communication with the security server 103 based on a secure socket layer SSL.

Optionally, the RTK device 101 is used to obtain the ID of the RTK device 101, verify the validity of the obtained ID, and use the ID of the RTK device 101 to generate the decryption after the validity verification is passed The key to encrypt information.

Optionally, the security server 103 is configured to generate a key corresponding to the authentication certificate, encrypt the key corresponding to the authentication certificate based on the identifier, and carry the encrypted key in the encrypted information .

Optionally, the security server 103 is configured to calculate the hash value of the SN of the RTK device 101, convert the calculated hash value into an M-bit first binary number, and M is a positive integer; calculate the The hash value of the ephemeris data of the RTK device 101 converts the calculated hash value into an M-bit second binary number; divides the authentication certificate into N data fragments according to M bits, and divides the N Each data segment performs an XOR operation with the first binary number, and performs an OR operation on the N data segments subjected to the XOR operation with the second binary number to obtain the encrypted authentication Certificate, N is a positive integer. Similarly, the security server 10 uses the first binary number and the second binary number to encrypt the key used to establish communication with the security server 103 in a similar manner.

Optionally, the RTK device 101 is used to calculate the hash value of the SN of the RTK device 101, and convert the calculated hash value into an M-bit first binary number; calculate the ephemeris data of the RTK device 101 Hopefully, the calculated hash value is converted into an M-bit second binary number, and the first binary number and the second binary number are keys used to decrypt the encrypted information.

The RTK device 101 is used to decrypt the authentication certificate, including: dividing the encrypted information into Q data fragments according to M bits, and performing an OR operation on the Q data fragments and the second binary number, respectively, and performing an exclusive OR operation Q pieces of data are XORed with the first binary number to obtain the decrypted information, Q is a positive integer.

The decrypted information includes the authentication certificate in plain text, and the decrypted information may also include a key used to establish encrypted communication.

On the basis of the system interaction embodiment provided based on FIG. 2 described above, an encrypted communication method is provided for the assistant device 102, as shown in FIG. 3.

Specifically, the assistant device 102 obtains the identifier of the RTK device 101 from the RTK device 101. For the specific implementation manner of acquisition, refer to the description of the foregoing system interaction embodiment.

Optionally, the RTK device 101 is an RTK device applied to a drone.

In step S32, the assistant device 102 uses the identifier to request an authentication certificate from the security server 103.

In step S33, the assistant device 102 receives the encrypted information fed back by the security server 103.

Wherein, the encrypted information includes an authentication certificate encrypted based on the identifier. Specifically, the security server 103 uses an encryption algorithm to encrypt the authentication certificate based on the identifier of the RTK device 101, and then carries the encrypted authentication certificate in the encrypted information.

Optionally, the encrypted information further includes a key encrypted based on the identifier. Specifically, the security server 103 encrypts the key using an encryption algorithm based on the identification of the RTK device 101, and then carries the encrypted key in the encrypted information. This key is a key used to establish encrypted communication between the RTK device 101 and the security server 103.

Optionally, the authentication certificate and the key included in the encrypted information are used to establish SSL communication between the RTK device and the security server.

In step S34, the assistant device 102 sends the encrypted information to the RTK device 101.

In this way, the RTK device 101 can use the identifier stored locally by the RTK device 101 to generate a key for decrypting the encrypted information. And use the key to obtain the authentication certificate and key for the RTK device 101 and the security server 103 to establish encrypted communication from the encrypted information. Subsequently, the RTK device 101 may use the decrypted authentication certificate and key to request an encrypted communication connection with the security server 103. Optionally, the decrypted authentication certificate and key are used to establish an encrypted communication connection based on SSL.

Based on the foregoing system interaction embodiment provided based on FIG. 2, an encrypted communication method is provided for the security server 103, as shown in FIG. 4.

In step S41, the security server 103 receives a request carrying the identifier of the RTK device 101.

Specifically, the request is used to request an authentication certificate for establishing communication from the security server 103. Optionally, the request can also be used to request a key for establishing encrypted communication from the security server 103.

Optionally, the request may be sent by the RTK device 101.

Optionally, the request may be sent by the assistant device 102.

In step S42, the security server 103 generates an authentication certificate.

Optionally, in response to the request sent by the assistant device 102, the security server 103 uses the identifier of the RTK device 101 to generate the key corresponding to the authentication certificate. Combining the key and the authentication certificate, the RTK device 101 may request to establish an encrypted communication connection with the security server 103, for example, establish an encrypted communication connection based on SSL.

Optionally, the authentication certificate and the key included in the encrypted information are used to establish a secure socket layer SSL-based encrypted communication between the RTK device 101 and the security server 103.

In step S43, the security server 103 encrypts the authentication certificate based on the identification.

For example, calculate the hash value of the SN of the RTK device, convert the calculated hash value into the first binary number of M bits; calculate the hash value of the ephemeris data of the RTK device, and calculate the hash The value is converted to a second binary number of M bits, where M is a positive integer. The process of encrypting the authentication certificate is as follows: first divide the authentication certificate into N data fragments according to M bits; then perform the exclusive OR operation on the N data fragments and the first binary number; and then the N pieces after the exclusive OR operation The data fragments are ORed with the second binary number to obtain the encrypted certificate.

The security server 103 uses the encryption algorithm to encrypt the authentication certificate based on the identification of the RTK device 101.

Optionally, the security server 103 encrypts the key corresponding to the authentication certificate based on the identification. Specifically, for the key for establishing encrypted communication (that is, the key corresponding to the authentication certificate) generated based on the ID of the RTK device 101, the security server 103 still uses the encryption algorithm to perform the key on the key based on the ID of the RTK device 101 encryption.

In step S44, the security server 103 feeds back the encrypted information carrying the encrypted authentication certificate.

Specifically, the encrypted information carries an encrypted authentication certificate. Optionally, the encrypted information carries both the encrypted key used to establish encrypted communication and the authentication certificate.

Optionally, in step S41, if it is a request sent by the assistant device 102, the security server 103 sends the encrypted information to the assistant device 102.

Optionally, in step S41, if it is a request sent by the RTK device 101, the security server 103 sends the encrypted information to the RTK device 101.

Based on the above system interaction embodiment provided based on FIG. 2, an encrypted communication method is provided for the RTK device 101, as shown in FIG. 5.

In step S51, the RTK device 101 receives the encrypted information generated by the security server 103.

Optionally, the RTK device 101 receives the encrypted information sent by the security server 103.

Optionally, the RTK device 101 is to receive encrypted information generated by the security server 103 forwarded by the assistant device 102.

It should be understood that different RTK devices 101 have different identifications, that is, each RTK device 101 has a unique identification. Therefore, the encrypted information (including the authentication certificate and key used to establish communication) generated based on the identification of different RTK devices 101 is also different and unique. In contrast, a fake RTK device does not have an identifier, nor does it receive encrypted information corresponding to the identifier, so that an encrypted communication connection with the security server 103 cannot be established.

In step S52, the RTK device 101 uses the ID of the RTK device 101 to generate a key for decrypting the encrypted information.

Optionally, the RTK device 101 obtains the identifier of the RTK device 101, and performs legality verification on the obtained identifier. After passing the legality verification, the RTK device 101 uses the ID of the RTK device 101 to generate a key for decrypting the encrypted information.

In step S53, the RTK device 101 decrypts the authentication certificate from the encrypted information using the generated key.

Optionally, the RTK device 101 may also use the generated key to decrypt the key used to establish communication with the security server 103 from the encrypted information.

For example, calculate the hash value of the SN of the RTK device, convert the calculated hash value into the first binary number of M bits; calculate the hash value of the ephemeris data of the RTK device, and calculate the hash The value is converted to a second binary number of M bits, where M is a positive integer. The first binary number and the second binary number are the keys used to decrypt the encrypted information. The process of decrypting the authentication certificate is as follows: first divide the encrypted information into Q data fragments according to M bits; and then perform an OR operation on the Q data fragments and the second binary number; and then perform the XOR operation on the Q Each piece of data is XORed with the first binary number to obtain the decrypted information. The decrypted information includes the authentication certificate in plain text, and the decrypted information may also include a key used to establish encrypted communication.

In step S54, the RTK device 101 uses the authentication certificate to establish communication with the security server 103.

In this application, through step S51 to step 54, the RTK device 101 may generate a decryption key according to the identifier of the RTK device 101, and use the key to decrypt the authentication certificate from the encrypted information. In this way, the RTK device 101 can use the authentication certificate to establish a legal communication connection with the security server 103.

Optionally, the RTK device 101 uses the key for decryption generated according to the identifier of the RTK device 101 to decrypt the key and the authentication certificate for establishing encrypted communication from the encrypted information. The RTK device 101 uses the authentication certificate and the decrypted key to establish an encrypted communication with the security server 103 based on the secure socket layer SSL.

Corresponding to FIG. 3 providing an encrypted communication method for the parameter adjustment device 102, the present application further provides an encrypted communication device 60 for implementing the encrypted communication method. The encrypted communication device 60 is deployed in the parameter adjustment device 102. This application does not limit the division of functional modules in the encrypted communication device 60. An example of division of the functional modules included in the encrypted communication device 60 is given below with reference to FIG. 6.

6, the encrypted communication device 60 includes:

An obtaining unit 61, configured to obtain the identifier of the RTK device 101 from the RTK device 101;

The requesting unit 62 is used to request an authentication certificate from the security server 103 using the identifier;

The receiving unit 63 is configured to receive encrypted information fed back by the security server 103, where the encrypted information includes an authentication certificate encrypted based on the identifier;

The sending unit sends the encrypted information to the RTK device 101.

Optionally, the encrypted information further includes a key encrypted based on the identifier.

Corresponding to FIG. 5, which provides an encrypted communication method for the RTK device 101, the present application also provides an encrypted communication device 70 for implementing the encrypted communication method. The encrypted communication device 70 is deployed on the RTK device 101. This application does not limit the division of functional modules in the encryption communication device 70. An example of division of the functional modules included in the encryption communication device 70 is given below with reference to FIG. 7.

7, the encrypted communication device 70 includes:

The encrypted communication device 70 includes:

The receiving unit 71 is configured to receive encrypted information generated by the security server 103, and the encrypted information includes an authentication certificate encrypted based on the identifier of the RTK device 101;

The using unit 72 is used to generate a key for decrypting the encrypted information using the identifier of the RTK device 101, use the generated key to decrypt the authentication certificate from the encrypted information, and use the authentication certificate Establish communication with the security server 103.

Optionally, the using unit 72 is configured to use the generated key to decrypt the key used to establish communication with the security server 103 from the encrypted information, the encrypted information further includes encryption based on the identifier Key.

Optionally, the use unit 72 is configured to use the authentication certificate and the decrypted key to establish an encrypted communication with the security server 103 based on a secure socket layer SSL.

Optionally, the using unit 72 is configured to: obtain the ID of the RTK device 101, perform legality verification on the obtained ID, and use the ID of the RTK device 101 to generate a decryption device after the legality verification is passed The key to encrypt information.

Optionally, the use unit 72 is configured to:

Calculate the hash value of the SN of the RTK device 101, and convert the calculated hash value into an M-bit first binary number;

Calculate the hash value of the ephemeris data of the RTK device 101, convert the calculated hash value into an M-bit second binary number, the first binary number and the second binary number are used for decryption The key of the encrypted information.

Corresponding to FIG. 4, which provides an encrypted communication method for the security server 103, the present application also provides an encrypted communication device 80 for implementing the encrypted communication method. The encrypted communication device 80 is deployed on the security server 103. This application does not limit the division of functional modules in the encrypted communication device 80. An example of division of the functional modules included in the encrypted communication device 80 is given below with reference to FIG. 8.

The encrypted communication device 80 includes:

The receiving unit 81 is configured to receive a request carrying the identifier of the RTK device 101;

The generating unit 82 is used to generate an authentication certificate;

An encryption unit 83, configured to encrypt the authentication certificate based on the identification;

The feedback unit 84 is configured to feed back encrypted information carrying the encrypted authentication certificate.

Optionally, the generating unit 82 is configured to generate a key corresponding to the authentication certificate;

The encryption unit 83 is configured to encrypt the key corresponding to the authentication certificate based on the identification;

The encrypted communication device 80 includes a carrying unit 85 for carrying the encrypted key in the encrypted information.

Optionally, the encryption unit 83 is used to:

Calculate the hash value of the SN of the RTK device 101, and convert the calculated hash value into an M-bit first binary number, where M is a positive integer;

Calculate the hash value of the ephemeris data of the RTK device 101, and convert the calculated hash value into an M-bit second binary number;

Dividing the authentication certificate into N data fragments according to M bits, performing an exclusive OR operation on the N data fragments and the first binary number respectively, and separately dividing the N data fragments subjected to the exclusive OR operation Perform an OR operation with the second binary number to obtain the encrypted authentication certificate, and N is a positive integer.

The present application also provides a parameter adjustment device 102. Referring to FIG. 9, the parameter adjustment device 102 includes a processor 1021 and a memory 1022. The processor 1021 and the memory 1022 are connected through a bus 1023; the memory 1022 stores computer instructions; The processor 1021 executes the computer instructions in the memory 1022, so that the assistant device 102 executes an encrypted communication method for the assistant device 102, for example, the method steps shown in FIG. 3.

Optionally, the processor 1021 may be a central processing unit (Central Processing Unit, CPU), and the processor may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), and application-specific integrated circuits (Application Specific (Integrated Circuit, ASIC), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

Optionally, the memory 1022 may include read-only memory and/or random access memory, and provide instructions and data to the processor. A portion of the memory may also include non-volatile random access memory. For example, the memory may also store device type information.

This application also provides a security server 103. Referring to FIG. 10, the security server 103 includes a processor 1031 and a memory 1032. The processor 1031 and the memory 1032 are connected through a bus 1033. The memory 1032 stores computer instructions. The processor 1031 executes computer instructions in the memory, so that the security server 103 executes an encrypted communication method for the security server 103, for example, executes the method steps shown in FIG. 4.

Optionally, the processor 1031 may be a central processing unit (Central Processing Unit, CPU), and the processor may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), and application-specific integrated circuits (Application Specific (Integrated Circuit, ASIC), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

Optionally, the memory 1032 may include read-only memory and/or random access memory, and provide instructions and data to the processor. A portion of the memory may also include non-volatile random access memory. For example, the memory may also store device type information.

This application provides an RTK device 101. Referring to FIG. 11, the RTK device 101 includes a processor 1011 and a memory 1012. The processor 1011 and the memory 1012 are connected through a bus 1013. The memory 1012 stores computer instructions. The processor 1011 The execution of the computer instructions in the memory 1012 causes the RTK device 101 to perform an encrypted communication method provided for the RTK device 101, for example, the method steps shown in FIG. 5 are executed.

Optionally, the processor 1011 may be a central processing unit (Central Processing Unit, CPU), and the processor may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), and application-specific integrated circuits (Application Specific (Integrated Circuit, ASIC), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

Optionally, the memory 1012 may include read-only memory and/or random access memory, and provide instructions and data to the processor. A portion of the memory may also include non-volatile random access memory. For example, the memory may also store device type information.

The present application also provides a computer-readable storage medium that stores computer instructions. The computer instruction instructs the assistant device 102 to provide an encrypted communication method for the assistant device 102, for example, to perform the method steps shown in FIG. 3.

The present application also provides a computer-readable storage medium that stores computer instructions. The computer instruction instructs the security server 103 to perform an encrypted communication method provided for the security server 103, for example, the method steps shown in FIG. 4 are performed.

The present application also provides a computer-readable storage medium that stores computer instructions. The computer instruction instructs the RTK device 101 to provide an encrypted communication method for the RTK device 101, for example, to perform the method steps shown in FIG. 5.

In the description of this specification, reference to the descriptions of the terms "one embodiment", "some embodiments", "schematic embodiments", "examples", "specific examples", or "some examples" means combined embodiments The specific features, structures, materials or characteristics described in the examples are included in at least one embodiment or example of the present application. In this specification, the schematic expression of the above terms does not necessarily refer to the same embodiment or example. Although the embodiments of the present application have been shown and described, those of ordinary skill in the art may understand that various changes, modifications, substitutions, and variations can be made to these embodiments without departing from the principle and purpose of the present application, The scope of the application is defined by the claims and their equivalents.

Claims

An encrypted communication method, characterized in that it is applied to a drone's RTK equipment; the encrypted communication method includes:

Acquiring the identifier of the RTK device from the RTK device, the identifier including the serial number SN of the RTK device and/or the ephemeris data of the RTK device;

Use the identifier to request an authentication certificate from the security server;

Receiving encrypted information fed back by the security server, the encrypted information including an authentication certificate encrypted based on the identifier;

Sending the encrypted information to the RTK device.
The encrypted communication method according to claim 1, wherein the encrypted information further includes a key encrypted based on the identification.
The encrypted communication method according to claim 2, wherein the authentication certificate and the key included in the encrypted information are used to establish a secure socket layer SSL encryption of the RTK device and the security server Communication.
An encrypted communication method, characterized in that it is applied to a drone's RTK equipment; the encrypted communication method includes:

The RTK device receives encrypted information generated by a security server, and the encrypted information includes an authentication certificate encrypted based on the identifier of the RTK device, and the identifier includes the serial number SN of the RTK device and/or the RTK device Ephemeris data

The RTK device uses the ID of the RTK device to generate a key for decrypting the encrypted information;

The RTK device uses the generated key to decrypt the authentication certificate from the encrypted information;

The RTK device uses the authentication certificate to establish communication with the security server.
The encrypted communication method according to claim 4, wherein the encrypted information further includes a key encrypted based on the identification, and the method further includes:

The RTK device uses the generated key to decrypt the key used to establish communication with the security server from the encrypted information.
The encrypted communication method according to claim 5, wherein the RTK device uses the authentication certificate to establish communication with the security server, including:

The RTK device uses the authentication certificate and the decrypted key to establish an encrypted communication with the security server based on a secure socket layer SSL.
The encrypted communication method according to claim 4, wherein the use of the identifier of the RTK device to generate a key for decrypting the encrypted information includes:

The RTK device obtains the identifier of the RTK device;

The RTK device performs legality verification on the obtained identification;

After the legality verification is passed, the RTK device uses the ID of the RTK device to generate a key for decrypting the encrypted information.
The encrypted communication method according to any one of claims 4 to 7, wherein the generating a key for decrypting the encrypted information using the ID of the RTK device includes:

Calculate the hash value of the SN of the RTK device, and convert the calculated hash value into the first binary number of M bits;

Calculate the hash value of the ephemeris data of the RTK device, and convert the calculated hash value into an M-bit second binary number. The first binary number and the second binary number are used for decryption. The key to encrypt information.
An encrypted communication method, characterized in that it is applied to a drone's RTK equipment; the encrypted communication method includes:

The security server receives the request carrying the identifier of the RTK device, the identifier including the serial number SN of the RTK device and/or the ephemeris data of the RTK device;

The security server generates an authentication certificate;

The security server encrypts the authentication certificate based on the identification;

The security server feeds back encrypted information carrying the encrypted authentication certificate.
The encrypted communication method according to claim 9, wherein the encrypted communication method further comprises:

The security server generates a key corresponding to the authentication certificate;

The security server encrypts the key corresponding to the authentication certificate based on the identification;

The security server carries the encrypted key in the encrypted information.
The encrypted communication method according to claim 10, wherein the authentication certificate and the key included in the encrypted information are used to establish a secure socket layer SSL-based encryption between the RTK device and the security server Communication.
The encrypted communication method according to any one of claims 9 to 11, wherein the encryption of the authentication certificate by the security server based on the identification includes:

Calculate the hash value of the SN of the RTK device, and convert the calculated hash value into an M-bit first binary number, where M is a positive integer;

Calculating the hash value of the ephemeris data of the RTK device, and converting the calculated hash value into an M-bit second binary number;

Dividing the authentication certificate into N data fragments according to M bits, performing an exclusive OR operation on the N data fragments and the first binary number respectively, and separately dividing the N data fragments subjected to the exclusive OR operation Perform an OR operation with the second binary number to obtain the encrypted authentication certificate, and N is a positive integer.
An encrypted communication device is characterized by being applied to an RTK device of an unmanned aerial vehicle. The encrypted communication device includes:

An obtaining unit, configured to obtain an identifier of the RTK device from the RTK device, the identifier including a serial number SN of the RTK device and/or ephemeris data of the RTK device;

A requesting unit for requesting an authentication certificate from the security server using the identifier;

A receiving unit, configured to receive encrypted information fed back by the security server, where the encrypted information includes an authentication certificate encrypted based on the identifier;

The sending unit sends the encrypted information to the RTK device.
The encrypted communication device according to claim 13, wherein the encrypted information further includes a key encrypted based on the identification.
The encrypted communication device according to claim 14, wherein the authentication certificate and the key included in the encrypted information are used to establish a secure socket layer SSL-based encryption between the RTK device and the security server Communication.
An encrypted communication device, characterized in that it is applied to an RTK device of a drone; the encrypted communication device includes:

A receiving unit, configured to receive encrypted information generated by a security server, the encrypted information including an authentication certificate encrypted based on an identifier of the RTK device, the identifier including the serial number SN of the RTK device and/or the RTK device Ephemeris data;

A using unit, for generating a key for decrypting the encrypted information using the identifier of the RTK device, decrypting the authentication certificate from the encrypted information using the generated key, and establishing and using the authentication certificate The communication of the security server.
The encrypted communication device according to claim 16, wherein

The using unit is configured to decrypt a key used for establishing communication with the security server from the encrypted information using the generated key, and the encrypted information further includes a key encrypted based on the identifier.
The encrypted communication device according to claim 17, wherein

The use unit is configured to use the authentication certificate and the decrypted key to establish an encrypted communication with the security server based on a secure socket layer SSL.
The encrypted communication device according to claim 16, wherein

The use unit is configured to: obtain an ID of the RTK device, perform legality verification on the obtained ID, and use the ID of the RTK device to generate a key for decrypting the encrypted information after the legality verification is passed.
The encrypted communication device according to any one of claims 16 to 19, wherein

The use unit is used to calculate the hash value of the SN of the RTK device, and convert the calculated hash value into an M-bit first binary number;

The using unit is used to calculate the hash value of the ephemeris data of the RTK device, and convert the calculated hash value into an M-bit second binary number, the first binary number and the first The binary number is the key used to decrypt the encrypted information.
An encrypted communication device, characterized in that it is applied to an RTK device of a drone; the encrypted communication device includes:

A receiving unit, configured to receive a request carrying an identifier of the RTK device, the identifier including the serial number SN of the RTK device and/or ephemeris data of the RTK device;

Generating unit, used to generate authentication certificate;

An encryption unit for encrypting the authentication certificate based on the identification;

The feedback unit is used for feeding back encrypted information carrying the encrypted authentication certificate.
The encrypted communication device according to claim 21, wherein

The generating unit is configured to generate a key corresponding to the authentication certificate;

The encryption unit is configured to encrypt the key corresponding to the authentication certificate based on the identification;

The encrypted communication device includes a carrying unit for carrying an encrypted key in the encrypted information.
The encrypted communication device according to claim 22, wherein the authentication certificate and the key included in the encrypted information are used to establish a secure socket layer SSL-based encryption between the RTK device and the security server Communication.
The encrypted communication device according to any one of claims 21 to 23, wherein

The encryption unit is used to calculate the hash value of the SN of the RTK device, and convert the calculated hash value into an M-bit first binary number, where M is a positive integer;

The encryption unit is used to calculate the hash value of the ephemeris data of the RTK device, and convert the calculated hash value into an M-bit second binary number;

The encryption unit is configured to divide the authentication certificate into N data fragments according to M bits, and perform XOR operation on the N data fragments and the first binary number respectively, The N data fragments are ORed with the second binary number to obtain the encrypted authentication certificate, and N is a positive integer.
An encrypted communication system, characterized in that the encrypted communication system includes: an RTK device, a security server, and a parameter adjustment device;

The parameter adjustment device is used to obtain the identification of the RTK device from the RTK device, use the identification to request an authentication certificate from a security server, receive the encrypted information fed back by the security server, and send the RTK device the said Encrypted information, the encrypted information including an authentication certificate encrypted based on the identifier, the identifier including the serial number SN of the RTK device and/or ephemeris data of the RTK device;

The security server is configured to receive a request carrying an ID of the RTK device from the assistant device, generate an authentication certificate, encrypt the authentication certificate based on the identifier, and feed back the encrypted device with the encrypted Encrypted information of authentication certificate;

The RTK device is configured to receive encrypted information generated by the security server from the assistant device, and the encrypted information includes an authentication certificate encrypted based on the identifier of the RTK device;

The RTK device is also used to generate a key for decrypting the encrypted information using the ID of the RTK device, use the generated key to decrypt the authentication certificate from the encrypted information, and use the authentication The certificate establishes communication with the security server.
The encrypted communication system according to claim 25, wherein

The RTK device is configured to decrypt the key used for establishing communication with the security server from the encrypted information using the generated key, and the encrypted information further includes a key encrypted based on the identifier.
The encrypted communication system according to claim 25, wherein

The RTK device is configured to use the authentication certificate and the decrypted key to establish an encrypted communication with the security server based on SSL.
The encrypted communication system according to claim 25, wherein

The RTK device is used to obtain the ID of the RTK device, verify the validity of the obtained ID, and use the ID of the RTK device to generate a key for decrypting the encrypted information after the validity verification is passed.
The encrypted communication system according to claim 25, wherein

The security server is configured to generate a key corresponding to the authentication certificate, encrypt the key corresponding to the authentication certificate based on the identifier, and carry the encrypted key in the encrypted information.
The encrypted communication system according to claim 25, wherein

The security server is used to calculate the hash value of the SN of the RTK device, convert the calculated hash value into a first binary number of M bits, M is a positive integer; calculate the star of the RTK device The hash value of the calendar data, convert the calculated hash value into an M-bit second binary number; divide the authentication certificate into N data fragments according to M bits, and separate the N data fragments with Performing an exclusive OR operation on the first binary number, performing an OR operation on the N data fragments subjected to the exclusive OR operation and the second binary number, respectively, to obtain the encrypted authentication certificate, where N is positive Integer

The RTK device is used to calculate the hash value of the SN of the RTK device, and convert the calculated hash value into an M-bit first binary number; to calculate the hash value of the ephemeris data of the RTK device, calculate The obtained hash value is converted into an M-bit second binary number, and the first binary number and the second binary number are keys used to decrypt the encrypted information.
A parameter adjustment device, comprising a processor and a memory; the memory stores computer instructions; the processor executes the computer instructions in the memory, so that the parameter adjustment device executes any one of claims 1 to 3. Encrypted communication method.
An RTK device, characterized in that it includes a processor and a memory; the memory stores computer instructions; the processor executes the computer instructions in the memory, so that the RTK device performs the encrypted communication according to any one of claims 4 to 8. method.
A security server, comprising a processor and a memory; the memory stores computer instructions; the processor executes the computer instructions in the memory, so that the security server executes the encrypted communication according to any one of claims 9 to 12. method.
A computer-readable storage medium, characterized in that the computer-readable storage medium stores computer instructions that instruct a parameter adjustment device to perform the encrypted communication method according to any one of claims 1 to 3.
A computer-readable storage medium, characterized in that the computer-readable storage medium stores computer instructions that instruct an RTK device to perform the encrypted communication method according to any one of claims 4 to 8.
A computer-readable storage medium, characterized in that the computer-readable storage medium stores computer instructions that instruct a security server to perform the encrypted communication method according to any one of claims 9 to 12.