KR102401920B1 - System for authenticating a user of drone - Google Patents

Abstract

The present invention relates to a user authentication apparatus and method in a drone, for this purpose, a biometric recognition unit for recognizing a user's biometric information, an encryption unit for encrypting the biometric information using an encryption key, and the encryption unit The public key corresponding to the encryption key and the user's biometric information are connected to the registered device through a communication network, transmit the encrypted biometric information to request authentication, and receive authentication result data in response to the request to provide the user with A device for authenticating a user of a drone comprising an authenticator for performing authentication for the drone, and a controller for providing a control right of the drone to the user through a wireless connection between the drone and the device upon successful authentication by the authenticator can be provided. have.

Description

Drone user authentication system {System for authenticating a user of drone}

The present invention relates to user authentication of a drone.

Early development of drones started for military purposes, but as open source software to control drones is developed and accessibility increases, the use of drones is spreading to industrial and private sectors such as broadcast photography, communication, agriculture, and delivery. Accordingly, regulations are expected to be relaxed to revitalize the drone-related industry, and social issues regarding security threats and the risk of accidents are expected to emerge. Therefore, it is necessary to prepare technical and institutional preparations for drone security technology.

Drones are vulnerable to hacking because they rely on wireless communication technology to control them. Problems may occur, such as intercepting the drone's flight records and video footage, sending an incorrect GPS signal or malfunctioning signal to the drone to take over the drone, or rendering the drone inoperable. The wireless communication between the existing drone and the ground control station (GCS) is weak in security, so it is possible for a malicious attacker within the range that can access the drone to attack by disguising as a legitimate ground control device. Unsecured drones process data transmitted over wireless channels without verification.

If an illegal ground control device sends a wrong command to the drone (fault injection attacks), the drone may malfunction and induce unnecessary actions that consume battery power. Drones are flying devices that rely on battery power and consume the most power from the motors that keep them flying. A drone that is depleted of power while executing a command received from an illegal ground control device cannot perform its original mission and may become incapacitated. Therefore, it is required to strengthen the safety of the drone through communication security between the drone, GCS, and control system, device authentication, safe operation of the controller, personal information protection, network security, and malware prevention.

Republic of Korea Patent Publication No. 10-2019-0082151 (published on July 9, 2019.)

The present invention provides a drone user authentication system capable of authenticating a user who wants to operate a drone by using the user's biometric information.

In addition, the present invention provides a user authentication system for a drone that can perform user authentication based on encryption of the user's biometric information using a security chip.

In addition, the present invention provides a user authentication system for a drone that sets the flight controller of the drone based on the user's authority information to control the drone with different authority for each user.

As a technical means for achieving the above technical problem, the drone user authentication system according to an embodiment of the present invention includes a biometric recognition unit for recognizing the user's biometric information, and encryption for encrypting the biometric information using an encryption key The public key corresponding to the encryption key used in the encryption unit and the user's biometric information are connected through a communication network with the registered device, and the encrypted biometric information is transmitted to request authentication, and in response to the request An authentication unit that receives authentication result data to authenticate the user, and a control unit that provides control of the drone to the user through a wireless connection between the drone and the device when authentication is successful by the authentication unit, Doedoe interworking with a flight controller for controlling the flight of the drone, the encryption unit, the authentication unit, and the control unit are provided with a user authentication device implemented as a single chip, the device receives and stores the biometric information of the user, A ground control device that transmits a signal for controlling the drone, wherein the ground control device stores authority information matched to the user's biometric information, and stores a public key matched to identification information of at least one or more drones; After decrypting the encrypted biometric information with a public key matching the identification information of the drone included in the request, authorization information matched to the user's biometric information corresponding to the decrypted biometric information is added to the authentication result data Including and transmitting, the authority information is at least one of a specific function limitation of the drone, a specific flight mode support, and an altitude limitation, and the control unit of the user authentication device may set the flight controller based on the authority information.
As a technical means for achieving the above technical problem, the drone user authentication system according to an embodiment of the present invention includes a biometric recognition unit for recognizing the user's biometric information, and encryption for encrypting the biometric information using an encryption key The public key corresponding to the encryption key used in the encryption unit and the user's biometric information are connected through a communication network with the registered device, and the encrypted biometric information is transmitted to request authentication, and in response to the request An authentication unit that receives authentication result data to authenticate the user, and a control unit that provides control of the drone to the user through a wireless connection between the drone and the device when authentication is successful by the authentication unit, Doedoe interworking with a flight controller for controlling the flight of the drone, the encryption unit, the authentication unit, and the control unit are provided with a user authentication device implemented as a single chip, the device receives and stores the biometric information of the user, A ground control device that transmits a signal for controlling the drone, wherein the ground control device stores authority information matched to the user's biometric information, and stores a public key matched to identification information of at least one or more drones; After decrypting the encrypted biometric information with a public key matching the identification information of the drone included in the request, using the authorization information matched to the user's biometric information corresponding to the decrypted biometric information In addition to providing a control interface for flight control, the authentication result data is transmitted, and the authorization information is at least one of a specific function limitation of the drone, a specific flight mode support, and an altitude limitation, and the drone is based on the control interface through the control interface. It may be controlled based on a signal transmitted from the ground control device.

According to an embodiment of the present invention, the encryption unit may be a security chip that encrypts the biometric information using an encryption key corresponding to an electronic fingerprint based on PUF.

According to an embodiment of the present invention, the device may be a ground control device that receives and stores the user's biometric information and transmits a signal for controlling the drone.

According to an embodiment of the present invention, the user authentication device is interlocked with a flight controller for controlling the flight of the drone, and the ground control device stores authorization information matched to the user's biometric information, and at least one or more Storing and managing a public key matched to the identification information of the drone, and decrypting the encrypted biometric information with a public key matching the identification information of the drone included in the request, and then the user's biometric information corresponding to the decrypted biometric information The authorization information matched with the information is transmitted by being included in the authentication result data, and the control unit may set the flight controller based on the authorization information.

According to an embodiment of the present invention, the ground control device stores authorization information matched to the user's biometric information, stores and manages a public key matched to the identification information of at least one or more drones, and includes in the request After decrypting the encrypted biometric information with the public key matched to the identification information of the drone, the control interface for controlling the flight of the drone using the authority information matched to the user's biometric information corresponding to the decrypted biometric information In addition to providing, the authentication result data may be transmitted.

According to an embodiment of the present invention, the biometric recognition unit may be a recognition device capable of recognizing the user's biometric information or a connection interface connected to the user's device capable of receiving biometric information from the user's device .

As a technical means for achieving the above technical problem, the user authentication method of a drone according to an embodiment of the present invention includes the steps of registering the user's biometric information as user information in a ground control device, and through the biometric recognition unit of the drone Recognizing an arbitrary user's biometric information, encrypting the recognized biometric information using a security chip having an encryption key corresponding to the electronic fingerprint, and transmitting it to the ground control device to request authentication; , after the ground control device decrypts the encrypted biometric information using a pre-registered public key in response to the authentication request, the decrypted biometric information and the registered biometric information of the user match within a preset range In this case, transmitting authentication result data corresponding to authentication success to the drone, and wirelessly connecting the drone and the ground control device based on the authentication result data from the drone to provide the control right of the drone to the arbitrary user may include steps.

According to an embodiment of the present invention, the registering step receives the authorization information as the user information, matches it with the user's biometric information, and stores it, and the transmitting step includes the user's biometric information matching within the preset range. Transmitting the matching authorization information including the authentication result data, and providing the control right of the drone may provide the control right of the drone by setting the authorization information to a flight controller that controls the flight of the drone.

According to an embodiment of the present invention, in the registering step, authorization information is provided as the user information and matched with the user's biometric information and stored, and the user authentication method includes the predetermined range after transmitting the authentication result data The method may further include providing a corresponding control interface to the ground control device with authorization information matched to the user's biometric information matched in the .

According to the above-described embodiment of the present invention, by authenticating a user who wants to operate a drone using the user's biometric information, it is possible to prevent the drone from being operated by another user.

In addition, according to the above-described embodiment of the present invention, by encrypting the user's biometric information using a security chip and then performing user authentication based on this, it is possible to increase the security of the drone.

In addition, according to the above-described embodiment of the present invention, by setting the flight controller of the drone based on the user's authority information to control the drone with different authority for each user, it is possible to provide a drone flight service suitable for the user. .

1 is a diagram showing a schematic configuration of a user authentication system of a drone according to an embodiment of the present invention.
2 is a block diagram illustrating a user authentication apparatus in a drone user authentication system according to an embodiment of the present invention.
3 is a flowchart illustrating a user authentication process of a drone according to an embodiment of the present invention.
4 is a flowchart illustrating a user authentication process of a drone according to another embodiment of the present invention.

Hereinafter, specific embodiments of the present invention will be described with reference to the drawings. The following detailed description is provided to provide a comprehensive understanding of the methods, devices, and/or systems described herein. However, this is merely an example, and the present invention is not limited thereto.

In describing the embodiments of the present invention, if it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. And, the terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users and operators. Therefore, the definition should be made based on the content throughout this specification. The terminology used in the detailed description is for the purpose of describing embodiments of the present invention only, and should in no way be limiting. Unless explicitly used otherwise, expressions in the singular include the meaning of the plural. In this description, expressions such as “comprising” or “comprising” are intended to indicate certain features, numbers, steps, acts, elements, some or a combination thereof, one or more other than those described. It should not be construed to exclude the presence or possibility of other features, numbers, steps, acts, elements, or any part or combination thereof.

Hereinafter, a drone user authentication system and method according to an embodiment of the present invention will be described with reference to the accompanying drawings.

1 is a diagram showing a schematic configuration of a user authentication system of a drone according to an embodiment of the present invention, and FIG. 2 is a block diagram showing a user authentication apparatus in a user authentication system of a drone according to an embodiment of the present invention .

As shown in FIG. 1 , the drone user authentication system according to the embodiment of the present invention largely includes a drone 100 having a user authentication device 120 , and a ground control device 140 for user authentication of the drone 100 . ) can be composed of

The drone 100 and the ground control device 140 according to an embodiment of the present invention may be connected through a wireless communication network to transmit/receive information for user authentication. In an embodiment of the present invention, the wireless communication network may include a short-range wireless communication interface such as Bluetooth, infrared, Wi-Fi, and the like.

The user authentication device 120 of the drone 100 recognizes the user's biometric information, encrypts the recognized biometric information using an electronic fingerprint, and transmits it to the ground control device 140 to request authentication.

In addition, the user authentication device 120 receives the authentication result data from the ground control device 140 in response to the authentication request, determines whether the user is authenticated, and provides the user with the control right of the drone 100 when the authentication succeeds as a result of the determination can do.

In an embodiment of the present invention, the control right of the drone 100 may include an operation right for the flight of the drone 100 , the altitude of the drone, a role, a flight range, a function limitation, and the like.

In order to provide the control right of the drone 100 , the user authentication device 120 may interwork with a flight controller (FC) 110 in the drone 100 . That is, the user authentication device 120 may control the operation of the flight controller 110 based on the control right of the drone 100 . Specifically, the user authentication device 120 may activate the function of the flight controller 110 as the user authentication is completed, and determine the flight policy of the flight controller 110 .

The flight controller 110 can analyze the signal received through the signal receiver 101 of the drone 100 and process it with an appropriate channel, and analyze the signals detected by the various sensors 102 installed in the drone 100 A signal may be applied to the transmission 103 for maintaining a stable posture of the drone 100 . That is, the flight controller 110 may apply a signal to the transmission 103 to enable a desired flight by analyzing the signal of the signal receiver 101 and the signal of the sensor 102 .

The various sensors 102 may include, but are not limited to, a barometric pressure sensor, a geomagnetic sensor, and a GPS sensor.

In an embodiment of the present invention, the flight controller 110 analyzes the signal received through the signal receiver 101 and the signal detected by the sensor 102 based on the authority information set based on the control right of the drone 100. signal can be applied. For example, when the altitude limit is set as the authority information, the flight controller 110 analyzes the signal received through the signal receiver 101 and the signal detected by the sensor 102 based on the altitude limitation set as the authority information, The transmission 103 may be controlled to allow the drone 100 to fly only up to a specific altitude.

On the other hand, when there is a restriction on a specific function with the authority information, the flight controller 110 may ignore the signal for the execution of the specific function through the signal receiver 101 .

When the permission information is set to support only a specific flight mode, the flight controller 110 analyzes the signal received through the signal receiver 101 and the signal detected through the various sensors 102 so that the drone 100 is in a specific flight mode. A signal may be applied to the transmission 103 to fly.

On the other hand, in an embodiment of the present invention, biometric information may include a finger vein, a fingerprint, a face, etc., but is not limited thereto.

To this end, the user authentication device 120 according to the embodiment of the present invention is mounted on the drone 100 as shown in FIG. 2 and a biometric recognition unit 200 for recognizing the user's biometric information is based on hardware. An encryption unit 210 that encrypts biometric information using an encryption key, an authentication unit 220 that receives authentication result data in response after requesting authentication from the ground control device 140, and a drone 100 based on the authentication result data ) may include a control unit 230 for setting the control right to the flight controller 110 .

The biometric recognition unit 200 may be a recognition device capable of recognizing the user's biometric information, for example, fingerprint information, or a connection interface capable of receiving the user's biometric information from the outside.

In an embodiment of the present invention, examples of the connection interface include a general-purpose input/output (GPIO) port, an Inter-Integrated Circuit (I2C) communication interface, and a Serial Peripheral Interface (SPI) communication interface. It is not limited to this.

The biometric recognition unit 200 according to an embodiment of the present invention may receive and recognize biometric information from an external user-side device 20 through a connection interface or may recognize the user's biometric information through the user's biometric recognition device.

The encryption unit 210 encrypts the biometric information recognized by the biometric recognition unit 200 based on hardware, for example, PUF, and then transmits it to the ground control device 140 through the authentication unit 220 to request user authentication. , an example of which is a security chip implemented as a semiconductor chip.

In an embodiment of the present invention, PUF (Physical Unclonable Function, hereinafter referred to as 'PUF') has a complex structure and various Based on the physical properties, different unique responses to the same challenge value (same biometric information) are generated. That is, the encryption unit 210 of the user authentication device 120 according to the embodiment of the present invention uses an electronic fingerprint (corresponding to the encryption key) corresponding to the complex structure and various physical properties of the semiconductor material in the security chip to the challenge value ( user's biometric information) can be encrypted.

The authenticator 220 may transmit the encrypted biometric information to the ground control device 140 connected to the wireless communication network to request authentication, and then receive authentication result data in response thereto.

The controller 230 may set the control right according to the user's authority by setting the control right of the drone 100 to the flight controller 110 based on the authentication result data.

In an embodiment of the present invention, the encryption unit 210 , the authentication unit 220 , and the control unit 230 may be implemented as a single chip, and in consideration of being mounted on the drone 100 , a chip having a weight of 100 g or less Not only can it be implemented as , but it can also be manufactured in a form that can be driven with an operating voltage of 4.75-5.25V in consideration of approximately 5% of the error range in the 5V power supply, which is the voltage used in the drone 100 .

In addition, the chip constituting the encryption unit 210 , the authentication unit 220 , and the control unit 230 may be implemented using a 32-bit chipset for fingerprint recognition among biometric information.

In an embodiment of the present invention, the ground control device 140 may not only perform user authentication, but may also wirelessly transmit a signal for controlling the flight of the drone 100 . That is, the ground control device 140 stores biometric information and a public key corresponding to an encryption key for encryption of biometric information, and when encrypted biometric information is received, it is decrypted using the public key and then decrypted biometric information and authentication result data can be generated through comparison between the stored biometric information.

In particular, the ground control device 140 may store a public key corresponding to an encryption key used for encryption in each of the plurality of drones 100 . In this case, as the encrypted biometric information is received from the outside, the ground control device 140 extracts a public key capable of decrypting the encrypted biometric information using each pre-stored public key, and encrypts it using the extracted public key. Biometric information can be decrypted.

In order to store and manage a plurality of public keys, the ground control device 140 according to an embodiment of the present invention includes a memory 142 in which a public key registered for each unique ID, which is drone identification information, and a user's biometric information is stored, and an authentication request is performed. It may include an authentication request processing unit 144 that generates authentication result data by performing authentication as received.

In an embodiment of the present invention, the authentication request processing unit 144 extracts the public key from the memory 142 using the drone identification information in the authentication request as the authentication request is received, and biometric information encrypted using the extracted public key After decrypting , authentication result data may be generated by comparing the decrypted biometric information with the biometric information stored in the memory 142 .

Meanwhile, in the embodiment of the present invention, authority information set for each user may be stored in the memory 142 of the ground control device 140 .

The authority information is information related to the control right of the drone according to the user's status and class, and may include the drone altitude, role, flight range, function use range, etc. set for each user.

Through this, the ground control device 140 according to the embodiment of the present invention extracts the user's authority information from the memory 142 by using the user's biometric information, and then transmits the authentication result data including this to the user authentication device 120 . have.

Accordingly, the control unit 230 of the user authentication device 120 may set the control right of the drone 100 corresponding to the user's authority according to the authority information. Specifically, the controller 230 may set the flight controller 110 to control the flight of the drone 100 corresponding to the user's authority information. These settings may mean to be stored in a memory (not shown) that is a recording medium in the flight controller 110 .

That is, the controller 230 may store the altitude limit, function limit, flight mode limit, role range limit, etc. of the drone 100 corresponding to the permission information in the memory in the flight controller 110 . Accordingly, the flight controller 110 analyzes the signal received through the signal receiver 101 and the signal detected by the various sensors 102 based on the data stored in the memory, and applies the signal to the transmission 103 to obtain authority. It is possible to control the drone 100 to fly accordingly.

The controller 230 may wirelessly connect the drone 100 to the ground control device 140 as user authentication is completed based on the authentication result data.

To this end, in an embodiment of the present invention, the authentication unit 220 of the user authentication device 120 requests authentication using previously registered identification information of the ground control device 140 , and in response to the request, the ground control device The authentication result data including the identification information of 140 may be received. Through this, the control unit 230 transmits a wireless connection request using the identification information of the ground control device 140 and receives a wireless connection completion message in response thereto. You can complete the wireless connection setup between them.

According to the embodiment of the present invention as described above, although it has been described as an example of setting the control right of the drone 100 by setting the authority information of the drone 100 to the flight controller 110, the ground control device 140 In , the control right of the drone 100 according to the authority information may be set. In this case, the ground control device 140 further includes a control interface providing unit 146 that can provide the user with a control interface based on the user's authorization information after transmitting the authentication result data through the authentication request processing unit 144 . may include In this case, the control interface may mean a user manipulation window set to suit the altitude limit, function limit, flight mode limit, role range limit, and the like. That is, the control interface providing unit 146 of the ground control device 140 is a user operation window that is a control interface in which a specific part is inactivated in accordance with the altitude limit, function limit, flight mode limit, role range limit, etc. corresponding to the user's permission information. can provide

On the other hand, the drone 100 generates flight record data according to the flight requested by the ground control device 160 after the drone control right is set, matches it with the user's biometric information, and stores it in a storage medium (not shown) or It may further include a flight recorder 104 that can be transmitted to and stored in a flight record server (not shown) connected to a wireless communication network.

A process in which the user authentication system of the drone having the above-described configuration operates will be described with reference to FIG. 3 .

3 is a flowchart illustrating a user authentication process of a drone according to an embodiment of the present invention.

First, as shown in Figure 3, the user authentication system performs the user information registration step (S300),

The user information registration step ( S300 ) registers the user's biometric information and authority information in the ground control device 140 , and the user accesses the ground control device 140 through his/her terminal (not shown) or an external service. You can register your own biometric information and authorization information.

In this case, the ground control device 140 may store a public key matched to the identification information of the at least one or more drones 100 , and may store authority information matched to the biometric information.

Thereafter, the user authentication system performs a biometric information recognition step ( S302 ) of recognizing biometric information to the drone 100 .

The biometric information recognition step S302 may be performed through the biometric recognition unit 200 of the user authentication device 120 . Specifically, the user recognizes his/her own biometric information through the biometric recognition unit 200 corresponding to the biometric device mounted on the drone 100 or the user's biometric information through the connection interface corresponding to the biometric recognition unit 200 . Information can be transmitted to the user authentication device 120 of the drone 100 to be recognized,

Then, the user authentication system may perform a process of authenticating the user who wants to operate the drone 100, which will be described as follows,

First, the user authentication device 120 encrypts the user's biometric information recognized through the encryption unit 210 and then uses the authentication unit 220 to encrypt the user's biometric information and the drone identification information on the previously registered ground It transmits the identification information of the control device 140 to request user authentication from the ground control device 140 (S304, S306).

Accordingly, the ground control device 140 decrypts the encrypted user's biometric information using the public key matched to the identification information of the drone 100 (S308), and compares the decrypted user's biometric information with the stored biometric information If they match through , the authorization information matched with the biometric information is included in the authentication result data corresponding to the authentication success and transmitted to the user authentication device 120 (S310).

Accordingly, the control unit 230 of the user authentication device 120 recognizes that authentication is successful for the user based on the authentication result data and activates the function of the flight controller 110 and then connects the ground control device 140 with the wireless It is connected, and sets the data corresponding to the authority information to the flight controller 110 (S312).

4 is a flowchart illustrating a user authentication process of a drone according to another embodiment of the present invention.

As shown in Figure 4, the user authentication system performs the user information registration step (S400) as in Figure 3,

Thereafter, the user authentication system performs a biometric information recognition step S402 of recognizing biometric information to the drone 100 .

Then, the user authentication system may perform a process of authenticating the user who wants to operate the drone 100, which will be described as follows,

First, the user authentication device 120 encrypts the user's biometric information recognized through the encryption unit 210 and then uses the authentication unit 220 to encrypt the user's biometric information and the drone identification information on the previously registered ground It transmits the identification information of the control device 140 to request user authentication from the ground control device 140 (S404, S406).

Accordingly, the ground control device 140 decrypts the encrypted user's biometric information using the public key matched to the identification information of the drone 100 (S408), and compares the decrypted user's biometric information with the stored biometric information If they match through , the control interface of the ground control device 140 is set using the authority information matched to the biometric information (S410).

In addition, the ground control device 140 transmits the authentication result data for notifying that the authentication is successful to the user authentication device 120 (S412).

Accordingly, the control unit 230 of the user authentication device 120 recognizes that authentication is successful for the user based on the authentication result data, activates the flight controller 110 and uses the identification information to activate the drone 100 and the ground Control device 140 wirelessly (S414).

Meanwhile, combinations of each block in the accompanying block diagram and each step in the flowchart may be performed by computer program instructions. These computer program instructions may be embodied in a processor of a general purpose computer, special purpose computer, or other programmable data processing equipment, such that the instructions performed by the processor of the computer or other programmable data processing equipment are described in each block of the block diagram. It creates a means to perform functions.

These computer program instructions may also be stored in a computer-usable or computer-readable recording medium (or memory), etc., which may direct a computer or other programmable data processing equipment to implement a function in a specific manner, so that the computer is available. Alternatively, the instructions stored in the computer-readable recording medium (or memory) may produce an article of manufacture including instruction means for performing the functions described in each block of the block diagram.

And, since the computer program instructions may be mounted on a computer or other programmable data processing equipment, a series of operating steps are performed on the computer or other programmable data processing equipment to create a computer-executed process to create a computer or other program It is also possible that instructions for performing the possible data processing equipment provide steps for performing the functions described in each block of the block diagram.

In addition, each block may represent a module, segment, or part of code including at least one or more executable instructions for executing specified logical function(s). It should also be noted that, in some alternative embodiments, it is also possible for the functions mentioned in the blocks to occur out of order. For example, two blocks shown one after another may be performed substantially simultaneously, or the blocks may sometimes be performed in the reverse order according to a corresponding function.

100: drone
101: signal receiver
102: sensor
103: gearbox
104: flight log
110: flight controller
120: user authentication device
140: ground control unit
200: biometric authentication unit
210: encryption unit
220: authentication unit
230: control unit

Claims (9)

In the drone user authentication system,
A biometric recognition unit for recognizing the user's biometric information, an encryption unit for encrypting the biometric information using an encryption key, and a device in which a public key corresponding to the encryption key used in the encryption unit and the user's biometric information are registered An authentication unit that is connected through a communication network with a communication network to request authentication by transmitting the encrypted biometric information, and receives authentication result data in response to the request to authenticate the user, and when authentication is successful by the authentication unit and a control unit that provides control of the drone to the user through a wireless connection between the drone and the device, and is interlocked with a flight controller for controlling the flight of the drone, wherein the encryption unit, the authentication unit, and the control unit are one A user authentication device implemented as a chip is provided,
The device is a ground control device that receives and stores the user's biometric information and transmits a signal for controlling the drone,
The ground control device is
Storing authorization information matched to the user's biometric information, storing and managing a public key matched to the identification information of at least one or more drones, and performing the encryption with a public key matching the identification information of the drone included in the request After decrypting the biometric information, the authorization information matched to the user's biometric information corresponding to the decrypted biometric information is included in the authentication result data and transmitted,
The permission information is at least one or more of specific function restrictions of the drone, specific flight mode support, and altitude restrictions,
The control unit of the user authentication device,
A drone user authentication system for setting the flight controller based on the authorization information.
In the drone user authentication system,
A biometric recognition unit for recognizing the user's biometric information, an encryption unit for encrypting the biometric information using an encryption key, and a device in which a public key corresponding to the encryption key used in the encryption unit and the user's biometric information are registered An authentication unit that is connected through a communication network with a communication network to request authentication by transmitting the encrypted biometric information, and receives authentication result data in response to the request to perform authentication for the user, and when authentication is successful by the authentication unit and a control unit that provides control of the drone to the user through a wireless connection between the drone and the device, and is interlocked with a flight controller for controlling the flight of the drone, wherein the encryption unit, the authenticator and the control unit are one A user authentication device implemented as a chip is provided,
The device is a ground control device that receives and stores the user's biometric information and transmits a signal for controlling the drone,
The ground control device is
Storing authority information matched to the user's biometric information, storing and managing a public key matched to the identification information of at least one or more drones, and a public key matching the identification information of the drone included in the request After decrypting the biometric information, using the authorization information matched to the user's biometric information corresponding to the decrypted biometric information, a control interface for controlling the flight of the drone is provided and the authentication result data is transmitted,
The permission information is at least one or more of specific function restrictions of the drone, specific flight mode support, and altitude restrictions,
The drone is
A user authentication system for a drone that is controlled based on a signal transmitted from the ground control device based on the control interface.
3. The method of claim 1 or 2,
The encryption unit,
A user authentication system for a drone that is a security chip that encrypts the biometric information using an encryption key corresponding to an electronic fingerprint based on PUF.
delete delete 3. The method of claim 1 or 2,
The biometric recognition unit,
A user authentication system for a drone that is a recognition device capable of recognizing the user's biometric information or a connection interface connected to the user's device capable of receiving biometric information from the user's device. delete delete delete

Images