CN116366289B - Safety supervision method and device for remote sensing data of unmanned aerial vehicle - Google Patents

Abstract

The present application relates to a method, device, computer equipment, storage medium and computer program product for the security supervision of unmanned aerial vehicle remote sensing data. The method is applied to the data acquisition end, and the method includes: encrypting the collected remote sensing data based on the first public key to obtain the first data ciphertext; encrypting the first private key based on the second public key to obtain the key ciphertext; sending the transmission data containing the first data ciphertext and the key ciphertext to the data processing end, so that the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data. This scheme improves the security of remote sensing data.

Description

Safety supervision method and device for unmanned aerial vehicle remote sensing data

Technical Field

The present application relates to the technical field of data transmission, and in particular to a method and device for securely monitoring remote sensing data of unmanned aerial vehicles.

Background technique

At present, in the data transmission process of UAV remote sensing data, the data collection end directly transmits the collected UAV remote sensing data to the data processing end. Among them, the UAV remote sensing data is the original data that has not been processed by the data collection end.

Therefore, any data processing end can obtain the UAV remote sensing data collected by the data collection end, which makes the remote sensing data easy to leak and reduces the security of the UAV remote sensing data.

Summary of the invention

Based on this, it is necessary to provide a method, device, computer equipment, computer-readable storage medium and computer program product for security supervision of drone remote sensing data that can improve the security of drone remote sensing data in response to the above-mentioned technical problems.

In a first aspect, the present application provides a method for the security supervision of drone remote sensing data. The method is applied to a data collection end, and the method includes:

Encrypting the collected remote sensing data based on the first public key to obtain a first data ciphertext;

Encrypting the first private key based on the second public key to obtain a key ciphertext;

The transmission data including the first data ciphertext and the key ciphertext is sent to the data processing end, so that the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In one embodiment, before encrypting the collected remote sensing data based on the first public key, the method further includes:

Obtaining the data collection start time of the remote sensing data;

In the case where the data collection start time is earlier than the preset validity expiration time of the digital certificate, the remote sensing data is collected.

In one embodiment, encrypting the collected remote sensing data based on the first public key to obtain the first data ciphertext includes:

Sending an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data acquisition end;

The digital signature is sent to the data processing end; the digital signature is used to instruct the data processing end to perform signature verification based on the digital signature, obtain a signature verification result, and return the signature verification result to the data collection end;

When the signature verification result indicates that the verification is successful, the collected remote sensing data is encrypted based on the first public key to obtain a first data ciphertext.

In a second aspect, the present application provides a method for the security supervision of drone remote sensing data. The method is applied to a data processing end, and the method includes:

Receive transmission data including a first data ciphertext and a key ciphertext sent by a data acquisition terminal; the first data ciphertext is obtained by the data acquisition terminal encrypting the collected remote sensing data based on the first public key; the key ciphertext is obtained by the data acquisition terminal encrypting the first private key based on the second public key;

Decrypting the key ciphertext in the transmission data based on the second private key to obtain the first private key;

The first data ciphertext in the transmission data is decrypted based on the first private key to obtain the remote sensing data.

In one embodiment, before receiving the transmission data including the first data ciphertext and the key ciphertext sent by the data acquisition terminal, the method further includes:

Receiving a digital signature sent by the data acquisition terminal; the digital signature is determined by the cryptographic platform in response to an identity authentication request sent by the data acquisition terminal, based on a preset digital certificate, and sent by the cryptographic platform to the data processing terminal;

A signature verification process is performed based on the digital signature to obtain a signature verification result, and the signature verification result is returned to the data acquisition end; the signature verification result is used to instruct the data acquisition end to encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext when the signature verification result indicates that the verification is successful.

In one embodiment, before decrypting the key ciphertext in the transmission data based on the second private key to obtain the first private key, the method further includes:

Based on the data start collection time of the remote sensing data, querying the effective expiration time of the preset digital certificate later than the data start collection time to obtain the target effective expiration time;

The second private key is determined according to the target effective deadline and the device identification of the data acquisition terminal.

In one embodiment, the transmission data further includes a second data ciphertext including a device identification of the data acquisition terminal and a data acquisition start time of the remote sensing data, and a verification plaintext including the device identification and the data acquisition start time; the decrypting the first data ciphertext in the transmission data based on the first private key includes:

When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data collection start time in the verification plaintext is consistent with the data collection start time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key.

In a third aspect, the present application also provides a safety supervision system for drone remote sensing data. The safety supervision system for drone remote sensing data includes a data collection end and a data processing end, wherein:

The data acquisition end is used to encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext; encrypt the first private key based on the second public key to obtain a key ciphertext; and send the transmission data including the first data ciphertext and the key ciphertext to the data processing end;

The data processing end is used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; and decrypt the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In one embodiment, the data processing end includes a data receiving end and an intranet cipher machine; the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key; and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data, including:

The data receiving end is used to receive the transmission data sent by the data acquisition end, and send the transmission data to the intranet cipher machine;

The intranet cipher machine is used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; and to decrypt the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In a fourth aspect, the present application also provides a safety monitoring device for drone remote sensing data. Applied to a data collection end, the device comprises:

A first encryption module, used for encrypting the collected remote sensing data based on a first public key to obtain a first data ciphertext;

A second encryption module, used to encrypt the first private key based on the second public key to obtain a key ciphertext;

A sending module is used to send the transmission data including the first data ciphertext and the key ciphertext to a data processing end, so that the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In one embodiment, the safety monitoring device for the drone remote sensing data further includes:

An acquisition module, used for acquiring the data collection start time of the remote sensing data;

The acquisition module is used to acquire the remote sensing data when the data acquisition start time is earlier than the effective expiration time of the preset digital certificate.

In one embodiment, the first encryption module is specifically used for:

Sending an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data acquisition end;

The digital signature is sent to the data processing end; the digital signature is used to instruct the data processing end to perform signature verification based on the digital signature, obtain a signature verification result, and return the signature verification result to the data collection end;

When the signature verification result indicates that the verification is successful, the collected remote sensing data is encrypted based on the first public key to obtain a first data ciphertext.

In a fifth aspect, the present application also provides a safety monitoring device for drone remote sensing data. The device is applied to a data processing end, and the device includes:

A first receiving module is used to receive transmission data including a first data ciphertext and a key ciphertext sent by a data acquisition terminal; the first data ciphertext is obtained by the data acquisition terminal encrypting the collected remote sensing data based on the first public key; the key ciphertext is obtained by the data acquisition terminal encrypting the first private key based on the second public key;

A first decryption module, used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key;

The second decryption module is used to decrypt the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In one embodiment, the safety monitoring device for the drone remote sensing data further includes:

A second receiving module is used to receive a digital signature sent by the data acquisition terminal; the digital signature is determined by the cryptographic platform in response to the identity authentication request sent by the data acquisition terminal based on a preset digital certificate, and sent by the cryptographic platform to the data processing terminal;

The signature verification module is used to perform signature verification based on the digital signature, obtain a signature verification result, and return the signature verification result to the data acquisition end; the signature verification result is used to instruct the data acquisition end to encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext when the signature verification result indicates that the verification is successful.

In one embodiment, the safety monitoring device for the drone remote sensing data further includes:

A query module, configured to query the effective expiration time of a preset digital certificate later than the data start collection time based on the data start collection time of the remote sensing data, and obtain a target effective expiration time;

A determination module is used to determine the second private key according to the target effective deadline and the device identification of the data acquisition terminal.

In one embodiment, the transmission data further includes a second data ciphertext including a device identification of the data acquisition terminal and a data acquisition start time of the remote sensing data, and a verification plaintext including the device identification and the data acquisition start time; the second decryption module is specifically used for:

When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data collection start time in the verification plaintext is consistent with the data collection start time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key.

In a sixth aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps described in the first aspect or the second aspect are implemented.

In a seventh aspect, the present application further provides a computer-readable storage medium, wherein a computer program is stored thereon, and when the computer program is executed by a processor, the steps described in the first aspect, the second aspect, or the third aspect are implemented.

In an eighth aspect, the present application further provides a computer program product, wherein the computer program product comprises a computer program, and when the computer program is executed by a processor, the steps described in the first aspect or the second aspect are implemented.

The above-mentioned method, device, computer equipment, storage medium and computer program product for the security supervision of remote sensing data of unmanned aerial vehicles are applied to the data acquisition end, and the collected remote sensing data is encrypted based on the first public key to obtain the first data ciphertext; the first private key is encrypted based on the second public key to obtain the key ciphertext; the transmission data containing the first data ciphertext and the key ciphertext is sent to the data processing end, so that the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data. In the above scheme, the transmission data is the ciphertext encrypted by the data acquisition end, so only when the data processing end uses the correct decryption key to decrypt the transmission data can the data processing end obtain the remote sensing data in the transmission data, thereby reducing the leakage of remote sensing data and improving the security of remote sensing data.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a diagram of an application environment of a method for safely supervising remote sensing data of a drone in one embodiment;

FIG2 is a schematic diagram of a flow chart of a method for safely supervising remote sensing data of a drone in one embodiment;

FIG3 is a schematic diagram of a flow chart of a method for safely supervising remote sensing data of a drone in another embodiment;

FIG4 is a signaling diagram of a method for safely supervising remote sensing data of a drone in one embodiment;

FIG5 is a block diagram of a safety monitoring device for drone remote sensing data in one embodiment;

FIG6 is a block diagram of a safety monitoring device for remote sensing data of a drone in another embodiment;

FIG. 7 is a diagram showing the internal structure of a computer device in one embodiment.

Detailed ways

In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

The method for security supervision of UAV remote sensing data provided in the embodiment of the present application can be applied in the application environment as shown in Figure 1. Among them, the security supervision system for UAV remote sensing data as shown in Figure 1 includes a data acquisition terminal 102 and a data processing terminal 104, and the data acquisition terminal 102 and the data processing terminal 104 are connected by communication. In one embodiment, the security supervision system for UAV remote sensing data also includes a cryptographic platform, and the data acquisition terminal 102, the cryptographic platform and the data processing terminal 104 are connected by communication. In one embodiment, the data acquisition terminal 102 can be a UAV device. In one embodiment, the data processing terminal 104 includes a data receiving terminal and an intranet cryptographic machine.

The data acquisition terminal 102 acquires remote sensing data, and encrypts the acquired remote sensing data based on the first public key to obtain a first data ciphertext. The first public key is a public key generated by the data acquisition terminal 102, and is used to encrypt the remote sensing data acquired by the data acquisition terminal 102. The data acquisition terminal 102 encrypts the first private key based on the second public key to obtain a key ciphertext. In one embodiment, the first public key is an asymmetric key, and specifically, the first public key can be the public key of SM2. The data acquisition terminal 102 sends the transmission data including the first data ciphertext and the key ciphertext to the data processing terminal 104. The data processing terminal 104 receives the transmission data including the first data ciphertext and the key ciphertext sent by the data acquisition terminal 102, and decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key. The second private key and the second public key are a pair of data key pairs. The data processing terminal 104 decrypts the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data. The first private key and the first public key are a key encryption key pair.

In one embodiment, as shown in FIG. 2 , a method for safely supervising remote sensing data of a drone is provided. The method is applied to the safety supervision system for remote sensing data of a drone in FIG. 1 as an example for explanation. The method for safely supervising remote sensing data of a drone is applied to a data collection terminal 102. The method includes:

Step 202: encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext.

In the embodiment of the present application, the data acquisition terminal 102 encrypts the collected remote sensing data based on the first public key to obtain the first data ciphertext. The first public key is used to encrypt the collected remote sensing data and is the public key of the data acquisition terminal 102. In one embodiment, the first public key is a symmetric key, and specifically, the first public key is SM4.

Step 204: encrypt the first private key based on the second public key to obtain a key ciphertext.

In an embodiment of the present application, the data acquisition terminal 102 encrypts the first private key based on the second public key to obtain a key ciphertext. The second public key is a key generated by the cryptographic platform and sent to the data acquisition terminal 102, or a key imported offline in the form of a digital certificate, which is used to encrypt the first public key, that is, the public key in the key encryption key. In one embodiment, the second public key is an asymmetric key. Specifically, the second public key can be the public key of SM2. In one embodiment, the first private key and the first public key are the same symmetric key. Specifically, the first private key and the first public key can be SM4.

Step 206, sending the transmission data including the first data ciphertext and the key ciphertext to the data processing end, so that the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

Among them, the second private key is pre-stored in the data processing terminal 104. In one embodiment, the data processing terminal 104 includes a data receiving terminal and an intranet cipher machine, and the second private key is pre-stored in the intranet cipher machine. In the embodiment of the present application, the data acquisition terminal 102 sends the transmission data containing the first data ciphertext and the key ciphertext to the data processing terminal 104, so that the data processing terminal 104 decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data. The data acquisition terminal 102 sends the transmission data containing the first data ciphertext and the key ciphertext to the data processing terminal 104. In one embodiment, the transmission data also includes a verification plaintext, wherein the verification plaintext includes the device identification of the data acquisition terminal 102 and the data start collection time of the remote sensing data, and the verification plaintext is used to verify the authenticity of the transmission data.

In the above-mentioned security supervision method of UAV remote sensing data, the transmission data is a ciphertext encrypted by the data acquisition end. Therefore, only when the data processing end uses the correct decryption key to decrypt the transmission data can the data processing end obtain the remote sensing data in the transmission data, thereby reducing the leakage of remote sensing data and improving the security of remote sensing data.

In one embodiment, before encrypting the collected remote sensing data based on the first public key, the method further includes:

The data collection start time of the remote sensing data is obtained; when the data collection start time is earlier than the effective expiration time of the preset digital certificate, the remote sensing data is collected.

In an embodiment of the present application, the data acquisition terminal 102 obtains the data start acquisition time of the remote sensing data. The data acquisition terminal 102 compares the data start acquisition time with the effective expiration time of the preset data certificate. Among them, the digital certificate is a certificate generated by the cryptographic platform and issued to the data acquisition terminal 102, which is used to prove the identity of the data acquisition terminal 102. In the case where the data start acquisition time is earlier than the effective expiration time of the preset digital certificate, the data acquisition terminal 102 collects remote sensing data. In the case where the data start acquisition time is later than the effective expiration time of the preset digital certificate, the data acquisition terminal 102 is prohibited from performing data acquisition operations. Specifically, in the case where the data start acquisition time is later than the effective expiration time of the preset digital certificate, the data acquisition terminal 102 cannot take off, or the data acquisition terminal 102 cannot enter the data acquisition mode.

In this embodiment, before collecting remote sensing data, the data collection terminal 102 first determines whether the data collection start time is earlier than the effective expiration time of the preset digital certificate. Only when the data collection start time is earlier than the effective expiration time, the data collection terminal 102 can collect remote sensing data. Therefore, collecting remote sensing data based on the legitimate data collection terminal 102 can improve the security and reliability of remote sensing data.

In one embodiment, the collected remote sensing data is encrypted based on the first public key to obtain the first data ciphertext including:

An identity authentication request is sent to the cryptographic platform so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data acquisition end; the digital signature is sent to the data processing end; when the signature verification result indicates that the verification is successful, the collected remote sensing data is encrypted based on the first public key to obtain a first data ciphertext.

The digital signature is used to instruct the data processing end to perform signature verification based on the digital signature, obtain the signature verification result, and return the signature verification result to the data collection end.

In the embodiment of the present application, the data acquisition terminal 102 sends an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request, and the cryptographic platform returns a digital signature determined based on a preset digital certificate to the data acquisition terminal 102. The data acquisition terminal 102 sends the digital signature to the data processing terminal 104. The data processing terminal 104 performs a signature verification process based on the digital signature, obtains a signature verification result, and returns the signature verification result to the data acquisition terminal 102. When the signature verification result indicates that the verification is successful, the terminal encrypts the collected remote sensing data based on the first public key to obtain a first data ciphertext.

In this embodiment, the data acquisition terminal 102 performs identity authentication before encrypting the remote sensing data, and only when the identity authentication is successful, the data acquisition terminal 102 encrypts the remote sensing data. Therefore, the data acquisition terminal 102 encrypts the remote sensing data based on the successful identity authentication, which can improve the security and reliability of the remote sensing data.

In one embodiment, as shown in FIG. 3 , a method for secure supervision of remote sensing data of a drone is provided. The method is applied to the secure supervision system of remote sensing data of a drone in FIG. 1 as an example for explanation. The method for secure supervision of remote sensing data of a drone is applied to a data processing terminal 104. The method includes:

Step 302: Receive transmission data including first data ciphertext and key ciphertext sent by a data acquisition terminal.

The first data ciphertext is obtained by encrypting the collected remote sensing data by the data collection end based on the first public key; the key ciphertext is obtained by encrypting the first private key by the data collection end based on the second public key.

In an embodiment of the present application, the data processing end 104 receives the transmission data including the first data ciphertext and the key ciphertext sent by the data acquisition end 102. In one embodiment, the transmission data also includes a verification plaintext and a second data ciphertext. Among them, the data processing end 104 includes a data receiving end and an intranet cipher machine. Specifically, the data receiving end receives the transmission data including the first data ciphertext and the key ciphertext sent by the data acquisition end 102, and sends the transmission data to the intranet cipher machine.

Step 304: decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key.

The second private key is pre-stored in the data processing terminal 104. In one embodiment, the data processing terminal 104 includes a data receiving terminal and an intranet cipher machine, and the second private key is pre-stored in the intranet cipher machine.

In the embodiment of the present application, the data processing end 104 decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key. Specifically, the intranet cipher machine decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key. In one embodiment, if the encryption key for encrypting the second data ciphertext is the second public key, the data acquisition end 102 simultaneously encrypts the first private key, the device identification of the data acquisition end 102, and the data start acquisition time of the remote sensing data based on the second public key to obtain the target key ciphertext. It can be understood that in the case where the encryption key for encrypting the second data ciphertext is the second public key, the key ciphertext and the second data ciphertext actually refer to the target key ciphertext. If the encryption key for encrypting the second data ciphertext is the second public key, the data processing end 104 (the intranet cipher machine in) decrypts the key ciphertext (i.e., the target key ciphertext) in the transmission data based on the second private key to obtain the first private key, the device identification of the data acquisition end 102, and the data start acquisition time of the remote sensing data. The device identification of the data acquisition terminal 102 is an identification code in the data acquisition terminal 102 that is lifelong unique, unchangeable, non-repudiation, and read-only, such as the ID of a cryptographic chip. The data start acquisition time of the remote sensing data is a time string when the data acquisition terminal 102 starts to acquire remote sensing data. In one embodiment, the format of the data start acquisition time of the remote sensing data can be YYYY: _{M1M1 :} DD:HH: _M2M2 : _SS (i.e., year:month:day:hour:minute:second).

Step 306: decrypt the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data.

In the embodiment of the present application, the data processing terminal 104 decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data. Specifically, the intranet cipher machine decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In one embodiment, if the encryption key used to encrypt the second data ciphertext is the first public key, the data acquisition terminal 102 simultaneously encrypts the remote sensing data, the device identification of the data acquisition terminal 102, and the data start collection time of the remote sensing data based on the first public key to obtain the target data ciphertext. At this time, the first data ciphertext and the second data ciphertext both refer to the target data ciphertext. The data processing terminal 104 (the intranet cipher machine in the data processing terminal) decrypts the first data ciphertext (i.e., the target data ciphertext) in the transmission data based on the first private key to obtain the remote sensing data, the device identification of the data acquisition terminal 102, and the data start collection time of the remote sensing data. It can be understood that the data processing terminal 104 can verify the authenticity of the remote sensing data based on the device identification of the data acquisition terminal 102, the data start collection time of the remote sensing data, and the verification plaintext obtained by the decryption process.

In another embodiment, if the encryption key used to encrypt the second data ciphertext is the first public key, the data acquisition terminal 102 encrypts the remote sensing data based on the first public key to obtain the first data ciphertext. If the encryption key used to encrypt the second data ciphertext is the first public key, the data acquisition terminal 102 encrypts the device identification of the data acquisition terminal 102 and the data start acquisition time of the remote sensing data based on the first public key to obtain the second data ciphertext. At this time, the first data ciphertext is not equal to the second data ciphertext. In this case, the data processing terminal 104 (the intranet cipher machine) can first decrypt the first data ciphertext, or first decrypt the second data ciphertext. Preferably, the data processing terminal 104 (the intranet cipher machine) can first decrypt the second data ciphertext.

In the above scheme, the transmission data is the ciphertext encrypted by the data acquisition end. Therefore, only when the data processing end uses the correct decryption key to decrypt the transmission data can the data processing end obtain the remote sensing data in the transmission data, thereby reducing the leakage of remote sensing data and improving the security of remote sensing data.

In one embodiment, before receiving the transmission data including the first data ciphertext and the key ciphertext sent by the data acquisition end, the method further includes:

Receive the digital signature sent by the data collection end; perform signature verification based on the digital signature, obtain the signature verification result, and return the signature verification result to the data collection end.

The digital signature is determined by the cryptographic platform in response to the identity authentication request sent by the data acquisition end based on the preset digital certificate and sent by the cryptographic platform to the data processing end. The signature verification result is used to instruct the data acquisition end to encrypt the collected remote sensing data based on the first public key to obtain the first data ciphertext when the signature verification result indicates that the verification is successful.

In the embodiment of the present application, the data processing terminal 104 receives the digital signature sent by the data collection terminal 102. The data processing terminal 104 performs signature verification based on the digital signature, obtains the signature verification result, and returns the signature verification result to the data collection terminal 102. The digital signature is the result of the cryptographic platform encrypting the digital certificate based on the public key of the cryptographic platform.

In this embodiment, the data processing end 104 performs signature verification based on the digital signature and returns the signature verification result to the data collection end 102. Therefore, it provides a premise for the subsequent data collection end 102 to execute step 202 only when the signature verification result indicates that the verification is successful.

In one embodiment, before decrypting the key ciphertext in the transmission data based on the second private key to obtain the first private key, the method further includes:

Based on the data start collection time of the remote sensing data, the effective deadline of the preset digital certificate that is later than the data start collection time is queried to obtain the target effective deadline; according to the target effective deadline and the device identification of the data collection terminal, the second private key is determined.

In the embodiment of the present application, the data processing terminal 104 (the intranet cryptographic machine therein) queries the effective expiration time of the preset digital certificate later than the data start collection time based on the data start collection time to obtain the target effective expiration time. The data processing terminal 104 (the intranet cryptographic machine therein) determines the second private key corresponding to the target effective expiration time and the device identifier based on the target effective expiration time, the device identifier, and the preset corresponding relationship between the target effective expiration time, the device identifier, and the second private key.

In this embodiment, the data processing end 104 obtains the target effective deadline through querying the data start collection time, and determines the second private key based on the target effective deadline and the device identification, thereby providing a prerequisite for the subsequent data processing end 104 to decrypt the key ciphertext based on the second private key.

In one embodiment, the transmission data further includes a second data ciphertext including a device identification of the data collection terminal and a data collection start time of the remote sensing data, and a verification plaintext including the device identification and the data collection start time; decrypting the first data ciphertext in the transmission data based on the first private key includes:

When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data start collection time in the verification plaintext is consistent with the data start collection time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key.

In the embodiment of the present application, if the encryption key used to encrypt the second data ciphertext is the second public key, the data processing terminal 104 (the intranet cipher machine therein) decrypts the second data ciphertext (i.e., the target key ciphertext) in the transmission data based on the second private key to obtain the first private key, the device identification of the data acquisition terminal 102, and the data start acquisition time of the remote sensing data. The data processing terminal 104 (the intranet cipher machine therein) compares the device identification included in the verification plaintext in the transmission data with the device identification obtained by decryption, and compares the data start acquisition time included in the verification plaintext in the transmission data with the data start acquisition time obtained by decryption. When the device identification included in the verification plaintext is consistent with the device identification obtained by decryption, and the data start acquisition time included in the verification plaintext is consistent with the data start acquisition time obtained by decryption, the data processing terminal 104 executes step 306.

If the encryption key used to encrypt the second data ciphertext is the first public key, and the first data ciphertext is not equal to the second data ciphertext, the data processing terminal 104 (the intranet cipher machine therein) first decrypts the second data ciphertext based on the first private key to obtain the device identification of the data collection terminal 102 and the data start collection time of the remote sensing data. Furthermore, when the device identification in the verification plaintext is consistent with the device identification included in the second data ciphertext, and the data start collection time in the verification plaintext is consistent with the data start collection time included in the second data ciphertext, the data processing terminal 104 (the intranet cipher machine therein) decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data.

In this embodiment, the data processing end 104 can verify the authenticity of the transmission data by comparing the plain text in the transmission data with the decryption result obtained by decrypting the transmission data, thereby avoiding security risks caused by maliciously tampered transmission data.

In one embodiment, as shown in FIG4 , an access authentication method is provided, which can be applied to the access authentication system in FIG1 . The access authentication method includes the following steps:

In step 402, the data collection terminal 102 obtains the data collection start time, and collects remote sensing data when the data collection start time is earlier than the preset effective expiration time of the digital certificate.

Step 404: the data collection terminal 102 sends an identity authentication request to the password platform.

Step 406 , the cryptographic platform responds to the identity authentication request, determines the digital signature based on the preset digital certificate, and returns the digital signature to the data collection terminal 102 .

Step 408 , the data collection end 102 sends the digital signature to the data processing end 104 .

In step 410 , the data processing end 104 performs signature verification based on the digital signature, obtains a signature verification result, and returns the signature verification result to the data collection end 102 .

Step 412: When the signature verification result indicates that the verification is successful, the data collection terminal 102 encrypts the collected remote sensing data based on the first public key to obtain a first data ciphertext.

Step 414: the data collection terminal 102 encrypts the first private key, the device identification of the data collection terminal 102, and the data collection start time of the remote sensing data based on the second public key to obtain a key ciphertext.

In step 416, the data collection terminal 102 sends the transmission data including the first data ciphertext, the key ciphertext and the verification plaintext to the data processing terminal 104. The verification plaintext includes the device identification of the data collection terminal 102 and the data collection start time of the remote sensing data.

Step 418: the data processing end 104 decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, the device identification of the data collection end 102, and the data collection start time of the remote sensing data.

In step 420, when the device identifier in the plain text is consistent with the device identifier decrypted in step 418, and the data collection start time in the plain text is consistent with the data collection start time decrypted in step 418, the data processing terminal 104 decrypts the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data.

It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

Based on the same inventive concept, the embodiment of the present application also provides a safety supervision system for drone remote sensing data for implementing the safety supervision method for drone remote sensing data involved above. The implementation scheme for solving the problem provided by the system is similar to the implementation scheme recorded in the above method, so the specific limitations in the embodiments of the safety supervision system for drone remote sensing data provided below can refer to the limitations of the safety supervision method for drone remote sensing data above, and will not be repeated here.

In one embodiment, as shown in FIG. 1 , a safety supervision system for remote sensing data of an unmanned aerial vehicle is provided. The safety supervision system for remote sensing data of an unmanned aerial vehicle includes a data collection terminal 102 and a data processing terminal 104, wherein:

The data acquisition terminal 102 is used to encrypt the collected remote sensing data based on the first public key to obtain the first data ciphertext; encrypt the first private key based on the second public key to obtain the key ciphertext; and send the transmission data including the first data ciphertext and the key ciphertext to the data processing terminal 104;

The data processing terminal 104 is used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; and decrypt the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data.

In one embodiment, the data processing end includes a data receiving end and an intranet cipher machine; the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key; decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data, including:

The data receiving end is used to receive the transmission data sent by the data acquisition end and send the transmission data to the intranet cipher machine;

The intranet cipher machine is used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; and decrypt the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data.

In one embodiment, before encrypting the collected remote sensing data based on the first public key, the method further includes:

Get the start time of remote sensing data collection;

When the data collection start time is earlier than the preset effective deadline of the digital certificate, remote sensing data is collected.

In one embodiment, the collected remote sensing data is encrypted based on the first public key to obtain the first data ciphertext including:

Sending an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data collection end;

The digital signature is sent to the data processing end; the digital signature is used to instruct the data processing end to perform signature verification based on the digital signature, obtain the signature verification result, and return the signature verification result to the data collection end;

When the signature verification result indicates that the verification is successful, the collected remote sensing data is encrypted based on the first public key to obtain a first data ciphertext.

In one embodiment, before receiving the transmission data including the first data ciphertext and the key ciphertext sent by the data acquisition end, the method further includes:

Receive the digital signature sent by the data collection end; the digital signature is determined by the cryptographic platform in response to the identity authentication request sent by the data collection end, based on the preset digital certificate, and sent by the cryptographic platform to the data processing end;

A signature verification process is performed based on the digital signature to obtain a signature verification result, and the signature verification result is returned to the data acquisition end; the signature verification result is used to instruct the data acquisition end to encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext when the signature verification result indicates that the verification is successful.

In one embodiment, before decrypting the key ciphertext in the transmission data based on the second private key to obtain the first private key, the method further includes:

Based on the data start collection time of the remote sensing data, query the effective expiration time of the preset digital certificate later than the data start collection time to obtain the target effective expiration time;

The second private key is determined according to the target effective deadline and the device identification of the data collection terminal.

In one embodiment, the transmission data further includes a second data ciphertext including a device identification of the data collection terminal and a data collection start time of the remote sensing data, and a verification plaintext including the device identification and the data collection start time; decrypting the first data ciphertext in the transmission data based on the first private key includes:

When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data start collection time in the verification plaintext is consistent with the data start collection time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key.

Based on the same inventive concept, the embodiment of the present application also provides a safety supervision device for drone remote sensing data for implementing the safety supervision method for drone remote sensing data involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the embodiments of one or more safety supervision devices for drone remote sensing data provided below can refer to the limitations of the safety supervision method for drone remote sensing data above, and will not be repeated here.

In one embodiment, as shown in FIG5 , a safety monitoring device for remote sensing data of an unmanned aerial vehicle is provided. The device is applied to a data collection end, and the device includes:

A first encryption module 502, used to encrypt the collected remote sensing data based on a first public key to obtain a first data ciphertext;

The second encryption module 504 is used to encrypt the first private key based on the second public key to obtain a key ciphertext;

The sending module 506 is used to send the transmission data including the first data ciphertext and the key ciphertext to the data processing end, so that the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data.

In one embodiment, the safety monitoring device for drone remote sensing data further includes:

An acquisition module is used to obtain the start time of data collection of remote sensing data;

The acquisition module is used to acquire remote sensing data when the data acquisition start time is earlier than the effective expiration time of the preset digital certificate.

In one embodiment, the first encryption module 502 is specifically used for:

Sending an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data collection end;

The digital signature is sent to the data processing end; the digital signature is used to instruct the data processing end to perform signature verification based on the digital signature, obtain the signature verification result, and return the signature verification result to the data collection end;

When the signature verification result indicates that the verification is successful, the collected remote sensing data is encrypted based on the first public key to obtain a first data ciphertext.

In one embodiment, as shown in FIG6 , a security monitoring device for remote sensing data of a drone is provided, the device is applied to a data processing end, and the device includes:

The first receiving module 602 is used to receive transmission data including a first data ciphertext and a key ciphertext sent by the data acquisition end; the first data ciphertext is obtained by the data acquisition end encrypting the collected remote sensing data based on the first public key; the key ciphertext is obtained by the data acquisition end encrypting the first private key based on the second public key;

A first decryption module 604, configured to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key;

The second decryption module 606 is used to decrypt the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data.

In one embodiment, the safety monitoring device for drone remote sensing data further includes:

The second receiving module is used to receive the digital signature sent by the data acquisition end; the digital signature is determined by the cryptographic platform in response to the identity authentication request sent by the data acquisition end based on a preset digital certificate, and sent by the cryptographic platform to the data processing end;

The signature verification module is used to perform signature verification based on the digital signature, obtain the signature verification result, and return the signature verification result to the data acquisition end; the signature verification result is used to instruct the data acquisition end to encrypt the collected remote sensing data based on the first public key to obtain the first data ciphertext when the signature verification result indicates that the verification is successful.

In one embodiment, the safety monitoring device for drone remote sensing data further includes:

A query module, for querying the effective expiration time of a preset digital certificate later than the data start collection time based on the data start collection time of the remote sensing data, and obtaining a target effective expiration time;

The determination module is used to determine the second private key according to the target effective deadline and the device identification of the data collection terminal.

In one embodiment, the transmission data also includes a second data ciphertext including a device identification of the data acquisition terminal and a data start acquisition time of the remote sensing data, and a verification plaintext including a device identification and a data start acquisition time; the second decryption module 606 is specifically used for:

When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data start collection time in the verification plaintext is consistent with the data start collection time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key.

Each module in the above-mentioned safety supervision device for remote sensing data of unmanned aerial vehicles can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG7. The computer device includes a processor, a memory, an input/output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input/output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input/output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input/output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner may be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a method for safely supervising remote sensing data of a drone is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

Those skilled in the art will understand that the structure shown in FIG. 7 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims (10)

1. A method for safety supervision of unmanned aerial vehicle remote sensing data, characterized in that the method is applied to a data collection end, and the method comprises: Sending an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data acquisition end; The digital signature is sent to the data processing end; the digital signature is used to instruct the data processing end to perform signature verification based on the digital signature, obtain a signature verification result, and return the signature verification result to the data collection end; When the signature verification result indicates that the verification is successful, encrypting the collected remote sensing data based on the first public key to obtain a first data ciphertext; Encrypting the first private key based on the second public key to obtain a key ciphertext; Sending the transmission data including the first data ciphertext and the key ciphertext to the data processing end, so that the data processing end queries the effective expiration time of the preset digital certificate that is later than the data start collection time of the remote sensing data based on the data start collection time of the remote sensing data, obtains the target effective expiration time, determines the second private key according to the target effective expiration time and the device identification of the data collection end, decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data; The device identifier is the password chip ID of the data acquisition terminal. 2. The method according to claim 1, characterized in that before encrypting the collected remote sensing data based on the first public key, it also includes: Obtaining the data collection start time of the remote sensing data; In the case where the data collection start time is earlier than the preset validity expiration time of the digital certificate, the remote sensing data is collected. 3. A method for security supervision of drone remote sensing data, characterized in that the method is applied to a data processing end, and the method comprises: Receiving a digital signature sent by the data collection terminal; the digital signature is determined by the cryptographic platform in response to the identity authentication request sent by the data collection terminal, based on a preset digital certificate, and sent by the cryptographic platform to the data collection terminal; Performing a signature verification process based on the digital signature to obtain a signature verification result, and returning the signature verification result to the data acquisition end; the signature verification result is used to instruct the data acquisition end to perform encryption processing on the collected remote sensing data based on the first public key to obtain a first data ciphertext when the signature verification result indicates that the verification is successful; Receive transmission data including a first data ciphertext and a key ciphertext sent by a data acquisition terminal; the first data ciphertext is obtained by the data acquisition terminal encrypting the collected remote sensing data based on the first public key; the key ciphertext is obtained by the data acquisition terminal encrypting the first private key based on the second public key; Based on the data start collection time of the remote sensing data, querying the effective expiration time of the preset digital certificate later than the data start collection time to obtain the target effective expiration time; Determine a second private key according to the target effective expiration time and the device identification of the data acquisition terminal, wherein the device identification is the password chip ID of the data acquisition terminal; Decrypting the key ciphertext in the transmission data based on the second private key to obtain the first private key; The first data ciphertext in the transmission data is decrypted based on the first private key to obtain the remote sensing data. 4. The method according to claim 3 is characterized in that the transmission data further includes a second data ciphertext including a device identification of the data acquisition terminal and a data acquisition start time of the remote sensing data, and a verification plaintext including the device identification and the data acquisition start time; the decrypting the first data ciphertext in the transmission data based on the first private key includes: When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data collection start time in the verification plaintext is consistent with the data collection start time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key. 5. A safety supervision system for unmanned aerial vehicle remote sensing data, characterized in that the system includes a data acquisition end and a data processing end, wherein: The data collection end is used to send an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request, returns a digital signature determined based on a preset digital certificate to the data collection end, and sends the digital signature to the data processing end; The data processing end is used to perform signature verification based on the digital signature, obtain a signature verification result, and return the signature verification result to the data collection end; The data acquisition end is further used to, when the signature verification result indicates that the verification is successful, encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext; encrypt the first private key based on the second public key to obtain a key ciphertext; and send the transmission data including the first data ciphertext and the key ciphertext to the data processing end; The data processing end is further used to query the effective expiration time of the preset digital certificate later than the data start collection time of the remote sensing data based on the data start collection time of the remote sensing data, and obtain the target effective expiration time; determine the second private key according to the target effective expiration time and the device identification of the data collection end; decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; decrypt the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data; The device identifier is the password chip ID of the data acquisition terminal. 6. The system according to claim 5, characterized in that the data processing end includes a data receiving end and an intranet cipher machine; the data processing end decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key; and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data, including: The data receiving end is used to receive the transmission data sent by the data acquisition end, and send the transmission data to the intranet cipher machine; The intranet cipher machine is used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; and to decrypt the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data. 7. A safety monitoring device for drone remote sensing data, characterized in that the device is applied to a data collection end, and the device comprises: A first encryption module is used to send an identity authentication request to the cryptographic platform, so that the cryptographic platform responds to the identity authentication request and returns a digital signature determined based on a preset digital certificate to the data acquisition end; the digital signature is sent to the data processing end; the digital signature is used to instruct the data processing end to perform a signature verification process based on the digital signature, obtain a signature verification result, and return the signature verification result to the data acquisition end; when the signature verification result indicates that the verification is successful, the collected remote sensing data is encrypted based on the first public key to obtain a first data ciphertext; A second encryption module, used to encrypt the first private key based on the second public key to obtain a key ciphertext; A sending module, used for sending the transmission data including the first data ciphertext and the key ciphertext to a data processing end, so that the data processing end queries the effective expiration time of a preset digital certificate later than the data start collection time based on the data start collection time of the remote sensing data, obtains a target effective expiration time, determines a second private key according to the target effective expiration time and the device identification of the data collection end, decrypts the key ciphertext in the transmission data based on the second private key to obtain the first private key, and decrypts the first data ciphertext in the transmission data based on the first private key to obtain the remote sensing data; The device identifier is the password chip ID of the data acquisition terminal. 8. The device according to claim 7, characterized in that the device further comprises: An acquisition module is used to obtain the start time of data collection of remote sensing data; The acquisition module is used to acquire remote sensing data when the data acquisition start time is earlier than the effective expiration time of the preset digital certificate. 9. A safety monitoring device for drone remote sensing data, characterized in that the device is applied to a data processing end, and the device comprises: A second receiving module is used to receive a digital signature sent by the data collection terminal; the digital signature is determined by the cryptographic platform in response to the identity authentication request sent by the data collection terminal based on a preset digital certificate and sent by the cryptographic platform to the data collection terminal; The signature verification module is used to perform signature verification based on the digital signature, obtain a signature verification result, and return the signature verification result to the data acquisition end; the signature verification result is used to instruct the data acquisition end to encrypt the collected remote sensing data based on the first public key to obtain a first data ciphertext when the signature verification result indicates that the verification is successful; The first receiving module is used to receive transmission data including a first data ciphertext and a key ciphertext sent by the data acquisition end; the first data ciphertext is obtained by the data acquisition end encrypting the collected remote sensing data based on the first public key; the key ciphertext is obtained by the data acquisition end encrypting the first private key based on the second public key; A query module, for querying the effective expiration time of a preset digital certificate later than the data start collection time based on the data start collection time of the remote sensing data, and obtaining a target effective expiration time; A determination module, used to determine the second private key according to the target effective deadline and the device identification of the data acquisition terminal, wherein the device identification is the password chip ID of the data acquisition terminal; A first decryption module, used to decrypt the key ciphertext in the transmission data based on the second private key to obtain the first private key; The second decryption module is used to decrypt the first data ciphertext in the transmission data based on the first private key to obtain remote sensing data. 10. The device according to claim 9, characterized in that the transmission data further includes a second data ciphertext including a device identification of the data acquisition terminal and a data acquisition start time of the remote sensing data, and a verification plaintext including the device identification and the data acquisition start time; the second decryption module is specifically used for: When the device identifier in the verification plaintext is consistent with the device identifier included in the second data ciphertext, and the data start collection time in the verification plaintext is consistent with the data start collection time included in the second data ciphertext, the first data ciphertext in the transmission data is decrypted based on the first private key.