UAV authentication method and system

A secure communication method comprising:

• obtaining, by a first device, a session key and a command sequence number;
• generating, by the first device, a message request to communicate with a second device;
• updating, by the first device, the command sequence number;
• encrypting, by the first device, the message request and performing message authorization code (MAC) computation on the message request;
• sending, by the first device, the encrypted and MAC-computed message request and the updated command sequence number to the second device;
• receiving, by the second device, an MAC, the encrypted and MAC-computed message request, and the updated command sequence number that are sent by the first device;
• changing, by the second device, a stored command sequence number stored in a storage apparatus to the updated command sequence number, in response to the updated command sequence number being greater than the stored command sequence number;
• decrypting, by the second device, the encrypted and MAC-computed message request using the session key to generate a decrypted message request;
• verifying, by the second device, the received MAC;
• generating, by the second device in response to that a verification of the received MAC is passed, a response message based on the decrypted message request;
• generating, by the second device, another MAC, according to the updated command sequence number, the received session key, and the response message;
• encrypting, by the second device, the response message using the session key;
• and
• sending, by the second device, the another MAC, the encrypted response message, and the updated command sequence number to the first device.

A flight controller of an unmanned aerial vehicle (UAV), the flight controller being configured to:

• generate a session key;
• receive a device ID of a functional assembly of the UAV and a random number;
• obtain a device key of the functional assembly according to the device ID of the functional assembly;
• encrypt the session key and the random number according to the device key of the functional assembly;
• send the encrypted session key and the encrypted random number to the functional assembly;
• and
• receive a message command generated using a decrypted session key and a decrypted random number obtained by the functional assembly decrypting the encrypted session key and the encrypted random number.