UAV real-name system storage vulnerabilities, identity information can also be filled

(Original title: drone real name registration can be filled?) Guo Linlin The "Management Regulations on Registration of Real-name Civilian Unmanned Aircraft" promulgated by the Civil Aviation Administration of China has been formally implemented since June 1. It is required that owners of civil drones with a maximum take-off weight of 250 grams or more (including 250 grams) be required. Real name registration. However, the Beijing Youth Daily reporter found that there is a “hole” in the real-name registration system for drones. The registration system needs to fill in information such as name and ID, but even if it is filled in, it can pass system certification. The technical support of the system indicates that the entire system has yet to be improved. New regulations require real-name registration of drones Yesterday, the "Administrative Provisions on Registration of Real-name Civilian Unmanned Aircraft Systems" issued by the Civil Aviation Administration was formally implemented. According to the regulations, since June 1, 2017, owners of civil drones must register their real names as required. After August 31, 2017, if the civil drone owner fails to implement real name registration and paste the registration mark according to the regulations, its behavior will be regarded as an illegal act in violation of laws and regulations. The use of drones will be affected. The supervisory authorities will impose penalties in accordance with the relevant regulations. The regulations make it clear that civil drones do not include aviation models, unmanned free balloons, and captive balloons. According to the regulations, owners of civil drones must register the system's registration mark on the drone after registering product information. The registration mark includes the registration number and registration QR code. In addition, civil drones are sold, transferred, damaged, scrapped, lost or stolen, and the owner of the civil drone should promptly log off the information of the drone through the real-name registration system for drones. After the ownership of the UAV has been transferred, the changed owner must register the civil drone information in real-name as required. Name, ID card can be filled? Yesterday, the Beijing Youth Daily reporter logged in to the real-name registration system for drones to see that the “user registration” includes personal, corporate, institutional, and institutional legal entities. Individual users need to fill in the mobile phone number, email address, real name, Gender, document type, number, address, etc. The Beijing Youth Daily reporter test found that the real-name registration system has "holes", and the system will not carry out authenticity verification on the contents filled in, even if names, ID numbers, etc. can be filled. Indiscriminately filled in names and ID numbers will not be rejected and can be successfully saved. In the "drone management" project, the new drone serial numbers can also be filled randomly, and the same can be submitted normally. At the same time, the random numbers can also generate valid two-dimensional codes that can be queried. For these "loopholes", the Beijing Youth Daily reporter sent an e-mail inquiry to the website's technical support e-mail yesterday. The Civil Aviation Department Airworthiness Division drone system technical support e-mail reply said that at present, the drone registration system only records the identity information. Only check the type of characters and the number of digits, and verify the validity of the connection with the Ministry of Public Security. For the serial number verification of drones, the Airworthiness Division stated that the setting principles for serial number of drones for each manufacturer are different, and there is no unified rule, so it is impossible to verify the validity of drone serial numbers. The Airworthiness Division stated that the Civil Aviation Administration is communicating with the public security authorities in an effort to verify the identity of the registrant through the public security system. New regulations "mini" drone sales The real-name registration requirements issued by the Civil Aviation Administration are mainly aimed at drones with a maximum take-off weight of 250 grams or more. This has directly led to the pursuit of "mini" drones below 250 grams. A domestic well-known drone salesman customer service staff told the Beijing Youth Daily reporter that the minimum weight of the drones they operate in the online store is more than 300 grams. According to the new regulations, such drones need to be registered with the real name system. Customers who purchase drones are very concerned about the regulations in this area, and many of them will specifically consult related matters related to real-name registration. This directly led to less than 250 grams of "mini" drones began to sell in the online shopping platform, this drone prices are in the range of tens of dollars to several hundred dollars. An online shop customer service told the Beijing Youth Daily reporter that their main store is the “mini” drone. “This kind of drone is closer to the toy. The remote control distance and the flying height are only about 100 meters.” Another online customer service official stated that the “mini” drone is mainly suitable for playing at home and company. “Although it does not have to register with the real name system, it generally also flies 30 meters high and the distance is more than 60 meters, that is, play. Can't take any work, as an exercise or it can be." expert Drone management purpose is "orderly" Yesterday, the Beijing Youth Daily reporter interviewed the Executive Secretary of the Chinese Aircraft Owners and Drivers Association (AOPA), Ke Yubao. Ke Yubao believes that the real implementation of the real-name registration system is still a function of statistical information. “We now require a weight of 250 grams or more. The statistics also basically cover the drones of various models. After this data is mastered, it is relatively accurate, at least not in quantity.” Ke Yubao said that at present, drone management mainly focuses on three issues. One is to strengthen publicity. “It is necessary to promote aviation culture and popularize aviation laws and regulations. For example, red lights abound twenty or thirty years ago, but after publicizing laws and regulations, Now most people will wait for the red light, so it's not that we intentionally fail to comply with laws and regulations, but that many people don't know it, so we need to promote it. I believe it must be more law-abiding." Second, Ke Yubao believes that drone flight behavior should be regulated by technical means. “Like real-name registration, which is now implemented, is a method, and there is also an “electronic fence” technology that can also prevent drones from making mistakes.” Man-machines also have identities, similar to the frame number, and they are all technical means." Third, Ke Yubao believes that drone management also depends on “heteronomy.” “Not only do you understand, but you can also tell others that when you see violations, others will stop them. This is heteronomy. ” Ke Yubao believes that the purpose of the management of drones is "orderly." "Real-name registration like drones is a must, but the system has a process of continuous improvement. The management department is also adapting to the development of the situation and gradually introducing management rules. It is for orderly development." Related Drone "black fly" frequently causes trouble With the rapid development of drones, the phenomenon of "black flying" also occurs from time to time. The North Qingbao reporter combed and found that only this year there have been many vicious incidents that disrupt the civil aviation order and even affect the accident rescue. On January 7 of this year, an explosion occurred in Jidong Jiayuan, Taocheng District, Hengshui City, Hebei Province. On the morning of the 8th, the man Zhang drove to the area to control the unmanned aerial vehicle to shoot over the accident site, affecting the normal order of rescue and was administratively detained for 5 days by the city's Taocheng branch. On the afternoon of April 22, the Chengdu Municipal Public Security Bureau issued a report saying that on April 19 and 21, two illegal drone flying cases were seized in Taurus and Shuangliu respectively, and the involved persons will be investigated and dealt with according to law. Among them, the Taurus Public Security Bureau informed that Zhao, who illegally controlled drones in the clearance area of ​​Shuangliu Airport, was punished by administrative detention for 5 days because he disturbed the order in public places. The Shuangliu police said that Dai Mo, who controls the flight of drones in the Shuangliu Airport Clearance Area, was sentenced to five days of administrative detention. On May 12, Chongqing Airport was disrupted by drones, causing multiple flights to be affected. According to reports from Chongqing Airport, drone interference caused a total of more than 40 flights to and from Chongqing airport during the day, more than 60 flights were canceled, more than 140 flights were delayed, and tens of thousands of passengers were affected. At 14:48 on May 22, staff of the airport police station of the Shenzhen Airport Public Security Bureau found that drones were flying in the Airport Clearance Area near Jiudao Airport, Bao'an District. The policeman rushed to the scene to capture the drone controller Lin Moumou, and the airport police imposed a penalty of administrative detention on the 10th.