Leakage tracing method and system based on web-based information steganography

Abstract

The present invention belongs to the field of information security technology, and particularly relates to a method and system for tracing the source of leaks based on web-side information steganography, wherein ID data identifying personal information is loaded as a web picture through information steganography, CRC check code is encoded for the ID data of the steganographic information, the B layer in the RGB layer of the web picture is used as an encryption layer, the RG layer is used as a positioning layer, and the encoded information is encrypted and written into the encryption layer of the web picture using an encryption block; the web-side leaked picture to be traced is preprocessed, and the preprocessing at least includes: identifying the encrypted information of the picture to be traced, the affine transformation perspective correction of the picture, and background processing; for the preprocessed picture to be traced, a decryption code is obtained through a decryption operation, and the ID data traced is obtained by using a CRC check. The present invention can trace the leaked photo to the ID of the web-side user and its related information, and timely prevent it from being spread on the external network to avoid the leaked content, and has a good application prospect.

Description

Technical Field

[0001] The present invention belongs to the field of information security technology, and in particular relates to a method and system for tracing the source of a leak based on web-side information steganography. Background Art

[0002] In recent years, the field of steganography has become the focus of information security. Because every Web site relies on multimedia, such as audio, video and images, steganography can embed secret information into digital media without damaging the quality of its carrier. Third parties can neither perceive nor know the existence of secret information. Therefore, keys, digital signatures and private information can be safely transmitted in an open environment (such as the Internet or intranet). At present, the information steganography method based on QR code is difficult to write a large amount of data information and the information is easy to be tampered with. And with the acceleration of information construction, especially the active promotion of e-government, paper archives are gradually transformed into electronic archives, and incidents of information leakage through taking photos and other means occur frequently. The information security of electronic documents is also facing more and more challenges. Summary of the invention

[0003] To this end, the present invention provides a method and system for tracing the source of leaks based on web-side information steganography, which can trace the leaked photos to the ID of the web-side user and related information, and prevent the leaked content from being spread on the external network in a timely manner.

[0004] According to the design scheme provided by the present invention, a method for tracing the source of a leak based on web-side information steganography includes the following contents:

[0005] The ID data identifying personal information is loaded into a web image through information steganography, the ID data of the steganographic information is encoded with a CRC checksum, the B layer in the RGB layer of the web image is used as the encryption layer, the RG layer is used as the positioning layer, and the encoded information is encrypted and written into the encryption layer of the web image using an encryption block;

[0006] Preprocessing the leaked web-based images to be traced, which at least includes: identifying the encrypted information of the images to be traced, correcting the image's affine transformation perspective, and processing the background;

[0007] For the pre-processed image to be traced, the decryption code is obtained through the decryption operation, and the CRC check is used to obtain the traced ID data.

[0008] As a leakage tracing method based on web-side information steganography of the present invention, further, the ID data of the steganographic information is encoded together with the timestamp and the CRC check code to generate binary coded information; and the coded information is written into the encryption layer using a preset encryption rule.

[0009] As a leakage tracing method based on web-side information steganography of the present invention, further, the preset encryption rules include the following contents: converting the RG layer in the RGB layer into a positioning layer of all 0s and / or all 1s to obtain a binary grayscale image of the image; dividing the binary grayscale image into a number of grayscale blocks, and writing the binary code of the encoded information into the encryption layer of the grayscale block in sequence to form a corresponding encryption block.

[0010] As a leakage tracing method based on web-side information steganography of the present invention, further, the complete encrypted information of the web image within the four-point coordinate range is identified by locating the four-point coordinates; and the image viewing angle is corrected by using the affine transformation of the spatial transformation, and the background clarity and color of the image are enhanced by using the Retinex algorithm.

[0011] As a leakage tracing method based on web-side information steganography of the present invention, further, in the enhancement processing using the Retinex algorithm, the input image data is blurred according to the input blur radius scale, and the image pixel value is quantized according to the Log value of both the input image data and the blurred image data, and the output after quantization is obtained as the result output after the image enhancement processing.

[0012] As a leakage tracing method based on web-side information steganography of the present invention, further, the quantization process is expressed as: first, the image data to be processed is obtained according to the formula Log[R(x,y)]=Log[I(x,y)]-Log[L(x,y)], and then the image data to be processed Log[R(x,y)] is quantized into pixel values ​​in the range of 0 to 255 as the output after quantization processing, wherein I(x,y) is the input image data, and L(x,y) is the image data after blur processing.

[0013] As a leakage tracing method based on web-side information steganography of the present invention, further, in the decryption operation processing, the encrypted block of the image to be traced is identified and the encoded information in the encryption layer is extracted, and it is divided into several blocks according to the size of the encrypted block. In each encrypted block, the binary code of the encoded information in the current encrypted block is decrypted by comparing the sizes of the upper and lower adjacent blocks, and the complete decryption code is obtained based on the binary code information extracted from each encrypted block.

[0014] As a leakage tracing method based on web-side information steganography of the present invention, further, when decrypting the current encrypted block, the blocks at the same position in the encrypted block are combined and identified in turn, and the decryption code is predicted by comparing the same number of times or the same number of bits of binary values ​​in the blocks at the same position, and the CRC check code during encoding is used to verify the predicted decryption code.

[0015] As a leakage tracing method based on web-side information steganography of the present invention, further, when predicting the decryption code, if the binary values ​​of the tiles in the same position are not exactly the same, then the part with the most completely identical binary bits in the tiles in the same position is selected, and the binary value of the tile with the most completely identical bits is used as the predicted decryption code data.

[0016] Furthermore, the present invention also provides a leakage tracing system based on web-side information steganography, comprising: a web-side encryption module, an image processing module and an image tracing module, wherein:

[0017] The web-side encryption module is used to load the ID data identifying personal information into a web image through information steganography, encode the ID data of the steganographic information with a CRC checksum, use the B layer in the RGB layer of the web image as the encryption layer, and the RG layer as the positioning layer, and encrypt the encoded information into the web image encryption layer using an encryption block;

[0018] The image processing module is used to pre-process the leaked web-end images to be traced, and the pre-processing at least includes: identifying the encrypted information of the image to be traced, correcting the image's affine transformation perspective, and processing the background;

[0019] The image tracing module is used to obtain the decryption code through decryption operation for the pre-processed image to be traced, and use CRC check to obtain the traced ID data.

[0020] Beneficial effects of the present invention:

[0021] The present invention aims to solve the problem of leakage of relevant confidential information through screenshots, photos, etc. during the operation of electronic government documents and government systems on the web. In combination with CRC verification, the present invention encodes and encrypts the steganographic information of hidden personal information ID data into the web layer. For the image to be traced, the decryption code in the image is extracted through a decryption operation to obtain the personal ID data. The leaked photo can be traced back to the ID and related information of the web user, and the leaked content can be prevented from being spread on the external network in time. The present invention has good application prospects. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 This is an illustration of the principle of tracing the source of information leakage based on web-side information steganography in the embodiment;

[0023] Figure 2 This is a schematic diagram of the encryption rules in the embodiment;

[0024] Figure 3 This is a schematic diagram of encryption and decryption blocks in the embodiment;

[0025] Figure 4 This is a schematic diagram of identifying blocks in the embodiment;

[0026] Figure 5 This is a schematic diagram of the encryption process in the embodiment;

[0027] Figure 6 The figure is a schematic diagram of the source tracing and decryption process in the embodiment. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solutions and advantages of the present invention clearer and more understandable, the present invention is further described in detail below in conjunction with the accompanying drawings and technical solutions.

[0029] Embodiments of the present invention, see Figure 1 As shown, a method for tracing the source of information leakage based on web-side information steganography is provided, which includes the following contents:

[0030] S101, loading the ID data identifying the personal information into a web image through information steganography, performing CRC checksum encoding on the ID data of the steganographic information, using the B layer in the RGB layer of the web image as the encryption layer, and the RG layer as the positioning layer, and encrypting the encoded information into the encryption layer of the web image using an encryption block;

[0031] S102, preprocessing the leaked web image to be traced, the preprocessing at least comprising: identifying encryption information of the image to be traced, affine transformation perspective correction of the image, and background processing;

[0032] S103: For the pre-processed image to be traced, a decryption code is obtained through a decryption operation, and a CRC check is used to obtain the traced ID data.

[0033] In order to solve the problem of confidential information being leaked through screenshots, photos, etc. during the operation of e-government documents and government systems on the web, the ID data that identifies personal information in the server is loaded into a web layer to hide the personal information. Inspired by the unique ID generation algorithm and the snowflake algorithm, the steganographic information of the hidden personal information ID data is encoded and encrypted into the web layer in combination with CRC verification. For the image to be traced, the decryption code in the image is extracted through decryption operation to obtain the personal ID data. The leaked photo can be traced back to the ID and related information of the web user, which can timely prevent the spread of the leaked content on the external network, effectively ensuring information security.

[0034] As a leakage tracing method based on web-side information steganography in an embodiment of the present invention, further, the ID data of the steganographic information is encoded together with the timestamp and CRC check code to generate binary coded information; and the coded information is written into the encryption layer using preset encryption rules.

[0035] The principle of CRC check is to append a number to the frame to be sent, generate a new frame and send it to the receiving end. This appended number must make the generated new frame divisible by a specific number jointly selected by the sending end and the receiving end (using "modulo 2 division"). After the data arrives at the receiving end, the received new frame is divided by the selected divisor (also using "modulo 2 division"). Because the sender has added a number to "remove the remainder" before sending the data frame, the result should be no remainder. If there is a remainder, it means that an error occurred in the transmission process of the frame. In the embodiment of this case, the entire steganographic information is encoded in combination with the crc check, and the final encoding can be composed of id+timestamp+crc.

[0036] As a leakage tracing method based on web-side information steganography in an embodiment of the present invention, further, the preset encryption rules include the following contents: converting the RG layer in the RGB layer into a positioning layer of all 0s and / or all 1s to obtain a binary grayscale image of the image; dividing the binary grayscale image into a number of grayscale blocks, and writing the binary code of the encoded information into the encryption layer of the grayscale block in sequence to form a corresponding encryption block.

[0037] In order to solve the problems of blurred photos, low resolution, partial missing, etc. caused by the changing shooting angles, different lighting conditions, and the high and low resolution of electronic devices in the traceability photos, the application in this case uses steganographic coding for encryption and decryption. For example, the 64-bit binary information E composed of id (16bit) + timestamp (32bit) + crc (16bit) is written into the traceability encryption block. The 1-bit binary code needs to be written into a 4*16 encryption block composed of two 4*8 binary grayscale blocks. The complete 64-bit code needs to be represented by a 64*64 encryption block. The 64-bit binary information E is written into the B layer in the RGB of the image as the encryption layer. Considering the positioning of a complete encryption block, the RG layer in the traceability photo is converted into positioning layers of all 0 and all 1 respectively. The encryption rules can be exemplified as follows: As shown in E=1111000011001110……01010010, the first bit of the binary code is 1, and the Figure 3 The two 4*8 blocks b_(1) and b_2 in B_1 with a grayscale value of 4*16 are written as all 1s and all 0s respectively, such as Figure 2 (a), and the fifth bit of information to be encrypted is 0, then write b_(1) and b_2 in B_4 as all 0 and all 1 respectively, as shown in Figure 2 (b) as shown.

[0038] Furthermore, the complete encrypted information of the web image within the four-point coordinate range is identified by locating the four-point coordinates; the image perspective is corrected using the affine transformation of the spatial transformation, and the background clarity and color of the image are enhanced using the Retinex algorithm. Furthermore, in the enhancement process using the Retinex algorithm, the input image data is blurred according to the input blur radius scale, and the image pixel value is quantized according to the Log value of both the input image data and the blurred image data, and the quantized output is obtained as the result output after the image enhancement process.

[0039] In order to solve the problem that the angle of leaked photos will affect the accuracy of tracing results, affine transformation homography (homography) modeling can be used, cvWarpAffine can be used to solve dense affine transformation, and cvTransform can be used to solve sparse affine transformation. Affine transformation can transform a rectangle into a parallelogram. It can flatten the sides of the rectangle while keeping the sides parallel, and it can also rotate or scale the rectangle proportionally. In the embodiment of this case, for the uploaded leaked photos, the incomplete tracing encryption blocks in the photos are removed by locating the coordinates of the four points, and only all complete tracing encryption blocks within the four-point range are identified; and the viewing angle of the photo is corrected through the affine transformation of the spatial transformation. A 2*3 matrix N can be used to represent the affine transformation, which can be described as follows:

[0040]

[0041]

[0042] The basic theory of the Retinex algorithm can be expressed as follows: the color of an object is determined by the object's ability to reflect long-wave (red), medium-wave (green), and short-wave (blue) light, rather than by the absolute value of the reflected light intensity. The color of the object is not affected by the non-uniformity of illumination and is consistent. That is, Retinex is based on color consistency (color constancy). Traditional linear and nonlinear methods can only enhance a certain type of image feature, while Retinex can achieve a balance in dynamic compression, edge enhancement, and color constancy, so it can adaptively enhance various types of images. In this embodiment, the Retinex algorithm is used to enhance the background clarity and color of the image, and the algorithm steps can be designed as follows:

[0043] Input: original image data I(x, y), scale (also known as blur radius)

[0044] deal with:

[0045] 1) Calculate the image L(x, y) after the original image is blurred at a specified scale;

[0046] 2) Calculate the value of Log[R(x, y)] according to the following formula;

[0047] 3) Quantize Log[R(x, y)] to pixel values ​​ranging from 0 to 255 as the final output.

[0048]

[0049] Log[R(x,y)]=Log[I(x,y)]-Log[L(x,y)]

[0050] As a method for tracing the source of leaks based on web-side information steganography in an embodiment of the present invention, further, in the decryption operation process, the encrypted block of the image to be traced is identified and the encoded information in the encryption layer is extracted, and it is evenly divided into several blocks according to the size of the encrypted block. In each encrypted block, the binary code of the encoded information in the current encrypted block is decrypted by comparing the sizes of the two adjacent blocks above and below, and the complete decryption code is obtained based on the binary code information extracted from each encrypted block. Further, when decrypting the current encrypted block, the blocks at the same position in the encrypted block are combined and identified in turn, and the decryption code is predicted by comparing the same number of times or the same number of digits of the binary value in the blocks at the same position, and the predicted decryption code is verified by using the CRC check code at the time of encoding.

[0051] For example, Figure 3 In the picture shown, the actual 1-bit binary code of the current 4*16 encrypted block is decrypted by comparing the sizes of the upper and lower 4*8 binary grayscale blocks. In order to solve the integrity problem of decrypting 64-bit codes, encryption and decryption positioning is used to protect the integrity of the code, and the RG layers of RGB in adjacent encrypted blocks are written as all 0 and all 1 respectively. When finally extracting and decrypting, each complete encrypted block is identified through the RG positioning layer to extract the complete 64-bit decryption code.

[0052] As a leakage tracing method based on web-side information steganography in an embodiment of the present invention, further, when predicting the decryption code, if the binary values ​​of the tiles in the same position are not exactly the same, then the part with the most completely identical binary bits in the tiles in the same position is selected, and the binary value of the tile with the most completely identical bits is used as the predicted decryption code data.

[0053] In order to solve the uniqueness problem of decrypted 64-bit code, a unique combination decoding verification scheme is used, which includes block combination decoding and CRC verification. Each encrypted block is divided into 8 blocks, and the blocks at the same position in each encrypted block are combined and identified in turn. The 64-bit decryption code is predicted by comparing the same number of times or the same number of bits of binary values ​​in the blocks at the same position. Then, the CRC verification code generated by the original code is used to verify the predicted decryption code to generate the final 64-bit decryption code.

[0054] Through the RG positioning layer of the leaked photo, all complete traceability encryption blocks are identified and B is extracted. n The grayscale value of each encrypted block is 64*64, such as Figure 3 As shown, it is divided into 64 B n =4*16 blocks, each of which is further divided into b=4*8 blocks, and B is calculated. n Compare the binary values ​​of b1 and b2 and calculate the decryption code D.

[0055]

[0056] D=B1B2B3……B n (n=1,2,3……64)

[0057] In order to improve the accuracy of decrypted information, the traceability background block can be divided into blocks by setting the parameter M. The value of M can be set to 4, 8, 16, and 32, and the traceability encryption block can be divided into 4, 8, 16, and 32 blocks. Experiments show that the best effect is achieved when M is set to 8 and 16. The blocks at the same position in each encryption block are combined and identified in turn, and the parts with the same binary value in the blocks at the same position are selected, and their binary values ​​are written into D1, such as Example 1 and Figure 4 As shown in the figure, if the binary values ​​of the blocks at the same position are not exactly the same, select the part with the most identical binary values ​​in the blocks at the same position and write its binary value into D1. Identify all the positions of all traceable encrypted blocks and combine them into a more accurate 64-bit binary decryption code D1. Then use the CRC checksum generated by the original code to verify D1 and generate the final 64-bit decryption code.

[0058] Example 1:

[0059] D1=M 11 M 22 M 33 M 44 M 55 M 66 M 77 M 88

[0060] M 11 =M 21 =…=M n1 ;M 22 =M 32 =…=M n2 ;

[0061] M 33 =M 43 =…=Mn3;M 44 =M 54 =…=M n4 ;

[0062] M 55 =M 65 =…=M n5 ;M 66 =M 76 =…=M n6 ;

[0063] M 77 =M 87 =…=M n7 ;M 88 =M 98 =…=M n8

[0064] Furthermore, based on the above method, an embodiment of the present invention also provides a leakage tracing system based on web-side information steganography, comprising: a web-side encryption module, an image processing module and an image tracing module, wherein:

[0065] The web-side encryption module is used to load the ID data identifying personal information into a web image through information steganography, encode the ID data of the steganographic information with a CRC checksum, use the B layer in the RGB layer of the web image as the encryption layer, and the RG layer as the positioning layer, and encrypt the encoded information into the web image encryption layer using an encryption block;

[0066] The image processing module is used to pre-process the leaked web-end images to be traced, and the pre-processing at least includes: identifying the encrypted information of the image to be traced, correcting the image's affine transformation perspective, and processing the background;

[0067] The image tracing module is used to obtain the decryption code through decryption operation for the pre-processed image to be traced, and use CRC check to obtain the traced ID data.

[0068] See also Figure 5 and 6 As shown, the encoding information of the steganographic data on the web side is obtained through encryption, and then the uploaded image to be traced is processed, and the corresponding decoded data is obtained using the decryption rules, thereby obtaining the relevant user ID data.

[0069] Unless otherwise specifically stated, the relative steps, numerical expressions and values ​​of the components and steps set forth in these embodiments do not limit the scope of the present invention.

[0070] Based on the above method and / or system, an embodiment of the present invention also provides a server, including: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the above method.

[0071] Based on the above method and / or system, an embodiment of the present invention further provides a computer-readable medium having a computer program stored thereon, wherein the above method is implemented when the program is executed by a processor.

[0072] In all examples shown and described herein, any specific values ​​should be interpreted as merely exemplary and not as limiting, and thus other examples of the exemplary embodiments may have different values.

[0073] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0074] Finally, it should be noted that the above-described embodiments are only specific implementations of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed by the present invention, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A method for tracing the source of leaks based on web-based information steganography, characterized in that: Contains the following: The ID data identifying the personal information is loaded as a web image through information steganography, the ID data of the steganographic information is encoded together with the timestamp and the CRC check code to generate binary coded information, the B layer in the RGB layer of the web image is used as the encryption layer, the RG layer is used as the positioning layer, and the coded information is written into the web image encryption layer through encryption block encryption using a preset encryption rule, wherein the preset encryption rule includes the following contents: the RG layer in the RGB layer is converted into a positioning layer of all 0s and / or all 1s to obtain a binary grayscale image of the image; the binary grayscale image is divided into a number of grayscale blocks, and the binary code of the coded information is sequentially written into the encryption layer of the grayscale blocks to form a corresponding encryption block; Preprocessing the leaked web-based images to be traced, which at least includes: identifying the encrypted information of the images to be traced, correcting the image's affine transformation perspective, and processing the background; For the pre-processed image to be traced, the decryption code is obtained through the decryption operation, and the CRC check is used to obtain the traced ID data.

2. The method for tracing the source of leaks based on web-based information steganography according to claim 1 is characterized in that: By locating the four-point coordinates, the complete encrypted information of the web image within the four-point coordinate range is identified; the image viewing angle is corrected using the affine transformation of the spatial transformation, and the background clarity and color of the image are enhanced using the Retinex algorithm.

3. The method for tracing the source of leaks based on web-based information steganography according to claim 2 is characterized in that: In the enhancement processing using the Retinex algorithm, the input image data is blurred according to the input blur radius scale, and the image pixel value is quantized according to the Log value of both the input image data and the blurred image data, and the output after quantization is obtained as the result output after the image enhancement processing.

4. The method for tracing the source of leaks based on web-based information steganography according to claim 3 is characterized in that: The quantization process is expressed as follows: first, the image data to be processed is obtained according to the formula Log[R(x,y)]=Log[I(x,y)]-Log[L(x,y)], and then the image data to be processed Log[R(x,y)] is quantized into pixel values ​​in the range of 0 to 255 as the output after quantization processing, where I(x,y) is the input image data and L(x,y) is the image data after blur processing.

5. The method for tracing the source of leaks based on web-based information steganography according to claim 1 is characterized in that: During the decryption operation, the encrypted block of the image to be traced is identified and the encoded information in the encryption layer is extracted, and it is divided into several blocks according to the size of the encrypted block. In each encrypted block, the binary code of the encoded information in the current encrypted block is decrypted by comparing the sizes of the upper and lower adjacent blocks, and the complete decryption code is obtained based on the binary code information extracted from each encrypted block.

6. The method for tracing the source of leaks based on web-based information steganography according to claim 5 is characterized in that: When decrypting the current encrypted block, the blocks at the same position in the encrypted block are combined and identified in turn, and the decryption code is predicted by comparing the same number of times or the same number of bits of the binary values ​​in the blocks at the same position, and the CRC check code during encoding is used to verify the predicted decryption code.

7. The method for tracing the source of leaks based on web-based information steganography according to claim 6 is characterized in that: When predicting the decryption code, if the binary values ​​of the blocks at the same position are not exactly the same, the part with the most exactly the same binary digits in the blocks at the same position is selected, and the binary value of the block with the most exactly the same binary digits is used as the predicted decryption code data.

8. A leak tracing system based on web-based information steganography, characterized in that: Contains: web encryption module, image processing module and image tracing module, among which, The web-side encryption module is used to load the ID data identifying personal information into a web image through information steganography, encode the ID data of the steganographic information together with the timestamp and the CRC check code, generate binary coded information, use the B layer in the RGB layer of the web image as the encryption layer, and the RG layer as the positioning layer, and use the preset encryption rules to encrypt the coded information into the web image encryption layer through encryption blocks, wherein the preset encryption rules include the following contents: converting the RG layer in the RGB layer into a positioning layer of all 0s and / or all 1s to obtain a binary grayscale image of the image; dividing the binary grayscale image into a number of grayscale blocks, and sequentially writing the binary code of the coded information into the encryption layer of the grayscale blocks to form corresponding encryption blocks; The image processing module is used to pre-process the leaked web-end images to be traced, and the pre-processing at least includes: identifying the encrypted information of the image to be traced, correcting the image's affine transformation perspective, and processing the background; The image tracing module is used to obtain the decryption code through decryption operation for the pre-processed image to be traced, and use CRC check to obtain the traced ID data.

Images