A tampering verification method and system based on satellite positioning authorization service

Abstract

The present invention provides a tampering verification method and system based on satellite positioning authorization service, which relates to the field of server authorization technology, including: obtaining basic information of the server including satellite positioning information of the server, identity information of the server and stored data of the server; encrypting according to satellite positioning information of the server, identity information of the server and stored data of the server to generate authorization verification ciphertext information; obtaining basic information of the user end to be verified including watermark information to be embedded and satellite positioning information of the user end; encrypting according to watermark information to be embedded and satellite positioning information of the user end to generate watermark ciphertext information to be embedded; verifying the user end to be verified according to the authorization verification ciphertext information; verifying the server if passed; embedding watermark into the stored data of the server through the watermark information to be embedded if passed. The technical problem that the watermark anti-tampering in the prior art requires real-time monitoring of the watermark status, resulting in difficulty in ensuring work efficiency is solved.

Description

Technical Field

[0001] The present invention relates to the technical field related to server authorization, and in particular to a tampering verification method and system based on satellite positioning authorization service. Background Art

[0002] Watermark is the main means to prevent the theft of photos. Photos with high confidentiality in specific servers have higher requirements for the security of watermarks. If the watermark is tampered with, the photos and other data will be stolen, causing losses to the specific server. How to improve the anti-tampering level of photo watermarks is the main development trend.

[0003] The main means of watermark tamper prevention in the prior art is to monitor the status of the watermark in real time, issue a warning in time when an abnormality occurs, and restore the modified watermark. This method requires real-time monitoring of the watermark status, and the monitoring data is relatively complex, resulting in a large workload for the monitoring equipment.

[0004] In the prior art, watermark anti-tampering requires real-time monitoring of the watermark status, which is a heavy workload and leads to a technical problem that work efficiency is difficult to ensure. Summary of the invention

[0005] The present application provides a tampering verification method and system based on satellite positioning authorization service, which solves the technical problem in the prior art that watermark anti-tampering requires a large workload of real-time monitoring of the watermark status, resulting in difficulty in ensuring work efficiency.

[0006] In view of the above problems, an embodiment of the present application provides a tampering verification method and system based on satellite positioning authorization service.

[0007] In the first aspect, the present application provides a tampering verification method based on a satellite positioning authorization service, wherein the method applies a tampering verification system based on a satellite positioning authorization service, the system includes a server and a user end, and the method includes: obtaining basic information of the server, wherein the basic information of the server includes server satellite positioning information, server identity information and server storage data; encrypting according to the server satellite positioning information, the server identity information and the server storage data to generate authorization verification ciphertext information; obtaining basic information of the user end to be verified, wherein the basic information of the user end to be verified includes watermark information to be embedded and user satellite positioning information; encrypting according to the watermark information to be embedded and the user satellite positioning information to generate ciphertext information to be embedded; verifying the user end to be verified according to the authorization verification ciphertext information; if passed, verifying the server according to the ciphertext information to be embedded; if passed, watermarking the server storage data through the watermark information to be embedded.

[0008] On the other hand, the present application provides a tampering verification system based on a satellite positioning authorization service, wherein the system includes a server and a user end, and the system also includes: a server information collection module, used to obtain basic information of the server, wherein the basic information of the server includes server satellite positioning information, server identity information and server storage data; a server encryption module, used to encrypt according to the server satellite positioning information, the server identity information and the server storage data to generate authorization verification ciphertext information; a user information collection module, used to obtain basic information of the user end to be verified, wherein the basic information of the user end to be verified includes watermark information to be embedded and user satellite positioning information; the user encryption module, used to encrypt according to the watermark information to be embedded and the user satellite positioning information to generate ciphertext information to be embedded; a server authorization verification module, used to verify the user end to be verified according to the authorization verification ciphertext information; the user authorization verification module, used to verify the server according to the ciphertext information to be embedded if passed; a watermark embedding module, used to embed watermark into the server storage data according to the watermark information to be embedded if passed.

[0009] One or more technical solutions provided in this application have at least the following technical effects or advantages:

[0010] Because the server and the user are encrypted according to their respective basic information, when the user needs to tamper with the watermark of the server, it is necessary to verify the encryption result with each other for identity verification. When it is determined that the server and the user are authorized, the watermark is embedded. The complexity of watermark tampering authorization is increased through mutual verification between the two parties, and the work will only start when watermark embedding is needed. Therefore, the intermittent working mode reduces the complexity of anti-tampering and achieves the technical effect of improving the efficiency of watermark anti-tampering.

[0011] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 A schematic diagram of a tampering verification method based on a satellite positioning authorization service is provided for an embodiment of the present application;

[0013] Figure 2 A schematic diagram of a flow chart for determining authorization verification ciphertext information of a tamper verification method based on a satellite positioning authorization service is provided for an embodiment of the present application;

[0014] Figure 3A schematic diagram of the structure of a tamper verification system based on satellite positioning authorization service is provided for an embodiment of the present application.

[0015] Explanation of the reference numerals: server 001, user 002, server information collection module 11, server encryption module 12, user information collection module 13, user encryption module 14, server authorization verification module 15, user authorization verification module 16, watermark embedding module 17. DETAILED DESCRIPTION

[0016] The embodiments of the present application provide a tampering verification method and system based on satellite positioning authorization service, thereby solving the technical problem in the prior art that watermark anti-tampering requires a large workload of real-time monitoring of the watermark status, resulting in difficulty in ensuring work efficiency.

[0017] Application Overview

[0018] Currently, the main method of watermark tamper prevention in the server is to alarm the watermark modification status and restore the modified watermark. This method is more complicated and labor-intensive because it monitors the watermark modification status in real time through the device, resulting in a technical problem of low efficiency in preventing watermark tampering.

[0019] In response to the above technical problems, the overall idea of ​​the technical solution provided by this application is as follows:

[0020] The embodiment of the present application provides a tampering verification method and system based on satellite positioning authorization service. Since the server and the user end are encrypted according to their respective basic information, when the user end needs to tamper with the watermark of the server end, it is necessary to mutually verify the encryption result for identity verification. When it is determined that the server and the user end have been authorized, the technical solution of watermark embedding is performed. The complexity of watermark tampering authorization is improved through mutual verification between the two parties, and the work will only start when watermark embedding is required. Therefore, the intermittent working mode reduces the complexity of anti-tampering and achieves the technical effect of improving the efficiency of watermark anti-tampering work.

[0021] After introducing the basic principles of the present application, various non-limiting implementation methods of the present application will be specifically described below in conjunction with the drawings in the specification.

[0022] Embodiment 1

[0023] like Figure 1 As shown, an embodiment of the present application provides a tampering verification method based on a satellite positioning authorization service, wherein the method applies a tampering verification system based on a satellite positioning authorization service, the system includes a server and a user, and the method includes the steps of:

[0024] S100: Acquire basic information of the server, wherein the basic information of the server includes satellite positioning information of the server, identity information of the server and data stored on the server;

[0025] Specifically, the server refers to the system that stores specific data; the server satellite positioning information refers to the data obtained by geo-positioning the server deployment location through Beidou or GPS, which is used to characterize the authorized working area of ​​the server. If the real-time positioning of the server does not conform to the authorized working area of ​​the server, the server cannot perform watermark embedding and other tasks; the server identity information refers to the data that characterizes the unique identity information of the server, and the identity identifier is customized by the staff; the server storage data refers to specific data with watermarks, such as photos with watermarks, etc. The server satellite positioning information, server identity information, and server storage data are stored as basic information of the server, set to a pending response state, and wait for the next step to quickly call.

[0026] S200: Encrypting the server satellite positioning information, the server identity information and the server storage data to generate authorization verification ciphertext information;

[0027] Further, such as Figure 2 As shown, based on the encryption according to the server satellite positioning information, the server identity information and the server storage data, the authorization verification ciphertext information is generated, and step S200 includes the steps of:

[0028] S210: Transmitting the first public key, the second public key and the third public key through the authorized user terminal;

[0029] S220: Encrypt and encapsulate the server-side satellite positioning information by using the first public key to generate server-side satellite positioning ciphertext information;

[0030] S230: Encrypt and encapsulate the server identity information using the second public key to generate server identity ciphertext information;

[0031] S240: Encrypt and encapsulate the server-side stored data using the third public key to generate ciphertext information of the server-side stored data;

[0032] S250: Add the server satellite positioning ciphertext information, the server identity ciphertext information and the server storage data ciphertext information into the authorization verification ciphertext information, and delete the authorization record of the authorized user end.

[0033] Further, based on the transmission of the first public key, the second public key and the third public key through the authorized user terminal, step S210 includes the steps of:

[0034] S211: Obtaining, through the authorized user terminal, an asymmetric encryption first module, an asymmetric encryption second module, and an asymmetric encryption third module;

[0035] S212: Generate a first private key and a first public key through the asymmetric encryption first module;

[0036] S213: Generate a second private key and a second public key through the asymmetric encryption second module;

[0037] S214: Generate a third private key and the third public key through the third asymmetric encryption module.

[0038] Specifically, the authorization verification ciphertext information refers to the result obtained by encrypting and encapsulating the server satellite positioning information, server identity information and server storage data according to a preset encryption method.

[0039] The preset encryption method is preferably as follows: the authorized user end refers to the user end that has been authorized to modify the watermark modification authority of the data stored in the server end; any user end has an asymmetric encryption first module, an asymmetric encryption second module and an asymmetric encryption third module, the asymmetric encryption first module refers to a module for generating a first private key and a first public key constructed according to asymmetric encryption; the asymmetric encryption second module refers to a module for generating a second private key and a second public key constructed according to asymmetric encryption; the asymmetric encryption third module refers to a module for generating a third private key and a third public key constructed according to asymmetric encryption. It is easy to implement to construct an encryption module based on asymmetric encryption rules, and no further elaboration is given here. Asymmetric encryption, even if a publicly used public key is issued to a participant with encrypted data, the encrypted data is encrypted using the public key, and then transmitted to the user end for storage using the private key, since the private key has never been stored online, the security of the private key is guaranteed, and the complexity of authorization verification is increased.

[0040] The first public key, the second public key and the third public key are sent to the server. The server encrypts and encapsulates the server satellite positioning information through the first public key, which is recorded as the server satellite positioning ciphertext information; the server encrypts and encapsulates the server identity information through the second public key, which is recorded as the server identity ciphertext information; the server encrypts and encapsulates the server storage data through the third public key, which is recorded as the server storage data ciphertext information; the server satellite positioning ciphertext information, the server identity ciphertext information and the server storage data ciphertext information are added to the authorization verification ciphertext information, and the authorization record of the authorized user is deleted. When the authorization record is deleted, it is necessary to verify again when applying for the permission to modify the watermark in the next step. By using different keys to encrypt the server satellite positioning information, the server identity information and the server storage data respectively, the decryption complexity is increased. The relationship between each ciphertext is logical and, and decrypting any key alone cannot achieve authorization verification, which improves the security of authorization verification.

[0041] S300: Acquire basic information of the user terminal to be verified, wherein the basic information of the user terminal to be verified includes watermark information to be embedded and satellite positioning information of the user terminal;

[0042] Specifically, the user end to be verified refers to the party that applies to embed watermarks; the user end to be verified refers to the watermark data that applies to be embedded in the data stored in the server end; the user end satellite positioning information refers to the result of geo-positioning the deployment area of ​​the user end to adapt to the satellite positioning system such as Beidou satellite or GPS. The watermark information to be embedded and the user end satellite positioning information are set to a pending response state, waiting for the next step to be quickly called. The user end satellite positioning information can be used to limit the authorized working area of ​​the user end. When the real-time positioning does not conform to the user end satellite positioning information, watermark embedding and other tasks cannot be performed, further improving the security of watermark anti-tampering.

[0043] S400: Encrypting the watermark information to be embedded and the satellite positioning information of the user terminal to generate ciphertext information to be embedded;

[0044] Further, based on the encryption performed according to the watermark information to be embedded and the satellite positioning information of the user terminal to generate the ciphertext information to be embedded, step S400 includes the steps of:

[0045] S410: Transmitting the fourth public key and the fifth public key according to the authorized server;

[0046] S420: Encapsulating and encrypting the watermark information to be embedded by using the fourth public key to generate ciphertext information to be embedded;

[0047] S430: Encapsulating and encrypting the user-side satellite positioning information by using the fifth public key to generate user-side satellite positioning ciphertext information;

[0048] S440: Add the watermark ciphertext information to be embedded and the satellite positioning ciphertext information of the user end into the ciphertext information to be embedded, and delete the authorization record of the authorized server.

[0049] Further, based on the transmission of the fourth public key and the fifth public key according to the authorized server, step S410 includes the steps of:

[0050] S411: Acquire an asymmetric encryption fourth module and an asymmetric encryption fifth module according to the authorized server;

[0051] S412: Generate a fourth private key and the fourth public key through the fourth asymmetric encryption module;

[0052] S413: Generate a fifth private key and the fifth public key through the fifth asymmetric encryption module.

[0053] Specifically, the ciphertext information to be embedded refers to the result of encrypting the watermark information to be embedded and the satellite positioning information of the user terminal according to a preset encryption rule.

[0054] The preset encryption rules are detailed and exemplified as follows:

[0055] An authorized server refers to a preset server that has the function of receiving watermark information to be embedded; the asymmetric encryption fourth module refers to a functional module in the authorized server that is used to generate a fourth private key and a fourth public key according to asymmetric encryption rules; the asymmetric encryption fifth module refers to a functional module in the authorized server that is used to generate a fifth private key and a fifth public key according to asymmetric encryption rules. The encryption method based on asymmetric encryption rules is not limited here.

[0056] The fourth public key and the fifth public key are transmitted to the user through the authorized server, and the fourth private key and the fifth private key are stored locally on the server offline, waiting for the call. The fourth public key is used to encapsulate and encrypt the watermark information to be embedded, and it is recorded as the watermark ciphertext information to be embedded; the fifth public key is used to encapsulate and encrypt the watermark information to be embedded, and it is recorded as the user-side satellite positioning ciphertext information; the user-side satellite positioning ciphertext information and the watermark ciphertext information to be embedded are added to the ciphertext information to be embedded, and it is set to the response state, waiting for the next step call. The watermark information to be embedded and the user-side satellite positioning information are encrypted respectively by asymmetric encryption. When decrypting, the ciphertexts are logically ANDed. If any decryption fails, the server will not be authorized to receive the watermark information to be embedded.

[0057] After the server encrypts the data on the user side based on asymmetric encryption, the authorization record is deleted from the user side. Combined with the aforementioned method of encrypting the data on the server side based on asymmetric encryption by the user side and then deleting the authorization record from the server side, when any two user sides and the server side are associated for the first time, it is preferred that the association is authorized by the staff. After the transmission of each other's public keys is completed, the authorization record is deleted. In the subsequent step, when watermark embedding is required, mutual identity authentication is required, and authorization is re-authenticated after verification, which improves the security against watermark tampering.

[0058] S500: Verify the user terminal to be verified according to the authorization verification ciphertext information;

[0059] Further, based on verifying the user terminal to be verified according to the authorization verification ciphertext information, step S500 includes the steps of:

[0060] S510: According to the user terminal to be verified, obtain a first private key to be verified, a second private key to be verified, and a third private key to be verified;

[0061] S520: Decrypt and verify the server-side satellite positioning ciphertext information using the first private key to be verified to generate a first decryption result;

[0062] S530: Decrypt and verify the server identity ciphertext information using the second private key to be verified to generate a second decryption result;

[0063] S540: Decrypt and verify the encrypted data information stored on the server by using the third private key to be verified, and generate a third decryption result;

[0064] S550: When the first decryption result, the second decryption result and the third decryption result are verified, a user-side authorization verification pass instruction is generated.

[0065] Specifically, the verification process of the client to be verified according to the authorization verification ciphertext information is as follows:

[0066] Through the user end to be verified, the first private key to be verified, the second private key to be verified and the third private key to be verified stored locally are retrieved, and the server satellite positioning ciphertext information is decrypted and verified by the first private key to be verified to generate a first decryption result. If the decryption fails, the verification fails. If the decryption is completed, it indicates that the real-time server satellite positioning area is within the server satellite positioning area in the ciphertext. If the real-time server satellite positioning area is within the server satellite positioning area in the ciphertext, the verification is successful; the server identity ciphertext information is decrypted and verified by the second private key to be verified to generate a second decryption result. If the decryption fails, the verification fails. If the decryption is successful, the verification is successful; the server storage data ciphertext information is decrypted and verified by the third private key to be verified to generate a third decryption result. If the decryption fails, the verification fails. If the decryption is successful, the verification is successful. Then the corresponding server storage data is retrieved and set to a response-pending state, waiting for watermark embedding. When the first decryption result, the second decryption result and the third decryption result are all verified, the user-side authorization verification pass instruction is generated. By setting the satellite positioning information to be verified after multiple decryptions, the security of the watermark anti-tampering is further improved.

[0067] S600: If successful, verify the server according to the ciphertext information to be embedded;

[0068] Further, based on verifying the server according to the watermark ciphertext information to be embedded, step S600 includes the steps of:

[0069] S610: Acquire, according to the server, a fourth private key to be verified and a fifth private key to be verified;

[0070] S620: Decrypting the watermark ciphertext information to be embedded by using the fourth private key to be verified to generate a fourth decryption result;

[0071] S630: Decrypting the satellite positioning ciphertext information of the user terminal by using the fifth private key to be verified to generate a fifth decryption result;

[0072] S640: When the fourth decryption result and the fifth decryption result are verified, a server authorization verification passed instruction is generated.

[0073] Specifically, the process of verifying the server based on the watermark ciphertext information to be embedded is as follows:

[0074] The server provides the locally stored fourth private key to be verified and the fifth private key to be verified, and uses the fourth private key to be verified to decrypt the watermark ciphertext information to be embedded, and generates the fourth decryption result. If the decryption is successful, the verification is passed, and the watermark ciphertext information to be embedded is set to the response state, waiting for the next step call; the user-side satellite positioning ciphertext information is decrypted by the fifth private key to be verified, and the fifth decryption result is generated. If the decryption fails, the verification fails; if the decryption is successful, the user-side real-time positioning information is determined by the satellite whether it is within the user-side satellite positioning area in the ciphertext. If the user-side real-time positioning information is within the user-side satellite positioning area in the ciphertext, the verification is passed. The server is authorized. By setting different verification rules according to different ciphertext information, the security of authorization verification is improved.

[0075] S700: If passed, embedding a watermark into the data stored on the server using the watermark information to be embedded.

[0076] Specifically, when the user and the server have verified each other, the server stores data in the waiting state. For example, for a photo with a watermark, the watermark information to be embedded is retrieved from the user, and the watermark is embedded using the current watermark embedding method. The specific watermark embedding method is not limited here. The corresponding added watermark can only be modified through authorization verification. If the verification fails, it cannot be modified, which ensures the security of the watermark anti-tampering. The entire system only starts working when authorization verification is required, which reduces the workload and ensures the stability of work efficiency.

[0077] In summary, the tampering verification method and system based on satellite positioning authorization service provided by the embodiments of the present application have the following technical effects:

[0078] 1. Since the server and the user are encrypted according to their respective basic information, when the user needs to tamper with the watermark of the server, it is necessary to mutually verify the encryption result for identity verification. When it is determined that the server and the user are authorized, the watermark is embedded. The complexity of watermark tampering authorization is increased through mutual verification between the two parties, and the work will only start when watermark embedding is needed. Therefore, the intermittent working mode reduces the complexity of anti-tampering and achieves the technical effect of improving the efficiency of watermark anti-tampering.

[0079] Embodiment 2

[0080] Based on the same inventive concept as the tampering verification method based on satellite positioning authorization service in the aforementioned embodiment, Figure 3 As shown, the embodiment of the present application provides a tampering verification system based on satellite positioning authorization service, wherein the system includes a server 001 and a user 002, and the system also includes:

[0081] The server information acquisition module 11 is used to obtain basic information of the server, wherein the basic information of the server includes satellite positioning information of the server, identity information of the server and storage data of the server;

[0082] The server encryption module 12 is used to encrypt the server satellite positioning information, the server identity information and the server storage data to generate authorization verification ciphertext information;

[0083] The user terminal information acquisition module 13 is used to obtain basic information of the user terminal to be verified, wherein the basic information of the user terminal to be verified includes watermark information to be embedded and satellite positioning information of the user terminal;

[0084] The user-side encryption module 14 is used to encrypt the watermark information to be embedded and the user-side satellite positioning information to generate ciphertext information to be embedded;

[0085] The server authorization verification module 15 is used to verify the user terminal to be verified according to the authorization verification ciphertext information;

[0086] The user end authorization verification module 16 is used to verify the server end according to the ciphertext information to be embedded if the verification is successful;

[0087] The watermark embedding module 17 is used to embed the watermark into the data stored in the server through the watermark information to be embedded.

[0088] Furthermore, the server-side encryption module 12 executes the following steps:

[0089] Transmitting the first public key, the second public key and the third public key through the authorized user terminal;

[0090] Encrypting and encapsulating the server-side satellite positioning information by using the first public key to generate server-side satellite positioning ciphertext information;

[0091] Encrypt and encapsulate the server identity information using the second public key to generate server identity ciphertext information;

[0092] Encrypt and encapsulate the server-side stored data using the third public key to generate ciphertext information of the server-side stored data;

[0093] The server satellite positioning ciphertext information, the server identity ciphertext information and the server storage data ciphertext information are added to the authorization verification ciphertext information, and the authorization record of the authorized user end is deleted.

[0094] Furthermore, the server-side encryption module 12 executes the following steps:

[0095] Obtaining, through the authorized user terminal, an asymmetric encryption first module, an asymmetric encryption second module, and an asymmetric encryption third module;

[0096] Generate a first private key and a first public key through the asymmetric encryption first module;

[0097] Generate a second private key and a second public key through the asymmetric encryption second module;

[0098] A third private key and the third public key are generated through the asymmetric encryption third module.

[0099] Furthermore, the server authorization verification module 15 executes the following steps:

[0100] According to the user terminal to be verified, obtaining a first private key to be verified, a second private key to be verified, and a third private key to be verified;

[0101] Decrypt and verify the satellite positioning ciphertext information of the server by using the first private key to be verified to generate a first decryption result;

[0102] Decrypt and verify the server identity ciphertext information using the second private key to be verified to generate a second decryption result;

[0103] Decrypt and verify the encrypted data information stored on the server by using the third private key to be verified, and generate a third decryption result;

[0104] When the first decryption result, the second decryption result and the third decryption result are verified, a user-side authorization verification pass instruction is generated.

[0105] Furthermore, the user-side encryption module 14 executes the following steps:

[0106] According to the authorized server, the fourth public key and the fifth public key are transmitted;

[0107] Encapsulating and encrypting the watermark information to be embedded by using the fourth public key to generate ciphertext information to be embedded;

[0108] Encapsulating and encrypting the user-side satellite positioning information by using the fifth public key to generate user-side satellite positioning ciphertext information;

[0109] The watermark ciphertext information to be embedded and the satellite positioning ciphertext information of the user end are added into the ciphertext information to be embedded, and the authorization record of the authorized server end is deleted.

[0110] Furthermore, the user-side encryption module 14 executes the following steps:

[0111] According to the authorized server, obtain the asymmetric encryption fourth module and the asymmetric encryption fifth module;

[0112] Generate a fourth private key and the fourth public key through the asymmetric encryption fourth module;

[0113] A fifth private key and the fifth public key are generated through the asymmetric encryption fifth module.

[0114] Furthermore, the user-side authorization verification module 16 executes the following steps:

[0115] According to the server, obtaining a fourth private key to be verified and a fifth private key to be verified;

[0116] Decrypting the watermark ciphertext information to be embedded by using the fourth private key to be verified to generate a fourth decryption result;

[0117] Decrypting the satellite positioning ciphertext information of the user terminal by using the fifth private key to be verified to generate a fifth decryption result;

[0118] When the fourth decryption result and the fifth decryption result are verified, a server-side authorization verification passed instruction is generated.

[0119] Any step of the method described above can be stored as a computer instruction or program in an unlimited computer memory, and can be called and recognized by an unlimited computer processor to implement any method in the embodiments of the present application, without any unnecessary restrictions.

[0120] Furthermore, the first or second mentioned above may not only represent an order relationship, but may also represent a specific concept, and / or refer to multiple elements that can be selected individually or in full. Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the present application and its equivalents, the present application intends to include these modifications and variations.

Claims

1. A tampering verification method based on satellite positioning authorization service, characterized in that: The method uses a tampering verification system based on satellite positioning authorization service, the system includes a service end and a user end, and the method includes: Obtaining basic information of the server, wherein the basic information of the server includes satellite positioning information of the server, identity information of the server and data stored on the server; Encrypting the server satellite positioning information, the server identity information and the server storage data to generate authorization verification ciphertext information; Acquire basic information of the user terminal to be verified, wherein the basic information of the user terminal to be verified includes watermark information to be embedded and satellite positioning information of the user terminal; Encrypting the watermark information to be embedded and the satellite positioning information of the user terminal to generate ciphertext information to be embedded; Verifying the user terminal to be verified according to the authorization verification ciphertext information; If successful, verify the server according to the ciphertext information to be embedded; If yes, embedding watermark into the data stored in the server through the watermark information to be embedded; The step of encrypting the server satellite positioning information, the server identity information and the server storage data to generate the authorization verification ciphertext information includes: Transmitting the first public key, the second public key and the third public key through the authorized user terminal; Encrypting and encapsulating the server-side satellite positioning information by using the first public key to generate server-side satellite positioning ciphertext information; Encrypt and encapsulate the server identity information using the second public key to generate server identity ciphertext information; Encrypt and encapsulate the server-side stored data using the third public key to generate ciphertext information of the server-side stored data; Add the server satellite positioning ciphertext information, the server identity ciphertext information and the server storage data ciphertext information into the authorization verification ciphertext information, and delete the authorization record of the authorized user end; The verifying the to-be-verified user terminal according to the authorization verification ciphertext information includes: According to the user terminal to be verified, obtaining a first private key to be verified, a second private key to be verified, and a third private key to be verified; Decrypt and verify the satellite positioning ciphertext information of the server by using the first private key to be verified to generate a first decryption result; Decrypt and verify the server identity ciphertext information using the second private key to be verified to generate a second decryption result; Decrypt and verify the encrypted data information stored on the server by using the third private key to be verified, and generate a third decryption result; When the first decryption result, the second decryption result and the third decryption result are verified, a user-side authorization verification pass instruction is generated.

2. The method according to claim 1, characterized in that The transmitting of the first public key, the second public key and the third public key through the authorized user terminal includes: Obtaining, through the authorized user terminal, an asymmetric encryption first module, an asymmetric encryption second module, and an asymmetric encryption third module; Generate a first private key and a first public key through the asymmetric encryption first module; Generate a second private key and a second public key through the asymmetric encryption second module; A third private key and the third public key are generated through the asymmetric encryption third module.

3. The method according to claim 1, characterized in that The step of encrypting the watermark information to be embedded and the satellite positioning information of the user terminal to generate the ciphertext information to be embedded includes: According to the authorized server, the fourth public key and the fifth public key are transmitted; Encapsulating and encrypting the watermark information to be embedded by using the fourth public key to generate ciphertext information to be embedded; Encapsulating and encrypting the user-side satellite positioning information by using the fifth public key to generate user-side satellite positioning ciphertext information; The watermark ciphertext information to be embedded and the satellite positioning ciphertext information of the user end are added into the ciphertext information to be embedded, and the authorization record of the authorized server end is deleted.

4. The method according to claim 3, characterized in that The transmitting of the fourth public key and the fifth public key according to the authorized server includes: According to the authorized server, obtain the asymmetric encryption fourth module and the asymmetric encryption fifth module; Generate a fourth private key and the fourth public key through the asymmetric encryption fourth module; A fifth private key and the fifth public key are generated through the asymmetric encryption fifth module.

5. The method according to claim 4, characterized in that The verifying the server according to the ciphertext information to be embedded includes: According to the server, obtaining a fourth private key to be verified and a fifth private key to be verified; Decrypting the watermark ciphertext information to be embedded by using the fourth private key to be verified to generate a fourth decryption result; Decrypting the satellite positioning ciphertext information of the user terminal by using the fifth private key to be verified to generate a fifth decryption result; When the fourth decryption result and the fifth decryption result are verified, a server-side authorization verification passed instruction is generated.

6. A tampering verification system based on satellite positioning authorization service, characterized in that: The system includes a server and a user, and further includes: A server information collection module, used to obtain basic information of the server, wherein the basic information of the server includes satellite positioning information of the server, identity information of the server and data stored on the server; A server encryption module, used to encrypt the server satellite positioning information, the server identity information and the server storage data to generate authorization verification ciphertext information; A user terminal information acquisition module, used to obtain basic information of the user terminal to be verified, wherein the basic information of the user terminal to be verified includes watermark information to be embedded and satellite positioning information of the user terminal; A user-side encryption module, used to encrypt the watermark information to be embedded and the user-side satellite positioning information to generate ciphertext information to be embedded; The server authorization verification module is used to verify the user terminal to be verified according to the authorization verification ciphertext information; A user end authorization verification module is used to verify the server end according to the ciphertext information to be embedded if the verification of the user end to be verified is passed; A watermark embedding module, used for embedding a watermark into the data stored in the server through the watermark information to be embedded if the server is authenticated; The server-side encryption module executes the steps including: Transmitting the first public key, the second public key and the third public key through the authorized user terminal; Encrypting and encapsulating the server-side satellite positioning information by using the first public key to generate server-side satellite positioning ciphertext information; Encrypt and encapsulate the server identity information using the second public key to generate server identity ciphertext information; Encrypt and encapsulate the server-side stored data using the third public key to generate ciphertext information of the server-side stored data; Add the server satellite positioning ciphertext information, the server identity ciphertext information and the server storage data ciphertext information into the authorization verification ciphertext information, and delete the authorization record of the authorized user end; the server authorization verification module executes the steps including: According to the user terminal to be verified, obtaining a first private key to be verified, a second private key to be verified, and a third private key to be verified; Decrypt and verify the satellite positioning ciphertext information of the server by using the first private key to be verified to generate a first decryption result; Decrypt and verify the server identity ciphertext information using the second private key to be verified to generate a second decryption result; Decrypt and verify the encrypted data information stored on the server by using the third private key to be verified, and generate a third decryption result; When the first decryption result, the second decryption result and the third decryption result are verified, a user-side authorization verification pass instruction is generated.

Images