Picture downloading method, device and server

Abstract

The application provides a picture downloading method, device and server, and belongs to the technical field of mobile internet. The method is applied to a client and comprises the following steps: sending an authentication request to a server of a source station; wherein the server of the source station receives and responds to the authentication request, authenticates a user holding the client, and provides ciphertext data of a decryption key to the client in the case that the authentication is passed; receiving the ciphertext data of the decryption key provided by the server of the source station; downloading a template picture from a content distribution network node; wherein the template picture is a picture obtained by performing blurring processing on an original picture in advance, and the template picture further carries metadata; the metadata at least contains ciphertext data of a download link of the original picture; and obtaining the original picture according to the ciphertext data of the decryption key and the template picture. Based on the above method, the problem of poor picture file security and easy cracking in the prior art can be solved.

Description

Technical Field

[0001] The present application belongs to the field of mobile Internet technology, and in particular relates to a method, device and server for downloading pictures. Background Art

[0002] In the field of mobile Internet technology, service sites currently typically use Content Delivery Network (CDN) technology when distributing image files. The principle of content delivery network technology is to build multiple cache servers and distribute them to areas or networks where user access is relatively concentrated. When a user visits a website and wants to obtain the corresponding image file, the global load technology is used to direct the user's access request to the nearest, normally functioning cache server, which directly responds to the user's access request, thereby avoiding bottlenecks and links on the Internet that may affect the speed and stability of data transmission as much as possible, and effectively improving the speed of image file distribution. However, in the process of image file distribution based on content delivery network technology, the key is usually stored on the client, which may cause the key to be read and decrypted, and then cause the encrypted image file to be cracked.

[0003] Currently, no effective solutions have been proposed for the above technical problems. Summary of the Invention

[0004] The present application provides a method, device and server for downloading pictures, which can solve the problems of poor security and easy cracking of picture files in existing methods.

[0005] The purpose of the embodiment of the present application is to provide a method for downloading an image, which is applied to a client and includes:

[0006] Sending an authentication request to the server of the source station; wherein the server of the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with the encrypted data of the decryption key if the authentication is successful;

[0007] Receive the ciphertext data of the decryption key provided by the server of the source station;

[0008] Downloading a template image from a content distribution network node; wherein the template image is a pre-blurred original image, and the template image also carries metadata; the metadata at least includes encrypted data of a download link for the original image;

[0009] The original image is obtained based on the ciphertext data of the decryption key and the template image.

[0010] Furthermore, in another embodiment of the method, after obtaining the original image based on the ciphertext data of the decryption key and the template image, the method further includes:

[0011] Add a user name watermark to the original image, obtain and display a target image; wherein the target image is the original image with the user name watermark.

[0012] Furthermore, in another embodiment of the method, downloading the template image from a content distribution network node includes:

[0013] Receive and respond to user-initiated access operations, interact with content distribution network nodes, and display a picture preview interface to the user; wherein the picture preview interface includes multiple template pictures;

[0014] Receive and determine the template image selected by the user based on the selection operation initiated by the user based on the image preview interface;

[0015] Obtain and generate a download request for the template image based on the image ID of the template image selected by the user;

[0016] The download request is sent to a content distribution network node to download the template image from the content distribution network node.

[0017] Furthermore, in another embodiment of the method, obtaining the original image based on the ciphertext data of the decryption key and the template image includes:

[0018] Decrypting the ciphertext data of the decryption key to obtain a decryption key;

[0019] Decrypting the metadata in the template image according to the decryption key to obtain a download link for the original image;

[0020] Download and obtain the original picture according to the download link of the original picture.

[0021] Furthermore, in another embodiment of the method, the download request at least carries an authentication parameter.

[0022] Another embodiment of the present application provides a method for downloading an image, the method being applied to a server, wherein the server is a server of an origin station, and the method comprising:

[0023] Get the original image;

[0024] Performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; the template image is a pre-blurred original image;

[0025] Receive and perform authentication based on the authentication request sent by the client and obtain the authentication result;

[0026] If the authentication result is confirmed to be successful, query and obtain the public key data of the client;

[0027] The decryption key is encrypted using the public key data to obtain ciphertext data of the decryption key; and the ciphertext data of the decryption key is sent to the client.

[0028] Furthermore, in another embodiment of the method, after performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image, the method further includes: sending the template image to a content distribution network node.

[0029] Furthermore, in another embodiment of the method, performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image includes:

[0030] Generate an encryption key and a decryption key corresponding to each other according to a preset first encryption algorithm;

[0031] Encrypting the associated data of the original image using an encryption key to obtain ciphertext data of the associated data; wherein the associated data at least includes a download link of the original image;

[0032] Construct metadata corresponding to the original image based on the ciphertext data of the associated data;

[0033] Perform image blurring processing on the original image to obtain a template image corresponding to the original image; and add the metadata to the template image.

[0034] Furthermore, in another embodiment of the method, the authentication request carries at least a user identifier.

[0035] Furthermore, in another embodiment of the method, performing authentication according to the authentication request sent by the client and obtaining the authentication result includes:

[0036] Detecting whether the user identifier in the authentication request is consistent with the user identifier in the preset first database;

[0037] When it is determined that the user identifier in the authentication request is consistent with the user identifier in the preset first database, a passed authentication result is generated.

[0038] On the other hand, the present application provides a device for downloading pictures, which is applied to a client and includes:

[0039] a sending module, configured to send an authentication request to a server at the source station; wherein the server at the source station receives and responds to the authentication request, authenticates the user holding the client, and, if the authentication is successful, provides the client with ciphertext data of a decryption key;

[0040] A receiving module, configured to receive ciphertext data of a decryption key provided by a server at the source station;

[0041] A download module, configured to download a template image from a content distribution network node; wherein the template image is a pre-blurred original image, and the template image also carries metadata; the metadata at least includes encrypted data of a download link for the original image;

[0042] The decryption module is used to obtain the original image based on the ciphertext data of the decryption key and the template image.

[0043] On the other hand, the present application provides a device for downloading an image, which is applied to a server, wherein the server is a server of an origin station, and the device includes:

[0044] The first acquisition module is used to obtain the original image;

[0045] a first encryption module configured to perform a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; and the template image is a pre-blurred original image;

[0046] The authentication module is used to receive and perform authentication according to the authentication request sent by the client and obtain the authentication result;

[0047] The second acquisition module is used to query and obtain the public key data of the client when the authentication result is determined to be passed;

[0048] The second encryption module is used to encrypt the decryption key using the public key data to obtain the ciphertext data of the decryption key; and send the ciphertext data of the decryption key to the client.

[0049] On the other hand, the present application provides a server comprising at least one processor and a memory for storing processor-executable instructions, wherein when the processor executes the instructions, the steps of any one of the method embodiments in the embodiments of the present application are implemented.

[0050] On the other hand, the present application provides a computer-readable storage medium having computer instructions stored thereon, which, when executed, implement the steps of any method embodiment in the embodiments of the present application.

[0051] On the other hand, the present application provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of any method embodiment in the embodiments of the present application.

[0052] Based on a picture downloading method, device and server provided by the present application, before specific implementation, after obtaining the original picture, the server of the source station can first blur the original picture to obtain a template picture corresponding to the original picture; then generate an encryption key and a decryption key through a preset first encryption algorithm, use the encryption key to encrypt the associated data of the original picture to obtain the ciphertext data of the associated data, and construct metadata corresponding to the original picture based on the ciphertext data; finally, add metadata to the original picture; the server of the source station holds and keeps the decryption key; and at the same time, provide the template picture to the content distribution network node.

[0053] In specific implementations, when a user wants to download a desired image, they can first use their client to initiate an authentication request to the origin server. The origin server then receives and responds to the authentication request, authenticating the user. If the authentication is successful, it retrieves and uses the user's public key to encrypt the decryption key, obtaining the ciphertext data of the decryption key. The ciphertext data of the decryption key is then provided to the user. The user then sends a download request to a content distribution network node, which initiates an authentication request to the origin server. If the authentication is successful, the client is allowed to download the template image and metadata.

[0054] The client can first use the private key data it holds to decrypt the ciphertext data of the decryption key to obtain the corresponding decryption key; then use the decryption key and the template image to decrypt the ciphertext data of the download link in the metadata to obtain the download link of the real original image; and then download the original image according to the download link.

[0055] Therefore, the original image can be processed by introducing the server of the source station to obtain a blurred image template carrying metadata; wherein, the above metadata also includes the ciphertext data of the download link of the original image; and the decryption key is held and managed by the server of the source station, so as to better protect the security of the image data, improve the security of the image download process, and effectively reduce the risk of the decryption key being stolen when the user keeps the decryption key himself.

[0056] In addition, after obtaining the original image, the client can first add a user name watermark to the original image, and then display the target image with the user name watermark, thereby preventing the image from being illegally obtained due to screen capture, and further protecting the security of the image data. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] In order to more clearly illustrate the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. The drawings described below are only some embodiments recorded in this application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0058] Figure 1 This is a flowchart of an embodiment of a method for downloading pictures provided by this application;

[0059] Figure 2 This is a flowchart of an embodiment of another image downloading method provided by this application;

[0060] Figure 3 This is a flowchart of a method for downloading pictures in a specific scenario example provided by this application;

[0061] Figure 4 This is a schematic diagram of the module structure of an embodiment of a picture downloading device provided by the present application;

[0062] Figure 5 This is a schematic diagram of the module structure of an embodiment of another image downloading device provided by the present application;

[0063] Figure 6 This is a hardware structure block diagram of an embodiment of a server provided by this application. DETAILED DESCRIPTION

[0064] In order to enable those skilled in the art to better understand the technical solutions in this application, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0065] Considering that service sites usually use Content Delivery Network (CDN) technology when distributing image files. The principle of content delivery network technology is to build multiple cache servers and distribute the multiple cache servers to areas or networks where user access is relatively concentrated, and then store the image files in the cache servers. When a user visits a website and wants to obtain the corresponding image file, the global load technology is used to point the user's access request to the nearest, normally working cache server, and the cache server directly responds to the user's access request, so as to avoid bottlenecks and links on the Internet that may affect the speed and stability of data transmission as much as possible, and effectively improve the speed of image file distribution. However, in the process of image file distribution based on content delivery network technology, when the user obtains the encrypted image, he will realize that the image is encrypted and can be cracked by illegal means; at the same time, this method usually stores the key on the client, which is less secure and makes the key easy to read and crack.

[0066] Furthermore, when distributing image files, service sites can also place them on the origin server. Each time a user accesses the file, they must undergo logical authentication at the origin server. Only if the authentication passes can the user access the file. While this approach improves security, the pressure and traffic on the origin server will be placed, slowing down access and impacting the user experience.

[0067] In response to the above-mentioned problems existing in the existing methods and the specific reasons for the above-mentioned problems, this application considers introducing an image download method based on CDN technology and back-source authentication, which can improve the security of image download while ensuring fast image download.

[0068] Based on the above ideas, the present application proposes a picture downloading method, which is applied to the client. First, an authentication request is sent to the server of the source station; wherein, the server of the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with the ciphertext data of the decryption key if the authentication is passed; the ciphertext data of the decryption key provided by the server of the source station is received; then, a template picture is downloaded from a content distribution network node; wherein, the template picture is a picture that has been blurred in advance for the original picture, and the template picture also carries metadata; the metadata at least contains the ciphertext data of the download link of the original picture; finally, the original picture is obtained according to the ciphertext data of the decryption key and the template picture.

[0069] See Figure 1 As shown, the embodiment of the present application provides a method for downloading pictures, which is applied to a client. In specific implementation, the method may include the following contents.

[0070] S101: Send an authentication request to the server of the source station; wherein the server of the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with the ciphertext data of the decryption key if the authentication is successful.

[0071] In some embodiments, the above-mentioned source station specifically refers to the parent service site of the CDN node, and the source station has the function of authority verification. In addition, because the source station itself has the characteristics of high security, in the embodiments of the present application, the above-mentioned source station is also used to store and manage decryption keys, and also generates ciphertext data of the decryption key based on the decryption key.

[0072] In some embodiments, the above-mentioned CDN node (content distribution network node) specifically refers to a node cache server built based on CDN technology. The CDN node is used to store template images sent by the server of the source station. CDN technology can direct the user's access request to the CDN node closest to the user based on various types of information such as network traffic conditions, the connection and load conditions of each node, and the distance from each CDN node to the user and the response time, so that the user can quickly obtain the required content from the CDN node closest to him. In the embodiment of the present application, the template image is stored in the CDN node, which can avoid network congestion, obtain faster access and download speeds, and improve the user experience.

[0073] In some embodiments, the authentication request carries at least a user identifier, which may specifically be the user's name, the user's account name, the user's registered mobile phone number, the user's account ID, and the like.

[0074] It should be noted that all user-related information and data involved in this application are obtained and used with the user's knowledge and consent. In addition, the acquisition, storage, use, and processing of the above information and data are in compliance with relevant national laws and regulations.

[0075] In some embodiments, after receiving the authentication request, the server of the origin station may perform authentication according to the authentication request sent by the client by the following method to obtain an authentication result:

[0076] S1: Check whether the user identifier in the authentication request is consistent with the user identifier in the preset first database;

[0077] S2: When it is determined that the user identifier in the authentication request is consistent with the user identifier in the preset first database, a passed authentication result is generated.

[0078] The above authentication can be specifically understood as an identity authentication for the user.

[0079] In some embodiments, the preset first database is used to store the user identifiers of all target users, specifically users who have passed a preset security verification and have a high security level. The user identifier in the authentication request is matched with the user identifiers in the preset first database. If a match is successful, that is, if the user identifier in the authentication request and the user identifier in the preset first database are consistent, the user is considered to be a target user, and therefore has a high security level, and a passed authentication result is generated.

[0080] In some embodiments, the above-mentioned preset first database can also be used to store user identifiers of risky users. Risky users specifically refer to users who have not passed the preset security verification and have low security. Accordingly, the user identifier in the authentication request is matched with the user identifier in the preset first database. In the case of a match failure, that is, when the user identifier in the authentication request is inconsistent with the user identifier in the preset first database, the user is considered to be a risky user and therefore has low security. A failed authentication result is generated, and based on the failed authentication result, a prompt message is further generated regarding the ciphertext data that does not have the right to obtain the decryption key, and the prompt message is sent to the client.

[0081] In some embodiments, the above-mentioned preset first database may also be a blockchain-based database.

[0082] S102: Receive the ciphertext data of the decryption key provided by the server of the source station.

[0083] In some embodiments, if the authentication request is successful, the source station sends the encrypted data of the decryption key to the client. The encrypted data of the decryption key is decrypted to obtain the decryption key. In some embodiments, prior to implementation, during registration, the client may generate public and private key data corresponding to the client according to a corresponding cryptographic algorithm. The client may disclose the public key data to the public, while the client retains and keeps the private key data private.

[0084] If the origin server determines that the user has passed authentication, it can query the public key data corresponding to the client held by the user based on the user ID. It then uses the public key data to encrypt the decryption key to obtain the corresponding ciphertext data of the decryption key. The ciphertext data of the decryption key is then sent to the client via wired or wireless means. In response, the client receives the ciphertext data of the decryption key provided by the origin server.

[0085] S103: Downloading a template image from a content distribution network node; wherein the template image is a picture obtained by pre-blurring the original image, and the template image also carries metadata; the metadata at least includes encrypted data of a download link of the original image.

[0086] In some embodiments, the template image is a low-resolution template image obtained by blurring the original image. The original image is the image that the user wants to download. The template image has a low resolution and does not meet the user's usage requirements. Therefore, after the user obtains the template image, they cannot use it directly and must decrypt the template image to obtain the original image with a higher resolution.

[0087] In some embodiments, a template image can be obtained by coding the entire original image; the original image can also be input into a pre-built image recognition model, and the key positions of the original image including key information can be identified according to the pre-built image recognition model, and the key positions can be coded to obtain a template image; the original image can also be reduced to obtain a template image, etc. It should be noted that the embodiments of the present application do not limit the method of obtaining the template image.

[0088] In some embodiments, the template image carries at least metadata; wherein the metadata may specifically be ciphertext data of associated data that can represent relevant information of the original image; the associated data includes at least a download link of the original image.

[0089] In some embodiments, during specific implementation, the metadata may be decrypted using a decryption key to obtain a download link of the original image, and then the required original image may be downloaded according to the download link.

[0090] Furthermore, the above-mentioned associated data may also include a download certificate of the original image. In some cases where security requirements are higher, the client needs to rely on the corresponding download certificate to download the required original image according to the download link.

[0091] In addition, the above-mentioned associated data may also include the storage path of the original image, the processing parameters of the original image (for example, the sharpening parameters, contrast, saturation, white balance parameters, etc. of the image), and the attribute data of the original image (for example, the size, capacity, source, etc. of the image).

[0092] In some embodiments, downloading a template image from a content distribution network node may include:

[0093] S1: Receive and respond to an access operation initiated by a user, interact with a content distribution network node, and display a picture preview interface to the user; wherein the picture preview interface includes multiple template pictures;

[0094] S2: Receive and determine the template image selected by the user based on the selection operation initiated by the user on the image preview interface;

[0095] S3: Obtain and generate a download request for the template image based on the image ID of the template image selected by the user;

[0096] S4: Send the download request to the content distribution network node to download the template image from the content distribution network node.

[0097] In some embodiments, the download request carries at least an image identifier of the template image.

[0098] In some embodiments, the download request at least carries an authentication parameter.

[0099] In some embodiments, the above authentication parameter may specifically be an authentication status code.

[0100] In some embodiments, after sending a download request to a content distribution network node, the content distribution network node accepts the download request, extracts authentication parameters from the download request, generates a corresponding authentication request based on the authentication parameters, and sends the authentication request to a server at the source station. The server at the source station receives the authentication request, extracts the corresponding authentication parameters from the authentication request, compares the authentication parameters with preset authentication parameter values, and, if the authentication parameters are consistent with the preset authentication parameter values, generates a corresponding authentication pass result and sends the authentication pass result to the content distribution network node. If the content distribution network determines that the authentication pass result has been received, it sends a download link for the template image to the client based on the image identifier of the template image. Correspondingly, if the authentication parameters are inconsistent with the preset authentication parameter values, it generates a corresponding authentication fail result and sends the authentication fail result to the content distribution network node. The content distribution network node forwards the authentication fail result to the client to inform the user that the template image cannot be downloaded from the content distribution network node.

[0101] The above authentication verification can be specifically understood as a verification of whether the user has the authority to obtain the relevant original image.

[0102] In some embodiments, after the client receives the download link of the template image, the template image can be downloaded from a content distribution network node based on multi-threading technology; the template image also carries metadata.

[0103] In some embodiments, the user downloads a low-resolution template image, which is difficult to meet the user's usage needs. Therefore, the user needs to decrypt the metadata of the template image in combination with the ciphertext data of the decryption key to finally obtain the high-resolution original image.

[0104] In some embodiments, the download request may also include the client's IP address. Accordingly, upon receiving the download request, the content delivery network node may determine the CDN node closest to the user based on the IP address as the target CDN node, and then dispatch the download request to the target CDN node for specific processing.

[0105] S104: Obtain the original image according to the ciphertext data of the decryption key and the template image.

[0106] In some embodiments, obtaining the original image based on the ciphertext data of the decryption key and the template image may include:

[0107] S1: Decrypt the ciphertext data of the decryption key to obtain the decryption key;

[0108] S2: Decrypting the metadata in the template image according to the decryption key to obtain a download link for the original image;

[0109] S3: Download and obtain the original image according to the download link of the original image.

[0110] During specific implementation, the client can use the public key data it holds to decrypt the ciphertext data of the decryption key to obtain the corresponding decryption key.

[0111] In some embodiments, after obtaining the original image, the method further includes: adding a user name watermark to the original image, obtaining and displaying a target image; wherein the target image is the original image with the user name watermark. By adding the user name watermark to the original image, users can be prevented from stealing the image by taking screenshots.

[0112] In specific implementation, the user's user identification can be obtained and used to generate the user name watermark; or the user tag customized by the user can be obtained and used to generate the user name watermark.

[0113] In some embodiments, the original image may be stored on a blockchain. Accordingly, the download link may be understood as link data indicating the storage location of the original image on the blockchain.

[0114] See Figure 2 As shown, the embodiment of the present application further provides a method for downloading an image, which is applied to a server, wherein the server is a server of a source station. In specific implementation, the method may include the following contents.

[0115] S201: Obtain the original image.

[0116] In some embodiments, after obtaining the original image, the image format of the original image can be converted to the webp format, and then the original image in the webp format is processed accordingly. By converting the original image format to the webp format, the image size can be reduced and the speed of image transmission can be further improved.

[0117] In some embodiments, optionally, after obtaining the original image, a website watermark may be added to the original image to prevent users from stealing the image by taking screenshots of the web page.

[0118] S202: Perform a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; the template image is an image obtained by pre-blurring the original image.

[0119] In some embodiments, after performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image, the method further includes: sending the template image to a content distribution network node. By sending and storing the template image on the content distribution network node, the time-consuming process of returning to the source site to obtain resources for each access can be avoided. This also prevents the source site from being overwhelmed by high concurrency, thereby speeding up user access to resources.

[0120] In some embodiments, performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image may include:

[0121] S1: Generate an encryption key and a decryption key corresponding to each other according to a preset first encryption algorithm;

[0122] S2: Encrypting the associated data of the original image using the encryption key to obtain ciphertext data of the associated data; wherein the associated data at least includes a download link of the original image;

[0123] S3: Construct metadata corresponding to the original image based on the ciphertext data of the associated data;

[0124] S4: performing image blurring processing on the original image to obtain a template image corresponding to the original image; and adding the metadata to the template image.

[0125] In some embodiments, a corresponding encryption key and decryption key can be generated according to a preset first encryption algorithm. The encryption key is used to encrypt a certain segment of data, and the decryption key is used to decrypt the segment of data. The encryption key and the decryption key are used together to increase the difficulty of data cracking and ensure the security of the data. In a specific implementation, the above-mentioned preset first encryption algorithm can be a segmented AES encryption algorithm. First, the segmented AES encryption algorithm is used to generate a corresponding encryption key and decryption key. Then, the encryption key is used to perform segmented encryption processing on the associated data of the original image to obtain multiple segments of ciphertext data of the associated data. When decrypting, the decryption key is first used to decrypt the first segment of data. Then, the decryption keys of other segments of data can be calculated using the decryption key of the first segment of data. Therefore, only the decryption key of the first segment of data needs to be generated and retained. It should be noted that this application uses the segmented AES encryption algorithm as an example for illustrative description. Other encryption algorithms can also be selected for encryption according to different usage scenarios. This application does not limit this.

[0126] In some embodiments, the encryption information of the original image (that is, the ciphertext data of the associated data) is usually stored directly in the source station. Therefore, by storing the encryption information of the original image in the metadata, the cracker cannot easily discover that the original image has been encrypted and blurred into a template image, nor can he discover that the encryption information of the original image is stored in the metadata, which can prevent the original image from being illegally decrypted and stolen.

[0127] S203: Receive and perform authentication according to the authentication request sent by the client, and obtain an authentication result.

[0128] In some embodiments, the method for performing authentication according to the authentication request sent by the client can refer to the aforementioned embodiment and will not be described in detail here.

[0129] S204: When the authentication result is determined to be passed, query and obtain the public key data of the client.

[0130] In some embodiments, the client can generate corresponding public key data and private key data based on a corresponding cryptographic algorithm (e.g., an asymmetric encryption algorithm). The public key data can be made public, while the private key data can only be held by the client and is non-public.

[0131] S205: Perform a preset second encryption process on the decryption key using the public key data to obtain ciphertext data of the decryption key; and send the ciphertext data of the decryption key to the client.

[0132] In some embodiments, after the client receives the ciphertext data of the decryption key, it can use the private key data held by the client to decrypt the ciphertext data to obtain the decryption key.

[0133] Through the above embodiment, the decryption key is subjected to a preset second encryption process, which can prevent the cracker from easily reading the decryption key; further, the ciphertext data of the decryption key is stored in the server of the source station, and the ciphertext data is sent to the client only when the authentication is passed, which further improves the security of the decryption key.

[0134] Based on the image download method provided by this application, by storing the ciphertext data of the decryption key at the source station and the template image at the content distribution network node, the security of the ciphertext data of the decryption key is guaranteed so that it cannot be easily obtained, and the advantages of CDN technology are used to increase the download speed of the template image and improve the user experience. At the same time, the back-to-source authentication technology is used to verify the correctness of the authentication parameters in the authentication request using the source station. Only when the verification is passed can the template image be downloaded from the content distribution network node, thereby improving the security of the image download; further, the download link of the original image is encrypted and then stored in the metadata, reducing the possibility of the download link of the original image being obtained illegally.

[0135] For a specific scenario example, see Figure 3 As shown, based on the picture downloading method provided by this application, fast and safe picture downloading can be achieved according to steps 1 to 12. Figure 3 In the example, step 1 indicates that the server of the source station obtains the original image and performs a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least contains the ciphertext data of the download link of the original image; the template image is a picture after the original image is blurred in advance; step 2 indicates that the server of the source station sends the template image to the CDN node; step 3 indicates that an authentication request is sent to the server of the source station, and the authentication request at least carries a user identifier; step 4 indicates that the server of the source station receives and authenticates according to the authentication request sent by the client to obtain an authentication result; if the authentication result is determined to be passed, the public key of the client is queried and obtained. key data; using the public key data to perform a preset second encryption process on the decryption key to obtain the ciphertext data of the decryption key; step 5 indicates sending the ciphertext data of the decryption key to the client; step 6 indicates that the client sends a download request to the CDN node, and the download request includes the authentication parameters; step 7 indicates that the CDN node forwards the authentication parameters to the server of the source station; step 8 indicates that the server of the source station performs authentication according to the authentication parameters; step 9 indicates that if the authentication is passed, the authentication result is returned to the CDN node; step 10 indicates that the client downloads the template image from the CDN node; step 11 indicates that the client obtains the original image according to the ciphertext data of the decryption key and the template image; step 12 indicates adding the user name watermark to the original image to obtain the target image.

[0136] Although the present application provides method operation steps as described in the embodiments or flow charts, more or fewer operation steps may be included based on conventional or non-creative means. The order of steps listed in the embodiments is only one way of executing the order of many steps and does not represent a unique execution order. When the device or client product in practice is executed, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings (for example, a parallel processor or a multi-threaded processing environment, or even a distributed data processing environment). The term "include", "comprising" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, product or equipment including a series of elements includes not only those elements, but also includes other elements that are not explicitly listed, or also includes elements inherent to such process, method, product or equipment. In the absence of more restrictions, it is not excluded that there are other identical or equivalent elements in the process, method, product or equipment including the elements. Words such as first and second are used to represent names and do not represent any particular order.

[0137] Based on the above-mentioned method for downloading pictures, one or more embodiments of the present application also provide a picture downloading device. The device may include a system (including a distributed system), software (application), module, component, server, client, etc. using the method described in the embodiment of the present application and combined with the necessary implementation hardware. Based on the same innovative concept, the device in one or more embodiments provided in the embodiment of the present application is as described in the following embodiments. Since the implementation scheme and method for solving the problem of the device are similar, the implementation of the specific device of the embodiment of the present application can refer to the implementation of the aforementioned method, and the repetitions will not be repeated. As used below, the term "unit" or "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0138] Specifically, Figure 4 This is a schematic diagram of the module structure of an embodiment of a picture downloading device provided by this application. The device is applied to the client. Figure 4 As shown, a picture downloading device provided by the present application may include: a sending module 401, a receiving module 402, a downloading module 403, and a decryption module 404.

[0139] The sending module 401 is configured to send an authentication request to a server at the source station. The server at the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with ciphertext data of a decryption key if the authentication is successful.

[0140] Receiving module 402, configured to receive ciphertext data of a decryption key provided by a server at a source station;

[0141] Download module 403, configured to download a template image from a content distribution network node; wherein the template image is a pre-blurred original image, and the template image also carries metadata; the metadata at least includes encrypted data of a download link of the original image;

[0142] The decryption module 404 is configured to obtain the original image based on the ciphertext data of the decryption key and the template image.

[0143] In some embodiments, when the above-mentioned download module 403 is specifically implemented, it can be used to receive and respond to access operations initiated by users, interact with content distribution network nodes, and display a picture preview interface to users; wherein, the picture preview interface contains multiple template pictures; receive and determine the template picture selected by the user based on the selection operation initiated by the user based on the picture preview interface; obtain and generate a download request for the template picture based on the picture identifier of the template picture selected by the user; send the download request to the content distribution network node to download the template picture from the content distribution network node; the download request also carries at least an authentication parameter.

[0144] In some embodiments, when the above-mentioned decryption module 404 is implemented, it can be used to decrypt the ciphertext data of the decryption key to obtain the decryption key; according to the decryption key, the metadata in the template image is decrypted to obtain the download link of the original image; according to the download link of the original image, the original image is downloaded and obtained.

[0145] In some embodiments, when the decryption module 404 is specifically implemented, it can also be used to add a user name watermark to the original image, obtain and display a target image; wherein, the target image is the original image with the user name watermark.

[0146] Specifically, Figure 5 This is a schematic diagram of the module structure of an embodiment of another image downloading device provided by the present application. The device is applied to a server, wherein the server is a server of a source station. Figure 5 As shown, another image downloading device provided by the present application may include: a first acquisition module 501, a first encryption module 502, an authentication module 503, a second acquisition module 504, and a second encryption module 505.

[0147] The first acquisition module 501 is used to acquire the original image.

[0148] The first encryption module 502 is used to perform a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least includes ciphertext data of the download link of the original image; the template image is an image obtained by pre-blurring the original image.

[0149] The authentication module 503 is configured to receive and perform authentication according to the authentication request sent by the client, and obtain an authentication result.

[0150] The second acquisition module 504 is configured to query and acquire the public key data of the client when the authentication result is determined to be passed.

[0151] The second encryption module 505 is configured to encrypt the decryption key using the public key data to obtain ciphertext data of the decryption key; and send the ciphertext data of the decryption key to the client.

[0152] In some embodiments, when the first encryption module 502 is specifically implemented, it can also be used to send the template image to a content distribution network node.

[0153] In some embodiments, when the above-mentioned first encryption module 502 is implemented, it can also be used to generate corresponding encryption keys and decryption keys according to a preset first encryption algorithm; use the encryption key to encrypt the associated data of the original image to obtain ciphertext data of the associated data; wherein the associated data at least includes a download link of the original image; construct metadata corresponding to the original image based on the ciphertext data of the associated data; perform image blurring on the original image to obtain a template image corresponding to the original image; and add the metadata to the template image.

[0154] In some embodiments, the authentication request at least carries a user identifier.

[0155] In some embodiments, when the authentication module 503 is implemented, it can be used to detect whether the user identifier in the authentication request is consistent with the user identifier in the preset first database; if it is determined that the user identifier in the authentication request is consistent with the user identifier in the preset first database, a passed authentication result is generated.

[0156] It should be noted that the above-mentioned device may also include other implementation methods according to the description of the method embodiment. The specific implementation methods can refer to the description of the relevant method embodiments and will not be described in detail here.

[0157] The present application also provides a server, comprising at least one processor and a memory for storing processor-executable instructions, wherein the processor can implement any one of the above-mentioned method embodiments when executing the instructions. For example, when the instructions are executed by the processor, the implementation includes the following steps: obtaining an original image; performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least contains the ciphertext data of the download link of the original image; the template image is a picture that has been blurred in advance on the original image; receiving and performing authentication according to the authentication request sent by the client to obtain an authentication result; when it is determined that the authentication result is passed, querying and obtaining the public key data of the client; performing a preset second encryption process on the decryption key using the public key data to obtain the ciphertext data of the decryption key; and sending the ciphertext data of the decryption key to the client.

[0158] The present application also provides a client, comprising at least one processor and a memory for storing processor-executable instructions, wherein the processor can implement any one of the above-mentioned method embodiments when executing the instructions. For example, when the instructions are executed by the processor, the following steps are implemented: sending an authentication request to the server of the source station; wherein the server of the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with the ciphertext data of the decryption key if the authentication is successful; receiving the ciphertext data of the decryption key provided by the server of the source station; downloading a template image from a content distribution network node; wherein the template image is an image that has been pre-blurred from the original image, and the template image also carries metadata; the metadata at least contains the ciphertext data of the download link of the original image; and obtaining the original image based on the ciphertext data of the decryption key and the template image.

[0159] It should be noted that the server or client described above may also include other implementations according to the description of the method or device embodiment. Specific implementations can refer to the description of the relevant method embodiments and will not be described in detail here.

[0160] Specifically, Figure 6 This is a hardware structure diagram of an embodiment of a server provided by this application. Figure 6 As shown, the server 10 may include one or more (only one is shown in the figure) processors 100 (the processor 100 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 200 for storing data, and a transmission module 300 for communication functions. It will be understood by those skilled in the art that Figure 6 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 6 More or fewer components shown in the figure may also include other processing hardware, such as a database or multi-level cache, GPU, or other hardware with Figure 6 Different configurations shown.

[0161] The memory 200 can be used to store software programs and modules of application software, such as the program instructions / modules corresponding to the image downloading method in the embodiment of the present application. The processor 100 executes various functional applications and data processing by running the software programs and modules stored in the memory 200. The memory 200 may include a high-speed random access memory and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 200 may further include a memory remotely located relative to the processor 100, and these remote memories may be connected to the computer terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0162] The transmission module 300 is used to receive or send data via a network. Specific examples of the aforementioned network may include a wireless network provided by a communications provider of a computer terminal. In one embodiment, the transmission module 300 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, the transmission module 300 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0163] The present application also provides a computer-readable storage medium, which stores computer program instructions, and when the computer program instructions are executed, implements: sending an authentication request to a server of a source station; wherein the server of the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with ciphertext data of a decryption key if the authentication is successful; receiving the ciphertext data of the decryption key provided by the server of the source station; downloading a template image from a content distribution network node; wherein the template image is an image that has been pre-blurred from the original image, and the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; and obtaining the original image based on the ciphertext data of the decryption key and the template image.

[0164] The present application also provides another computer-readable storage medium, which stores computer program instructions, and when the computer program instructions are executed, implements: obtaining an original image; performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least contains ciphertext data of a download link of the original image; the template image is an image that has been blurred in advance on the original image; receiving and performing authentication based on an authentication request sent by a client to obtain an authentication result; when it is determined that the authentication result is passed, querying and obtaining the public key data of the client; using the public key data to perform a preset second encryption process on the decryption key to obtain the ciphertext data of the decryption key; and sending the ciphertext data of the decryption key to the client.

[0165] The present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements: sending an authentication request to a server of a source station; wherein the server of the source station receives and responds to the authentication request, authenticates the user holding the client, and provides the client with ciphertext data of a decryption key if the authentication is successful; receiving the ciphertext data of the decryption key provided by the server of the source station; downloading a template image from a content distribution network node; wherein the template image is an image that has been pre-blurred from an original image, and the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; and obtaining the original image based on the ciphertext data of the decryption key and the template image.

[0166] The present application also provides another computer program product, which includes a computer program, which, when executed by a processor, implements: obtaining an original image; performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least contains ciphertext data of a download link of the original image; the template image is an image that has been blurred in advance on the original image; receiving and performing authentication based on an authentication request sent by a client to obtain an authentication result; when it is determined that the authentication result is passed, querying and obtaining the public key data of the client; using the public key data to perform a preset second encryption process on the decryption key to obtain the ciphertext data of the decryption key; and sending the ciphertext data of the decryption key to the client.

[0167] The foregoing description describes specific embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that described in the embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or the sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0168] The methods or devices described in the above embodiments provided in this application can implement business logic through computer programs and record them on storage media, and the storage media can be read and executed by computers to achieve the effects of the solutions described in the embodiments of this application. The storage medium may include a physical device for storing information, which is usually to digitize the information and then store it in a medium using electrical, magnetic or optical methods. The storage medium may include: devices that use electrical energy to store information, such as various types of memories, such as RAM, ROM, etc.; devices that use magnetic energy to store information, such as hard disks, floppy disks, magnetic tapes, magnetic core memories, bubble memories, and USB flash drives; devices that use optical methods to store information, such as CDs or DVDs. Of course, there are other types of readable storage media, such as quantum memories, graphene memories, and so on.

[0169] The above-mentioned data processing method or device embodiments provided in this application can be implemented by a processor in a computer executing corresponding program instructions, such as using the C++ language of the Windows operating system to implement it on a PC, on a Linux system, or other systems such as Android or iOS system programming languages ​​to implement it on a smart terminal, as well as processing logic based on a quantum computer, etc.

[0170] It should be noted that the devices and equipment described above in the specification may also include other implementation methods according to the description of the relevant method embodiments. The specific implementation methods can refer to the description of the corresponding method embodiments and will not be described one by one here.

[0171] The various embodiments in this application are described in a progressive manner. Similar parts between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, for the hardware + program embodiments, since they are basically similar to the method embodiments, the description is relatively simple. For relevant parts, refer to the partial description of the method embodiments.

[0172] For ease of description, the above devices are described in terms of their functions, divided into various modules. Of course, when implementing one or more of the present applications, the functions of some modules may be implemented in the same or multiple software and / or hardware, or a module implementing the same function may be implemented by a combination of multiple sub-modules or sub-units.

[0173] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices, and apparatus according to embodiments of the present invention. It should be understood that it can be implemented by computer program instructions, which can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce an apparatus for implementing a specified function. These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including an instruction device, which is implemented in the flowchart. Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0174] Those skilled in the art will appreciate that one or more embodiments of the present application may be provided as a method, system, or computer program product. Therefore, one or more embodiments of the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware.

[0175] Although the present application has been described with reference to the embodiments, those skilled in the art will appreciate that there are many modifications and variations to the present application without departing from the spirit of the present application. It is intended that the appended claims include these modifications and variations without departing from the spirit of the present application.

Claims

1. A method for downloading pictures, characterized in that: The method is applied to a client and includes: Sending an authentication request to the server of the source station; wherein the server of the source station receives and responds to the authentication request, performs a consistency check on the user identifier in the authentication request based on a preset first database, authenticates the user holding the client, and provides the client with the encrypted data of the decryption key if the authentication is successful; wherein the preset first database is a blockchain-based database; Receive the ciphertext data of the decryption key provided by the server of the source station after encryption based on the public key data generated when the client registered; Based on the user operation, a download request is generated and a template image is downloaded from a content distribution network node; wherein, the download request carries at least an image identifier and an authentication parameter of the template image, and the content distribution network node initiates an authentication request to the source station server according to the authentication parameter, and if the authentication is passed, returns a download link of the corresponding template image to the client according to the image identifier, so that the client can download the template image based on the download link; the template image is an image that has been pre-blurred from the original image, and the template image also carries metadata; the metadata at least includes ciphertext data of the download link of the original image; wherein, the template image is obtained by inputting the original image into a pre-built image recognition model, identifying the key position of the original image including key information according to the pre-built image recognition model, and coding the key position; the metadata is used to represent the ciphertext data of the associated data of the relevant information of the original image, and the associated data includes the storage path of the original image, the processing parameters of the original image, the download certificate of the original image, and the attribute data of the original image; the original image is stored on the blockchain; The original image is obtained based on the ciphertext data of the decryption key and the template image.

2. The method according to claim 1, characterized in that After obtaining the original image based on the ciphertext data of the decryption key and the template image, the method further includes: Add a user name watermark to the original image, obtain and display a target image; wherein the target image is the original image with the user name watermark.

3. The method according to claim 1, characterized in that Download template images from the content delivery network node, including: Receive and respond to user-initiated access operations, interact with content distribution network nodes, and display a picture preview interface to the user; wherein the picture preview interface includes multiple template pictures; Receive and determine the template image selected by the user based on the selection operation initiated by the user based on the image preview interface; Obtain and generate a download request for the template image based on the image ID of the template image selected by the user; The download request is sent to a content distribution network node to download the template image from the content distribution network node.

4. The method according to claim 3, characterized in that Obtaining the original image according to the ciphertext data of the decryption key and the template image, including: Decrypting the ciphertext data of the decryption key to obtain a decryption key; Decrypting the metadata in the template image according to the decryption key to obtain a download link for the original image; Download and obtain the original picture according to the download link of the original picture.

5. A method for downloading pictures, characterized in that: The method is applied to a server, wherein the server is a server of an origin station, and the method includes: Obtaining the original image; the original image is stored on the blockchain; A preset first encryption process is performed on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; the template image is an image obtained by pre-blurring the original image; wherein the template image is obtained by inputting the original image into a pre-built image recognition model, identifying a key position in the original image including key information according to the pre-built image recognition model, and then coding the key position; the metadata is used to represent ciphertext data of associated data of relevant information of the original image, the associated data including the storage path of the original image, processing parameters of the original image, download credentials of the original image, and attribute data of the original image; Receive and perform authentication based on the authentication request sent by the client and obtain the authentication result; If the authentication result is determined to be passed, query and obtain the public key data of the client; the public key data is based on the public key data generated when the client is registered; The decryption key is encrypted using the public key data to obtain ciphertext data of the decryption key; the ciphertext data of the decryption key is sent to the client; and an authentication request sent by the content distribution network node according to the authentication parameters is received for authentication.

6. The method according to claim 5, characterized in that After performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image, the method further includes: Send the template image to the content delivery network node.

7. The method according to claim 5, characterized in that Performing a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image includes: Generate an encryption key and a decryption key corresponding to each other according to a preset first encryption algorithm; Encrypting the associated data of the original image using an encryption key to obtain ciphertext data of the associated data; wherein the associated data at least includes a download link of the original image; Construct metadata corresponding to the original image based on the ciphertext data of the associated data; Perform image blurring processing on the original image to obtain a template image corresponding to the original image; and add the metadata to the template image.

8. The method according to claim 7, characterized in that The authentication request at least carries a user identifier.

9. The method according to claim 8, characterized in that Perform authentication based on the authentication request sent by the client and obtain the authentication result, including: Detecting whether the user identifier in the authentication request is consistent with the user identifier in the preset first database; When it is determined that the user identifier in the authentication request is consistent with the user identifier in the preset first database, a passed authentication result is generated.

10. A picture downloading device, characterized in that: The device is applied to a client and includes: a sending module, configured to send an authentication request to a server at the source station; wherein the server at the source station receives and responds to the authentication request, performs a consistency check on the user identifier in the authentication request based on a preset first database, authenticates the user holding the client, and, if the authentication is successful, provides the client with ciphertext data of a decryption key; wherein the preset first database is a blockchain-based database; A receiving module is used to receive ciphertext data of a decryption key provided by a server of a source station after encryption based on public key data generated when a client registers; A download module is configured to generate a download request based on a user operation and download a template image from a content distribution network node; wherein the download request carries at least an image identifier and authentication parameters of the template image, and the content distribution network node initiates an authentication request to the source server based on the authentication parameters, and, if the authentication is successful, returns a download link of the corresponding template image to the client based on the image identifier, so that the client can download the template image based on the download link; the template image is an image that has been pre-blurred from the original image, and the template image also carries metadata; the metadata at least includes ciphertext data of the download link of the original image; wherein the template image is obtained by inputting the original image into a pre-built image recognition model, identifying a key position in the original image that includes key information according to the pre-built image recognition model, and encoding the key position; the metadata is used to represent the ciphertext data of associated data of relevant information of the original image, the associated data including the storage path of the original image, the processing parameters of the original image, the download credentials of the original image, and the attribute data of the original image; the original image is stored on the blockchain; The decryption module is used to obtain the original image based on the ciphertext data of the decryption key and the template image.

11. A picture downloading device, characterized in that: The device is applied to a server, wherein the server is a server of an origin station, and the device includes: A first acquisition module is used to acquire an original image; the original image is stored on the blockchain; A first encryption module is configured to perform a preset first encryption process on the original image to obtain a template image and a decryption key corresponding to the original image; wherein the template image also carries metadata; the metadata at least includes ciphertext data of a download link of the original image; the template image is a pre-blurred original image; wherein the template image is obtained by inputting the original image into a pre-built image recognition model, identifying a key position in the original image including key information according to the pre-built image recognition model, and then performing coding processing on the key position; the metadata is used to represent ciphertext data of associated data of relevant information of the original image, the associated data including a storage path of the original image, processing parameters of the original image, a download credential of the original image, and attribute data of the original image; The authentication module is used to receive and perform authentication according to the authentication request sent by the client and obtain the authentication result; A second acquisition module is used to query and obtain the public key data of the client when the authentication result is determined to be passed; the public key data is based on the public key data generated when the client is registered; The second encryption module is used to use the public key data to perform a preset second encryption process on the decryption key to obtain the ciphertext data of the decryption key; and send the ciphertext data of the decryption key to the client; receive the authentication request sent by the content distribution network node according to the authentication parameters for authentication.

12. A server, characterized in that: The method comprises at least one processor and a memory storing computer-executable instructions, wherein the processor implements the steps of the method according to any one of claims 5 to 9 when executing the instructions.

13. A computer-readable storage medium, characterized in that Computer instructions are stored thereon, and when the instructions are executed by a processor, the steps of the method according to any one of claims 1 to 4, or 5 to 9 are implemented.

14. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 4, or 5 to 9 are implemented.

Images