An image security transmission and storage method and system suitable for a UAV remote sensing platform

Abstract

This invention provides a method and system for secure image transmission and storage suitable for unmanned aerial vehicle (UAV) remote sensing platforms. The system is characterized by: a UAV subsystem acquiring video frames or image data via UAV equipment, performing lightweight encryption, and embedding verification information; a cloud platform storing the data; and a user subsystem decrypting the cloud platform data by verifying user information and retrieving it to the user's end. This method and system can encrypt video frames or image data acquired by the UAV into multiple sub-data units before transmission. Even if some sub-data units experience packet loss or errors during transmission, the original video frames or images can still be recovered using the remaining sub-data units, effectively enhancing transmission fault tolerance. Furthermore, the data transmitted and stored on the cloud platform is encrypted; each encrypted data unit contains no information about the original data, and data can only be retrieved after user verification, effectively ensuring data storage security.

Description

Technical Field

[0001] This invention belongs to the field of IoT intelligent security protection, and in particular relates to a method and system for secure image transmission and storage suitable for UAV remote sensing platforms. Background Technology

[0002] With the rapid development of IoT technology, various drone applications are emerging, such as aerial photography in the field, line inspection, and remote sensing mapping. However, drones need to transmit data to receiving terminals in real time. Due to unstable outdoor network signals, data loss is common during transmission, making it difficult to maintain the integrity of the acquired data. Furthermore, the transmission channel is not always secure, making data easily intercepted by unauthorized personnel. On the other hand, with the development of various cloud platforms, the storage and processing of massive amounts of visual media data are gradually shifting to cloud servers, making the use of cloud platform computing and storage capabilities a future trend. If drone data is directly stored on a cloud platform, the data content is easily accessible to cloud platform service providers or network eavesdroppers, compromising data security. Therefore, how to leverage the resource advantages of cloud platforms for the secure transmission and storage of drone data while protecting its privacy is a critical issue that urgently needs to be addressed. Summary of the Invention

[0003] The purpose of this invention is to solve the problems existing in the prior art and to propose a method and system for secure image transmission and storage suitable for UAV remote sensing platforms.

[0004] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0005] In a first aspect, a method for secure transmission and storage of images suitable for unmanned aerial vehicle (UAV) remote sensing platforms is provided, characterized in that the method comprises the following steps:

[0006] (1) Acquire video frames or image data from drone equipment;

[0007] (2) Encrypt the image or video frame using the secret sharing algorithm to generate n encrypted sub-data;

[0008] (3) Use the histogram shifting method to embed the user-set verification information into each data unit;

[0009] (4) Transmit each piece of data to the cloud platform and store it separately;

[0010] (5) If the data is recovered, extract any k sub-data from the cloud platform and verify whether the verification information in each sub-data is correct. If it is incorrect, extract a sub-data from the cloud platform again for verification. If the verification is successful, use the Lagrange interpolation algorithm to decrypt the data.

[0011] Specifically, in step (2), the acquired video frames or images are processed, and the values ​​of each k pixels in the video frame or image are a0, a1, ..., a0. k-1 As a group, substitute into the following function:

[0012] q i (x)=(a0+a1x+…+a k-1 x k-1 mod(x) 8 +x 4 +x 3 +x 2 +1), i=1,2,..., The encrypted n sub-data are as follows:

[0013]

[0014] Where || represents the concatenation symbol, mod represents the modulo operation, and q i (x) represents the generator polynomial used to generate encrypted sub-data, x∈[1,n], M×N is the size of the video frame or image, k and n are user-defined, where n≥k; its meaning is that the encrypted video frame or image data is stored in n copies, each copy will not reveal any information about the original video frame or image, any k copies can be decrypted to get the original data; at the same time, even if any nk copies of data are lost or destroyed, it will not affect the decryption.

[0015] Specifically, step (3) includes the following steps:

[0016] 1) The user sets a key, and a hash algorithm is used to convert the key into binary verification information X;

[0017] 2) Each encrypted sub-data is in the form of a two-dimensional matrix. Each matrix is ​​divided into two parts, A and B, where A is the first 10 pixel values ​​of the matrix and B is the remaining part of the matrix.

[0018] 3) Construct a histogram of B, select an appropriate embedding pixel value P, and its position map is map1;

[0019] 4) Increment all pixel values ​​greater than P by 1, that is, shift the histogram of all pixel values ​​greater than P one position to the right, and record the position of all pixel values ​​with a value of 256 as map2, and set it to 255.

[0020] 5) Extract the last 4 least significant bits (LSB) of each pixel value in A and set them as AP. Embed AP and the verification information X into the last bit of the pixel value of P. After compression, map1 and map2 are embedded into the last 4 LSBs of A.

[0021] Specifically, the steps in step (5) are as follows: following the reverse process of step (3), extract the verification information from k sub-data and reconstruct the sub-secret. If the verification information is incorrect, extract a new sub-data. If the verification information is correct, then extract the pixel value q at the same position on each sub-secret. l (x i Substitute into the following function:

[0022]

[0023] Where x i and x j Let i and j be the selected sub-data, respectively. mod represents the modulo operation, and M×N is the size of the video frame or image.

[0024] After processing the function, extract its constant coefficient values, which correspond to the k pixel values ​​of the decrypted video frame or image. After all data is processed, the pixel values ​​are arranged in order to obtain the original decrypted video frame or image data.

[0025] A second aspect of the present invention provides an image secure transmission and storage system suitable for unmanned aerial vehicle (UAV) remote sensing platforms, comprising a UAV subsystem, a cloud platform, and a user subsystem, wherein:

[0026] (I) The UAV subsystem, used to acquire video frames or image data and perform lightweight encryption, includes UAV equipment, a data acquisition module, and a data processing module, wherein:

[0027] The data acquisition module is used to acquire video frames or image data captured by the drone equipment;

[0028] The data processing module is used to encrypt the acquired video frames or image data using a secret sharing algorithm, encrypting them into n sub-data. Then, the verification information set by the user in advance is embedded into each sub-data, and finally the data is sent to the cloud platform.

[0029] (ii) A cloud platform, comprising multiple storage modules for storing the received sub-data respectively;

[0030] (III) User Subsystem, used to decrypt cloud platform data and extract it to the user terminal, includes a data extraction module and a user terminal, wherein:

[0031] The data extraction module first extracts any k sub-data from the cloud platform, verifies whether the verification information embedded in each sub-data has been modified. If it has not been modified, it decrypts the data. If it has been modified, it re-extracts the sub-data from the cloud platform, decrypts it, and sends the decrypted data to the user terminal.

[0032] The user terminal is used to set the key, generate verification information, and receive decrypted drone data.

[0033] Compared with the prior art, the beneficial effects of the present invention are reflected in:

[0034] 1. After acquiring video frames or images, the drone performs lightweight encryption, encrypting the data content into n sub-data segments before transmission. When the receiving terminal decrypts the data, only any k sub-data segments are needed to decrypt the original data, while allowing for errors in the n sub-data segments. Furthermore, verification information is embedded in the sub-data segments. Before restoring the original data, the information is verified for correctness. If an error is found, it indicates packet loss, bit errors, or other issues during transmission, and new sub-data segments are selected for recovery. This effectively prevents data loss during transmission, significantly enhancing transmission security and fault tolerance.

[0035] 2. All data stored on the cloud platform is encrypted. Each encrypted data item cannot reveal any information about the original data, effectively ensuring the security of data storage. Attached Figure Description

[0036] Figure 1 This is a flowchart of the data storage method of the present invention.

[0037] Figure 2 This is a schematic diagram of the system structure of the present invention. Detailed Implementation

[0038] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings and embodiments.

[0039] Example 1:

[0040] like Figure 1 As shown, a method for secure image transmission and storage suitable for UAV remote sensing platforms includes the following steps:

[0041] S101: Acquire video frames or image data from drone equipment;

[0042] S102: Encrypt the image or video frame using a secret sharing algorithm to generate n encrypted sub-data;

[0043] S103: Use histogram shifting to embed user-defined verification information into each data unit;

[0044] S104: Transmit each piece of data to the cloud platform and store it separately;

[0045] S105: If the data is recovered, extract any k sub-data from the cloud platform, verify whether the verification information in each sub-data is correct. If it is incorrect, extract another sub-data from the cloud platform for verification. If the verification is successful, use the Lagrange interpolation algorithm to decrypt the data.

[0046] In step S102, the acquired video frames or images are processed, and the values ​​of each k pixels in the video frame or image are a0, a1, ..., a k-1 As a group, substitute into the following function:

[0047] q i (x)=(a0+a1x+…+a k-1 x k-1 mod(x) 8 +x 4 +x 3 +x 2 +1), i=1,2,...,

[0048] The encrypted n sub-data are as follows:

[0049]

[0050] Where || represents the concatenation symbol, mod represents the modulo operation, and M×N is the size of the video frame or image.

[0051] Both k and n are user-defined, where n ≥ k. This means that the encrypted video frame or image data is stored in n copies, each copy of which will not reveal any information about the original video frame or image. Any k copies can be decrypted to retrieve the original data; at the same time, even if any n copies of data are lost or corrupted, it will not affect the decryption.

[0052] In step S103, the specific steps are as follows:

[0053] 1) The user sets a key, and uses a hash algorithm to convert the key into binary verification information X, such as 10111001...

[0054] 2) Each encrypted sub-data is in the form of a two-dimensional matrix. Each matrix is ​​divided into two parts, A and B, where A is the first 10 pixel values ​​of the matrix and B is the remaining part of the matrix.

[0055] 3) Construct a histogram of B, select an appropriate embedded pixel value P, and its location map is map1.

[0056] 4) Increment all pixel values ​​greater than P by 1, that is, shift the histogram of all pixel values ​​greater than P one position to the right, and record the position of all pixel values ​​with a value of 256 as map2, and set it to 255.

[0057] 5) Extract the last 4 LSB bits of each pixel value in A and set them as AP. Embed AP and the verification information X into the last bit of the pixel value of P. Compress map1 and map2 and embed them into the last 4 LSB bits of A.

[0058] In step S105, following the reverse process of step S103, verification information is extracted from k sub-data and the sub-secret is reconstructed. If the verification information is incorrect, a new sub-data is extracted (if the verification information is incorrect, it indicates that packet loss or bit errors may have occurred during data transmission; to prevent errors in the process of restoring the original data, this sub-data needs to be discarded); if the verification information is correct, the pixel value q at the same position on each sub-secret is... l (x i Substitute into the following function:

[0059]

[0060] Where x i and x j These are the selected i-th and j-th sub-data, respectively, with mod representing modulo operation. After simplification, the constant coefficient values ​​are extracted, corresponding to the k pixel values ​​of the decrypted video frame or image. After all data is processed, the pixel values ​​are arranged in order to obtain the decrypted original video frame or image data.

[0061] Example 2:

[0062] like Figure 2 As shown, this embodiment provides an image secure transmission and storage system suitable for UAV remote sensing platforms, including:

[0063] The unmanned aerial vehicle (UAV) subsystem includes:

[0064] The data acquisition module acquires video frames or image data captured by the drone equipment.

[0065] The data processing module encrypts the acquired video frames or image data using a secret sharing algorithm, dividing it into n sub-data. Then, it embeds the user-pre-set verification information into each sub-data and finally sends it to the cloud platform.

[0066] Cloud platforms, including:

[0067] Multiple storage modules: each storing multiple received sub-data.

[0068] The user subsystem includes:

[0069] Data extraction module: First, extract any k sub-data from the cloud platform, verify whether the verification information embedded in each sub-data has been modified. If it has not been modified, decrypt it. If it has been modified, extract the sub-data from the cloud platform again, decrypt it, and send the decrypted data to the user terminal.

[0070] User terminal: Sets the key to generate verification information; receives decrypted drone data.

[0071] More specifically, in this embodiment, the data processing module encrypts the images or video frames acquired by the UAV equipment using a secret sharing algorithm, dividing them into n sub-data units, where n is user-defined. Then, a histogram shifting method is used to embed user-defined verification information into each encrypted sub-data unit for verification during data extraction.

[0072] More specifically, in this embodiment, the cloud platform is a large resource pool provided by a third-party service provider, allowing users to transmit and store data and use its computing functions on demand.

[0073] More specifically, the aforementioned cloud platform includes multiple storage modules that receive uploaded encrypted sub-data, allocate them appropriately, and store them separately.

[0074] More specifically, in this embodiment, if the user needs to obtain drone data, the data extraction module extracts any k subsets of data stored on the cloud platform, where k (k≤n) is user-defined. First, it extracts the verification information from each of the k subsets. If the information is correct, the subset is used; if the verification information is incorrect, it indicates that errors occurred during data transmission. In this case, the subset is discarded, and a new subset is extracted from the cloud platform storage module and verified. After successful verification, the data is decrypted using Lagrange interpolation to restore the original data content and then sent to the user terminal.

Claims

1. A method for secure image transmission and storage suitable for UAV remote sensing platforms, characterized in that, The method includes the following steps: (1) Acquire video frames or image data from UAV equipment; (2) Encrypt the image or video frame using a secret sharing algorithm to generate... Encrypted sub-data; (3) The user-set verification information is embedded into each data unit using the histogram shifting method. The specific steps include: 1) The user sets a key, and a hash algorithm is used to convert the key into binary verification information X; 2) Each encrypted sub-data is in the form of a two-dimensional matrix. Each matrix is ​​divided into two parts, A and B, where A is the first 10 pixel values ​​of the matrix and B is the remaining part of the matrix. 3) Construct a histogram of B, select an appropriate embedding pixel value P, and its location map is map1; 4) Increment all pixel values ​​greater than P by 1, that is, shift the histogram of all pixel values ​​greater than P one position to the right, and record the position of all pixel values ​​with a value of 256 as map2, and set it to 255. 5) Extract the last 4 least significant bits (LSB) of each pixel value in A and set them as AP. Embed AP and the verification information X into the last bit of the pixel value of P. Compress map1 and map2 and embed them into the last 4 LSBs of A. (4) Transmit each data segment to the cloud platform and store them separately; (5) If data is to be recovered, then extract any Each piece of data in the cloud platform is used to verify the accuracy of the verification information in each piece of data. If an error is found, a new piece of data is extracted from the cloud platform for verification. If the verification passes, the data is decrypted using the Lagrange interpolation algorithm.

2. The image secure transmission and storage method for UAV remote sensing platforms according to claim 1, characterized in that, In step (2), the acquired video frames or images are processed, and each video frame or image... pixel value As a group, substitute into the following function: Obtain the encrypted The molecular data are as follows: in Indicates a connector symbol. Modulo operation is represented. This represents the generator polynomial, used to generate encrypted subdata. , The size of a video frame or image. and All are user-defined, among which ; It means storing encrypted video frames or image data as... Each copy will not reveal any information about the original video frames or images, and can be used freely. The original data can be decrypted from the original data; at the same time, even if any Even if the data is lost or corrupted, it will not affect the decryption process.

3. The image secure transmission and storage method for UAV remote sensing platforms according to claim 1, characterized in that, The specific steps of step (5) are as follows: following the reverse process of step (3), extract... The verification information in the sub-data is used to reconstruct the sub-secret. If the verification information is incorrect, a new sub-data is extracted; if the verification information is correct, the pixel values ​​at the same position on each sub-secret are... Substitute into the following function: in and The selected numbers are respectively The first and second Molecular data Modulo operation is represented. The size of a video frame or image frame; After simplifying the function, extract its constant coefficient values, which correspond to the decrypted video frames or images. Each pixel value, after all data has been processed, is arranged in order to form the decrypted original video frame or image data.

4. An image secure transmission and storage system suitable for UAV remote sensing platforms, performing the method of claim 1, wherein the system comprises a UAV subsystem, a cloud platform, and a user subsystem, wherein: (a) The UAV subsystem, used to acquire video frames or image data and perform lightweight encryption, includes UAV equipment, a data acquisition module, and a data processing module, wherein: The data acquisition module is used to acquire video frames or image data captured by the drone equipment; The data processing module is used to encrypt the acquired video frames or image data using a secret sharing algorithm, encrypting them into n sub-data, then embedding the user-pre-set verification information into each sub-data, and finally sending it to the cloud platform; (ii) A cloud platform, comprising multiple storage modules for storing the received sub-data respectively; (III) User Subsystem, used to decrypt cloud platform data and extract it to the user terminal, includes a data extraction module and a user terminal, wherein: The data extraction module first extracts any data stored on the cloud platform. Each piece of data is processed to verify whether the verification information embedded in each piece of data has been modified. If it has not been modified, it is decrypted. If it has been modified, the sub-data is extracted from the cloud platform again, decrypted, and then sent to the user terminal. The user terminal is used to set the key, generate verification information, and receive decrypted drone data.

Images