A network disk information protection method and system based on information camouflage

Abstract

The present invention provides a network disk information protection method and system based on information disguise, which belongs to the field of information security protection. The method includes inputting network disk information to be transmitted, determining the information disguise type according to the size of the network disk information to be transmitted; selectively performing information encryption processing on the network disk information to be transmitted based on the information disguise type to generate a first layer of information; performing information disguise processing on the first layer of information to generate a second layer of information, or directly performing information disguise processing on the network disk information to be transmitted to generate a second layer of information; realizing protection of the network disk information to be transmitted during the sharing process; wherein the information disguise processing includes selecting a security carrier based on the network disk information to be transmitted, and embedding the first layer of information into the security carrier. The present invention effectively solves the hidden dangers of leakage of network disk information during storage, transmission, and sharing, realizes full-process information protection between mobile terminals and the cloud, and makes users' information sharing in the cloud more secure, controllable, and more applicable.

Description

Technical Field

[0001] The present invention relates to the field of information security protection, and in particular to a network disk information protection method and system based on information camouflage. Background Art

[0002] With the emergence of numerous online storage security incidents, people are paying more and more attention to the secure sharing and storage of information on online storage. Currently, the industry and users mainly use the following two methods to protect the security of online storage data:

[0003] (1) Security methods based on password and authentication technology. They mainly use password technology to hide content. Usually, relatively secure encryption algorithms are used to encrypt secret information to make it unrecognizable and transmit it through public channels. Usually, users use third-party tools to encrypt secret information at the terminal and then share the secret information to the network disk. In response to the security issues of public sharing links, the network disk provides a user extraction code setting function. Users need to enter the correct extraction code to extract the network disk file. However, this method will reveal the fact that secret information is communicated, which will cause attackers to attack in a targeted manner. Moreover, its information security depends to a large extent on the security of the key, and its information may be extracted through targeted plug-ins.

[0004] (2) Secure communication methods based on information camouflage technology. This type of method aims to disguise communication behavior, disguising secret information as other information unrelated to the actual transmission to make it imperceptible. Its security depends on the imperceptibility of information transmission behavior. Today, there are more than a hundred types of stealth tools, but there are very few stealth tools for mobile smart terminals, and only a few relatively simple camouflage algorithms have been implemented. Therefore, this method is not only limited in application, but also cannot guarantee that the camouflage will not be detected.

[0005] In summary, the above two methods rely solely on the security mechanisms provided by the platform or tools for protection. Not only do they have the risk of information leakage and fail to meet the security requirements of information sharing, transmission and storage, but they are also less practical and less selective, and cannot meet the sharing needs of different users. Summary of the Invention

[0006] The present invention provides an information protection method and system based on information camouflage, which are used to solve the defects in the existing technology, provide diversified and multi-level security protection strategies, and meet the security requirements of information sharing, transmission and storage.

[0007] In a first aspect, a network disk information protection method based on information camouflage is provided, the method comprising:

[0008] Input the network disk information to be transferred, and determine the information disguise type according to the size of the network disk information to be transferred;

[0009] Selectively encrypting the network disk information to be transmitted based on the information disguise type to generate first-layer information;

[0010] Performing information disguise processing on the first layer of information to generate second layer information, or directly performing information disguise processing on the network disk information to be transmitted to generate second layer information; achieving protection of the network disk information to be transmitted during the sharing process;

[0011] The information disguise processing includes selecting a security carrier based on the network disk information to be transmitted, and embedding the first layer information into the security carrier.

[0012] Furthermore, the information camouflage type includes: data camouflage or link camouflage.

[0013] Furthermore, the information disguise processing method includes: manual disguise or automatic disguise;

[0014] The manual camouflage includes a simple manual mode or a complex manual mode.

[0015] Further,

[0016] The simple manual mode is: directly embedding the first layer of information completely into one of the security carriers;

[0017] The complex manual mode is: splitting the first layer of information to obtain multiple partial disguised information, and embedding the multiple partial disguised information into multiple security carriers respectively according to a set order.

[0018] Furthermore, the method further includes: restoring the second layer information based on the set order to obtain the network disk information to be transferred;

[0019] The restoration includes manual restoration or automatic restoration.

[0020] On the other hand, the present invention also provides a network disk information protection system based on information camouflage, which system includes at least an information camouflage encryption module; wherein the information camouflage encryption module includes:

[0021] An information input and disguise type selection unit, configured to input the network disk information to be transmitted, determine the information disguise type according to the size of the network disk information to be transmitted, and feed the information disguise type back to the encryption processing unit;

[0022] An encryption processing unit is configured to selectively perform information encryption processing on the network disk information to be transmitted according to the received information disguise type to generate first-layer disguise information and send it to the information disguise unit; or directly receive the network disk information to be transmitted and generate second-layer information;

[0023] an information disguise processing unit, configured to select a security carrier according to the network disk information to be transmitted, and embed the first layer information into the security carrier to generate second layer information;

[0024] Information output unit: used to output and share the second-layer information.

[0025] Furthermore, the information camouflage processing unit includes a manual camouflage unit and / or an automatic camouflage unit;

[0026] The manual camouflage unit includes a simple manual mode and / or a complex manual mode.

[0027] Further,

[0028] The simple manual mode is used to directly embed the first layer of information completely into one of the secure carriers;

[0029] The complex manual mode is used to split the first layer information into a plurality of partial disguised information, and embed the plurality of partial disguised information into a plurality of security carriers respectively according to a set order.

[0030] Furthermore, the system further includes an information restoration module, configured to restore the second layer information based on the set order and output the restored network disk information to be transferred;

[0031] The information restoration module includes a search and extraction unit and a restoration unit.

[0032] Furthermore, the system also includes an authentication module, a verification module and a communication module.

[0033] In general, the technical solution conceived by the present invention can achieve the following beneficial effects compared with the prior art:

[0034] (1) The present invention provides a network disk information protection method and system based on information disguise. In view of the shortcomings of public sharing and encrypted sharing, the network disk information to be transmitted is first selectively encrypted with the help of information disguise technology, and then embedded in a secure carrier, and then shared on a public website for the recipient to download and extract information; the information disguise technology is applied to the full-process security protection of network disk information, so that the disguise of network disk information is not easy to be detected, and a diversified and multi-level security protection strategy is provided. It can not only directly transmit the network disk information to be transmitted between the information sender and the information receiver, and get rid of the hidden dangers of monitoring and blocking in traditional "user-user" point-to-point communication; but also effectively solve the hidden dangers of information leakage brought about by the transmission, sharing and storage of the network disk information to be transmitted, realize the full-process information protection of mobile terminals and the cloud, change the original status quo of relying solely on the security mechanism provided by the platform for protection, and make users more secure and controllable when sharing network disk information in the cloud.

[0035] (2) The present invention provides an information protection method and system based on information disguise. After selectively encrypting the network disk information to be transmitted and then disguising it, the network disk information can be directly shared on a public website. Although the majority of netizens who do not include the information recipients can receive the security carrier, they cannot obtain the secret network disk information behind the security carrier itself. As a result, the network disk information to be transmitted cannot be easily obtained through targeted plug-ins. It not only has a strong deceptive effect, but also improves the security of network disk information transmission, meeting the needs of secure storage and transmission of network disk information.

[0036] (3) The present invention provides a network disk information protection method and system based on information camouflage, which can not only selectively encrypt the network disk information to be transmitted, but also selectively perform automatic camouflage, manual simple camouflage, or manual complex camouflage, meeting the different needs of users and having strong applicability. In addition, when performing complex camouflage, the first layer of information is split to obtain multiple parts of camouflaged information, and the multiple parts of camouflaged information are respectively embedded in multiple security carriers in a set order; and when restoring, the user also needs to extract and restore according to the sequential password. Not only does it ensure the security camouflage of the network disk file by starting with a small embedding rate, but it also ensures that the camouflaged information is not detected, thereby improving the security of network disk information transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the present invention or the prior art, a brief introduction is given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0038] Figure 1 This is a flowchart of an information protection method and system based on information camouflage provided by the present invention;

[0039] Figure 2 This is a schematic diagram of the system composition of an information protection method and system based on information camouflage provided by the present invention. DETAILED DESCRIPTION

[0040] In order to make the purpose, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below in conjunction with the drawings and embodiments of the present invention. Obviously, the embodiments described are part of the embodiments of the present invention, rather than all the embodiments. In addition, the technical features involved in the various embodiments described below can be combined with each other as long as they do not conflict with each other. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0041] It should be noted that, in the description of the embodiments of the present invention, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element. In addition, the terms "first", "second", "third" and "fourth" in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order.

[0042] The following combination Figure 1-Figure 2 An information security protection method and system provided by an embodiment of the present invention are described.

[0043] Figure 1 This is a flow chart of an information security protection method and system provided by the present invention. Figure 1 As shown, including but not limited to the following steps:

[0044] Step 101: Input the network disk information to be transmitted, and determine the information disguise type according to the size of the network disk information to be transmitted.

[0045] The network disk information to be transmitted may be text, images, audio and video information, etc., which is not specifically limited in this embodiment.

[0046] Information camouflage can be either data or link. It should be noted that data and link camouflage are primarily based on the size of the network disk file, which is determined based on a user-defined threshold.

[0047] Data camouflage is primarily used to securely share small files on a network disk, such as text, images, and audio; link camouflage is primarily used to securely share large files on a network disk, such as videos. Compared to link camouflage, data camouflage is more efficient. Users can choose between data camouflage and link camouflage based on the size of the network disk information being transferred. The diverse camouflage types balance efficiency and information security, making it highly practical and efficient while also meeting the needs of different users.

[0048] Step 102: selectively encrypt the network disk information to be transmitted based on the information disguise type to generate first-layer information.

[0049] It can be understood that selective information encryption processing is as follows: when it is determined that the information disguise type is data disguise, its security is low, and it is necessary to first perform information encryption processing in a manner such as encryption algorithm and authentication technology to improve its security; when it is determined that the information disguise type is link disguise, its security performance is high and the disguise efficiency is slow, then it is not necessary to perform information encryption processing, and subsequent information disguise processing can be performed directly, thereby improving its disguise efficiency to a certain extent; by selectively performing information encryption processing, information disguise is made more flexible and more efficient.

[0050] It should be noted that when the information disguise type is determined to be link disguise, the network disk information to be transmitted can also be split first to obtain multiple parts of the network disk information to be transmitted that are smaller than the file set threshold, and then the information encryption processing is performed in sequence according to the first order set by the user to generate the first layer of information.

[0051] Optionally, the information encryption process may be any cryptographic technology such as an encryption algorithm, encryption software, conversion to ciphertext encryption, etc.

[0052] Step 103: Perform information disguise processing on the first layer of information to generate the second layer of information, or directly perform information disguise processing on the network disk information to be transmitted to generate the second layer of information; realize the protection of the network disk information to be transmitted during the sharing process; wherein, the information disguise processing includes selecting a security carrier based on the network disk information to be transmitted, and embedding the first layer of information into the security carrier.

[0053] It should be noted that the types of security carriers include but are not limited to pictures, texts, audio and video. The acquisition of security carriers can come from local storage, network downloads or automatic generation, etc., which are not specifically limited here. As an embodiment of the present invention, a suitable security carrier can be selected for embedding according to the size, quantity or type of the network disk information to be transmitted.

[0054] It should be noted that the size, quantity or type of the security carrier may be consistent with or inconsistent with the network disk information to be transmitted.

[0055] For example, when the network disk information to be transmitted is a small file image, the security carrier can be a small file image, or other types such as text, audio, or large file video. Or when the network disk information to be transmitted is a large file video, the security carrier can be a large file video, or other types such as small file text, audio, or image; at this time, the size of the network disk file is also determined based on the threshold set by the user above. When there are multiple network disk information to be transmitted, you can select a security carrier to embed in the set order, or select multiple security carriers of the same or different types to embed. The diversification of embedding types can meet the needs of more users while ensuring security.

[0056] Based on the content of the above embodiment, as an optional embodiment, the information camouflage processing method includes manual camouflage or automatic camouflage.

[0057] Among them, manual camouflage, according to the network disk information to be transmitted, the user selects a suitable and favorite security carrier, and the size, quantity or type of the security carrier can be consistent with or inconsistent with the network disk information to be transmitted; automatic camouflage, generally according to the size, quantity or type of the network disk information to be transmitted, randomly selects security carriers of the same size, quantity and type from the carrier library.

[0058] Based on the content of the above embodiment, as an optional embodiment, manual camouflage includes a simple manual mode or a complex manual mode.

[0059] It should be noted that the simple manual mode is to directly embed the first layer of information completely into a secure carrier; the complex manual mode is to split the first layer of information to obtain multiple partial disguised information, and embed the multiple partial disguised information into multiple secure carriers according to the set order.

[0060] It is understandable that the selection order of multiple security carriers in the complex manual mode is also an encryption method, so that when restoring information, the security carriers need to be selected in the set order to be successfully restored, ensuring the security of information transmission.

[0061] Based on the content of the above embodiment, as an optional embodiment, the method further includes restoring the second layer information based on a set order to obtain the network disk information to be transmitted.

[0062] When the information transmitter shares the encrypted and disguised information on a public website, including a link and an extraction code, the information receiver first downloads and extracts the information. For example, the receiver enters the link, extraction code, and file name to download and extract the file to be restored. The extracted information is then restored in the order in which it was encrypted.

[0063] Restoration can be done manually or automatically. Simple manual and automatic camouflage modes can be restored directly. Complex manual mode restoration requires selecting the carriers in the set order and performing the extraction and restoration in the set order.

[0064] On the other hand, the present invention also provides an information protection system based on information camouflage. Figure 2 This is a schematic diagram of the system composition of an information protection method and system based on information camouflage provided by the present invention, such as Figure 2 As shown, the system includes: the system includes at least an information disguise encryption module; wherein the information disguise encryption module includes an information input and disguise type selection unit 201, an encryption processing unit 202, an information disguise processing unit 203 and an information output unit 204:

[0065] The information input and disguise type selection unit 201 is used to input the network disk information to be transmitted, determine the information disguise type according to the size of the network disk information to be transmitted, and feed back the information disguise type to the encryption processing unit.

[0066] In other words, the information input and disguise type selection unit supports the disguise of text, images, audio, and video, providing both data and link disguises. Link disguises meet the needs for secure sharing of large video files, while data disguises meet the needs for secure sharing of small files such as images and text. This feature balances security and efficiency, offering excellent practicality and meeting the sharing needs of diverse users.

[0067] The encryption processing unit 202 is used to selectively encrypt the network disk information to be transmitted according to the received information disguise type to generate the first layer of disguise information and send it to the information disguise unit; that is, it mainly converts text, images, audio and video information into ciphertext.

[0068] The information disguise processing unit 203 is configured to select a security carrier according to the network disk information to be transmitted, and embed the first layer information into the security carrier to generate the second layer information; or directly receive the network disk information to be transmitted to generate the second layer information.

[0069] The information output unit 204 is used to output and share the second layer information.

[0070] The technical features of this system are consistent with those of the above-mentioned method and will not be described in detail here.

[0071] In short, the information camouflage and encryption module includes functions such as camouflage and carrier information analysis, information selective encryption, and information camouflage; it is mainly used to support camouflage type selection and information input, camouflage strategy selection (camouflage, camouflage + encryption), and camouflage method selection (automatic camouflage, manual camouflage).

[0072] Based on the above embodiment, as an optional embodiment, the information camouflage processing unit includes a manual camouflage unit and / or an automatic camouflage unit; wherein the manual camouflage unit includes a simple manual mode and / or a complex manual mode. The technical features of this system are consistent with those of the above method and will not be further described here.

[0073] In addition, the system also includes a security disguise prompt unit that provides prompts based on the size of the disguise information, including prompts such as the number of security carriers, security carrier selection, and disguise sequence password setting. Users can achieve disguise according to the prompts.

[0074] As an optional embodiment, the simple manual mode is used to directly embed the first layer information completely into a security carrier; the complex manual mode is used to split the first layer information into multiple partial disguised information, and embed the multiple partial disguised information into multiple security carriers in a set order.

[0075] Optionally, the system also includes an information restoration module, which is used to restore the second-layer information based on a set order and output the restored network disk information to be transmitted. This module primarily achieves information extraction and restoration of the disguised carrier through name-based search, extraction, restoration, and security, integrity, and efficiency verification. The information restoration module includes a search and extraction unit and a restoration unit.

[0076] As an optional embodiment, the information restoration module includes a file search and extraction unit, an information restoration unit, and an information selective decryption unit.

[0077] The file search and extraction unit is used to extract the information to be restored. The user searches and extracts the file to be restored by inputting the link, extraction code, and file name.

[0078] The information restoration unit includes manual restoration and automatic restoration. For simple manual mode camouflage and automatic camouflage, direct restoration can be performed; for complex manual mode restoration, it is necessary to select the carriers in sequence according to the set sequence password during extraction, and perform extraction and restoration in the set order.

[0079] The information selective decryption unit is used to decrypt the corresponding encryption in a set order.

[0080] As an optional embodiment, the system further includes an authentication module, a verification module and a communication module. The system integrates authentication, camouflage, restoration, verification, communication and management modules into one.

[0081] It should be noted that the authentication module is mainly used to implement user registration, identity authentication and authorization, and includes a user registration unit, a login authentication unit and a password retrieval unit.

[0082] The user registration unit is primarily used to register new users. It should be noted that when registering a new user, the user must provide an account, password, and mobile phone number, and then obtain a verification code using their mobile phone number. After registration, the server queries the user information database to verify whether the new account is a duplicate of an existing one. If the account does not exist in the database, the system saves the new account, password, and other information in the database, successfully registering the new user.

[0083] The login authentication unit is primarily used to deny access to unauthorized users and grant access to authorized users. It's important to note that when a user logs in and authenticates, the system uploads their account and password to the server. The server then queries the user information database to verify whether the uploaded authentication information matches the user list stored in the database. If a match occurs, the user is deemed legitimate. Otherwise, service is denied and the authentication result is returned to the client.

[0084] The password retrieval unit is primarily used to provide legitimate users with a password reset service if they forget their password. It should be noted that when a user selects the password retrieval function, the system will require the user to upload their registered mobile phone number and other identification information. The server will then query the user information database for a comparison. If the comparison is successful, the password reset service will be provided to the user and the corresponding update will be made in the user database.

[0085] The verification module verifies the security, integrity, and efficiency of information. Security verification automatically checks for changes to disguised information; integrity verification ensures that disguised information has not been tampered with; and efficiency verification ensures that disguised information can be quickly implemented for large files, with the same processing time as for ordinary files.

[0086] As an embodiment of the present invention, the main implementation is the MD5 code verification of information. MD5 encryption of information means converting a "byte string" of any length into a 128-bit large integer. At the beginning of the program running, the information digest value of the initial state is obtained; after the program running, the file is encrypted with MD5 again, and the information digest value of its current state is obtained. The information digest values ​​obtained from the two encryptions are compared. If the two values ​​are the same, the integrity of the information is intact, otherwise it means that the integrity of the information has been destroyed; if the information before and after the disguise remains unchanged, it is considered that the disguise is unsuccessful, and vice versa.

[0087] The communication module is mainly used for communication between the mobile terminal and the network disk cloud platform, and to upload disguised information, share disguised links and disguised data, and provide support for the disguised information to be fully utilized for sharing the network disk function.

[0088] The management module is mainly used to effectively manage user accounts, passwords, etc., ensuring proper storage and timely access.

[0089] In summary, based on the characteristics of security risks in information transmission, storage, and sharing on the cloud disk platform, the present invention starts from the idea of ​​information camouflage, designs a high-security secret algorithm that is resistant to camouflage detection, proposes a network disk information camouflage method that is resistant to camouflage detection, and develops a network disk information camouflage system based on the Android platform, realizing the full-process protection of network disk information from mobile terminal to cloud.

[0090] The embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one place or distributed across multiple network elements. Some or all of the modules may be selected based on actual needs to achieve the objectives of the embodiments. Persons of ordinary skill in the art will be able to understand and implement the embodiments without inventive effort.

[0091] Through the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, or of course, by hardware. Based on this understanding, the essence of the above technical solution or the part that contributes to the existing technology can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or certain parts of the embodiments.

[0092] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A network disk information protection method based on information camouflage, characterized in that: The method includes: Input the network disk information to be transferred, and determine the information disguise type according to the size of the network disk information to be transferred; selectively encrypting the network disk information to be transmitted based on the information disguise type; wherein the selective information encryption processing is as follows: when it is determined that the information disguise type is data disguise, information encryption processing is required to generate the first layer of information; when it is determined that the information disguise type is link disguise, information encryption processing is not required, and subsequent information disguise processing is directly performed; Performing information disguise processing on the first layer of information to generate second layer information, or directly performing information disguise processing on the network disk information to be transmitted to generate second layer information; achieving protection of the network disk information to be transmitted during the sharing process; The information disguise processing includes selecting a security carrier based on the network disk information to be transmitted, and embedding the first layer information or the network disk information to be transmitted into the security carrier.

2. A network disk information protection method based on information disguise as claimed in claim 1, characterized in that: The information disguise type includes: data disguise or link disguise.

3. A network disk information protection method based on information disguise as claimed in claim 1, characterized in that: The information disguise processing method includes: manual disguise or automatic disguise; The manual camouflage includes a simple manual mode or a complex manual mode.

4. A network disk information protection method based on information disguise as claimed in claim 3, characterized in that: The simple manual mode is: directly embedding the first layer information or the network disk information to be transferred into one of the secure carriers; The complex manual mode is: splitting the first layer information or the network disk information to be transmitted to obtain multiple partial disguised information, and embedding the multiple partial disguised information into multiple security carriers in a set order.

5. A network disk information protection method based on information disguise as claimed in claim 4, characterized in that: The method further includes: restoring the second layer information based on the set order to obtain the network disk information to be transferred; The restoration includes manual restoration or automatic restoration.

6. A network disk information protection system based on information camouflage, characterized in that: The system includes at least an information disguise encryption module; wherein the information disguise encryption module includes: An information input and disguise type selection unit, configured to input the network disk information to be transmitted, determine the information disguise type according to the size of the network disk information to be transmitted, and feed the information disguise type back to the encryption processing unit; an encryption processing unit, configured to selectively perform information encryption processing on the network disk information to be transmitted according to the received information disguise type; wherein the selective information encryption processing is as follows: when it is determined that the information disguise type is data disguise, information encryption processing is required to generate first-layer information and send it to the information disguise unit; when it is determined that the information disguise type is link disguise, information encryption processing is not required and subsequent information disguise processing is directly performed; an information disguise processing unit, configured to select a secure carrier according to the network disk information to be transferred, and embed the first layer of information into the secure carrier to generate the second layer of information; or directly receive the network disk information to be transferred, and embed the network disk information to be transferred into the secure carrier to generate the second layer of information; Information output unit: used to output and share the second-layer information.

7. A network disk information protection system based on information camouflage according to claim 6, characterized in that: The information camouflage processing unit includes a manual camouflage unit and / or an automatic camouflage unit; The manual camouflage unit includes a simple manual mode and / or a complex manual mode.

8. A network disk information protection system based on information camouflage according to claim 7, characterized in that: The simple manual mode is used to directly embed the first layer information or the network disk information to be transferred into one of the secure carriers; The complex manual mode is used to split the first layer information or the network disk information to be transmitted into multiple partial disguised information, and embed the multiple partial disguised information into multiple security carriers in a set order.

9. A network disk information protection system based on information camouflage according to claim 8, characterized in that: The system further includes an information restoration module for restoring the second layer of information based on the set order and outputting the restored network disk information to be transferred; The information restoration module includes a search and extraction unit and a restoration unit.

10. A network disk information protection system based on information camouflage according to any one of claims 6 to 9, characterized in that: The system also includes an authentication module, a verification module and a communication module.

Images