Tracing method and device based on text information leakage, equipment and storage medium
By generating signatures on the server and embedding watermarks, the problem of difficulty in traceability at the source after text information is leaked is solved, and the security and traceability of text information are improved.
Patent Information
- Application Number
- CN202411273614.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-11
- Publication Date
- 2024-12-31
AI Technical Summary
The prior art is difficult to trace the source of text information leakage, resulting in a reduction in the security of electronic text.
By generating the user-side public key and the server-side private key on the server, signing text information and embeding watermarks, traceability of text information is realized.
It improves the security of text information and the accuracy of leakage traceability, and can accurately locate the leaked user.
Smart Images
Figure CN119227149A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the fields of financial technology and artificial intelligence technology, and in particular to a tracing method and device, electronic device and storage medium based on text information leakage. Background Art
[0002] Text information leakage refers to the disclosure of content in unpublished texts through Internet transmission, etc. For example, in the financial field, the download of electronic insurance policies is often unrestricted, which can easily lead to the leakage of customer information in electronic insurance policies.
[0003] At present, after a text information leak, it is often impossible to trace the source of the text information leak due to the lack of network records or evidence, which reduces the security of electronic texts. Therefore, how to trace the source after the text information leak has become a technical problem that needs to be solved urgently. Summary of the invention
[0004] The main purpose of the embodiments of the present application is to propose a tracing method and device based on text information leakage, an electronic device and a storage medium, aiming to achieve source tracing after text information leakage.
[0005] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present application proposes a tracing method based on text information leakage, which is applied to a server. The method includes:
[0006] Receive a registration request from a target client, generate a client public key and a server private key according to the registration request, and send the client public key to the target client;
[0007] In response to a text download request carrying text information sent by the target user terminal, determining a target text based on the text information;
[0008] Based on the target user end and the server end private key, the target text is signed to obtain target signature information;
[0009] Based on the target signature information, the target text is watermarked to obtain a target download text containing the target signature information;
[0010] In response to an information tracing request sent by the target user end and carrying the user end public key, obtaining a current downloaded text sent by the target user end, and decrypting the current downloaded text based on the user end public key to obtain the current signature information;
[0011] Based on the current signature information, leaked user terminals are screened out from the target user terminals.
[0012] In some embodiments, the step of signing the target text based on the target user terminal and the server terminal private key to obtain the target signature information includes:
[0013] Extracting information from the target user terminal to obtain user terminal information;
[0014] Generate a summary of the target text to obtain summary information;
[0015] Based on the server private key, the user information and the summary information are encrypted to obtain the target signature information.
[0016] In some embodiments, extracting information from the target user terminal to obtain the user terminal information includes:
[0017] Obtaining the time when the target user terminal accesses the server terminal to obtain access time information;
[0018] Extracting the user name of the target user terminal to obtain user name information;
[0019] Extracting the program name from the target user terminal to obtain program name information;
[0020] The access time information, the user name information and the program name information are aggregated to obtain the user terminal information.
[0021] In some embodiments, generating a summary of the target text to obtain summary information includes:
[0022] Filling the target text with data to obtain text-filled data;
[0023] Performing data block processing on the text filling data to obtain text data blocks;
[0024] Performing hash calculation on the text data block to obtain a data block hash value;
[0025] The hash values of the data blocks are concatenated to obtain the summary information.
[0026] In some embodiments, encrypting the user information and the summary information based on the server private key to obtain the target signature information includes:
[0027] Splicing the user terminal information with the summary information to obtain spliced information;
[0028] Performing hash calculation on the splicing information to obtain an information hash value;
[0029] Based on the server private key, the information hash value is encrypted to obtain the target signature information.
[0030] In some embodiments, the filtering out leaked user terminals from the target user terminals based on the current signature information includes:
[0031] Extracting information from the current signature information to obtain leaked user terminal information;
[0032] Based on the leaked user terminal information, the target user terminal is searched to obtain the leaked user terminal.
[0033] In some embodiments, embedding a watermark into the target text based on the target signature information to obtain a target download text containing the target signature information includes:
[0034] Matrix processing is performed on the target text to obtain a text information block;
[0035] Randomly select two adjacent text information blocks as target text blocks;
[0036] Performing discrete wavelet transform on the target text block to obtain low-frequency wavelet coefficients;
[0037] Based on preset human eye perception noise, embedding the target signature information into the low-frequency wavelet coefficient to obtain embedded wavelet coefficient;
[0038] The embedded wavelet coefficients are subjected to inverse discrete wavelet transform to obtain the target download text.
[0039] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application proposes a tracing device based on text information leakage, the device comprising:
[0040] A public and private key generation module, used to receive a registration request from a target client, generate a client public key and a server private key according to the registration request, and send the client public key to the target client;
[0041] A target text search module, configured to respond to a text download request carrying text information sent by the target user terminal and determine a target text based on the text information;
[0042] A signature information generation module, used to sign the target text based on the target user end and the server end private key to obtain target signature information;
[0043] A text watermark embedding module, used for embedding a watermark into the target text based on the target signature information to obtain a target download text containing the target signature information;
[0044] A text watermark decryption module, used to respond to an information tracing request sent by the target user end and carrying the user end public key, obtain the current downloaded text sent by the target user end, and decrypt the current downloaded text based on the user end public key to obtain the current signature information;
[0045] The leakage source tracing module is used to filter out the leaking user terminal from the target user terminal based on the current signature information.
[0046] To achieve the above objectives, a third aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the method described in the first aspect is implemented.
[0047] To achieve the above-mentioned purpose, the fourth aspect of an embodiment of the present application proposes a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect is implemented.
[0048] The tracing method and device based on text information leakage proposed in the present application, the electronic device and the storage medium generate a user-side public key and a server-side private key by responding to a registration request sent by a target user, and send the user-side public key to the target user, so that the target user can download the text on the server. Secondly, when the target user sends a text download request carrying text information to the server, the server determines the target text according to the text information, and signs the target text according to the target user and the server private key to obtain the target signature information, and then embeds a watermark into the target text according to the target signature information to obtain a watermark containing the target text. The target download text of the tag name information is ensured to ensure that the target download text downloaded by the target user terminal contains the information of the target user terminal, so as to facilitate the tracing of the leaked text. Finally, when the target user terminal sends an information tracing request carrying the user terminal public key to the server terminal, the server terminal obtains the current download text sent by the target user terminal, and decrypts the current download text according to the user terminal public key to obtain the current signature information. Then, according to the current signature information, the leaking user terminal is screened out from the target user terminal, which can realize the tracking of the target user terminal of the leaked text information, improve the security of the text information and the tracing accuracy of the text information leakage. BRIEF DESCRIPTION OF THE DRAWINGS
[0049] Figure 1 It is a flow chart of a tracing method based on text information leakage provided by an embodiment of the present application;
[0050] Figure 2 yes Figure 1 Flow chart of step S103 in FIG.
[0051] Figure 3 yes Figure 2 Flow chart of step S201 in FIG.
[0052] Figure 4 yes Figure 2 Flow chart of step S202 in FIG.
[0053] Figure 5 yes Figure 2 Flow chart of step S203 in FIG.
[0054] Figure 6 yes Figure 1 Flow chart of step S104 in FIG.
[0055] Figure 7 yes Figure 1 Flow chart of step S106 in FIG.
[0056] Figure 8 It is a structural schematic diagram of a tracing device based on text information leakage provided in an embodiment of the present application;
[0057] Fig. 9 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION
[0058] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0059] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.
[0060] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.
[0061] First, some nouns involved in this application are analyzed:
[0062] Hash algorithm: A hash algorithm is a mathematical function that converts input data of any length (called a message) into an output value of a fixed length (called a hash value or digest). It is one-way, that is, the original data cannot be deduced from the hash value, and it is collision-resistant, ensuring that different input data will not produce the same hash value. Hash algorithms are widely used in fields such as data integrity verification, digital signatures, password storage, and blockchain, and can effectively improve data security and efficiency.
[0063] Text information leakage refers to the disclosure of content in unpublished texts through Internet transmission, etc. For example, in the financial field, the download of electronic insurance policies is often unrestricted, which can easily lead to the leakage of customer information in electronic insurance policies.
[0064] At present, after a text information leak, it is often impossible to trace the source of the text information leak due to the lack of network records or evidence, which reduces the security of electronic texts. Therefore, how to achieve source tracking after a text information leak has become a technical problem that needs to be solved urgently.
[0065] Based on this, the embodiments of the present application provide a tracing method and device based on text information leakage, an electronic device and a storage medium, aiming to achieve source tracing after text information leakage.
[0066] The tracing method and device based on text information leakage, electronic device and storage medium provided in the embodiments of the present application are specifically described through the following embodiments. First, the tracing method based on text information leakage in the embodiments of the present application is described.
[0067] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.
[0068] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.
[0069] The tracing method based on text information leakage provided in the embodiment of the present application relates to the fields of financial technology and artificial intelligence technology. The tracing method based on text information leakage provided in the embodiment of the present application can be applied to the terminal, can also be applied to the server side, and can also be software running in the terminal or the server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or it can be configured as a server cluster or distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the tracing method based on text information leakage, etc., but is not limited to the above forms.
[0070] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.
[0071] Figure 1 is an optional flow chart of a tracing method based on text information leakage provided in an embodiment of the present application, the method is applied to the server, Figure 1 The method may include but is not limited to steps S101 to S106.
[0072] Step S101, receiving a registration request from a target client, generating a client public key and a server private key according to the registration request, and sending the client public key to the target client;
[0073] Step S102, in response to a text download request carrying text information sent by a target user terminal, determining a target text based on the text information;
[0074] Step S103, signing the target text based on the target user and server private keys to obtain target signature information;
[0075] Step S104, embedding a watermark into the target text based on the target signature information to obtain a target download text containing the target signature information;
[0076] Step S105, in response to the information tracing request sent by the target user end and carrying the user end public key, obtaining the current downloaded text sent by the target user end, and decrypting the current downloaded text based on the user end public key to obtain the current signature information;
[0077] Step S106: based on the current signature information, filter out the leaked user terminals from the target user terminals.
[0078] In steps S101 to S106 illustrated in the embodiment of the present application, the server generates a user public key and a server private key through the registration request received from the target user, and sends the user public key to the target user. Furthermore, when the target user sends a text download request carrying text information to the server, the server determines the target text based on the text information, and then signs the target text based on the target user and the server private key to obtain the target signature information. Secondly, the target text is watermarked based on the target signature information to obtain the target downloaded text containing the target signature information. Finally, when the target user sends an information tracing request carrying the user public key to the server, the server obtains the current downloaded text sent by the target user, decrypts the current downloaded text based on the user public key to obtain the current signature information, and then screens out the leaking user from the target user based on the current signature information. Therefore, the present application generates a user public key and a server private key by responding to a registration request sent by a target user, and sends the user public key to the target user, so that the target user can download text on the server. Secondly, when the target user sends a text download request carrying text information to the server, the server determines the target text according to the text information, and signs the target text according to the target user and the server private key to obtain the target signature information, and then embeds a watermark into the target text according to the target signature information to obtain the target download text containing the target signature information, so as to ensure that the target download text downloaded by the target user contains the information of the target user, thereby facilitating the tracing of the leaked text. Finally, when the target user sends an information tracing request carrying the user public key to the server, the server obtains the current download text sent by the target user, and decrypts the current download text according to the user public key to obtain the current signature information, and then screens out the leaking user from the target user according to the current signature information, so as to achieve the tracking of the target user that leaks the text information, and improve the security of the text information and the accuracy of tracing the text information leakage.
[0079] In step S101 of some embodiments, the target client may be a terminal that needs to download text on the server. The client public key refers to a key that can be shared publicly, and the client public key can be used to verify the digital signature. The server private key refers to a confidential key that is only held by the key owner, and the server private key can be used to generate a digital signature.
[0080] When the server receives a registration request sent by a target user, the application generates a user public key and a server private key through an encryption algorithm preset in the server, and sends the user public key to the target user in response to the registration request.
[0081] In this application, the target user terminal can obtain the permission to download the text on the server terminal by sending a registration request to the server terminal. The server terminal generates a user terminal public key and a server terminal private key based on the registration request, and sends the user terminal public key to the target user terminal, successfully establishing a secure data encryption foundation and improving the security of text information.
[0082] In step S102 of some embodiments, the text download request is request information that can be sent by the target user end registered in the server end, and the text download request is used to request to download the text in the server end.
[0083] In an embodiment of the present application, after receiving a text download request sent by a pre-registered target user terminal, the server parses the text download request, identifies the text information requested to be downloaded by the target user terminal, and then searches the target text from the text database based on the text information.
[0084] In step S103 of some embodiments, after determining the target text, the server uses the server private key to sign the target text according to the user information of the target user, and can obtain target signature information containing the user information of the target user.
[0085] For details, see Figure 2 In some embodiments, step S103 may include but is not limited to steps S201 to S203:
[0086] Step S201, extracting information from a target user terminal to obtain user terminal information;
[0087] Step S202, generating a summary of the target text to obtain summary information;
[0088] Step S203: Encrypt the user information and summary information based on the server private key to obtain target signature information.
[0089] In step S201 of some embodiments, the server can parse the text download request sent by the target user to determine the time when the target user accesses the server, the user name of the target user, the program name of the target user, and other information, thereby extracting the user information of the target user.
[0090] For details, see Figure 3 In some embodiments, step S201 may include but is not limited to steps S301 to S304:
[0091] Step S301, obtaining the time when the target user terminal accesses the server terminal to obtain access time information;
[0092] Step S302, extracting the user name of the target user terminal to obtain the user name information;
[0093] Step S303, extracting the program name from the target user terminal to obtain program name information;
[0094] Step S304, collect the access time information, user name information and program name information to obtain user terminal information.
[0095] In step S301 of some embodiments, the server may determine the access time information of the target client by querying the timestamp of the text download request sent by the target client.
[0096] In step S302 and step S303 of some embodiments, the user name information refers to the information of the user account in the target user terminal that sends the text download request to the server terminal, wherein the user name information is the unique identifier of the user in the system, which can ensure that each user's operation is traceable. For example, in an electronic insurance policy download system, the target user terminal downloads the electronic insurance policy from the electronic insurance policy download system by registering an account, wherein the user name of the account can be "Xiao Ming", and at this time, the user name information of the target user terminal is "Xiao Ming". The system name information refers to the identifier of the user terminal application of the text download request. The user helps the server terminal identify the request source of the text download request. For example, the mobile application sends the text download request to the server, and the system name information of the target user terminal can be an identifier such as "MobileApp".
[0097] In the embodiment of the present application, the server can clarify the user name information and system name information of the target user terminal by parsing the text download request sent by the target user terminal.
[0098] In step S304 of some embodiments, after obtaining the access time information, user name information and program name information of the target user terminal, the user terminal information can be obtained by concatenating the access time information, user name information and program name information.
[0099] In steps S301 to S304 shown in this embodiment, the time when the target user terminal accesses the server terminal is obtained to obtain the access time information, and then the user name of the target user terminal is extracted to obtain the user name information, and the program name of the target user terminal is extracted to obtain the program name information, so as to ensure that the target user terminal can be accurately located based on the access time information, user name information and system name information, thereby improving the tracing accuracy of text information leakage.
[0100] In step S202 of some embodiments, the target text is hashed using the SHA-256 algorithm to obtain summary information of the target text.
[0101] For details, see Figure 4 In some embodiments, step S202 may include but is not limited to steps S401 to S404:
[0102] Step S401, filling the target text with data to obtain text filling data;
[0103] Step S402, performing data block processing on the text filling data to obtain text data blocks;
[0104] Step S403, performing hash calculation on the text data block to obtain a hash value of the data block;
[0105] Step S404: perform data splicing on the hash values of the data blocks to obtain summary information.
[0106] In step S401 of some embodiments, since the SHA-256 algorithm requires the length of the input data to be in units of 512 bits, the target text needs to be padded with data to ensure that the target text can be hashed using the SHA-256 algorithm. Specifically, the data padding step may be that if the target text is not aligned, padding bits are required at the end of the data to ensure that the length of the target text is in units of 512 bits. The padding method is usually to push in a "1" followed by several "0s", and finally append the length of the target text.
[0107] In step S402 of some embodiments, text data blocks can be obtained by dividing the filled text filling data into 512-bit data blocks.
[0108] In step S403 of some embodiments, a hash calculation is performed on each text data block through a hash function in the SHA-256 algorithm to obtain a data block hash value of each text data block.
[0109] In step S404 of some embodiments, the hash values of the above data blocks are concatenated according to the arrangement order of the target text, so as to obtain summary information of the target text.
[0110] In steps S401 to S404 shown in this embodiment, the target text is filled with data to obtain text filling data, the text filling data is divided into blocks to obtain text data blocks, hash calculations are performed on the text data blocks to obtain data block hash values, and data splicing is performed on the data block hash values to obtain summary information, thereby improving the security of the target text.
[0111] In step S203 of some embodiments, after obtaining the summary information of the user-side information and the target text, the summary information of the user-side information and the target text is encrypted using the server-side private key to generate the target signature information.
[0112] The embodiment of the present application can encrypt the user information and the summary information of the target text based on the RSA asymmetric encryption algorithm using the server private key to generate the signature information target signature information. Among them, the target signature information provides the non-repudiation of the data and can ensure the authenticity of the source of the information.
[0113] For details, see Figure 5 In some embodiments, step S203 may include but is not limited to steps S501 to S503:
[0114] Step S501, splicing the user terminal information and the summary information to obtain splicing information;
[0115] Step S502, performing hash calculation on the splicing information to obtain the information hash value;
[0116] Step S503: Encrypt the information hash value based on the server private key to obtain the target signature information.
[0117] In step S501 of some embodiments, by splicing the above-mentioned user-side information and summary information, spliced information can be obtained. It should be noted that a separator can be used to splice the user-side information and the summary information. For example, a separator "|" is added between the user-side information and the summary information so that the user-side information and the summary information can be distinguished when decrypting the target signature information.
[0118] In step S502 of some embodiments, the SHA-256 algorithm can be used to calculate the hash value of the spliced information to obtain the information hash value, wherein the method of using the SHA-256 algorithm to perform hash calculation on the spliced information to obtain the information hash value is similar to the above-mentioned method of generating a summary of the target text to obtain summary information, so it is not repeated here.
[0119] In step S503 of some embodiments, the information hash value may be encrypted based on the server private key by performing a secondary hash calculation on the information hash value, thereby obtaining the target signature information.
[0120] In steps S501 to S503 shown in this embodiment, the user-side information and the summary information are concatenated to obtain concatenated information, and a hash calculation is performed on the concatenated information to obtain an information hash value. The information hash value is then encrypted according to the server-side private key to obtain the target signature information. This can prevent malicious users from modifying the target signature information, thereby improving the security of the target signature information and the accuracy of tracing back text information leaks.
[0121] In steps S201 to S203 shown in this embodiment, information is extracted from the target user terminal to obtain user terminal information, a summary is generated for the target text to obtain summary information, and then the user terminal information and summary information are encrypted according to the server private key to obtain target signature information, thereby ensuring the authenticity of the user terminal information and improving the accuracy of tracing after the text information is leaked.
[0122] In step S104 of some embodiments, the target signature information is embedded in the target text in the form of a watermark, and the target download text can be obtained to ensure that the target signature information can be spread along with the spread of the target text.
[0123] It is important to note that in order to prevent malicious users from tampering with the target signature information, the target signature information needs to be embedded in the target text in an invisible way.
[0124] For details, see Figure 6 In some embodiments, step S104 may include but is not limited to steps S601 to S605:
[0125] Step S601, matrix processing is performed on the target text to obtain a text information block;
[0126] Step S602, arbitrarily selecting two adjacent text information blocks as target text blocks;
[0127] Step S603, performing discrete wavelet transform on the target text block to obtain low-frequency wavelet coefficients;
[0128] Step S604, embedding the target signature information into the low-frequency wavelet coefficients based on the preset human eye perception noise to obtain the embedded wavelet coefficients;
[0129] Step S605: perform inverse discrete wavelet transform on the embedded wavelet coefficients to obtain the target download text.
[0130] In step S601 of some embodiments, the target text is divided into non-overlapping blocks of 8x8 pixels to obtain text information blocks. For example, if an electronic insurance policy of A4 size is 840px*1188px, it can be divided into (840 / 8)×(1188 / 8), which is approximately 105×148 text information blocks, where each text information block contains 64 pixels.
[0131] In step S602 of some embodiments, Hilbert curve scanning can be used to select two adjacent text information blocks to obtain a target text block, wherein the Hilbert curve is a space-filling curve that can effectively map two-dimensional data to one dimension. When selecting two adjacent text information blocks, the coordinates of the Hilbert curve can be used to improve scanning efficiency.
[0132] In step S603 of some embodiments, by performing discrete wavelet transform on two adjacent target text blocks, the target text blocks can be converted to the wavelet domain, so as to decompose the image signal into a low-frequency signal and a high-frequency signal, so as to facilitate the image embedding process. It should be noted that the low-frequency signal represents the overall structure of the target text block, and the high-frequency signal represents the detailed information of the target text block, while the detailed information of the target text is not required to embed the target signature information into the target text. Therefore, the present application only needs to obtain the low-frequency signal of the target text block, and further, the coefficient of the low-frequency signal is calculated to obtain the low-frequency wavelet coefficient.
[0133] In step S604 of some embodiments, the preset human eye perception noise refers to a threshold of noise that can be perceived by the human eye.
[0134] In order to ensure that the target signature information is not perceived by the human eye when embedded in the target text, the present application needs to determine the parameter information when the target signature information is embedded in the target text based on the human eye's perception of noise, and then select the appropriate wavelet coefficient position from the low-frequency wavelet coefficients based on the determined parameter information, and embed the target signature information into the wavelet coefficient position to obtain the embedded wavelet coefficient.
[0135] In step S605 of some embodiments, the embedded wavelet coefficients embedded with the target signature information are converted back to the image space through inverse discrete wavelet transform, and the target download text embedded with the target signature information can be obtained. At this time, the target download text is almost visually the same as the target text.
[0136] In steps S601 to S605 shown in this embodiment, the target text is matrixed to obtain text information blocks, two adjacent text information blocks are arbitrarily selected as target text blocks, discrete wavelet transform is performed on the target text blocks to obtain low-frequency wavelet coefficients, and based on preset human eye perception noise, the target signature information is embedded in the low-frequency wavelet coefficients to obtain embedded wavelet coefficients, and the embedded wavelet coefficients are inversely discretely transformed to obtain the target download text. The target signature information can be effectively and covertly embedded in the target text to protect its integrity and traceability during the circulation process. It should be noted that the above method not only does not affect the appearance of the target text, but also can provide proof of legitimacy when necessary to ensure the security of the target text.
[0137] In step S105 of some embodiments, the current download text refers to the target download text of the leaked content.
[0138] When the server receives an information tracing request carrying a user's public key sent by a target user, the application can obtain the current downloaded text and the user's public key sent by the target user by parsing the information tracing request. The server can use the user's public key to decrypt the watermark in the current downloaded text and obtain the current signature information of the current downloaded text.
[0139] In step S106 of some embodiments, the leaked client information can be determined based on the current signature information obtained by decryption, and then based on the leaked client information, the leaked client that leaked the currently downloaded text can be accurately located from the target client.
[0140] For details, see Figure 7 In some embodiments, step S107 may include but is not limited to steps S701 to S702:
[0141] Step S701, extracting information from the current signature information to obtain leaked user terminal information;
[0142] Step S702: based on the leaked client information, search for the target client to obtain the leaked client.
[0143] In step S701 of some embodiments, the current signature information may be decrypted using the user's public key to obtain the leaked user information in the current signature information.
[0144] In step S702 of some embodiments, the leaked user terminal can be accurately located from the target user terminal according to the leaked user name information, the leaked system name information and the leaked user terminal access time information in the leaked user terminal information.
[0145] In steps S701 to S702 shown in this embodiment, the current signature information is extracted to obtain the leaked user terminal information, and then the target user terminal is searched based on the leaked user terminal information to obtain the leaked user terminal, which can achieve accurate positioning of the target user terminal of the leaked text information, thereby improving the security of the text information.
[0146] In one application scenario, taking the policy information leakage of an electronic policy as an example, the electronic policy is stored in the cloud storage service end. When a registration request from any customer or employee is received, a pair of public and private keys can be generated, wherein the public key can be sent to the terminal where the customer or employee registers, and the private key is stored in the cloud storage service end. Furthermore, when the registered user terminal sends an electronic policy download request carrying policy identification information to the cloud storage service end, the cloud storage service end finds the corresponding electronic policy based on the policy identification information, and uses the stored private key to obtain the user name, system name, access time, and summary of the electronic policy of the user terminal. The information is encrypted to obtain the signature information of the electronic policy, and then the signature information of the electronic policy is embedded in the target text in the form of an invisible watermark, so that the target electronic policy containing the signature information can be obtained. When the policy information in the target electronic policy is leaked, any registered user terminal can send the target electronic policy and the public key to the cloud storage service for decryption processing, and obtain the signature information in the target electronic policy. The signature information is then decrypted to obtain the user terminal that downloaded the target electronic policy, and the user terminal is regarded as a leaking user terminal, thereby realizing the tracing of the policy information leakage of the electronic policy.
[0147] This application generates a user public key and a server private key by responding to a registration request sent by a target user, and sends the user public key to the target user, so that the target user can download text on the server. Secondly, when the target user sends a text download request carrying text information to the server, the server determines the target text according to the text information, and signs the target text according to the target user and the server private key to obtain the target signature information, and then embeds a watermark into the target text according to the target signature information to obtain the target download text containing the target signature information, so as to ensure that the target download text downloaded by the target user contains the information of the target user, thereby facilitating the tracing of the leaked text. Finally, when the target user sends an information tracing request carrying the user public key to the server, the server obtains the current download text sent by the target user, and decrypts the current download text according to the user public key to obtain the current signature information, and then screens out the leaking user from the target user according to the current signature information, so as to achieve the tracking of the target user that leaks the text information, and improve the security of the text information and the tracing accuracy of the text information leakage.
[0148] See also Figure 8 The embodiment of the present application further provides a tracing device based on text information leakage, which can implement the above-mentioned tracing method based on text information leakage, and the device includes:
[0149] The public and private key generation module 801 is used to receive a registration request from a target client, generate a client public key and a server private key according to the registration request, and send the client public key to the target client;
[0150] The target text search module 802 is used to respond to the text download request carrying text information sent by the target user terminal and determine the target text based on the text information;
[0151] The signature information generation module 803 is used to sign the target text based on the target user end and the server end private key to obtain the target signature information;
[0152] A text watermark embedding module 804 is used to embed a watermark into a target text based on the target signature information to obtain a target download text containing the target signature information;
[0153] The text watermark decryption module 805 is used to respond to the information tracing request sent by the target user end and carries the user end public key, obtain the current downloaded text sent by the target user end, and decrypt the current downloaded text based on the user end public key to obtain the current signature information;
[0154] The leakage source tracing module 806 is used to filter out the leaking user terminal from the target user terminals based on the current signature information.
[0155] The specific implementation of the tracing device based on text information leakage is basically the same as the specific implementation of the tracing method based on text information leakage mentioned above, and will not be repeated here.
[0156] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above-mentioned text information leakage-based tracing method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.
[0157] See also Fig. 9 , Fig. 9 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:
[0158] The processor 901 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;
[0159] The memory 902 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 902 can store an operating system and other applications. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 902, and the processor 901 calls and executes the tracing method based on text information leakage in the embodiment of this application;
[0160] Input / output interface 903, used to implement information input and output;
[0161] Communication interface 904, used to realize communication interaction between the device and other devices, which can be realized by wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.);
[0162] A bus 905 that transmits information between various components of the device (e.g., the processor 901, the memory 902, the input / output interface 903, and the communication interface 904);
[0163] The processor 901 , the memory 902 , the input / output interface 903 and the communication interface 904 are connected to each other in communication within the device via a bus 905 .
[0164] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned tracing method based on text information leakage is implemented.
[0165] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0166] The tracing method based on text information leakage, the tracing device based on text information leakage, the electronic device and the storage medium provided by the embodiments of the present application are as follows: the server generates a user public key and a server private key through a registration request received from a target user, and sends the user public key to the target user. Furthermore, when the target user sends a text download request carrying text information to the server, the server determines the target text according to the text information, and then signs the target text according to the target user and the server private key to obtain the target signature information. Secondly, the target text is watermarked according to the target signature information to obtain the target downloaded text containing the target signature information. Finally, when the target user sends an information tracing request carrying the user public key to the server, the server obtains the current downloaded text sent by the target user, decrypts the current downloaded text according to the user public key to obtain the current signature information, and then filters out the leaked user from the target user according to the current signature information.
[0167] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.
[0168] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.
[0169] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0170] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.
[0171] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0172] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.
[0173] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. The mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.
[0174] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0175] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.
[0176] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.
[0177] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.
Claims
1. A tracing method based on text information leakage, characterized in that: Applied to the server, the method includes: Receive a registration request from a target client, generate a client public key and a server private key according to the registration request, and send the client public key to the target client; In response to a text download request carrying text information sent by the target user terminal, determining a target text based on the text information; Based on the target user end and the server end private key, the target text is signed to obtain target signature information; Based on the target signature information, the target text is watermarked to obtain a target download text containing the target signature information; In response to an information tracing request sent by the target user end and carrying the user end public key, obtaining a current downloaded text sent by the target user end, and decrypting the current downloaded text based on the user end public key to obtain the current signature information; Based on the current signature information, leaked user terminals are screened out from the target user terminals.
2. The method according to claim 1, characterized in that The target text is signed based on the target user end and the server end private key to obtain the target signature information, including: Extracting information from the target user terminal to obtain user terminal information; Generate a summary of the target text to obtain summary information; Based on the server private key, the user information and the summary information are encrypted to obtain the target signature information.
3. The method according to claim 2, characterized in that The step of extracting information from the target user terminal to obtain user terminal information includes: Obtaining the time when the target user terminal accesses the server terminal to obtain access time information; Extracting the user name of the target user terminal to obtain user name information; Extracting the program name from the target user terminal to obtain program name information; The access time information, the user name information and the program name information are aggregated to obtain the user terminal information.
4. The method according to claim 2, characterized in that: The step of generating a summary of the target text to obtain summary information includes: Filling the target text with data to obtain text-filled data; Performing data block processing on the text filling data to obtain text data blocks; Performing hash calculation on the text data block to obtain a data block hash value; The hash values of the data blocks are concatenated to obtain the summary information.
5. The method according to claim 2, characterized in that: The step of encrypting the user information and the summary information based on the server private key to obtain the target signature information includes: Splicing the user terminal information with the summary information to obtain spliced information; Performing hash calculation on the splicing information to obtain an information hash value; Based on the server private key, the information hash value is encrypted to obtain the target signature information.
6. The method according to any one of claims 1 to 5, characterized in that: The step of screening out leaked user terminals from the target user terminals based on the current signature information includes: Extracting information from the current signature information to obtain leaked user terminal information; Based on the leaked user terminal information, the target user terminal is searched to obtain the leaked user terminal.
7. The method according to any one of claims 1 to 5, characterized in that: The step of embedding a watermark into the target text based on the target signature information to obtain a target download text containing the target signature information includes: Matrix processing is performed on the target text to obtain a text information block; Randomly select two adjacent text information blocks as target text blocks; Performing discrete wavelet transform on the target text block to obtain low-frequency wavelet coefficients; Based on preset human eye perception noise, embedding the target signature information into the low-frequency wavelet coefficient to obtain embedded wavelet coefficient; The embedded wavelet coefficients are subjected to inverse discrete wavelet transform to obtain the target download text.
8. A tracing device based on text information leakage, characterized in that: The device comprises: A public and private key generation module, used to receive a registration request from a target client, generate a client public key and a server private key according to the registration request, and send the client public key to the target client; A target text search module, configured to respond to a text download request carrying text information sent by the target user terminal and determine a target text based on the text information; A signature information generation module, used to sign the target text based on the target user end and the server end private key to obtain target signature information; A text watermark embedding module, used for embedding a watermark into the target text based on the target signature information to obtain a target download text containing the target signature information; A text watermark decryption module, used to respond to an information tracing request sent by the target user end and carrying the user end public key, obtain the current downloaded text sent by the target user end, and decrypt the current downloaded text based on the user end public key to obtain the current signature information; The leakage source tracing module is used to filter out the leaking user terminal from the target user terminal based on the current signature information.
9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the text information leakage tracing method according to any one of claims 1 to 7 when executing the computer program.
10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the text information leakage tracing method according to any one of claims 1 to 7 is implemented.