Three-dimensional model encryption method and device, equipment, storage medium and program product

Abstract

The invention relates to a three-dimensional model encryption method and device, equipment, a storage medium and a program product. The method comprises the following steps: acquiring a target three-dimensional model to be uploaded to a model resource management platform; encrypting the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model; encrypting the first encrypted data according to an adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model, the adaptive encryption algorithm being determined according to the network security risk assessment model; and determining an encryption result of the target three-dimensional model based on the second encryption data, and uploading the encryption result to the model resource management platform. By adopting the method, the encryption security of three-dimensional model encryption can be improved.

Description

Technical Field

[0001] The present application relates to the field of data encryption technology, and in particular to a three-dimensional model encryption method, device, equipment, storage medium and program product. Background Art

[0002] Users can upload various 3D models through the 3D model resource management platform, or search and purchase 3D models suitable for their own application scenarios. With the widespread application of 3D models, the number of users of 3D model resource management platforms is increasing. Therefore, the protection of confidential design content in 3D models is becoming more and more important.

[0003] In the prior art, when uploading a 3D model to a 3D model resource management platform, the method of encrypting the 3D model has the problem of low encryption security. Summary of the invention

[0004] Based on this, it is necessary to provide a three-dimensional model encryption method, device, equipment, storage medium and program product that can improve encryption security in response to the above technical problems.

[0005] In a first aspect, the present application provides a three-dimensional model encryption method, comprising:

[0006] Obtain a target three-dimensional model to be uploaded to a model resource management platform; encrypt the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model; encrypt the first encrypted data according to an adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model, wherein the adaptive encryption algorithm is determined according to a network security risk assessment model; determine an encryption result of the target three-dimensional model based on the second encrypted data, and upload the encryption result to the model resource management platform.

[0007] In one embodiment, encrypting the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model includes:

[0008] Based on mesh simplification or octree segmentation, parameter information of the target three-dimensional model is determined from the data file of the target three-dimensional model, and the parameter information is used to describe the shape, size and position information of the target three-dimensional model; the parameter information is encrypted according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model.

[0009] In one embodiment, encrypting the first encrypted data according to the adaptive encryption algorithm to obtain the second encrypted data of the target three-dimensional model includes:

[0010] Determine the security status of the current network environment based on a network security risk assessment model, which is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model; determine the target encryption algorithm based on the security status of the current network environment, a preset encryption algorithm list and preset encryption rules; encrypt the first encrypted data according to the target encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0011] In one embodiment, determining an encryption result of the target three-dimensional model based on the second encrypted data includes:

[0012] Acquire attribute characteristics of each parameter information of the target three-dimensional model; generate access strategies for each parameter information according to the attribute characteristics of each parameter information; encrypt the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each access strategy to obtain the third encrypted data of the target three-dimensional model; use the third encrypted data as the encryption result of the target three-dimensional model.

[0013] In one embodiment, determining an encryption result of the target three-dimensional model based on the second encrypted data includes:

[0014] The second encrypted data is verified, and after the verification passes, an encryption result of the target three-dimensional model is determined according to the second encrypted data.

[0015] In one embodiment, verifying the second encrypted data includes:

[0016] Obtain the encryption strength of each parameter information in the second encrypted data; if the encryption strength of each parameter information meets the preset security rules, the second encrypted data verification passes; if the encryption strength of each parameter information does not meet the preset security rules, adjust the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm, and encrypt the target three-dimensional model based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each parameter information meets the preset security rules.

[0017] In one embodiment, verifying the second encrypted data includes:

[0018] A multi-round interactive protocol of zero-knowledge proof is constructed, and the multi-round interactive protocol is used to simultaneously perform compliance verification on each parameter information in the second encrypted data; the verification results of each parameter information are aggregated, and whether the second encrypted data passes the compliance verification is determined based on the aggregated results.

[0019] In a second aspect, the present application also provides a three-dimensional model encryption device, comprising:

[0020] An acquisition module, used to acquire a target three-dimensional model to be uploaded to a model resource management platform;

[0021] A first encryption module, used to encrypt the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model;

[0022] A second encryption module is used to encrypt the first encrypted data according to an adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model, where the adaptive encryption algorithm is determined by a network security risk assessment model;

[0023] The determination module is used to determine the encryption result of the target three-dimensional model based on the second encrypted data, and upload the encryption result to the model resource management platform.

[0024] In one of the embodiments, the first encryption module is specifically used to determine parameter information of the target three-dimensional model from the data file of the target three-dimensional model based on mesh simplification or octree segmentation, the parameter information being used to describe the shape, size and position information of the target three-dimensional model; and encrypt the parameter information according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model.

[0025] In one of the embodiments, the second encryption module is specifically used to determine the security status of the current network environment based on a network security risk assessment model, and the network security risk assessment model is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model; determine the target encryption algorithm according to the security status of the current network environment, a preset encryption algorithm list and preset encryption rules; encrypt the first encrypted data according to the target encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0026] In one of the embodiments, a determination module is specifically used to obtain attribute characteristics of each parameter information of a target three-dimensional model; generate an access strategy for each parameter information according to the attribute characteristics of each parameter information; encrypt the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each access strategy to obtain the third encrypted data of the target three-dimensional model; and use the third encrypted data as the encryption result of the target three-dimensional model.

[0027] In one of the embodiments, the determination module is specifically used to verify the second encrypted data, and after the verification is passed, determine the encryption result of the target three-dimensional model according to the second encrypted data.

[0028] In one of the embodiments, a determination module is specifically used to obtain the encryption strength of each parameter information in the second encrypted data; if the encryption strength of each parameter information meets the preset security rules, the second encrypted data verification passes; if the encryption strength of each parameter information does not meet the preset security rules, the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm is adjusted, and the target three-dimensional model is encrypted based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each parameter information meets the preset security rules.

[0029] In one of the embodiments, the determination module is specifically used to construct a multi-round interaction protocol for zero-knowledge proof, and the multi-round interaction protocol is used to simultaneously perform compliance verification on each parameter information in the second encrypted data; the verification results of each parameter information are aggregated, and it is determined whether the second encrypted data passes the compliance verification based on the aggregated results.

[0030] In a third aspect, the present application further provides a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, any of the methods described in the first aspect is implemented.

[0031] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, any of the methods described in the first aspect above is implemented.

[0032] In a fifth aspect, the present application further provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements any of the methods described in the first aspect above.

[0033] The above-mentioned three-dimensional model encryption method, device, equipment, storage medium and program product obtain the target three-dimensional model to be uploaded to the model resource management platform, then encrypt the target three-dimensional model according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model, and then encrypt the first encrypted data according to the adaptive encryption algorithm to obtain the second encrypted data of the target three-dimensional model. The adaptive encryption algorithm is determined according to the network security risk assessment model, and finally the encryption result of the target three-dimensional model is determined based on the second encrypted data, and the encryption result is uploaded to the model resource management platform. The target three-dimensional model is encrypted by the homomorphic encryption algorithm, and the data of the target three-dimensional model is always in an encrypted state during the transmission and storage of the target three-dimensional model, providing security guarantee for the target three-dimensional model data. At the same time, the homomorphic encryption algorithm runs in an encrypted state to perform calculation operations, protecting the privacy of the target three-dimensional model data and avoiding direct exposure of sensitive information. Further, according to the current network environment, an adaptive encryption algorithm is selected to perform secondary encryption on the first encrypted data, and the encryption algorithm is dynamically applied. Finally, the encrypted target three-dimensional model is uploaded to the model resource management platform, which can effectively improve the encryption security of the target three-dimensional model. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0035] Figure 1 A schematic diagram of a flow chart of a three-dimensional model encryption method in one embodiment;

[0036] Figure 2 It is a flowchart of the steps of encrypting a target three-dimensional model according to a homomorphic encryption algorithm in one embodiment;

[0037] Figure 3 It is a schematic flow chart of a step of encrypting first encrypted data according to an adaptive encryption algorithm in one embodiment;

[0038] Figure 4 A schematic diagram of a flow chart of a step of determining an encryption result of a target three-dimensional model based on second encrypted data in one embodiment;

[0039] Figure 5 is a schematic diagram of a flow chart of a step of verifying the second encrypted data in one embodiment;

[0040] Figure 6 is a schematic flow chart of a step of verifying the second encrypted data in another embodiment;

[0041] Figure 7 A schematic diagram of a flow chart of a three-dimensional model encryption method in another embodiment;

[0042] Figure 8 It is a structural block diagram of a three-dimensional model encryption device in one embodiment;

[0043] Fig. 9 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0044] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0045] The 3D model encryption method provided in the embodiment of the present application may be executed by a 3D model encryption device. The 3D model encryption may be implemented by software, hardware, or a combination of software and hardware. It may be embedded in or independent of a processor in a computer device in the form of hardware, or it may be stored in a memory in a computer device in the form of software. The computer device may be a server. The server may be an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. The computer device may also be a computer. In the following method embodiments, the execution subject is a computer device as an example for explanation.

[0046] In an exemplary embodiment, Figure 1 As shown, a three-dimensional model encryption method is provided, including the following steps 101 to 104. Among them:

[0047] S101, a computer device obtains a target three-dimensional model to be uploaded to a model resource management platform.

[0048] Optionally, the target three-dimensional model to be uploaded to the model resource management platform may be obtained from the terminal, or may be obtained from a preset three-dimensional model database.

[0049] Optionally, the target three-dimensional model may be any three-dimensional model that needs to be encrypted and uploaded to the model resource management platform.

[0050] S102, the computer device encrypts the target three-dimensional model according to the homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model.

[0051] Optionally, the homomorphic encryption algorithm may refer to an encryption algorithm that satisfies the homomorphic operation property of ciphertext, that is, after the target three-dimensional model is processed by the homomorphic encryption algorithm, a specific calculation is performed on the ciphertext, and the obtained ciphertext calculation result is equivalent to directly performing the same calculation on the plaintext data after the corresponding homomorphic decryption, thereby achieving the "computable but invisible" target three-dimensional model.

[0052] Optionally, the homomorphic encryption algorithm may include a fully homomorphic encryption (FHE) algorithm and a somewhat homomorphic encryption (SWHE) algorithm, wherein the fully homomorphic encryption algorithm supports any form of calculation on the ciphertext, and the somewhat homomorphic encryption algorithm supports partial forms of calculation on the ciphertext, for example, only supports addition, only supports multiplication, or supports a limited number of additions or multiplications.

[0053] Optionally, the fully homomorphic encryption algorithm may include the Gentry scheme, the BGV scheme, the BFV scheme, the GSW scheme, etc., and the semi-homomorphic encryption algorithm may include the multiplicative homomorphic RSA algorithm and the ElGamal algorithm, the additively homomorphic Paillier algorithm, and the finite-time fully homomorphic Boneh-Goh-Nissim scheme. The embodiments of the present application do not limit the specific method of the homomorphic encryption algorithm.

[0054] S103, the computer device encrypts the first encrypted data according to the adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0055] Among them, the adaptive encryption algorithm is determined according to the network security risk assessment model.

[0056] Optionally, network security risk assessment can be a process of analyzing and interpreting the risks existing in the network environment. It can provide a risk evaluation of the network environment by qualitatively or quantitatively analyzing the security status, vulnerabilities and risks faced by the network environment, and assess the network environment's ability to withstand risks by integrating various information.

[0057] In one possible implementation, the network security risk assessment model can be a qualitative analysis model. The qualitative analysis model is based on non-quantitative factors such as the evaluator's experience and knowledge. It is clear, simple, and easy to understand. The qualitative analysis model can include: attack chain model, attack surface model, and automaton model, etc.

[0058] In another possible implementation method, the network security risk assessment model can be a quantitative analysis model. The quantitative analysis model uses quantitative indicators in the modeling process without rigorous calculations to conduct assessments. It is scientific and intuitive, and the results are accurate. The quantitative analysis model can include: attack tree model, attack graph model, network infectious disease model and Bayesian network model, etc.

[0059] Optionally, the security status of the current network environment is determined according to the network security risk assessment model, and a suitable encryption algorithm is determined from a preset encryption algorithm list according to the security status of the current network environment.

[0060] Optionally, the adaptive encryption algorithm may be an encryption algorithm determined from various encryption algorithms such as an asymmetric encryption algorithm, a symmetric encryption algorithm, and a hash function according to the security status of the current network environment.

[0061] Optionally, after the target three-dimensional model is encrypted using a homomorphic encryption algorithm, first encrypted data is obtained, an adaptive encryption algorithm is determined based on the security status of the current network environment, and then the first encrypted data is encrypted again using the adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0062] S104, the computer device determines an encryption result of the target three-dimensional model based on the second encrypted data, and uploads the encryption result to the model resource management platform.

[0063] Optionally, the encryption process may be performed on the entire target three-dimensional model, or may be performed on part of the confidential design content in the target three-dimensional model.

[0064] In a possible implementation manner, the second encrypted data may be used as an encryption result of the target three-dimensional model.

[0065] In another possible implementation, the second encrypted data may be processed, and the processing result may be used as the encryption result of the target three-dimensional model.

[0066] Optionally, a secure transmission protocol can be used to upload the encryption result of the target three-dimensional model to the model resource management platform. By building a distributed network based on blockchain, setting network transmission encryption and access permission control strategies, adopting SSL / TLS transport layer security protocol, setting up authentication, encryption and integrity verification mechanisms for data transmission channels, and transmitting the compressed and encrypted target three-dimensional model to the model resource management platform through a secure channel, the model resource management platform uses decompression and decryption algorithms to restore the data of the target three-dimensional model before encryption.

[0067] Optionally, the compression algorithm may include a geometric compression algorithm, a texture compression algorithm, a string table compression algorithm (Lempel-Ziv-Welch, LZW), etc., which is not limited in the embodiments of the present application.

[0068] For example, taking uploading a 3D design model of a power grid device as an example, the target 3D model file size is 10GB. First, the model file is losslessly compressed using the LZMA algorithm. After compression, the file size is reduced to 2GB. Then, in the constructed blockchain network, the nodes communicate using the SSL protocol. The upload server needs to provide a certificate for authentication. The model resource management platform server will verify the validity and integrity of the certificate. On the symmetric encryption channel after the SSL connection is established, the compressed target 3D model file is encrypted using the homomorphic encryption algorithm and the symmetric key of the AES-256 algorithm to generate an encrypted ciphertext transmission package. The encrypted package is transmitted through each node in the blockchain network, and the node uses the hash algorithm to verify the file integrity and consistency. The encrypted target 3D model piece finally arrives at the model resource management platform, which uses the local corresponding symmetric key to decrypt and restore the compressed target 3D model, and then decompresses and restores it to finally obtain the original 10GB model file.

[0069] The target three-dimensional model to be uploaded to the model resource management platform is obtained by obtaining the target three-dimensional model, and then the target three-dimensional model is encrypted according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model, and then the first encrypted data is encrypted according to the adaptive encryption algorithm to obtain the second encrypted data of the target three-dimensional model. The adaptive encryption algorithm is determined according to the network security risk assessment model, and finally the encryption result of the target three-dimensional model is determined based on the second encrypted data, and the encryption result is uploaded to the model resource management platform. The target three-dimensional model is encrypted by the homomorphic encryption algorithm, and the data of the target three-dimensional model is always in an encrypted state during the transmission and storage of the target three-dimensional model, providing security guarantee for the target three-dimensional model data. At the same time, the homomorphic encryption algorithm runs in an encrypted state to perform calculation operations, which protects the privacy of the target three-dimensional model data and avoids directly exposing sensitive information. Further, according to the current network environment, an adaptive encryption algorithm is selected to perform secondary encryption on the first encrypted data, and the encryption algorithm is dynamically applied. Finally, the encrypted target three-dimensional model is uploaded to the model resource management platform, which can effectively improve the encryption security of the target three-dimensional model.

[0070] In an exemplary embodiment, Figure 2 As shown, based on the above embodiment, optionally, the target three-dimensional model is encrypted according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model, including the following steps 201 to 202. Among them:

[0071] S201, a computer device determines parameter information of a target three-dimensional model from a data file of the target three-dimensional model based on mesh simplification or octree segmentation.

[0072] The parameter information is used to describe the shape, size and position information of the target three-dimensional model.

[0073] Optionally, the parameter information of the target three-dimensional model can be determined from the data file of the target three-dimensional model through mesh simplification, or the parameter information of the target three-dimensional model can be determined from the data file of the target three-dimensional model through octree segmentation. The parameter information of the target three-dimensional model can also be determined from the data file of the target three-dimensional model by first performing mesh simplification on the target three-dimensional model and then performing octree segmentation, or the parameter information of the target three-dimensional model can be determined from the data file of the target three-dimensional model by first performing octree segmentation on the target three-dimensional model and then performing mesh simplification. The embodiments of the present application are not limited to this.

[0074] Optionally, load the data file of the target three-dimensional model and parse its file format, and obtain the vertex, face and voxel information of the target three-dimensional model from the data file of the target three-dimensional model, wherein the voxel information can be the abbreviation of volume element, which is the smallest unit of the target three-dimensional model in the three-dimensional space segmentation, a cube or cube grid unit evenly distributed in the three-dimensional space, and each voxel can contain some information representing the attributes of the spatial position.

[0075] Optionally, when the data file size of the target 3D model exceeds a preset file threshold, mesh simplification is applied to the loaded target 3D model, and the target 3D model is simplified by edge collapse, face collapse or vertex merging to reduce the number of faces and vertices to obtain a simplified target 3D model.

[0076] Optionally, when the number of missing model vertices in the 3D model file exceeds a threshold, an octree is constructed, and the target 3D model is divided into a number of grid blocks by spatial segmentation. Each block is represented by an octree node, and adjacent hole areas are merged into the same block. All octree nodes are traversed, the volume size of each node is calculated, and the spatial position information of the node is determined.

[0077] Optionally, for the simplified target 3D model or the target 3D model after octree segmentation, the normal vector, area, and volume features of each face and voxel are extracted, the features of all faces and voxels are counted, the overall size and direction features of the model are calculated, and the extracted parameters and information feature information are output, including the properties, size and position information, number of points and faces, octree node position and volume, and normal vector, area and volume features of faces and voxels of the simplified target 3D model.

[0078] For example, taking a three-dimensional model of power grid equipment as an example, first load the model file in STL format. The model contains 3 million triangular faces. By parsing the file header, the model bounding box information exported by the 3D design software can be obtained, and the model space size is determined to be approximately 5 meters, 3 meters, and 2 meters. The 3 million triangular faces of the three-dimensional model exceed the preset 2 million triangular faces. The three-dimensional model is simplified, and the face collapse algorithm is used to traverse all triangular faces. The difference between the normal vectors of each face and the adjacent face is calculated. If it is less than the set threshold of 0.95, the two triangular faces are merged into a quadrilateral face, and the process is repeated until no face can be merged. After simplification, a simplified model consisting of about 500,000 triangular faces is finally obtained, and then an octree is constructed, and the initial depth is set to 8, that is, the model space is evenly divided into 2^8=256 cubic space nodes, and the volume of each node is calculated. The nodes in the adjacent hollow area are merged, and finally about 100 octree nodes are obtained to represent the entire model. By traversing the octree nodes, we can get the xyz coordinates and volume of each node. The coordinates of the top node are (2.1, 1.2, 0.8) and the volume is 0.125 cubic meters. After simplifying the model, a triangular face on the surface of the coil is selected to calculate the face normal vector and area. The normal vector is (0.71, 0.33, -0.62) and the area is 0.05 square meters. At the same time, for the voxel inside the coil, its normal vector is calculated to be (0.57, -0.82, 0.08) and the volume is 0.008 cubic meters.

[0079] S202, the computer device encrypts the parameter information according to the homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model.

[0080] Optionally, a homomorphic encryption algorithm can be used to encrypt the parameter information of the target three-dimensional model, and the public key can be used to convert the parameter information into a ciphertext form that cannot be deciphered. All parameter information can be encrypted, or preset confidential parameter information can be encrypted, avoiding the problem in the prior art that when encrypting the target three-dimensional model, the entire model is encrypted and the confidential design content therein cannot be accurately protected.

[0081] For example, a confidential parameter information in a target three-dimensional model needs to be encrypted, that is, the size, material and shape of a cube in the target three-dimensional model need to be encrypted, and the parameter information is: size = 10cm, width = 5cm, height = 3cm, material is steel, and shape is a cube. The confidential parameters are encrypted using the BFV homomorphic encryption algorithm, and the confidential parameters are encrypted using the public key to obtain the first encrypted data in ciphertext form. The encrypted ciphertext size is fdgh29d8g0sd8gsdjhfg237u8g7, the ciphertext material is sdh2873g6shfgh4sdfgh8sdfg4, and the ciphertext shape is sdf8shdf0gh8sdfgh2sdf4hgsdf.

[0082] The above method determines the parameter information of the target three-dimensional model from the data file of the target three-dimensional model based on mesh simplification or octree segmentation, and encrypts the parameter information according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model. The target three-dimensional model data contains a large amount of geometric information, texture information, topological information, etc. Extracting the parameters and features of the three-dimensional model from the massive information may lead to the loss of parameters or features, thereby affecting the subsequent analysis and processing. The target three-dimensional model can be simplified to reduce the data volume of the target three-dimensional model while ensuring the selectivity of the target three-dimensional model, thereby improving the efficiency of the subsequent encryption processing. At the same time, the parameter information of the target three-dimensional model is encrypted by the homomorphic encryption algorithm, which can ensure that the data of the target three-dimensional model is always in an encrypted state during the transmission and storage of the target three-dimensional model, providing security for the target three-dimensional model data. At the same time, the homomorphic encryption algorithm runs in an encrypted state to perform calculation operations, thereby protecting the privacy of the target three-dimensional model data and avoiding direct exposure of sensitive information.

[0083] In an exemplary embodiment, Figure 3 As shown, based on the above embodiment, optionally, the first encrypted data is encrypted according to an adaptive encryption algorithm to obtain the second encrypted data of the target three-dimensional model, including the following steps 301 to 303. Among them:

[0084] S301, the computer device determines the security status of the current network environment based on a network security risk assessment model.

[0085] Among them, the network security risk assessment model is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model.

[0086] Optionally, a real-time assessment of the security status of the current network environment can be performed from aspects such as network attacks, data leakage, and unauthorized access.

[0087] Optionally, the dynamic Bayesian network model is a transient model that can learn the probabilistic dependencies between variables and the laws of their time changes. The continuous-time hidden Markov model can be a dynamic Bayesian network model with the simplest structure. Linear state space models such as Kalman filters can also be regarded as a form of dynamic Bayesian network model.

[0088] Optionally, the dynamic Bayesian network model can be a Bayesian network model that changes along the time axis, wherein the Bayesian network model can be called a belief network or a causal network. In the Bayesian network model, nodes represent events or objects and are associated with probability variables, and directed edges represent causal dependencies between nodes.

[0089] S302, the computer device determines a target encryption algorithm according to the security status of the current network environment, a preset encryption algorithm list and preset encryption rules.

[0090] Optionally, the network security risk assessment model can provide real-time security status and risk trend information of the current network environment.

[0091] Optionally, the preset encryption algorithm list may include AES encryption algorithm, DES encryption algorithm, RSA encryption algorithm, ECC encryption algorithm, SHA-1 encryption algorithm, MD5 encryption algorithm, etc.

[0092] Optionally, the preset encryption rule may include using an encryption algorithm with high encryption strength in a high-risk network environment and using a lightweight encryption algorithm in a low-risk network environment.

[0093] Optionally, the target encryption algorithm is determined from a preset encryption algorithm list according to a preset encryption rule based on the security status of the current network environment.

[0094] S303, the computer device encrypts the first encrypted data according to the target encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0095] For example, if the real-time network security risk assessment model reports that there is a risk in network security, then according to the preset rules, the AES-256 encryption algorithm is used to re-encrypt the ciphertext that has been subjected to the homomorphic encryption algorithm, and the design parameters are encrypted using the public key to obtain a secondary encryption model in ciphertext form. The encrypted ciphertext size is siebcf44sgagew55sdfg45asa38, the ciphertext material is dhkhusiolnbc1456a77efrbhar, and the ciphertext shape is dhuskoe48s9nsoi32gfuiohn27.

[0096] Optionally, the authorized user obtains the private key corresponding to the above encryption method, and can use the private key to decrypt the encrypted model file and convert the ciphertext design parameters into readable plain text. The authorized user may refer to a user who has the authority to view or modify the target 3D model before encryption or the target 3D model after encryption.

[0097] Exemplarily, after decrypting the encryption result, a design parameter is obtained: length = 10 cm, width = 5 cm, height = 3 cm, material is steel, and shape is a cube.

[0098] The above-mentioned network security risk assessment model is based on determining the security status of the current network environment, and the network security risk assessment model is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model; the target encryption algorithm is determined according to the security status of the current network environment, a preset encryption algorithm list and preset encryption rules; the first encrypted data is encrypted according to the target encryption algorithm to obtain the second encrypted data of the target three-dimensional model. On the one hand, an adaptive encryption algorithm can be selected according to the current network environment to perform secondary encryption on the first encrypted data, and the encryption algorithm is dynamically applied. On the other hand, by encrypting the target three-dimensional model multiple times, the encryption security of the target three-dimensional model can be effectively improved.

[0099] In an exemplary embodiment, Figure 4 As shown, based on the above embodiment, optionally, determining the encryption result of the target three-dimensional model based on the second encrypted data includes the following steps 401 to 404. Among them:

[0100] S401, a computer device obtains attribute characteristics of each parameter information of a target three-dimensional model.

[0101] Optionally, the attribute characteristics of the target three-dimensional model parameter information may include parameter type, sensitivity level and module to which it belongs. The parameter type may include size parameter, material parameter and shape parameter, etc.

[0102] Optionally, the attribute characteristics of each parameter information of the target three-dimensional model may be pre-defined when uploading the target three-dimensional model, or may be determined by a preset network model recognition after simplifying or segmenting the target three-dimensional model.

[0103] S402: The computer device generates an access strategy for each parameter information according to the attribute characteristics of each parameter information.

[0104] In one possible implementation, a ciphertext access policy for each parameter information can be generated based on the attribute characteristics of each parameter information. That is, the authorized user key corresponds to a set of attributes, and the ciphertext contains the access policy. The authorized user can decrypt successfully if and only if the attribute set of the authorized user satisfies the access policy of the ciphertext.

[0105] In another possible implementation, a key access policy for each parameter information can be generated based on the attribute characteristics of each parameter information. That is, the access policy is contained in the authorized user key, and the ciphertext corresponds to a series of attribute sets. The authorized user can decrypt successfully if and only if the attribute set of the ciphertext satisfies the access policy of the authorized user key.

[0106] S403: The computer device encrypts the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each access policy to obtain third encrypted data of the target three-dimensional model.

[0107] Optionally, the attribute encryption algorithm is an encryption algorithm based on bilinear mapping, which can realize data security sharing and access control. According to different access policies, the attribute encryption algorithm can be mainly divided into two categories: Ciphertext-Policy Attribute-Based Encryption (CP-ABE) and Key-Policy Attribute-Based Encryption (KP-ABE).

[0108] Optionally, the attribute encryption algorithm may include four parts: an initialization phase (Setup phase), a key generation phase (KeyGen phase), an encryption phase (Enc phase), and a decryption phase (Dec phase), wherein the system initialization phase is used to input system security parameters and generate corresponding public parameters (PK) and a system master key (MK); the key generation phase is used to authorize users to submit their own attributes to the system and obtain an authorized user key (SK) associated with the attributes; the encryption phase data is used to encrypt the second data to obtain third encrypted data and send it to the authorized user or to a public cloud; the decryption phase is used to authorize users to obtain the third encrypted data and decrypt it with their own authorized user key (SK).

[0109] S404: The computer device uses the third encrypted data as an encryption result of the target three-dimensional model.

[0110] Optionally, when the encryption result is uploaded to the model resource management platform, the encryption result is stored in the database. By analyzing the access user's key, it is determined whether the current access user is an authorized user. When the access user accesses the target three-dimensional model through the model resource management platform, the attribute keyword is submitted to search for matching ciphertext in the encryption database. When the attribute submitted by the access user meets the access policy, the encrypted value of the search result and the corresponding temporary random key are extracted to decrypt the encrypted parameters; the decrypted parameter value is compared with the design business rules to determine whether the parameter meets the preset confidentiality requirements; when the parameter does not meet the confidentiality requirements, the access user is denied access to the analysis and feedback is given; when the parameter meets the confidentiality requirements, the encrypted value and the corresponding temporary random key are sent to the access user, and the access user uses the temporary random key to decrypt the encrypted value obtained by the query to obtain the plaintext parameter value.

[0111] Exemplarily, taking the confidentiality access control of the length parameter L of the three-dimensional model of the power grid equipment as an example, first determine the attributes of the parameter including the parameter type as a size parameter, the sensitivity level as a core secret, and the module to which it belongs as a key component, and use the CP-ABE attribute encryption algorithm to encrypt the parameter L. The access policy bound during encryption is: the access user needs to meet two attribute requirements at the same time to access the parameter. The access user submits an access request and declares his own attributes. If the attributes submitted by the access user cannot match the two required attributes at the same time, the encryption result of the parameter L cannot be accessed by querying the encryption database. If the attributes declared by the access user meet the policy requirements, the second encrypted data ctxt of the parameter L is obtained through the CP-ABE decryption algorithm. Generate a temporary random symmetric key skey, and send it to decrypt ctxt to obtain the plaintext parameter L=1.25 meters. It is judged that the precise size parameter needs to be encrypted using 256-bit AES according to the confidentiality rules, and the encryption strength currently accessed is insufficient, so the user is fed back that the parameter does not meet the confidentiality requirements. If the parameter meets the rules, L is encrypted again using the new key reKey, and the encrypted value and the corresponding reKey key are sent to the user. The user uses the reKey key to decrypt the encrypted value and obtain the plaintext parameter value.

[0112] The above method includes obtaining the attribute characteristics of each parameter information of the target three-dimensional model; generating the access strategy of each parameter information according to the attribute characteristics of each parameter information; encrypting the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each access strategy to obtain the third encrypted data of the target three-dimensional model; and using the third encrypted data as the encryption result of the target three-dimensional model. The problem of key leakage during the transmission process can be avoided, and the fine-grained access control of the third encrypted data can be realized, that is, the uploader of the target three-dimensional model can specify authorized users to access the encrypted target three-dimensional model, which can improve the encryption security of the target three-dimensional model encryption.

[0113] In an exemplary embodiment, based on the above embodiment, determining the encryption result of the target three-dimensional model based on the second encrypted data includes:

[0114] The second encrypted data is verified, and after the verification passes, an encryption result of the target three-dimensional model is determined according to the second encrypted data.

[0115] Optionally, verifying the second encrypted data includes verifying the encryption strength, such as Figure 5 As shown, verifying the second encrypted data includes the following steps 501 to 503. Among them:

[0116] S501, the computer device obtains the encryption strength of each parameter information in the second encrypted data.

[0117] Optionally, the second encrypted data can be analyzed by a preset parsing program, or decrypted by a decryption algorithm to obtain the data of the target three-dimensional model before encryption. The decryption process is analyzed by a preset parsing degree to determine the encryption strength of each parameter information in the second encrypted data.

[0118] Optionally, since the second encrypted data is obtained by encrypting the first encrypted data using an adaptive encryption algorithm, when verifying the encryption strength of the second encrypted data, in addition to verifying the encryption strength of the second encrypted data, the encryption strength of the first encrypted data also needs to be verified.

[0119] S502: If the encryption strength of each parameter information meets the preset security rule, the second encrypted data verification passes.

[0120] Optionally, the preset security rules may be pre-set encryption requirements for various parameter information of the target three-dimensional model. When the encryption strengths of the second encrypted data and the first encrypted data determined based on the parsing program meet the encryption requirements in the preset security rules, the second encrypted data is considered to have passed the verification.

[0121] For example, the analysis program determines that the parameter information of a part in the target three-dimensional model includes a length of 1.25 meters and a thickness change curve y=0.8x^2+1.6. The current thickness change curve is only encrypted using an encryption algorithm with a 128-bit encryption strength. According to the requirements of the preset security rules, the parameters of the precise size of the part need to be encrypted using 256-bit AES. Therefore, the encryption strength of the parameter information does not meet the preset security rules.

[0122] S503, if the encryption strength of each parameter information does not meet the preset security rules, the computer device adjusts the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm, and encrypts the target three-dimensional model based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each parameter information meets the preset security rules.

[0123] Optionally, the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm can be adjusted based on the specific reason why it is determined that the encryption strength does not meet the preset security rules. That is to say, when the encryption strength of each parameter information does not meet the preset security rules, it may be that the encryption strength of the first encrypted data processed by the homomorphic encryption algorithm is insufficient, or the encryption strength of the second encrypted data processed by the adaptive algorithm is insufficient, or the encryption strength of the first encrypted data processed by the homomorphic encryption algorithm and the encryption strength of the second encrypted data processed by the adaptive algorithm are both insufficient.

[0124] Optionally, obtain specific parameter items in the target three-dimensional model, analyze the confidentiality level, module and impact of each parameter item, compare the actual encryption strength of each parameter with the encryption requirements defined by the corresponding preset security rules, determine the parameter items that do not meet the preset security rules, and analyze the reasons for insufficient encryption. When the reason is the security strength of the encryption algorithm, expand the algorithm library to add an encryption algorithm with higher encryption complexity than the existing encryption algorithm; when the security strength of the encryption algorithm meets the encryption requirements, the reason is the encryption rule definition problem, adjust the weight of the encryption rule, re-run the adjusted security compliance rules, re-encrypt the parameters that do not meet the preset security rules, until the encryption result meets the preset security rules, and update the preset security rules according to the operations performed during this optimization process to optimize and improve the encryption and verification process of the three-dimensional model.

[0125] For example, taking the three-dimensional structure of the three-dimensional model of the power grid equipment as an example, during the verification process, the confidentiality level of the chip size parameter of the power grid equipment is core confidential, which belongs to the core component and has a high degree of influence. In the preset security rules, the security rule corresponding to this parameter is located as "all chip precise sizes require 256-bit AES encryption". The actual encryption method of this parameter is analyzed, and it is found that the parameter only uses 128-bit AES encryption. The actual encryption of the non-compliant parameters is compared with the rule requirements. It is found that the chip size parameter of the power grid equipment does not meet the specified 256-bit AES encryption strength requirements, and the parameter that does not meet the preset security rules is identified. It is determined that the reason for not meeting the preset security rules is insufficient encryption strength, and the algorithm library is called to add high-intensity algorithms based on lattice homomorphic encryption and elliptic curve encryption; if the size uses 256-bit AES encryption, the weight of the size encryption is increased to increase the encryption priority of the size. Run the optimized encryption rule to re-execute 256-bit AES encryption on the size parameter, the verification is passed, and the preset security rules are updated according to the operations performed during this optimization process.

[0126] The above-mentioned encryption strength of each parameter information in the second encrypted data is obtained; if the encryption strength of each parameter information meets the preset security rules, the second encrypted data verification is passed; if the encryption strength of each parameter information does not meet the preset security rules, the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm is adjusted, and the target three-dimensional model is encrypted based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each parameter information meets the preset security rules. The encryption strength of the second encrypted data can be verified to ensure that the encryption strength of the second encrypted data obtained by the encryption processing meets the preset security rules, thereby improving the encryption security.

[0127] Optionally, verifying the second encrypted data includes verifying compliance, such as Figure 6 As shown, verifying the second encrypted data includes:

[0128] S601, the computer device constructs a multi-round interactive protocol of zero-knowledge proof.

[0129] The multi-round interactive protocol is used to simultaneously perform compliance verification on each parameter information in the second encrypted data.

[0130] Optionally, the compliance check may be performed directly on the second encrypted data, or the second encrypted data may be decrypted to obtain parameter information of the target three-dimensional model before encryption, and the compliance check may be performed on the parameter information before encryption.

[0131] Optionally, the constructed zero-knowledge proof can adopt the interactive operation structure of the Sigma protocol. The interactive operation structure can include a proving end and a verifying end. The proving end performs operations on each parameter to generate a commitment, and transmits the commitment to the verifying end. The verifying end executes challenges on the commitments of multiple parameters in parallel, generates challenges and transmits them back to the proving end. The proving end executes responses to each challenge in parallel and transmits the responses back to the verifying end. The verifying end verifies the correctness of the responses and obtains parameter verification results.

[0132] Optionally, a parallel verification architecture is constructed to build multiple interaction rounds simultaneously, with each interaction round verifying one parameter until every parameter has been verified.

[0133] S602, the computer device aggregates the verification results of each parameter information, and determines whether the second encrypted data passes the compliance verification according to the aggregated results.

[0134] Optionally, the verification results of each parameter information are aggregating to obtain the aggregate result. The aggregation result can be obtained by directly running each verification result, that is, when the verification results of each parameter information pass, the second encrypted data passes the compliance check; or the aggregation result can be determined according to the preset weights of each parameter. When the obtained aggregation result is greater than a preset aggregation threshold, it is considered that the second encrypted data has passed the compliance check.

[0135] For example, the compliance of a target three-dimensional model is verified, and the parameters involved may include: the volume of the model, the smoothness of the surface, and the symmetry of the model. First, the parameters to be verified can be defined to meet the privacy protection conditions. For each parameter, it is only necessary to transmit its commitment to the verification end without directly exposing the specific value of the parameter, so that the privacy of the parameter can be protected; next, the interactive operation structure of the Sigma protocol can be used to construct a zero-knowledge proof protocol. At the proof end, the corresponding operation is performed on each parameter to generate a commitment, and the commitment is transmitted to the verification end. For the volume parameter of the model, the proof end can perform volume calculations and generate corresponding commitments. At the verification end, multiple parameters can be challenged in parallel, and the generated challenge is transmitted back to the proof end. The verification end can simultaneously challenge the commitments of parameters such as the volume, surface smoothness, and symmetry of the model. After receiving the challenge, the proof end executes a response to each challenge in parallel and transmits the response back to the verification end. For the challenge of the volume parameter, the proof end can answer the specific volume value. The verification end verifies the correctness of the response and obtains the parameter verification result. The verification end can check whether the volume value answered by the proof end is consistent with the commitment. In order to improve efficiency, a parallel verification architecture can be adopted to build multiple interactive rounds at the same time. Each interactive round verifies a parameter until each parameter is verified. The verification end can aggregate all parameter verification results and output whether the 3D model as a whole meets the compliance. For example, the volume parameter of a target 3D model is 1000 cubic centimeters, the surface smoothness parameter is 8, and the symmetry parameter is 9. The proof end can generate the corresponding commitment and transmit it to the verification end. The verification end simultaneously questions the commitment of these three parameters, including whether the volume is greater than 900 cubic centimeters, whether the surface smoothness is greater than 5, and whether the symmetry is greater than 8. The proof end can answer these questions in parallel and transmit the response back to the verification end. Finally, the verification end can verify the correctness of the response, obtain the result of the parameter verification, and determine whether the parameter information meets the compliance.

[0136] The above-mentioned multi-round interactive protocol of zero-knowledge proof is constructed, and the verification results of each parameter information are aggregated. Whether the second encrypted data passes the compliance check is determined according to the aggregation result. The compliance check of the second encrypted data can be performed without leaking any data, thereby improving the encryption security and ensuring that the target three-dimensional model uploaded to the model resource management platform and the encryption process are compliant. At the same time, the efficiency of the verification can be improved through the multi-round interactive protocol.

[0137] As an optional implementation, Figure 7 As shown, the 3D model encryption method provided in the embodiment of the present application may include the following specific steps:

[0138] S701, a computer device obtains a target three-dimensional model to be uploaded to a model resource management platform.

[0139] S702: The computer device determines parameter information of the target three-dimensional model from a data file of the target three-dimensional model based on mesh simplification or octree segmentation.

[0140] The parameter information is used to describe the shape, size and position information of the target three-dimensional model;

[0141] S703, the computer device encrypts the parameter information according to the homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model.

[0142] S704, the computer device determines the security status of the current network environment based on the network security risk assessment model.

[0143] Among them, the network security risk assessment model is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model.

[0144] S705, the computer device determines a target encryption algorithm according to the security status of the current network environment, a preset encryption algorithm list and preset encryption rules.

[0145] S706: The computer device encrypts the first encrypted data according to a target encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0146] S707, the computer device obtains the encryption strength of each parameter information in the second encrypted data.

[0147] S708: If the encryption strength of each parameter information meets the preset security rule, the second encrypted data verification passes.

[0148] S709, if the encryption strength of each parameter information does not meet the preset security rules, the computer device adjusts the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm, and encrypts the target three-dimensional model based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each parameter information meets the preset security rules.

[0149] S710, the computer device constructs a multi-round interactive protocol of zero-knowledge proof.

[0150] The multi-round interactive protocol is used to simultaneously perform compliance verification on each parameter information in the second encrypted data.

[0151] S711, the computer device aggregates the verification results of each parameter information, and determines whether the second encrypted data passes the compliance verification according to the aggregated results.

[0152] S712, after the computer device verifies the second encrypted data, it obtains attribute characteristics of each parameter information of the target three-dimensional model.

[0153] S713, the computer device generates an access strategy for each parameter information according to the attribute characteristics of each parameter information.

[0154] S714, the computer device encrypts the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each access policy to obtain third encrypted data of the target three-dimensional model.

[0155] S715, the computer device uses the third encrypted data as the encryption result of the target three-dimensional model, and uploads the encryption result to the model resource management platform.

[0156] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0157] Based on the same inventive concept, the embodiment of the present application also provides a 3D model encryption device for implementing the 3D model encryption method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more 3D model encryption device embodiments provided below can refer to the limitations of the 3D model encryption method above, and will not be repeated here.

[0158] In an exemplary embodiment, Figure 8 As shown, a three-dimensional model encryption device 800 is provided, comprising: an acquisition module 801, a first encryption module 802, a second encryption module 803 and a determination module 804, wherein:

[0159] The acquisition module 801 is used to acquire the target three-dimensional model to be uploaded to the model resource management platform.

[0160] The first encryption module 802 is used to encrypt the target three-dimensional model according to the homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model.

[0161] The second encryption module 803 is used to encrypt the first encrypted data according to an adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model. The adaptive encryption algorithm is determined by the network security risk assessment model.

[0162] The determination module 804 is used to determine the encryption result of the target three-dimensional model based on the second encrypted data, and upload the encryption result to the model resource management platform.

[0163] In an optional embodiment of the present application, the first encryption module 802 is specifically used to determine parameter information of the target three-dimensional model from the data file of the target three-dimensional model based on mesh simplification or octree segmentation, the parameter information being used to describe the shape, size and position information of the target three-dimensional model; and encrypt the parameter information according to the homomorphic encryption algorithm to obtain the first encrypted data of the target three-dimensional model.

[0164] In an optional embodiment of the present application, the second encryption module 803 is specifically used to determine the security status of the current network environment based on a network security risk assessment model, and the network security risk assessment model is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model; determine the target encryption algorithm according to the security status of the current network environment, a preset encryption algorithm list and preset encryption rules; encrypt the first encrypted data according to the target encryption algorithm to obtain second encrypted data of the target three-dimensional model.

[0165] In an optional embodiment of the present application, the determination module 804 is specifically used to obtain the attribute characteristics of each parameter information of the target three-dimensional model; generate an access strategy for each parameter information according to the attribute characteristics of each parameter information; encrypt the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each access strategy to obtain the third encrypted data of the target three-dimensional model; and use the third encrypted data as the encryption result of the target three-dimensional model.

[0166] In an optional embodiment of the present application, the determination module 804 is specifically used to verify the second encrypted data, and determine the encryption result of the target three-dimensional model according to the second encrypted data after the verification.

[0167] In an optional embodiment of the present application, the determination module 804 is specifically used to obtain the encryption strength of each parameter information in the second encrypted data; if the encryption strength of each parameter information meets the preset security rules, the second encrypted data verification passes; if the encryption strength of each parameter information does not meet the preset security rules, adjust the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm, and encrypt the target three-dimensional model based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each parameter information meets the preset security rules.

[0168] In an optional embodiment of the present application, the determination module 804 is specifically used to construct a multi-round interactive protocol for zero-knowledge proof, and the multi-round interactive protocol is used to simultaneously perform compliance verification on each parameter information in the second encrypted data; the verification results of each parameter information are aggregated, and it is determined whether the second encrypted data passes the compliance verification based on the aggregated results.

[0169] Each module in the above three-dimensional model encryption device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module.

[0170] In an exemplary embodiment, a computer device is provided. The computer device may be a server or a computer. The internal structure diagram thereof may be as follows: Fig. 9 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store three-dimensional model encryption data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a three-dimensional model encryption method is implemented.

[0171] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0172] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

[0173] In an exemplary embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0174] In an exemplary embodiment, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0175] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0176] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0177] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A three-dimensional model encryption method, characterized in that: The method comprises: Obtain a target three-dimensional model to be uploaded to a model resource management platform; Encrypting the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model; encrypting the first encrypted data according to an adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model, wherein the adaptive encryption algorithm is determined according to a network security risk assessment model; An encryption result of the target three-dimensional model is determined based on the second encrypted data, and the encryption result is uploaded to the model resource management platform.

2. The method according to claim 1, characterized in that: The step of encrypting the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model includes: Determining parameter information of the target three-dimensional model from a data file of the target three-dimensional model based on mesh simplification or octree segmentation, wherein the parameter information is used to describe shape, size and position information of the target three-dimensional model; The parameter information is encrypted according to the homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model.

3. The method according to claim 1, characterized in that: The step of encrypting the first encrypted data according to the adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model includes: Determining the security status of the current network environment based on the network security risk assessment model, wherein the network security risk assessment model is implemented based on a continuous-time hidden Markov model and / or a dynamic Bayesian network model; Determine a target encryption algorithm according to the security status of the current network environment, a preset encryption algorithm list and preset encryption rules; The first encrypted data is encrypted according to a target encryption algorithm to obtain second encrypted data of the target three-dimensional model.

4. The method according to claim 3, characterized in that: The step of determining an encryption result of the target three-dimensional model based on the second encrypted data includes: Acquire attribute characteristics of each parameter information of the target three-dimensional model; Generate an access strategy for each of the parameter information according to the attribute characteristics of each of the parameter information; Encrypting the second encrypted data of the target three-dimensional model based on the attribute encryption algorithm and each of the access policies to obtain third encrypted data of the target three-dimensional model; The third encrypted data is used as an encryption result of the target three-dimensional model.

5. The method according to claim 1, characterized in that The step of determining an encryption result of the target three-dimensional model based on the second encrypted data includes: The second encrypted data is verified, and after the verification passes, an encryption result of the target three-dimensional model is determined according to the second encrypted data.

6. The method according to claim 5, characterized in that The verifying the second encrypted data comprises: Obtaining the encryption strength of each parameter information in the second encrypted data; If the encryption strength of each of the parameter information meets the preset security rules, the second encrypted data verification passes; If the encryption strength of each of the parameter information does not meet the preset security rules, adjust the strength of the homomorphic encryption algorithm and / or the adaptive encryption algorithm, and encrypt the target three-dimensional model based on the adjusted homomorphic encryption algorithm and / or the adaptive encryption algorithm until the encryption strength of each of the parameter information meets the preset security rules.

7. The method according to claim 5, characterized in that The verifying the second encrypted data comprises: Constructing a multi-round interactive protocol of zero-knowledge proof, wherein the multi-round interactive protocol is used to simultaneously perform compliance verification on each parameter information in the second encrypted data; Aggregate the verification results of each of the parameter information, and determine whether the second encrypted data passes the compliance check based on the aggregated result.

8. A three-dimensional model encryption device, characterized in that: The device comprises: An acquisition module, used to acquire a target three-dimensional model to be uploaded to a model resource management platform; A first encryption module, used to encrypt the target three-dimensional model according to a homomorphic encryption algorithm to obtain first encrypted data of the target three-dimensional model; a second encryption module, configured to encrypt the first encrypted data according to an adaptive encryption algorithm to obtain second encrypted data of the target three-dimensional model, wherein the adaptive encryption algorithm is determined by a network security risk assessment model; A determination module is used to determine an encryption result of the target three-dimensional model based on the second encrypted data, and upload the encryption result to the model resource management platform.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images