Image information encryption method, image information decryption method, and related device

Abstract

The application discloses an image information encryption method, an image information decryption method and related devices, and relates to the field of information encryption, and comprises the following steps: determining a sensitive information region in a target image; using a preset encryption mode to encode and encrypt each pixel in the sensitive information region, obtaining a ciphertext byte sequence, and converting the ciphertext byte sequence into a binary bit stream; changing the arrangement order of a plurality of pixels in the sensitive information region; performing image blurring processing on the sensitive information region in which the plurality of pixels with the changed arrangement order are located, and obtaining a target image containing a blurred region; and embedding the binary bit stream into the target image containing the blurred region. The application fully guarantees the safety of sensitive information and does not affect the legal use of the sensitive information.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information encryption, and in particular to an image information encryption method, an image information decryption method and related devices. BACKGROUND

[0002] With the development of digital technology, more and more information is stored and spread in digital form.

[0003] As an important type of information, images are also used more and more widely. Since there is often a lot of sensitive information in images, it is necessary to encrypt the sensitive information to ensure the security of the sensitive information. SUMMARY

[0004] In view of the above problems, the present application provides an image information encryption method, an image information decryption method and related devices to achieve the purpose of ensuring the security of sensitive information without affecting the legal use of sensitive information. The specific scheme is as follows:

[0005] The first aspect of the present application provides an image information encryption method, comprising:

[0006] determining a sensitive information region in a target image;

[0007] encoding and encrypting each pixel in the sensitive information region using a preset encryption method to obtain a ciphertext byte sequence, and converting the ciphertext byte sequence into a binary bit stream;

[0008] changing the arrangement order of a plurality of pixels in the sensitive information region;

[0009] performing image blur processing on the sensitive information region in which the plurality of pixels after the arrangement order is changed to obtain the target image containing a blur region;

[0010] embedding the binary bit stream in the target image containing the blur region.

[0011] In one possible implementation, the image blur processing on the sensitive information region in which the plurality of pixels after the arrangement order is changed to obtain the target image containing a blur region comprises:

[0012] performing Gaussian blur processing on the sensitive information region in which the plurality of pixels after the arrangement order is changed, and performing target desensitization processing on pixels located at the boundary of the sensitive information region to obtain the target image containing a blur region, wherein the plurality of pixels do not include the pixels located at the boundary of the sensitive information region, and the target desensitization processing comprises at least one of filling a preset pixel value, periodic extension and mirror processing.

[0013] In a possible implementation, the embedding of the binary bit stream into the target image containing the blur area comprises:

[0014] obtaining a binary bit stream of each pixel in a restoration auxiliary information storage area in the target image containing the blur area, the restoration auxiliary information storage area being a region pre-set for storing restoration auxiliary information, and the restoration auxiliary information storage area not having an overlapping region with the sensitive information region;

[0015] determining an embedding region from a plurality of alternative regions, the alternative regions being image regions other than the restoration auxiliary information storage area, and each of the alternative regions having the same size and shape;

[0016] generating restoration auxiliary information based on position information of the embedding region and position information of the sensitive information region, converting the restoration auxiliary information into a plurality of pixel values, and replacing pixel values of each pixel in the restoration auxiliary information storage area with the converted pixel values;

[0017] embedding the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the cipher text sequence into the embedding region.

[0018] In a possible implementation, the alternative regions are rectangular regions, and each of the alternative regions comprises a plurality of sub-regions, and the determining of the embedding region from the plurality of alternative regions comprises:

[0019] determining a complexity of each of the sub-regions;

[0020] determining a pixel value difference statistical quantity of the sub-region whose complexity is lower than a complexity threshold;

[0021] determining the sub-region whose pixel value difference statistical quantity is less than a difference threshold as the embedding region.

[0022] In a possible implementation, the embedding region is a rectangular region, and each of the embedding regions comprises a plurality of sub-regions, and the embedding of the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the cipher text sequence into the embedding region comprises:

[0023] using a formula

[0024]

[0025] embedding the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the cipher text sequence into the embedding region, wherein i is a number of a sub-region included in the embedding region, a maximum pixel value of the sub-region numbered i, a minimum pixel value of the sub-region numbered i, b is an information bit of a binary bit stream, a minimum pixel value of the sub-region numbered i after embedding information, a maximum pixel value of the sub-region numbered i after embedding information, and a is a preset translation parameter.

[0026] The second aspect of the present application provides an image information decryption method, comprising:

[0027] obtaining an encrypted image processed by any one of the image information encryption methods provided in the first aspect of the present application;

[0028] obtaining a binary bit stream embedded from the encrypted image;

[0029] converting the binary bit stream into a ciphertext byte sequence, decrypting the ciphertext byte sequence by using a preset decryption method corresponding to a preset encryption method, and obtaining each pixel in the sensitive information region;

[0030] replacing each pixel in the sensitive information region in the encrypted image with each pixel in the sensitive information region.

[0031] In a possible implementation, the obtaining of the binary bit stream embedded from the encrypted image comprises:

[0032] obtaining a pixel value of a restoration auxiliary information storage area in the encrypted image, obtaining restoration auxiliary information based on the pixel value, the restoration auxiliary information storage area being a region pre-set for storing the restoration auxiliary information, and the restoration auxiliary information storage area not having an overlapping region with the sensitive information region;

[0033] determining position information of an embedding region and position information of the sensitive information region based on the restoration auxiliary information;

[0034] obtaining the binary bit stream embedded from the encrypted image based on the position information of the embedding region.

[0035] The third aspect of the present application provides a computer program product, comprising computer readable instructions, when the computer readable instructions run on an electronic device, causing the electronic device to implement any one of the image information encryption methods provided in the first aspect of the present application and / or any one of the image information decryption methods provided in the second aspect of the present application.

[0036] The fourth aspect of the present application provides an electronic device, comprising at least one processor and a memory connected with the processor, wherein:

[0037] The memory is configured to store a computer program;

[0038] The processor is configured to execute the computer program to enable the electronic device to implement any one of the image information encryption methods provided in the first aspect of the application and / or any one of the image information decryption methods provided in the second aspect of the application.

[0039] The fifth aspect of the application provides a computer storage medium, the storage medium carries one or more computer programs, when the one or more computer programs are executed by an electronic device, the electronic device can implement any one of the image information encryption methods provided in the first aspect of the application and / or any one of the image information decryption methods provided in the second aspect of the application.

[0040] By the above technical solution, the image information encryption method, the image information decryption method and the related device provided by the application first change the arrangement order of the plurality of pixels in the sensitive information region, and then perform image blurring processing on the sensitive information region where the plurality of pixels after the arrangement order is changed. In this way, the original sensitive information in the image becomes invisible. At the same time, the application uses a preset encryption method to encode and encrypt each pixel in the sensitive information region, obtains a ciphertext sequence, converts the ciphertext sequence into a binary bit stream, and embeds the binary bit stream into the target image containing the blur region. By embedding each pixel in the sensitive information region into the target image containing the blur region after encryption, the target image carries the encrypted sensitive information, and the party with the right can legally decrypt the sensitive information carried by the target image, thereby restoring the sensitive information. It can be seen that the application not only fully guarantees the security of the sensitive information, but also does not affect the legal use of the sensitive information. BRIEF DESCRIPTION OF DRAWINGS

[0041] The above and other features, advantages, and aspects of the embodiments of the present disclosure will become more apparent with reference to the following detailed description when taken in conjunction with the accompanying drawings. Throughout the drawings, the same or similar reference numerals refer to the same or similar elements. It should be understood that the drawings are schematic, and the original and elements are not necessarily drawn according to the scale.

[0042] Figure 1 A system architecture schematic diagram is provided for the application;

[0043] Figure 2 An optional hardware structure schematic diagram of a terminal is provided for the application;

[0044] Figure 3 A structure schematic diagram of a server is provided for the application;

[0045] Figure 4 A flowchart of an image information encryption method provided by an embodiment of the application;

[0046] Figure 5 FIG. 1 shows a flowchart of another image information encryption method provided by an embodiment of the present application;

[0047] Figure 6 FIG. 2 shows a flowchart of an image information decryption method provided by an embodiment of the present application;

[0048] Figure 7 FIG. 3 shows a structural diagram of an image information encryption device provided by an embodiment of the present application;

[0049] Figure 8 FIG. 4 shows a structural diagram of an image information decryption device provided by an embodiment of the present application;

[0050] Figure 9 FIG. 5 shows a structural diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0051] The embodiments of the present application are described below in conjunction with the drawings. The terms used in the embodiment part of the present application are only used to explain the specific embodiments of the present application, and are not intended to limit the present application.

[0052] The embodiments of the present application are described below in conjunction with the drawings. It is known to those of ordinary skill in the art that, as technology develops and new scenarios appear, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0053] The terms "first", "second", and the like in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily indicate a specific order or sequence. It should be understood that the terms used in this way can be interchanged under appropriate circumstances, and this is only a distinguishing way used in the description of the embodiments of the present application to describe the objects with the same attributes. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, so that the processes, methods, systems, products or devices containing a series of units do not necessarily limit to those units, but can include other units not clearly listed or inherent to these processes, methods, products or devices.

[0054] Referring to Figure 1 , Figure 1 FIG. 1 shows a system architecture diagram. The system can include a terminal 100 and a server 200. The server 200 can include one or more servers (for example, one server is described in the embodiment of the present application), and the server 200 can provide the method provided by the embodiment of the present application for one or more terminals. Figure 1

[0055] ​The terminal 100 can install an image processing application, the application and the webpage can provide an interface, the terminal 100 can receive the parameters (such as image or sensitive information region position) input by the user on the interface, and send the parameters to the server 200, the server 200 can obtain the processing result based on the received parameters, and return the processing result to the terminal 100.

[0056] It should be understood that in some optional implementations, the terminal 100 can also complete the action of obtaining the processing result based on the received parameters by itself without the cooperation of the server, and the embodiments of the present application are not limited.

[0057] Next, the product form of the terminal 100 is described. Figure 1

[0058] The terminal 100 in the embodiments of the present application can be a mobile phone, a tablet computer, a wearable device, a vehicle-mounted device, an augmented reality (AR) / virtual reality (VR) device, a notebook computer, an ultra-mobile personal computer (UMPC), a netbook, a personal digital assistant (PDA), etc., and the embodiments of the present application do not make any limitation thereto.

[0059] Figure 2 An optional hardware structure schematic diagram of the terminal 100 is shown.

[0060] Referring to Figure 2 As shown in the figure, the terminal 100 can include a radio frequency unit 110, a memory 120, an input unit 130, a display unit 140, a camera 150 (optional), an audio circuit 160 (optional), a speaker 161 (optional), a microphone 162 (optional), a earphone jack 163 (optional), a processor 170, an external interface 180, a power supply 190 and the like. Those skilled in the art can understand that Figure 2 The above-mentioned components are only examples of the terminal or the multifunctional device, and do not constitute a limitation to the terminal or the multifunctional device, and the terminal or the multifunctional device can include more or less components than the figure, or combine certain components, or different components.

[0061] ​The input unit 130 can be used to receive inputted digital or character information, and to generate key signal inputs related to user settings of the portable multifunctional device and control of functions. Specifically, the input unit 130 can include a touch screen 131 (optional) and / or other input devices 132. The touch screen 131 can collect touch operations (such as operations of a user using a finger, a joint, a stylus, or any suitable object on or near the touch screen) of the user thereon or therearound, and drive corresponding connected devices according to pre-set programs. The touch screen can detect touch actions of the user on the touch screen, convert the touch actions into touch signals and send the touch signals to the processor 170, and can receive commands from the processor 170 and execute the commands; the touch signals at least include touch point coordinate information. The touch screen 131 can provide an input interface and an output interface between the terminal 100 and the user. In addition, the touch screen can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to the touch screen 131, the input unit 130 can also include other input devices. Specifically, the other input devices 132 can include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control keys, on-off keys, etc.), trackballs, mice, joysticks, etc.

[0062] The input device 132 can receive inputted data, etc.

[0063] The display unit 140 can be used to display information inputted by the user or provided to the user, various menus of the terminal 100, interactive interfaces, file display, and / or playing of any kind of multimedia files. In the embodiments of the present application, the display unit 140 can be used to display an interface for uploading a target image, a region selection interface, processing results, etc.

[0064] The storage 120 can be used to store instructions and data. The storage 120 can mainly include a storage instruction area and a storage data area. The storage data area can store various data such as multimedia files, texts, etc.; the storage instruction area can store software units such as operating systems, applications, instructions required by at least one function, etc., or their subsets, expanded sets. It can also include a non-volatile random access memory; to provide the processor 170 with software and applications that include management of hardware, software, and data resources in computing processing devices, support control. It is also used for storage of multimedia files, and storage of running programs and applications.

[0065] The processor 170 is the control center of the terminal 100, connects each part of the whole terminal 100 by various interfaces and lines, executes various functions of the terminal 100 and processes data by running or executing the instructions stored in the memory 120 and calling the data stored in the memory 120, thereby performing overall control on the terminal device. Optionally, the processor 170 can include one or more processing units; preferably, the processor 170 can integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface and application program, etc., and the modem processor mainly processes wireless communication. It can be understood that the above-mentioned modem processor can also not be integrated into the processor 170. In some embodiments, the processor, the memory, can be implemented on a single chip, and in some embodiments, they can also be implemented on independent chips respectively. The processor 170 can also be used to generate corresponding operation control signals to send to corresponding components of the computing processing device, read and process data in the software, especially read and process data and programs in the memory 120, so that each functional module therein executes corresponding functions, thereby controlling the corresponding components to act according to the requirements of the instructions.

[0066] The memory 120 can be used to store software codes related to the image information encryption method and / or the image information decryption method, and the processor 170 can execute the steps of the image information encryption method and / or the image information decryption method, or can also dispatch other units (such as the above-mentioned input unit 130 and display unit 140) to realize corresponding functions.

[0067] The RF unit 110 (optional) can be used to receive and send signals in the process of information or communication, for example, receiving the downlink information of the base station, and processing by the processor 170. In addition, the uplink data is sent to the base station. Generally, the RF circuit includes but is not limited to an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier (LNA), a duplexer, etc. In addition, the RF unit 110 can also communicate with network devices and other devices through wireless communication. The wireless communication can use any communication standard or protocol, including but not limited to global system for mobile communication (GSM), general packet radio service (GPRS), code division multiple access (CDMA), wideband code division multiple access (WCDMA), long term evolution (LTE), email, short messaging service (SMS), etc.

[0068] In the embodiments of the present application, the RF unit 110 can send data to the server 200 and receive the processing result sent by the server 200.

[0069] It should be understood that the RF unit 110 is optional, which can be replaced by other communication interfaces, for example, a network interface.

[0070] The terminal 100 also includes a power supply 190 (such as a battery) for supplying power to each component. Preferably, the power supply can be logically connected to the processor 170 through a power management system, so as to realize the functions of managing charging, discharging, and power consumption management through the power management system.

[0071] The terminal 100 also includes an external interface 180, which can be a standard Micro USB interface or a multi-pin connector. The external interface 180 can be used to connect the terminal 100 with other devices for communication, and can also be used to connect a charger for charging the terminal 100.

[0072] Although not shown, the terminal 100 can also include a flash, a wireless fidelity (WiFi) module, a Bluetooth module, sensors with different functions, etc., which will not be described here. Some or all of the methods described below can be applied in the terminal 100 as shown. Figure 2

[0073] ​Next, the product form of the server 200 is described. Figure 1 The product form of the server 200 is described.

[0074] Figure 3 A structural diagram of the server 200 is provided, as shown in the figure. Figure 3 The server 200 includes a bus 201, a processor 202, a communication interface 203, and a memory 204. The processor 202, the memory 204, and the communication interface 203 communicate through the bus 201.

[0075] The bus 201 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 In the figure, only one thick line is used, but it does not mean that there is only one bus or one type of bus.

[0076] The processor 202 can be any one or more of a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP), etc.

[0077] The memory 204 can include a volatile memory, such as a random access memory (RAM). The memory 204 can also include a non-volatile memory, such as a read-only memory (ROM), a flash memory, a mechanical hard drive (HDD), or a solid state drive (SSD).

[0078] The memory 204 can be used to store software codes related to the image information encryption method and / or the image information decryption method, and the processor 202 can execute the steps of the chip image information encryption method and / or the image information decryption method, or can schedule other units to realize the corresponding functions.

[0079] It should be understood that the terminal 100 and the server 200 described above can be centralized or distributed devices, and the processors (for example, the processor 170 and the processor 202) in the terminal 100 and the server 200 can be hardware circuits (for example, an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA), a general-purpose processor, a digital signal processing (DSP), a microprocessor, a microcontroller, or the like) or a combination of the hardware circuits. For example, the processor can be a hardware system with an instruction execution function, such as a CPU, a DSP, or the like, or a hardware system without an instruction execution function, such as an ASIC, an FPGA, or the like, or a combination of the hardware system without an instruction execution function and the hardware system with an instruction execution function.

[0080] To solve the above problems, the embodiment of the present application provides an image information encryption method. The image information encryption method of the embodiment of the present application will be described in detail below with reference to the accompanying drawings.

[0081] Referring to Figure 4 , Figure 4 A flowchart of an image information encryption method provided by the embodiment of the present application is shown in FIG. 4. The data processing method provided by the embodiment of the present application can include steps 401 to 405, which will be described in detail below. Figure 4

[0082] 401. Determine a sensitive information region in a target image.

[0083] The target image can be any image, such as an ID card image, a text image, a photographed image, etc.

[0084] Sensitive information is information that is not suitable for public disclosure or should not be leaked to others, such as an ID card number, a face image, an iris, a fingerprint, a passport number, a bank card number, a transaction record, an account balance, a signature, etc. In actual applications, any information can be set as sensitive information according to actual needs, which is not limited by the present application. The sensitive information region is a region occupied by the sensitive information in the target image. The sensitive information region determined in step 401 can be the position information of the sensitive information region, which can be the coordinates of the sensitive information region, and the coordinates can be the coordinates of the top vertex of the sensitive information region. Specifically, when the sensitive information region is a rectangle, the position information of the sensitive information region can be the coordinates of the top left vertex and the coordinates of the bottom right vertex of the sensitive information region.

[0085] ​Specifically, the application can determine the sensitive information region in the target image based on various manners. For example, the sensitive information region is manually selected, or the sensitive information region in the target image is recognized through image recognition technology.

[0086] Optionally, the application can use a deep learning-based convolutional neural network (CNN) to recognize faces and various biological information (such as fingerprints and irises), and can also use optical character recognition (OCR) technology to recognize and extract text information in the image, thereby recognizing sensitive text information in the image. The application can also use machine learning technology to recognize sensitive information.

[0087] 402. Encode and encrypt each pixel in the sensitive information region using a preset encryption method to obtain a ciphertext byte sequence, and convert the ciphertext byte sequence into a binary bit stream.

[0088] Optionally, the above-mentioned preset encryption method can be an Advanced Encryption Standard (AES) encryption technology. Specifically, the application uses the AES technology to encode and encrypt each pixel in the sensitive information region, and the specific process of obtaining the ciphertext byte sequence can include the following steps 4021 to 4026:

[0089] 4021. Key generation.

[0090] First, a strong key needs to be generated, which can be 128 bits, 192 bits, or 256 bits in length, depending on the required security level. Considering the security and encryption and decryption efficiency, the application uses a key with a length of 128 bits. The generation of the key can be completed by a secure random number generator, ensuring that a unique key is used for each encryption.

[0091] 4022. Key expansion.

[0092] Use the AES key expansion algorithm to expand the initial key into a key sequence, which will be used in each subsequent round of encryption. The key expansion algorithm includes steps such as byte substitution, shifting, and mixing columns, ensuring the diversity and complexity of the key.

[0093] 4023. Initial round key addition.

[0094] XOR operation is performed between the pixel value of the sensitive information region and the first round key of the expanded key, which is the starting step of each round of encryption.

[0095] 4024. Iterative round encryption.

[0096] Multiple rounds of AES encryption are performed on each pixel value of the sensitive information region, each round including the following steps A to D:

[0097] A. SubBytes: Each byte is non-linearly replaced using a S-box, which is a look-up table operation designed to increase the confusion of data.

[0098] B. ShiftRows: Each row of the state matrix is cyclically shifted, which helps to spread the data.

[0099] C. MixColumns: Except for the last round, each column of bytes is additively operated with a fixed multiplier, which further increases the diffusion of data.

[0100] D. AddRoundKey: The corresponding part of the expanded key is added to each byte of the state matrix.

[0101] 4025. Final round encryption.

[0102] The last round of encryption is performed, but the MixColumns step is skipped. This round uses the last part of the expanded key for the AddRoundKey.

[0103] 4026. Output the encryption result.

[0104] After the above steps 4021 to 4026, the value of each pixel will be converted to the encrypted value, forming a sequence of ciphertext bytes.

[0105] Through AES encryption, the sensitive information in the image is strongly protected. Only authorized users who know the key can recover the original sensitive information through the corresponding decryption process. The security of AES has been widely verified, and it resists various cryptographic attacks, including brute-force attacks, differential attacks, and linear attacks, and can provide reliable protection for the sensitive information of the image.

[0106] Of course, in addition to the AES technology, the present application can also use other reversible encryption algorithms, such as: Data Encryption Standard (DES), Triple Data Encryption Standard (3DES), Rivest-Shamir-Adleman (RSA), etc.

[0107] 403. Change the arrangement order of multiple pixels in the sensitive information area.

[0108] Optionally, the present application can change the arrangement order of multiple pixels in the sensitive information area through various technologies, such as random permutation, Arnold permutation, etc. Random permutation is to exchange one pixel with another random pixel determined by a random algorithm.

[0109] Since the pixels in the sensitive information region are encrypted and stored in step 402, the sensitive information in the sensitive information region can be destructively eliminated without considering its reversibility. The present application can use Arnold scrambling technology to destroy the shape of the sensitive information. Arnold scrambling is an image processing technology based on chaos theory, which rearranges the pixels of the image through chaotic mapping, thereby achieving the purpose of blurring the original sensitive information shape. In the field of image privacy protection, Arnold scrambling can be used as a preprocessing step to lay the foundation for subsequent image blurring processing, so that the shape features of the sensitive information in the image are effectively eliminated.

[0110] Arnold scrambling involves a discrete chaotic mapping, which can be represented as an iterative process. For a two-dimensional image, Arnold scrambling can be implemented through the following iterative formula:

[0111]

[0112] where x n and y n represent the position coordinates of the pixel at the nth iteration, a and b are the parameters of the chaotic mapping, usually two co-prime positive integers are selected, and N is the width or height of the image. The selection of parameters a and b is crucial to chaotic behavior, and values that make the mapping have good chaotic characteristics are usually selected.

[0113] The processing process of Arnold scrambling is as follows steps 4031 to 4035:

[0114] 4031, initialization: determine the size N of the image and initialize the position coordinates of all pixels.

[0115] 4032, iteration: for each pixel in the image, perform iterative calculation according to the above formula to update the new position of the pixel. The number of iterations n will affect the degree of scrambling, and usually multiple iterations are needed to reach the chaotic state.

[0116] 4033, boundary processing: since the pixels may exceed the boundaries of the image during iteration, boundary condition processing such as periodic boundary condition or reflective boundary condition needs to be implemented to ensure that the pixels move within the image range.

[0117] 4034, pixel permutation: after each iteration, copy the value of the current pixel to the pixel at the new position. If the new position already has a pixel, you need to decide how to handle the values of the two pixels, for example, by covering or mixing. In the present application scheme, since the scrambling process does not need to consider reversibility, the two pixels can be directly covered.

[0118] 4035 Termination condition: when the number of iterations reaches a preset value or when the pixel distribution reaches a certain chaotic state, stop iteration.

[0119] Arnold scrambling makes the pixel positions in the image change complexly through the dynamic characteristics of chaotic mapping. This change is nonlinear and very sensitive to initial conditions. In image privacy protection, this means that the shape and features of sensitive information will be disrupted after Arnold scrambling, making it visually unclear. This blurring effect provides a basis for subsequent image blurring processing, making the shape features of sensitive information further eliminated, enhancing the protection effect.

[0120] 404, perform image blurring processing on the sensitive information region where the plurality of pixels after changing the arrangement order are located, to obtain a target image containing a blurred region.

[0121] The image blurring processing can be various, such as Gaussian blurring, salt and pepper blurring, motion blurring, etc. The present application can use one or more of these image blurring processing to perform image blurring processing on the sensitive information region where the plurality of pixels after changing the arrangement order are located, to obtain a target image containing a blurred region.

[0122] In an optional embodiment, step 404 can specifically include:

[0123] performing Gaussian blurring processing on the sensitive information region where the plurality of pixels after changing the arrangement order are located, and performing target desensitization processing on the pixels located at the boundary of the sensitive information region, to obtain a target image containing a blurred region, the plurality of pixels not including the pixels located at the boundary of the sensitive information region, the target desensitization processing including at least one of filling a preset pixel value, periodic extension, and mirror processing.

[0124] After Arnold scrambling, the sensitive information region of the image has undergone changes in position and shape. The present application can apply Gaussian blurring technology to further smooth these regions and eliminate the features of sensitive information, making it more difficult to visually identify. Gaussian blurring further blurs the shape of sensitive information by reducing the high-frequency details of the image, thereby enhancing the effect of privacy protection.

[0125] The core of Gaussian blurring is the Gaussian function, which is a bell-shaped probability distribution function. Its application in image processing is usually represented as a two-dimensional Gaussian kernel. The expression of the two-dimensional Gaussian function is:

[0126]

[0127] where x and y are the coordinates relative to the kernel center, and σ is the standard deviation of the Gaussian distribution, determining the width of the kernel and the degree of blurring. The larger σ is, the more obvious the blurring effect is.

[0128] The processing procedure of Gaussian blur is shown in the following steps 1-4:

[0129] Step 1, Kernel generation: Select an appropriate σ value according to the desired degree of blurring, and generate the corresponding Gaussian kernel. The size of the kernel is usually more than 6σ to ensure that the kernel contains the main part of the Gaussian function, and the size of the kernel is usually an odd number so as to have a central pixel.

[0130] Step 2, Normalization: In order to ensure that the sum of the weights of the Gaussian kernel is 1 (i.e., the probability is 1), it is necessary to normalize all the values in the kernel.

[0131] Step 3, Convolution: Apply the Gaussian kernel to each pixel of the image, and realize blurring through convolution operation. The convolution operation can be represented as:

[0132]

[0133] where I(x, y) is the original image pixel, is the blurred image pixel, and G is the Gaussian kernel.

[0134] Step 4, Boundary processing: At the edge of the image, due to the lack of pixels, directly applying the above convolution may cause unnatural blurring at the boundary. Therefore, special processing is usually needed for the boundary pixels, such as mirroring, padding or periodic extension. Similar to Arnold scrambling, since the Gaussian blurring process does not need to consider reversibility, the boundary pixels can be simply periodically extended.

[0135] After Arnold scrambling, the sensitive information in the image has been rearranged, but its shape features may still exist. Gaussian blur further weakens these features through smoothing, making the sensitive information more visually blurred. Since Gaussian blur is a linear operation, it does not introduce additional distortion, but uniformly blurs all contents in the image, including the scrambled sensitive areas. Combined with Arnold scrambling and Gaussian blur, this double blurring strategy can effectively protect the sensitive information in the image, and even if the image is illegally acquired, it is difficult to recover the original sensitive information from the blurred image.

[0136] 405, embedding the binary bit stream into the target image containing the blurred region.

[0137] The image information encryption method provided by the embodiment of the present application firstly changes the arrangement order of the plurality of pixels in the sensitive information region, and then performs image blurring processing on the sensitive information region where the plurality of pixels after the arrangement order is changed, so that the original sensitive information in the image becomes invisible. Meanwhile, the present application uses a preset encryption mode to encode and encrypt each pixel in the sensitive information region, obtains a ciphertext byte sequence, converts the ciphertext byte sequence into a binary bit stream, and embeds the binary bit stream into the target image containing the blur region. By embedding each pixel in the sensitive information region into the target image containing the blur region after encryption, the target image carries the encrypted sensitive information, and the party with the right can legally decrypt the sensitive information carried by the target image, so as to restore the sensitive information. It can be seen that the present application not only fully guarantees the security of the sensitive information, but also does not affect the legal use of the sensitive information.

[0138] As shown in Figure 5 Another embodiment of the image information encryption method provided by the embodiment of the present application is shown in the following table. The step 405 can specifically include:

[0139] 4051, obtaining the binary bit stream of each pixel in the restoration auxiliary information storage area in the target image containing the blur region. The restoration auxiliary information storage area is a region pre-set for storing the restoration auxiliary information, and the restoration auxiliary information storage area does not overlap with the sensitive information region.

[0140] The restoration auxiliary information is information used for assisting the restoration process of the encrypted sensitive information. The restoration auxiliary information can specifically include: position information of the embedding region and position information of the sensitive information region.

[0141] The position of the restoration auxiliary information storage area in the image can be pre-set. In order to make the restoration auxiliary information storage area as little as possible to affect the embedding of the binary bit stream of the sensitive information, the restoration auxiliary information storage area can be set at the boundary of the image, for example, the restoration auxiliary information storage area is the first row of pixel region of the image.

[0142] Since the restoration auxiliary information storage area needs to store the restoration auxiliary information, the original pixels of the restoration auxiliary information storage area can also be embedded in the image. Of course, in other embodiments, since the restoration auxiliary information storage area does not include sensitive information, the original pixels of the restoration auxiliary information storage area can not be encrypted, but the binary bit stream of each pixel in the restoration auxiliary information storage area can be directly embedded in the image.

[0143] 4052, determining the embedding region from a plurality of alternative regions. The alternative region is other image region except the restoration auxiliary information storage area, and the size and shape of each alternative region are the same.

[0144] Since the reduction auxiliary information storage area needs to store the reduction auxiliary information, the application does not embed the binary bit stream in the reduction auxiliary information storage area. For other image areas except the reduction auxiliary information storage area, the application can selectively determine part of the areas as embedding areas and embed the binary bit stream.

[0145] The application can divide the other image areas except the reduction auxiliary information storage area into regions, divide a plurality of alternative regions with the same size and shape from the other image areas, and then determine the embedding area from the plurality of alternative regions.

[0146] The way of determining the embedding area from the plurality of alternative regions can be various, such as random selection, selection according to the image features of the alternative regions, etc.

[0147] 4053, based on the position information of the embedding area and the position information of the sensitive information area, generate the reduction auxiliary information, convert the reduction auxiliary information into a plurality of pixel values, and replace the pixel values of each pixel in the reduction auxiliary information storage area with the converted pixel values.

[0148] Step 4053 can directly use the position information of the embedding area and the position information of the sensitive information area as the reduction auxiliary information, or can use the position information of the embedding area, the position information of the sensitive information area and other information as the reduction auxiliary information. The other information can include the length of the binary bit stream in the embedded image.

[0149] After converting the reduction auxiliary information into a plurality of pixel values, the converted pixel values can be used to replace the pixel values of each pixel in the reduction auxiliary information storage area, so as to store the reduction auxiliary information in the reduction auxiliary information storage area.

[0150] Specifically, the converted pixel values can be embedded in the reduction auxiliary information storage area in the form of least significant bit (LSB).

[0151] 4054, the binary bit stream and the binary bit stream obtained by converting the cipher text byte sequence in each pixel in the reduction auxiliary information storage area are embedded in the determined embedding area.

[0152] Figure 5 The method shown can store the reduction auxiliary information in the reduction auxiliary information storage area to facilitate the subsequent reduction process of the encrypted sensitive information. At the same time, Figure 5 The method shown also converts the binary bit stream in the original pixels in the reduction auxiliary information storage area and embeds the image, so that the subsequent reduction auxiliary information storage area can be based on the binary bit stream to restore the original pixels, ensuring the integrity of the image.

[0153] Optionally, the alternative region is a rectangular region, and each alternative region includes a plurality of sub-regions, and the step 4052 of determining the embedding region from the plurality of alternative regions can include:

[0154] determining a complexity of each alternative region;

[0155] determining a pixel value difference statistic of the alternative region whose complexity is lower than a complexity threshold value;

[0156] determining the alternative region whose pixel value difference statistic is less than a difference threshold value as the embedding region.

[0157] The process of determining the complexity of each alternative region can include:

[0158] for each sub-region, determining a median value of pixel values of pixels included in the sub-region as a median value of the sub-region;

[0159] determining a maximum value and a minimum value of the median values of the sub-regions included in each alternative region, and determining a difference between the maximum value and the minimum value of the median values of the sub-regions included in each alternative region as the complexity of each alternative region.

[0160] The process of determining the pixel value difference statistic of the alternative region can include:

[0161] based on the formula

[0162]

[0163] determining a pixel value difference statistic D of the alternative region, being a maximum pixel value of the sub-region numbered i, being a minimum pixel value of the sub-region numbered i, being a median value of pixel values of the sub-region numbered i, and n being a number of sub-regions included in one alternative region.

[0164] Optionally, n can be 4.

[0165] Through the above process of determining the embedding region based on the complexity and the pixel value difference statistic, the present application can determine the alternative region with smaller pixel difference as the embedding region, and since the pixel difference is smaller, the calculation amount during subsequent decryption is also relatively small, and the data processing amount can be reduced.

[0166] Optionally, the restoration auxiliary information can further include a complexity threshold value and a difference threshold value.

[0167] Optionally, the embedding region is a rectangular region, and each embedding region includes a plurality of sub-regions, and the step 4054 can specifically include:

[0168] using the formula

[0169]

[0170] The binary bit stream of each pixel in the reduction auxiliary information storage area and the binary bit stream obtained after conversion of the cipher text byte sequence are embedded in a determined embedding area, wherein i is the number of a sub-area included in the embedding area, is the maximum pixel value of the sub-area numbered i, is the minimum pixel value of the sub-area numbered i, and b is an information bit of the binary bit stream, is the minimum pixel value of the sub-area numbered i after embedding information, is the maximum pixel value of the sub-area numbered i after embedding information, and a is a preset translation parameter.

[0171] The difference between the image embedded with the encrypted information and the original image is almost invisible to human vision and does not affect the use of the image.

[0172] As shown in Figure 6 Corresponding to the image information encryption method provided in the present application, the present application further provides an image information decryption method, which can include:

[0173] 601. Obtain an encrypted image processed by using any one of the image information encryption methods provided in the present application;

[0174] 602. Obtain the embedded binary bit stream from the encrypted image;

[0175] Optionally, obtaining the embedded binary bit stream from the encrypted image can include:

[0176] Obtain the pixel value of the reduction auxiliary information storage area in the encrypted image, obtain the reduction auxiliary information based on the pixel value, the reduction auxiliary information storage area is a region pre-set for storing the reduction auxiliary information, and the reduction auxiliary information storage area does not have an overlapping region with the sensitive information region;

[0177] Determine the position information of the embedding area and the position information of the sensitive information region based on the reduction auxiliary information;

[0178] Obtain the embedded binary bit stream from the encrypted image based on the position information of the embedding area.

[0179] Specifically, the present application can pre-divide the image region other than the reduction auxiliary information storage area into regions (the region division manner is the same as the region division manner used in the image information encryption method), obtain a plurality of alternative regions, and then determine the embedding area from the alternative regions according to the position information of the embedding area.

[0180] In some cases, the pixels of the image can change during storage and transmission, and the application can use the complexity of the alternative region and the pixel value difference statistics to check the embedding region determined according to the position information of the embedding region. Specifically, the application can calculate the complexity of the alternative region and the pixel value difference statistics, and then compare the complexity with the complexity threshold and compare the pixel value difference statistics with the difference threshold, and according to the comparison result, the above-mentioned check can be performed.

[0181] 603. Convert the binary bit stream into a cipher text sequence, decrypt the cipher text sequence using a preset decryption method corresponding to the preset encryption method, and obtain each pixel in the sensitive information region;

[0182] Specifically, step 603 can use the formula

[0183]

[0184] Convert the binary bit stream into a cipher text sequence, wherein i is the number of the sub-region included in the embedding region, is the maximum pixel value of the sub-region with the number i, is the minimum pixel value of the sub-region with the number i, and b is the information bit of the binary bit stream, is the minimum pixel value of the sub-region with the number i after embedding information, is the maximum pixel value of the sub-region with the number i after embedding information, and a is a preset translation parameter.

[0185] 604. Replace each pixel in the sensitive information region of the encrypted image with each pixel in the sensitive information region of the sensitive information region.

[0186] The image information decryption method provided by the embodiment of the application can decrypt the encrypted image processed by any one of the image information encryption methods provided by the application, and restore the sensitive information in the target image.

[0187] The above introduces an image information encryption method and an image information decryption method provided by the embodiment of the application. The following will introduce the device for executing the above-mentioned image information encryption method and the device for executing the above-mentioned image information decryption method.

[0188] Please refer to Figure 7 , Figure 7 is a structural schematic diagram of an image information encryption device provided by the embodiment of the application. As Figure 7 shown, the image information encryption device comprises:

[0189] A determination unit 701 is configured to determine a sensitive information region in a target image.

[0190] encrypting unit 702, configured to encode and encrypt each pixel in the sensitive information region using a preset encryption mode, to obtain a ciphertext byte sequence, and to convert the ciphertext byte sequence into a binary bit stream;

[0191] ordering unit 703, configured to change an arrangement order of a plurality of pixels in the sensitive information region;

[0192] blurring unit 704, configured to perform image blurring processing on the sensitive information region in which the plurality of pixels after the arrangement order is changed is located, to obtain the target image containing a blurring region;

[0193] embedding unit 705, configured to embed the binary bit stream into the target image containing the blurring region.

[0194] Optionally, the blurring unit 704 is specifically configured to:

[0195] perform Gaussian blurring processing on the sensitive information region in which the plurality of pixels after the arrangement order is changed is located, and perform target desensitization processing on pixels located at a boundary of the sensitive information region, to obtain the target image containing the blurring region, the plurality of pixels not including the pixels located at the boundary of the sensitive information region, and the target desensitization processing including at least one of filling a preset pixel value, periodic extension, and mirror processing.

[0196] Optionally, the embedding unit 705 includes:

[0197] a bit rate obtaining subunit, configured to obtain a binary bit stream of each pixel in a restoration auxiliary information storage area in the target image containing the blurring region, the restoration auxiliary information storage area being a region pre-set for storing restoration auxiliary information, and the restoration auxiliary information storage area not having an overlapping region with the sensitive information region;

[0198] an embedding region determining subunit, configured to determine an embedding region from a plurality of candidate regions, the candidate regions being other image regions except the restoration auxiliary information storage area, and each of the candidate regions having the same size and shape;

[0199] an information generating subunit, configured to generate restoration auxiliary information based on position information of the embedding region and position information of the sensitive information region, to convert the restoration auxiliary information into a plurality of pixel values, and to replace pixel values of each pixel in the restoration auxiliary information storage area with the converted pixel values;

[0200] an embedding subunit, configured to embed the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the ciphertext byte sequence, into the embedding region.

[0201] Optionally, the alternative region is a rectangular region, and each of the alternative regions comprises a plurality of sub-regions, and the embedding region determining sub-unit is specifically configured to determine:

[0202] determine the complexity of each of the sub-regions;

[0203] determine a pixel value difference statistic of the sub-region whose complexity is lower than a complexity threshold;

[0204] determine the sub-region whose pixel value difference statistic is less than a difference threshold as the embedding region.

[0205] Optionally, the embedding region is a rectangular region, and each of the embedding regions comprises a plurality of sub-regions, and the embedding sub-unit is specifically configured to:

[0206] use the formula

[0207]

[0208] embed the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the cipher text sequence into the embedding region, wherein i is the number of the sub-region included in the embedding region, is the maximum pixel value of the sub-region with the number i, is the minimum pixel value of the sub-region with the number i, b is an information bit of the binary bit stream, is the minimum pixel value of the sub-region with the number i after embedding information, is the maximum pixel value of the sub-region with the number i after embedding information, and a is a preset translation parameter.

[0209] The image information encryption device provided by the embodiment of the present application first changes the arrangement order of a plurality of pixels in a sensitive information region, then performs image blurring processing on the sensitive information region in which the plurality of pixels after the arrangement order is changed are located, and in this way, the original sensitive information in the image becomes invisible. Meanwhile, the present application uses a preset encryption mode to encode and encrypt each pixel in the sensitive information region, obtains a cipher text sequence, converts the cipher text sequence into a binary bit stream, and embeds the binary bit stream into a target image containing a blur region. By embedding each pixel in the sensitive information region after being encrypted into the target image containing the blur region, the target image carries encrypted sensitive information, and a party with a right can legally decrypt the sensitive information carried by the target image, so as to restore the sensitive information. It can be seen that the present application sufficiently guarantees the security of sensitive information and does not affect the legal use of sensitive information.

[0210] Please refer to Figure 8 , Figure 8A structural diagram of an image information decryption device is provided in the embodiments of the present application. As shown in Figure 8 The image information decryption device comprises:

[0211] An image obtaining unit 801 is configured to obtain an encrypted image processed by the image information encryption device provided in any of the embodiments of the present application.

[0212] A bit rate obtaining unit 802 is configured to obtain a binary bit stream embedded in the encrypted image.

[0213] A decryption unit 803 is configured to convert the binary bit stream into a cipher text byte sequence, decrypt the cipher text byte sequence by using a preset decryption method corresponding to a preset encryption method, and obtain each pixel in the sensitive information region.

[0214] A restoring unit 804 is configured to replace each pixel in the sensitive information region in the encrypted image with each pixel in the sensitive information region.

[0215] Optionally, the bit rate obtaining unit 802 comprises:

[0216] A pixel value obtaining sub-unit is configured to obtain a pixel value of a restoring auxiliary information storage area in the encrypted image, obtain restoring auxiliary information based on the pixel value, the restoring auxiliary information storage area is a region pre-set for storing the restoring auxiliary information, and the restoring auxiliary information storage area does not overlap with the sensitive information region.

[0217] A position determining sub-unit is configured to determine position information of an embedding region and position information of the sensitive information region based on the restoring auxiliary information.

[0218] An embedding information obtaining sub-unit is configured to obtain the binary bit stream embedded in the encrypted image based on the position information of the embedding region.

[0219] The image information decryption device provided in the embodiments of the present application can decrypt the encrypted image processed by any of the image information encryption devices provided in the present application, and restore the sensitive information in the target image.

[0220] An electronic device is further provided in the embodiments of the present application. As shown in Figure 9 The electronic device shown in the figure is only an example, and should not bring any limitation to the functions and use range of the embodiments of the present application. Figure 9 The electronic device shown in the figure is only an example, and should not bring any limitation to the functions and use range of the embodiments of the present application.

[0221] As shown in Figure 9 The electronic device can include a processing device (e.g., a central processor, a graphics processor, etc.) 901 that can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 902 or loaded into a random access memory (RAM) 903 from a storage device 908. In a state in which the electronic device is powered on, various programs and data required for the operation of the electronic device are also stored in the RAM 903. The processing device 901, the ROM 902, and the RAM 903 are connected to each other through a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.

[0222] In general, the following devices can be connected to the I / O interface 905: input devices 906 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; output devices 907 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 908 including, for example, a memory card, a hard disk, etc.; and communication devices 909. The communication devices 909 can allow the electronic device to communicate wirelessly or wiredly with other devices to exchange data. Although Figure 9 An electronic device having various devices is shown, but it is understood that all of the shown devices are not required to be implemented or possessed. More or fewer devices can be alternatively implemented or possessed.

[0223] The embodiments of the present application also provide a computer program product including computer readable instructions, which, when executed on an electronic device, cause the electronic device to implement any of the image information encryption method and / or any of the image information decryption method provided by the embodiments of the present application.

[0224] The embodiments of the present application also provide a computer readable storage medium carrying one or more computer programs, which, when executed by an electronic device, can cause the electronic device to implement any of the image information encryption method and / or any of the image information decryption method provided by the embodiments of the present application.

[0225] In addition, it should be noted that the above-described device embodiments are only schematic and that real implementations can differ from that described above, for example due to the design choices made to implement the described functionality in a real environment. It is therefore considered that embodiments should cover any and all modifications falling within the scope of the claims, along with their equivalents.

[0226] Those skilled in the art can clearly understand that the application can be implemented by means of software plus necessary universal hardware, and of course can also be implemented by means of dedicated hardware including special integrated circuit, special CPU, special memory, special component, etc. Generally, any function completed by computer program can be easily implemented by corresponding hardware, and the specific hardware structure for implementing the same function can also be various, such as analog circuit, digital circuit or special circuit, etc. However, for the application, software program implementation is a better embodiment. Based on such understanding, the technical solution of the application or the part of the application which makes contribution to the prior art can be embodied in the form of software product, which is stored in readable storage medium, such as computer floppy disk, U disk, mobile hard disk, ROM, RAM, magnetic disk or optical disk, etc., and includes a plurality of instructions for making a computer device (which can be personal computer, training device or network device, etc.) execute the method described in various embodiments of the application.

[0227] In the above embodiments, the implementation can be achieved by software, hardware, firmware or any combination thereof, entirely or partially. When implemented by software, the implementation can be achieved in the form of a computer program product, entirely or partially.

[0228] The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the flow or function described in the embodiments of the application is generated entirely or partially. The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another, for example, the computer instructions can be transmitted from one website, computer, training device or data center to another website, computer, training device or data center through wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) mode. The computer-readable storage medium can be any available medium that can be stored by a computer or a data storage device such as a training device, a data center, etc. integrated with one or more available media sets. The available medium can be a magnetic medium (such as a floppy disk, a hard disk, a magnetic tape), an optical medium (such as a DVD), or a semiconductor medium (such as a solid state disk (SSD)), etc.

Claims

1. An image information encryption method characterized by, The method comprises the following steps: determining a sensitive information region in a target image; encoding and encrypting each pixel in the sensitive information region using a preset encryption method to obtain a ciphertext sequence, and converting the ciphertext sequence into a binary bit stream; changing the arrangement order of a plurality of pixels in the sensitive information region; performing image blurring processing on the sensitive information region in which the plurality of pixels with the changed arrangement order are located to obtain the target image containing a blurred region; embedding the binary bit stream into the target image containing the blurred region; the step of embedding the binary bit stream into the target image containing the blurred region comprises: obtaining the binary bit stream of each pixel in a restoration auxiliary information storage area in the target image containing the blurred region, the restoration auxiliary information storage area being a region pre-set for storing restoration auxiliary information, and the restoration auxiliary information storage area not overlapping with the sensitive information region; determining an embedding region from a plurality of alternative regions, the alternative regions being other image regions except the restoration auxiliary information storage area, and each of the alternative regions having the same size and shape; generating restoration auxiliary information based on the position information of the embedding region and the position information of the sensitive information region, converting the restoration auxiliary information into a plurality of pixel values, and replacing the pixel values of each pixel in the restoration auxiliary information storage area with the converted pixel values; embedding the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the ciphertext sequence into the embedding region.

2. The image information encryption method according to claim 1, characterized by, The step of performing image blurring processing on the sensitive information region in which the plurality of pixels with the changed arrangement order are located to obtain the target image containing a blurred region comprises: performing Gaussian blurring processing on the sensitive information region in which the plurality of pixels with the changed arrangement order are located, and performing target desensitization processing on the pixels located at the boundary of the sensitive information region to obtain the target image containing the blurred region, the plurality of pixels not including the pixels located at the boundary of the sensitive information region, and the target desensitization processing comprising at least one of filling a preset pixel value, periodic extension, and mirror processing.

3. The image information encryption method according to claim 1, characterized by, The alternative regions are rectangular regions, and each of the alternative regions comprises a plurality of sub-regions, and the step of determining an embedding region from a plurality of alternative regions comprises: determining the complexity of each of the sub-regions; determining the pixel value difference statistics of the sub-regions with a complexity lower than a complexity threshold; determining the sub-regions with pixel value difference statistics less than a difference threshold as the embedding region.

4. The image information encryption method according to claim 1, characterized by, The embedding region is a rectangular region, and each of the embedding regions comprises a plurality of sub-regions, and the step of embedding the binary bit stream of each pixel in the restoration auxiliary information storage area and the binary bit stream obtained by converting the ciphertext sequence into the embedding region comprises: using the formula The binary bit stream of each pixel in the reduction auxiliary information storage area and the binary bit stream obtained after conversion of the cipher text byte sequence are embedded in the embedding area, where i is the number of a sub-area included in the embedding area, is the maximum pixel value of the sub-area numbered i, is the minimum pixel value of the sub-area numbered i, and b is an information bit of the binary bit stream, is the minimum pixel value of the sub-area numbered i after embedding information, is the maximum pixel value of the sub-area numbered i after embedding information, and a is a preset translation parameter.

5. An image information decryption method characterized by comprising: comprises: obtaining an encrypted image processed by the image information encryption method in any one of claims 1 to 4; obtaining the embedded binary bit stream from the encrypted image; The binary bit stream is converted into a cipher text sequence, the cipher text sequence is decrypted by using a preset decryption method corresponding to a preset encryption method, and each pixel in the sensitive information region is obtained; Each pixel in the sensitive information region is used to replace each pixel in the sensitive information region of the encrypted image.

6. The image information decryption method according to claim 5, characterized by, The embedded binary bit stream is obtained from the encrypted image, including: The pixel value of the restoration auxiliary information storage area in the encrypted image is obtained, the restoration auxiliary information is obtained based on the pixel value, the restoration auxiliary information storage area is a region pre-set for storing the restoration auxiliary information, and the restoration auxiliary information storage area does not have an overlapping region with the sensitive information region; The position information of the embedding region and the position information of the sensitive information region are determined based on the restoration auxiliary information; The embedded binary bit stream is obtained from the encrypted image based on the position information of the embedding region.

7. A computer program product, characterised in that, The computer readable instructions, when executed on an electronic device, cause the electronic device to implement the image information encryption method of any one of claims 1 to 4 and / or the image information decryption method of any one of claims 5 to 6.

8. An electronic device, comprising: The memory is used to store computer programs; The processor is used to execute the computer programs, so that the electronic device can implement the image information encryption method of any one of claims 1 to 4 and / or the image information decryption method of any one of claims 5 to 6. The storage medium carries one or more computer programs, which can make the electronic device implement the image information encryption method of any one of claims 1 to 4 and / or the image information decryption method of any one of claims 5 to 6 when the one or more computer programs are executed by the electronic device.

9. A computer storage medium, characterized in that ​

Images