Picture security access method, picture encryption method, system and computer equipment

Abstract

The invention relates to a picture security access method, a picture encryption method, a picture security access system and computer equipment. The method comprises the following steps: when entering a target scene page of a front-end application program, loading a picture security component, and obtaining a to-be-accessed picture link, a picture authentication identifier and a dynamic verification parameter from the picture security component; under the condition that the picture authentication identifier indicates to carry out picture authentication, carrying out picture authentication by adopting a picture authentication function in a picture security component based on the dynamic verification parameter; under the condition that the picture authentication is passed, sending the to-be-accessed picture link to a back-end server so as to indicate the back-end server to encrypt a picture indicated by the to-be-accessed picture link based on a preset encryption algorithm; and under the condition that the encrypted picture is received, decrypting the encrypted picture by adopting a picture decryption function in the picture security component, and displaying the decrypted picture in the target scene page. By adopting the method, the security of the picture in network transmission can be ensured.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a method for securely accessing an image, a method for encrypting an image, a system, and a computer device. Background Art

[0002] With the rapid development of network technology, as the most common and intuitive carrier, the sharing and access of image information has become an indispensable part of daily life. Therefore, it is crucial to ensure the content security of image resources during network transmission. In many application scenarios of front-end projects, the loading configuration of images can be directly accessed through the static resource path address (URL) of the image, which has certain access security issues. Once the static address of the image is known, it can be directly opened and accessed in the browser, resulting in the image being stolen to other private projects, and may also be used maliciously, causing copyright disputes or damage to the brand image. In addition, some sensitive images such as those containing personal information, commercial secrets or other important content may also face the risk of screenshots and sending them to others. This situation will lead to privacy exposure and information leakage, causing immeasurable losses to individuals or enterprises. Therefore, there is an urgent need for a method for secure access to images that can ensure the security of images in network transmission. Summary of the invention

[0003] Based on this, it is necessary to provide a picture security access method, picture encryption method, system and computer device that can ensure the security of pictures during network transmission in response to the above technical problems.

[0004] In a first aspect, the present application provides a method for securely accessing an image, which is applied to a front-end application program, and the method includes:

[0005] When entering the target scene page of the front-end application, load the image security component, and obtain the image link to be accessed, the image authentication identifier, and the dynamic verification parameters from the image security component;

[0006] When the image authentication mark indicates that image authentication is to be performed, the image authentication function in the image security component is used to perform image authentication based on the dynamic verification parameters;

[0007] If the image authentication is passed, the link of the image to be accessed is sent to the back-end server to instruct the back-end server to encrypt the image indicated by the link of the image to be accessed based on a preset encryption algorithm, and return the encrypted image to the front-end application;

[0008] When an encrypted image is received, the image decryption function in the image security component is used to decrypt the encrypted image, and the decrypted image is displayed in the target scene page.

[0009] In one embodiment, the dynamic verification parameters include a dynamic timestamp, a login authentication identifier, and a preset encryption key value; based on the dynamic verification parameters, the image authentication function in the image security component is used to perform image authentication, including:

[0010] Use the preset encryption key value to encrypt the dynamic timestamp and login authentication identifier;

[0011] The encrypted information is used as the parameter of the image authentication function in the image security component, and the image authentication function is executed to obtain the image authentication result; the image authentication function is used to decrypt the encrypted information. If it is determined based on the decrypted timestamp that the image authentication has not expired, and it is determined based on the decrypted login authentication identifier that the login authentication has passed, then it is determined that the image authentication has passed, and the image authentication result is returned.

[0012] In one embodiment, displaying the decrypted image in the target scene page includes:

[0013] Get image size information and watermark information from the image security component;

[0014] Determine the number of watermarks based on the image size information;

[0015] Based on the number of watermarks and watermark information, a watermark is added to the decrypted image, and the watermarked image is displayed in the target scene page.

[0016] In one embodiment, the encrypted image is decrypted using an image decryption function in an image security component, including:

[0017] Generate a key using a pre-shared encoding sequence initial value;

[0018] The encrypted image is decrypted using the key to obtain a decrypted image.

[0019] In one embodiment, the method for securely accessing a picture further includes:

[0020] In the event of a decryption failure, the encrypted image is displayed in the target scene page.

[0021] In a second aspect, the present application provides a method for encrypting an image, which is applied to a backend server, and the method includes:

[0022] When receiving the image link to be accessed sent by the front-end application, the image indicated by the image link to be accessed is encrypted based on a preset encryption algorithm; when the image link to be accessed is indicated by the front-end application for image authentication under the instruction of the image authentication identifier, the image authentication function in the image security component is used to perform image authentication based on dynamic verification parameters, and the image authentication is sent to the back-end server when the image authentication passes; the image link to be accessed, the image authentication identifier and the dynamic verification parameters are all obtained by the front-end application loading the image security component when entering the target scene page;

[0023] The encrypted image is returned to the front-end application to instruct the front-end application to decrypt the encrypted image using the image decryption function in the image security component upon receiving the encrypted image, and to display the decrypted image in the target scene page.

[0024] In one embodiment, the preset encryption algorithm includes a first encryption algorithm and a second encryption algorithm; encrypting the picture indicated by the picture link to be accessed based on the preset encryption algorithm includes:

[0025] Generate a key stream having the same size as the picture indicated by the picture link to be accessed by using a first encryption algorithm;

[0026] The picture indicated by the picture link to be accessed is encrypted based on the key stream and the second encryption algorithm to obtain an encrypted picture.

[0027] In one embodiment, encrypting the picture indicated by the picture link to be accessed based on the key stream and the second encryption algorithm to obtain the encrypted picture includes:

[0028] Separate the channels of the image indicated by the image link to be accessed to obtain a multi-channel image;

[0029] For each channel image, the preset encoding rules and key stream are used to determine the ciphertext image corresponding to the channel image;

[0030] The encrypted image is determined based on the ciphertext images corresponding to each of the multi-channel images.

[0031] In a third aspect, the present application also provides a system for secure access to images, the system comprising:

[0032] The front-end application is used to load the image security component when entering the target scene page, and obtain the image link to be accessed, the image authentication identifier and the dynamic verification parameters from the image security component; when the image authentication identifier indicates to perform image authentication, the image authentication function in the image security component is used to perform image authentication based on the dynamic verification parameters; when the image authentication passes, the image link to be accessed is sent to the back-end server;

[0033] The back-end server is used to encrypt the picture indicated by the picture link to be accessed based on a preset encryption algorithm when receiving the picture link to be accessed sent by the front-end application, and return the encrypted picture to the front-end application;

[0034] The front-end application is also used to decrypt the encrypted image using the image decryption function in the image security component when receiving the encrypted image sent by the back-end server, and display the decrypted image in the target scene page.

[0035] In a fourth aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0036] When the front-end application enters the target scene page, it loads the image security component and obtains the image link to be accessed, the image authentication identifier and the dynamic verification parameters from the image security component; when the image authentication identifier indicates to perform image authentication, the image authentication function in the image security component is used to perform image authentication based on the dynamic verification parameters; when the image authentication passes, the image link to be accessed is sent to the back-end server;

[0037] When the backend server receives the link of the image to be accessed sent by the frontend application, it encrypts the image indicated by the link of the image to be accessed based on a preset encryption algorithm and returns the encrypted image to the frontend application;

[0038] When the front-end application receives the encrypted image sent by the back-end server, it uses the image decryption function in the image security component to decrypt the encrypted image and displays the decrypted image in the target scene page.

[0039] In the above-mentioned image security access method, image encryption method, system and computer device, the target scene page in the front-end application is constructed by the image security component. When entering the target scene page, the image security component is loaded, and the image link to be accessed, the image authentication identifier and the dynamic verification parameters are obtained from the image security component. When the image authentication identifier indicates to perform image authentication, the image authentication is performed in the image security component. When the image authentication passes, the back-end server uses a preset encryption algorithm to encrypt the image indicated by the image link to be accessed, and the front-end application decrypts the encrypted image and displays the decrypted image in the target scene page. Since the image authentication identifier and the image authentication function are added to the image security component, the security of image access is guaranteed; in addition, the back-end server returns the encrypted image, which further ensures the security of the image during network transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0041] Figure 1 A diagram of an application environment of a method for securely accessing pictures in an embodiment;

[0042] Figure 2 A schematic diagram of a process of a method for securely accessing pictures in one embodiment;

[0043] Figure 3 A schematic diagram of a process flow of a picture encryption method in one embodiment;

[0044] Figure 4 is a schematic diagram of a method for securely accessing pictures in one embodiment;

[0045] Figure 5 The figure is a schematic diagram of the overall process of a method for securely accessing pictures in one embodiment;

[0046] Figure 6 It is a schematic diagram of the overall flow of a method for securely accessing pictures in another embodiment;

[0047] Figure 7 A structural block diagram of a method for securely accessing pictures in one embodiment;

[0048] Figure 8 It is a structural block diagram of a picture encryption device in one embodiment;

[0049] Fig. 9FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0050] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0051] The image security access method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the image security access method is applied to the front-end application in the image security access system. The image security access system includes a front-end application 102 and a back-end server 104. When the front-end application 102 enters the target scene page, it loads the image security component and obtains the image link to be accessed, the image authentication identifier and the dynamic verification parameters from the image security component; when the image authentication identifier indicates to perform image authentication, the image authentication function in the image security component is used to perform image authentication based on the dynamic verification parameters; when the image authentication passes, the image link to be accessed is sent to the back-end server 104; when the back-end server 104 receives the image link to be accessed sent by the front-end application 102, it encrypts the image indicated by the image link to be accessed based on a preset encryption algorithm, and returns the encrypted image to the front-end application 102; when the front-end application 102 receives the encrypted image sent by the back-end server 104, it uses the image decryption function in the image security component to decrypt the encrypted image and displays the decrypted image in the target scene page.

[0052] In an exemplary embodiment, Figure 2 As shown, a method for secure access to a picture is provided, which is applied to Figure 1 The front-end application 102 in the example is used for illustration, and the steps include the following steps 202 to 208. Among them:

[0053] Step 202, when entering the target scene page of the front-end application, load the image security component, and obtain the image link to be accessed, the image authentication identifier, and the dynamic verification parameters from the image security component.

[0054] The target scene page refers to a page related to a specified scene in the front-end application. For example, it can be a construction collection page. The image security component refers to a tool for building the target scene page of the front-end application. For example, it can be a Vue component, which is reusable.

[0055] The image link to be accessed refers to the static resource path address (URL) of the image to be accessed. The image authentication identifier refers to the identification information used to indicate whether to perform image authentication. The dynamic verification parameter refers to the parameter used to perform dynamic verification of image authentication.

[0056] In some embodiments, when creating a picture security component, multiple image loading tags are defined in the component and configuration parameters are exposed, that is, the picture security component defines configuration parameters related to the image link to be accessed, the image authentication identifier, and the dynamic verification parameters.

[0057] Step 204: When the picture authentication identifier indicates to perform picture authentication, based on the dynamic verification parameters, the picture authentication function in the picture security component is used to perform picture authentication.

[0058] The image authentication mark includes performing image authentication and not performing image authentication. Exemplarily, the content indicated by the image authentication mark can be pre-specified by the scenario business requirements.

[0059] When the image authentication mark indicates that image authentication is not performed, it indicates that the user who enters the target scene page to access the image is trustworthy, the image access request initiated by the user is legal, and the corresponding image can be directly accessed based on the image link to be accessed.

[0060] When the image authentication mark indicates that the image authentication is to be performed, it indicates that the user who accesses the image and the image access request initiated by the user need to be verified. The dynamic verification parameters may include a dynamic timestamp and a login authentication mark.

[0061] The image authentication function is a function defined in the image security component. The image authentication function can be executed in the component to perform image authentication.

[0062] Step 206, when the image authentication is passed, the image link to be accessed is sent to the backend server to instruct the backend server to encrypt the image indicated by the image link to be accessed based on a preset encryption algorithm, and return the encrypted image to the front-end application.

[0063] Among them, if the image authentication is passed, the link of the image to be accessed can be sent to the back-end server, so as to obtain the encrypted image from the back-end server.

[0064] The preset encryption algorithm refers to the algorithm used to encrypt the image to be accessed. The backend server encrypts the image indicated by the image link to be accessed through the preset encryption algorithm, and transmits the encrypted image through the network, which can ensure that even if the image data is intercepted, it cannot be easily decrypted and abused, which is conducive to improving the security of the image during network transmission.

[0065] Step 208, when the encrypted image is received, the encrypted image is decrypted using the image decryption function in the image security component, and the decrypted image is displayed in the target scene page.

[0066] Among them, after receiving the encrypted picture, the front-end application needs to decrypt the encrypted picture, so that the valid picture can be displayed in the target scene page.

[0067] The image decryption function is a function defined in the image security component, which is used to decrypt the encrypted image. The decryption method needs to be determined based on the encryption algorithm used by the backend server. For example, if the encryption algorithm uses public key encryption, the decryption algorithm needs to use the corresponding private key for decryption.

[0068] In the above-mentioned image security access method, the target scene page in the front-end application is constructed by the image security component. When entering the target scene page, the image security component is loaded, and the image link to be accessed, the image authentication identifier and the dynamic verification parameters are obtained from the image security component. When the image authentication identifier indicates to perform image authentication, the image authentication is performed in the image security component. When the image authentication passes, the back-end server uses a preset encryption algorithm to encrypt the image indicated by the image link to be accessed, and the front-end application decrypts the encrypted image and displays the decrypted image on the target scene page. Since the image authentication identifier and the image authentication function are added to the image security component, the security of image access is guaranteed; in addition, the back-end server returns the encrypted image, which further ensures the security of the image during network transmission.

[0069] In an exemplary embodiment, the dynamic verification parameters include a dynamic timestamp, a login authentication identifier and a preset encryption key value; based on the dynamic verification parameters, the image authentication function in the image security component is used to perform image authentication, including: using the preset encryption key value to encrypt the dynamic timestamp and the login authentication identifier; using the encrypted information as a parameter of the image authentication function in the image security component, executing the image authentication function, and obtaining an image authentication result; the image authentication function is used to decrypt the encrypted information, if it is determined based on the decrypted timestamp that the image authentication has not expired, and based on the decrypted login authentication identifier that the login authentication has passed, then it is determined that the image authentication has passed, and the image authentication result is returned.

[0070] Among them, the dynamic timestamp refers to the timestamp for initiating the picture authentication, that is, the timestamp for determining the picture authentication. The dynamic timestamp and the login authentication identifier are encrypted using a preset encryption key value to obtain the encrypted information, and the encrypted information is used as a parameter of the picture authentication function. In this way, the picture authentication function is executed to obtain the picture authentication result returned by the picture authentication function. After the picture authentication function is executed, the encrypted information is first decrypted to obtain the decrypted timestamp and the decrypted login authentication identifier. In some embodiments, if the time interval between the decrypted timestamp and the current time is less than the preset time interval, for example, less than 5 minutes, it is determined that the picture authentication has not expired. If the decrypted login authentication identifier indicates that the user login authentication has passed, it is determined that the user has logged in legally. If it is determined that the picture authentication has not expired and the user has logged in legally, the picture authentication result is determined to be authentication passed; if it is determined that the picture authentication has not expired, or the user has logged in legally, the picture authentication result is determined to be authentication failed, and the picture authentication function returns the picture authentication result.

[0071] In this embodiment, the encrypted dynamic timestamp and login authentication identifier are used as parameters of the image authentication function in the image security component, the image authentication function is executed, and the image authentication result is obtained. The image authentication result is used to indicate whether the image authentication has expired and whether the user has logged in legally, which is conducive to ensuring the security of image access.

[0072] In an exemplary embodiment, the decrypted image is displayed in the target scene page, including: obtaining image size information and watermark information from the image security component; determining the number of watermarks according to the image size information; adding a watermark to the decrypted image based on the number of watermarks and the watermark information, and displaying the watermarked image in the target scene page.

[0073] The image security component includes configuration parameters corresponding to the image size information and the watermark information, so after loading the image security component, the image size information and the watermark information can be obtained from the image security component. The watermark information can be customized by the user.

[0074] In some embodiments, a watermark information may be displayed at a preset interval in the picture. Therefore, the number of watermark information to be displayed, ie, the number of watermarks, may be determined according to the height and width in the picture size information.

[0075] In some embodiments, a watermark generation function is also defined in the image security component. After the watermark generation function is executed, the watermark generation function is used to obtain image size information and watermark information from the image security component, determine the number of watermarks based on the image size information, and add watermark information matching the number of watermarks to the decrypted image to obtain the watermarked image.

[0076] After the image security component is loaded in the target scene page, the watermarked image can be displayed on the page.

[0077] In some embodiments, the picture security component also defines a default picture style and a default watermark style. In the process of displaying pictures, pictures matching the default picture style and the default watermark style can also be displayed. Exemplarily, the default picture style includes adaptive width and height, and both inner and outer margins are 0. The default watermark style includes 100% width, adaptive height, centered display, 12px font size, gray color, 40% transparency, and 30 degrees tilt in the horizontal direction.

[0078] In this embodiment, a watermark is added to the decrypted image through the image security component, and the watermarked image is displayed in the target scene page, which is helpful to prevent malicious tampering of the image and improve the security of the image in network transmission.

[0079] In an exemplary embodiment, an encrypted image is decrypted using an image decryption function in an image security component, including: generating a key using a pre-shared encoding sequence initial value; and decrypting the encrypted image using the key to obtain a decrypted image.

[0080] The initial value of the coding sequence refers to the data shared between the front-end application and the back-end server. For example, the encryption algorithm adopts the DNA encryption algorithm. From a biological perspective, the DNA sequence is composed of four nucleotides, of which A and T are complementary, and G and C are complementary. If these four nucleotides are encoded, there are 24 encoding schemes, of which 8 are in accordance with the complementary rules. A can be set to 00, G to 01, C to 10, and T to 11. The initial value of the coding sequence can be the set values ​​of A, T, G, and C.

[0081] The initial value of the coding sequence can generate a key for decrypting the encrypted image. After decryption using the key, the decrypted image can be obtained.

[0082] In this embodiment, a key is generated by a pre-shared coding sequence initial value, and the encrypted image is decrypted by the key to obtain a decrypted image. This decryption method can ensure the security of the image during network transmission, and the image can only be decrypted when the key is available, thereby improving the security of the image content.

[0083] In an exemplary embodiment, the method for securely accessing pictures further includes: in the event of a decryption failure, displaying the encrypted picture in the target scene page.

[0084] If the front-end application fails to decrypt the encrypted image, the encrypted image is displayed in the target scene page. The encrypted image can be a picture mixed with noise, which can prevent the illegal display of the image content.

[0085] In this embodiment, by displaying the encrypted image in the target scene page when decryption fails, the encrypted image does not contain valid content in the image, thereby avoiding illegal acquisition of image content through operations such as screenshots, which is conducive to improving image security.

[0086] In an exemplary embodiment, Figure 3 As shown, a picture encryption method is provided, which is applied to Figure 1 The backend server 104 in the example is used as an example to illustrate, including the following steps 302 to 304. Among them:

[0087] Step 302, when receiving the image link to be accessed sent by the front-end application, encrypt the image indicated by the image link to be accessed based on a preset encryption algorithm; when the image link to be accessed is the front-end application indicating image authentication under the image authentication identifier, image authentication is performed based on dynamic verification parameters using the image authentication function in the image security component, and is sent to the back-end server when the image authentication passes; the image link to be accessed, the image authentication identifier and the dynamic verification parameters are all obtained from the image security component when the front-end application enters the target scene page by loading the image security component.

[0088] Step 304, returns the encrypted image to the front-end application to instruct the front-end application to decrypt the encrypted image using the image decryption function in the image security component upon receiving the encrypted image, and displays the decrypted image in the target scene page.

[0089] Among them, the back-end server can receive the image link to be accessed sent by the front-end application, thereby encrypting the image indicated by the image link to be accessed, and then returning the encrypted image to the front-end application, ensuring the security of the image during network transmission.

[0090] Among them, the image link to be accessed refers to the static resource path address (url) of the image to be accessed. The image authentication identifier refers to the identification information used to indicate whether to perform image authentication. The dynamic verification parameter refers to the parameter used to dynamically verify the image authentication. The target scene page refers to the page related to the specified scene in the front-end application. For example, it can be a construction collection page. The image security component refers to a tool for building the target scene page of the front-end application. For example, it can be a Vue component, which is reusable.

[0091] In some embodiments, when creating a picture security component, multiple image loading tags are defined in the component and configuration parameters are exposed, that is, the picture security component defines configuration parameters related to the image link to be accessed, the image authentication identifier, and the dynamic verification parameters.

[0092] The picture authentication mark includes performing picture authentication and not performing picture authentication. Exemplarily, the content indicated by the picture authentication mark can be pre-specified by the scene business requirements.

[0093] When the image authentication mark indicates that image authentication is not performed, it indicates that the user who enters the target scene page to access the image is trustworthy, the image access request initiated by the user is legal, and the corresponding image can be directly accessed based on the image link to be accessed.

[0094] When the image authentication mark indicates that the image authentication is to be performed, it indicates that the user who accesses the image and the image access request initiated by the user need to be verified. The dynamic verification parameters may include a dynamic timestamp and a login authentication mark.

[0095] The image authentication function is a function defined in the image security component. The image authentication function can be executed in the component to perform image authentication.

[0096] If the image authentication is passed, the link of the image to be accessed can be sent to the backend server, so as to obtain the encrypted image from the backend server.

[0097] The preset encryption algorithm refers to the algorithm used to encrypt the image to be accessed. The backend server encrypts the image indicated by the image link to be accessed through the preset encryption algorithm, and transmits the encrypted image through the network, which can ensure that even if the image data is intercepted, it cannot be easily decrypted and abused, which is conducive to improving the security of the image during network transmission.

[0098] In the above-mentioned image encryption method, the target scene page in the front-end application is constructed by the image security component. When entering the target scene page, the image security component is loaded, and the image link to be accessed, the image authentication identifier and the dynamic verification parameters are obtained from the image security component. When the image authentication identifier indicates to perform image authentication, the image authentication is performed in the image security component. When the image authentication passes, the back-end server uses a preset encryption algorithm to encrypt the image indicated by the image link to be accessed, and the front-end application decrypts the encrypted image and displays the decrypted image on the target scene page. Since the image authentication identifier and the image authentication function are added to the image security component, the security of image access is guaranteed; in addition, the back-end server returns the encrypted image, which further ensures the security of the image during network transmission.

[0099] In an exemplary embodiment, the preset encryption algorithm includes a first encryption algorithm and a second encryption algorithm; encrypting the picture indicated by the picture link to be accessed based on the preset encryption algorithm includes: generating a key stream with the same size as the picture indicated by the picture link to be accessed through the first encryption algorithm; encrypting the picture indicated by the picture link to be accessed based on the key stream and the second encryption algorithm to obtain an encrypted picture.

[0100] Among them, in some embodiments, the first encryption algorithm can be an encryption algorithm based on a chaotic system (Henon). In order to ensure the security of image transmission without affecting the overall transmission rate, it is necessary to select a chaotic system that takes both into account. Although high-dimensional chaotic systems are more complex and have high security, they are difficult to implement; low-dimensional chaotic systems have simple structures but are easily cracked. Therefore, the embodiment of the present application introduces a two-dimensional offline chaotic system, the Henon system, which is expressed as follows:

[0101]

[0102] The Henon system is a classic dynamic system, and its complexity and dynamic characteristics have been revealed through extensive academic research. Through detailed phase diagram analysis, Lyapunov index calculation and bifurcation diagram observation, it is found that when a=1.4, b=0.3, the system is in a hyperchaotic state. Compared with the traditional one-dimensional chaotic system, the Henon system is based on its two-variable iterative equation and exhibits richer dynamic behavior and higher complexity. In addition, the Henon sequence exhibits a high degree of non-periodicity during the iteration process and will not stabilize at any fixed value. This feature can generate high-quality pseudo-random sequences. Based on this feature, as well as its advantages of easy implementation and high complexity, the embodiment of the present application selects the Henon system as a tool for generating pseudo-random sequences, thereby achieving efficient image encryption.

[0103] The key stream generation process includes: using the Henon system to generate a key stream of the same size as the image and converting it into binary form, first select the two initial variable values ​​of the Henon system. In the Henon system, there are usually two key parameters a and b, which determine the dynamic characteristics of the system. When a=1.4 and b=0.3, the system is in a hyperchaotic state. Secondly, use the iterative formula of the Henon system and the selected initial values ​​and parameters a and b to perform multiple iterations. Each iteration calculates the next state based on the current state. When the number of iterations is large enough to produce a sequence length that is the same as the image size. Extract the required numerical sequence from the iterative results of the Henon system. These values ​​can be used directly as key streams, or they can be further processed (such as scaling, modulo, etc.) to meet specific encryption requirements. Finally, convert each value in the key stream into binary form.

[0104] The backend service may adopt the second encryption algorithm and encrypt the picture indicated by the picture link to be accessed based on the key stream to obtain the encrypted picture.

[0105] In this embodiment, a key stream of the same size as the picture indicated by the picture link to be accessed is generated by a first encryption algorithm, which is beneficial to ensuring the security of picture transmission without affecting the overall transmission rate; then a second encryption algorithm is used, and the picture indicated by the picture link to be accessed is encrypted based on the key stream to obtain an encrypted picture, thereby further ensuring the security of the picture.

[0106] In an exemplary embodiment, a picture indicated by a picture link to be accessed is encrypted based on a key stream and a second encryption algorithm to obtain an encrypted picture, including: performing channel separation on the picture indicated by the picture link to be accessed to obtain a multi-channel picture; for each channel picture, using a preset encoding rule and a key stream to determine a ciphertext picture corresponding to the channel picture; and determining the encrypted picture based on the ciphertext pictures corresponding to each of the multi-channel pictures.

[0107] Among them, the picture indicated by the picture link to be accessed is usually a color image containing multi-channel images, for example, 3×M×N. Therefore, channel separation can be performed to obtain three plane images of R, G, and B, that is, a multi-channel image, and the size of each plane is represented by an M×N matrix.

[0108] In some embodiments, the planar image can be converted into a binary sequence, and a zigzag permutation operation is performed on the three planar images to disrupt the image information by rearranging the positions of pixel values; finally, a diffusion operation is performed using the preset encoding rules and the following formula to obtain a ciphertext image corresponding to the planar image.

[0109] In some embodiments, some algebraic calculations based on DNA sequences are used to encrypt the image, that is, the corresponding preset encoding rules are: 8 DNA XOR rules, 8 DNA addition rules and 8 DNA subtraction rules. Table 1 shows the preset encoding rules in one embodiment.

[0110] Table 1 Preset encoding rules

[0111]

[0112] In some embodiments, the calculation formula of the ciphertext image can be expressed as follows:

[0113]

[0114] In this embodiment, the ciphertext image obtained by encrypting using the preset coding rules and key stream should appear as a noise pattern, completely obscuring any traces of plaintext information. Through the analysis of traditional detection technology, its image histogram will appear to be in a stable state, with extremely low correlation between adjacent pixels, and has excellent resistance to differential attacks and strong security. The decryption process corresponds to the encryption method, and the encrypted image can be safely transmitted to the front-end application for subsequent operations.

[0115] To explain in detail the image security access method and image encryption method and their effects in this solution, a most detailed embodiment is described below:

[0116] This article takes the image security access method for the target scene page of the Web front-end application as an example. Figure 4 The figure shows a schematic diagram of a method for secure access to an image in an embodiment. Dynamic style parameters, dynamic verification parameters, and dynamic business parameters are provided in the target scene page and passed to the image security component. Through the tags in the image security component, the parameters are passed to the image display module, the image resource verification module, the image encryption and decryption module, and the image watermark module to achieve secure access to the image.

[0117] like Figure 5 The figure shows a schematic diagram of the overall process of a method for secure access to images in one embodiment. The method includes: step 501, creating a Vue image security component, defining an image loading tag in the group, and exposing configuration parameters and defining a watermark tag. Step 502, performing image authentication in the component. Step 503, using the proposed chaos and dynamic DNA computing encryption algorithm, decrypting the image encrypted by the server in the component. Step 504, adding an image watermark to the component. Step 505, referencing the image component in the page to display the image.

[0118] like Figure 6 The figure shows the overall flow diagram of the method for secure access to pictures in another embodiment. Take the construction collection page as an example of the target scene page.

[0119] In step S1, first create a Vue image security authentication component in the front-end application, including template, script, and style tags. The template tag is used to write the view template, which is created using the div tag and is used to load the image to be accessed internally; the script tag is used to write the logic script; the style tag is used to define the style, add the default style configuration of the basic container, the width and height are both adaptive, and the internal elements are displayed in the center. Then it is necessary to define the image loading tag img in the template tag, expose the configurable parameters, and define the watermark loading tag div. The specific features of exposing configuration parameters and defining watermark tags are: adding a basic image loading tag img and a watermark tag div under the template tag (dynamically generated internally by the watermark generation method), where the img tag contains three categories and four dynamic parameters: dynamic style parameters (imgStyles, imgClass), dynamic verification parameters (imgAuthInfo), and dynamic business parameters (imgParams), as follows:

[0120] 1. The dynamic style parameter (imgStyle) property configuration includes some internal styles: width (the width of the image component display), height (the height of the image component display), margin (the outer margin of the image component), and padding (the inner margin of the image component).

[0121] 2. The dynamic style parameter (imgClass) property configuration contains a set of custom external styles, which have a lower priority than the internal styles in imgStyles.

[0122] 3. The dynamic verification parameter (imgAuthInfo) property configuration includes parameters for image loading security verification: dynamic timestamp (verification milliseconds, for example, define the timeout rule as 5 minutes), login authentication identifier, and preset encryption key value (AES encryption key).

[0123] 4. The dynamic business parameter (imgParams) property configuration includes other image-related properties, which are used to customize the component display content: title (image title), waterMark (watermark information), imgHint (image profile information), url (image link to be accessed), and isAuth (image authentication identifier).

[0124] This step optimizes the parameter passing method of the plug-in in the image security component and defines a 3+1 design template, that is, 3 types of dynamic parameters plus the above default parameter attributes. The three types of dynamic parameters include style parameters, validation parameters, and business parameters. Style parameters control the display effect of the image component, validation parameters control the access to the image, and business parameters define additional functions.

[0125] In step S2, first, Axios (Axios is a Promise-based HTTP library) is introduced to request image resource data. Secondly, the request method getAuthImg is defined. GetAuthImg is called in the initial method mounted of the component's Vue. Based on the business parameter isAuth (image authentication identifier) ​​in step S1, it is necessary to determine whether secure access to the image is required. If not, the business parameter url is directly returned. The method is executed. If necessary, the following steps are performed. Furthermore, the get function of Axios is used to make a request. The dynamic verification parameter in step S1 packages the dynamic timestamp and image authentication identifier into an object in json format, and encrypts them according to the encryption key value. After encryption, it is added to the request parameter, and the request is defined to be returned as a binary Blob type. The dynamic timestamp and image authentication identifier are verified to determine whether the request is expired or legal. If the verification passes, the data stream is returned to the next step.

[0126] This step adds an interface access method for non-static resources in the image security component, and adds an image authentication function in the image interface access. The login information and current timestamp are encrypted according to the encryption information in the function, encapsulated as parameters, and the axios call interface is used to request image resources, which is adapted to scenarios with high specific security requirements.

[0127] In step S3, the specific features of the encryption algorithm based on chaos and dynamic DNA computing are as follows:

[0128] 1. Before the backend server returns the data, the image is encrypted and the encrypted binary data is returned to the front-end application.

[0129] 2. After the front-end application receives the Blob data, it uses the pre-shared encoding sequence initial value to generate a key and then decrypt it.

[0130] 3. Use FileReader to read the decrypted Blob data and convert it into Base64 encoding format.

[0131] 4. Assign the decrypted Base64 image data to the src attribute of the img tag.

[0132] In step S4, first obtain the watermark div container defined in the template, obtain the height of the image container, and dynamically calculate the number of watermark information to be displayed at a distance of 20px, and finally create a watermark loading container based on the number of watermarks. Secondly, dynamically assign a value to each watermark container based on the waterMark (watermark information) in step S1. Finally, define the default image style configuration and watermark default display style in the style tag.

[0133] In step S5, firstly, the Vue image security component is introduced and registered in other pages, and then three types of parameters are passed in sequence according to the parameter definition exposed by the image security component, and finally the image is displayed.

[0134] In the above-mentioned image security access method and image encryption method, the target scene page in the front-end application is constructed by the image security component. When entering the target scene page, the image security component is loaded, and the image link to be accessed, the image authentication mark and the dynamic verification parameters are obtained from the image security component. When the image authentication mark indicates to perform image authentication, the image authentication is performed in the image security component. When the image authentication passes, the back-end server uses a preset encryption algorithm to encrypt the image indicated by the image link to be accessed. The front-end application decrypts the encrypted image and displays the decrypted image on the target scene page. Since the image authentication mark and the image authentication function are added to the image security component, the security of image access is guaranteed; in addition, the back-end server returns the encrypted image, which further ensures the security of the image during network transmission. In addition, Vue is combined to encapsulate the automatic authentication and loading components of the image, and an image content encryption algorithm based on chaos and DNA computing is introduced. The algorithm uses the randomness and unpredictability of chaotic systems and the sequence information of biological codes to ensure the security of image transmission in the network; it provides a standardized parameter transmission method and image resource security acquisition rules, which cover style parameter transmission (such as width, height, margin, etc.), verification parameter transmission (such as login authentication information, timestamp, encryption information, etc.) and business parameter transmission (such as image loading type, URL address, title, introduction and watermark display logo, etc.). This design makes the access and management of image resources more standardized and secure; users can flexibly adjust and optimize the standardized parameter transmission method and security acquisition rules according to their own needs. At the same time, the built-in watermark display rules also support user-defined settings; the plug-in parameter transmission method in the image component is optimized, and a 3+1 design template is defined, that is, 3 types of dynamic parameter transmission plus the above default parameter attributes. Style parameters control the display effect of the image component, verification parameters control the access status of the image, and business parameters define additional functions; an interface access method for non-static resources is added to the image security component, and an authentication method is added to the image interface access. The login information and current timestamp are encrypted according to the encrypted information, encapsulated as parameters, and the axios call interface is used to request image resources, which is adapted to specific scenarios with high security requirements; it is reusable. Due to the use of Vue encapsulation technology, the device for implementing image security access and display components is highly reusable, which can be adjusted and optimized according to user needs to provide more scenario support.

[0135] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0136] Based on the same inventive concept, the embodiment of the present application also provides a picture security access method and a picture encryption device for implementing the picture security access method and picture encryption method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more picture security access methods and picture encryption device embodiments provided below can refer to the limitations of the picture security access method and picture encryption method above, and will not be repeated here.

[0137] In an exemplary embodiment, Figure 7 As shown, a device 700 for secure access to an image is provided, which is applied to a front-end application program and includes: an acquisition module 720, an authentication module 740, an encryption module 760 and a display module 780, wherein:

[0138] The acquisition module 720 is used to load the image security component when entering the target scene page of the front-end application, and obtain the image link to be accessed, the image authentication identifier and the dynamic verification parameter from the image security component;

[0139] An authentication module 740 is used to perform image authentication using an image authentication function in an image security component based on dynamic verification parameters when the image authentication identifier indicates that image authentication is to be performed;

[0140] The encryption module 760 is used to send the link of the image to be accessed to the backend server when the image authentication is passed, so as to instruct the backend server to encrypt the image indicated by the link of the image to be accessed based on a preset encryption algorithm, and return the encrypted image to the front-end application;

[0141] The display module 780 is used to decrypt the encrypted image using the image decryption function in the image security component when receiving the encrypted image, and display the decrypted image in the target scene page.

[0142] In one embodiment, the dynamic verification parameters include a dynamic timestamp, a login authentication identifier and a preset encryption key value; based on the dynamic verification parameters, the image authentication function in the image security component is used to perform image authentication, and the authentication module 740 is also used to: use the preset encryption key value to encrypt the dynamic timestamp and the login authentication identifier; use the encrypted information as the parameter of the image authentication function in the image security component, execute the image authentication function, and obtain the image authentication result; the image authentication function is used to decrypt the encrypted information, if it is determined based on the decrypted timestamp that the image authentication has not expired, and based on the decrypted login authentication identifier that the login authentication is passed, then it is determined that the image authentication is passed, and the image authentication result is returned.

[0143] In one embodiment, the decrypted image is displayed in the target scene page, and the display module 780 is also used to: obtain image size information and watermark information from the image security component; determine the number of watermarks based on the image size information; add a watermark to the decrypted image based on the number of watermarks and the watermark information, and display the watermarked image in the target scene page.

[0144] In one embodiment, the encrypted image is decrypted using the image decryption function in the image security component, and the display module 780 is also used to: generate a key using a pre-shared encoding sequence initial value; and decrypt the encrypted image using the key to obtain a decrypted image.

[0145] In one embodiment, the apparatus 700 for securely accessing pictures further comprises a second display module, and the second display module is used to display the encrypted picture in the target scene page when the decryption fails.

[0146] In the above-mentioned image security access device, the target scene page in the front-end application is constructed by the image security component. When entering the target scene page, the image security component is loaded, and the image link to be accessed, the image authentication identifier and the dynamic verification parameters are obtained from the image security component. When the image authentication identifier indicates to perform image authentication, the image authentication is performed in the image security component. When the image authentication passes, the back-end server uses a preset encryption algorithm to encrypt the image indicated by the image link to be accessed, and the front-end application decrypts the encrypted image and displays the decrypted image on the target scene page. Since the image authentication identifier and the image authentication function are added to the image security component, the security of image access is guaranteed; in addition, the back-end server returns the encrypted image, which further ensures the security of the image during network transmission.

[0147] In an exemplary embodiment, Figure 8 As shown, a picture encryption device 800 is provided, which is applied to a backend server and includes: a picture encryption module 820, wherein:

[0148] The picture encryption module 820 is used to encrypt the picture indicated by the picture link to be accessed based on a preset encryption algorithm when receiving the picture link to be accessed sent by the front-end application; the picture link to be accessed is the picture authentication function in the picture security component based on the dynamic verification parameters when the front-end application indicates to perform picture authentication under the picture authentication identifier, and sends the picture to the back-end server when the picture authentication passes; the picture link to be accessed, the picture authentication identifier and the dynamic verification parameters are all obtained by the front-end application loading the picture security component when entering the target scene page, and from the picture security component;

[0149] The result return module 840 is used to return the encrypted image to the front-end application to instruct the front-end application to decrypt the encrypted image using the image decryption function in the image security component when receiving the encrypted image, and display the decrypted image in the target scene page.

[0150] In one embodiment, the preset encryption algorithm includes a first encryption algorithm and a second encryption algorithm; the picture indicated by the picture link to be accessed is encrypted based on the preset encryption algorithm, and the picture encryption module 820 is also used to: generate a key stream with the same size as the picture indicated by the picture link to be accessed through the first encryption algorithm; encrypt the picture indicated by the picture link to be accessed based on the key stream and the second encryption algorithm to obtain an encrypted picture.

[0151] In one embodiment, the picture indicated by the picture link to be accessed is encrypted based on the key stream and the second encryption algorithm to obtain an encrypted picture. The picture encryption module 820 is also used to: separate the channels of the picture indicated by the picture link to be accessed to obtain a multi-channel picture; for each channel picture, a preset encoding rule and a key stream are used to determine the ciphertext picture corresponding to the channel picture; and the encrypted picture is determined based on the ciphertext pictures corresponding to each of the multi-channel pictures.

[0152] In the above-mentioned image encryption device, the target scene page in the front-end application is constructed by the image security component. When entering the target scene page, the image security component is loaded, and the image link to be accessed, the image authentication identifier and the dynamic verification parameters are obtained from the image security component. When the image authentication identifier indicates to perform image authentication, the image authentication is performed in the image security component. When the image authentication passes, the back-end server uses a preset encryption algorithm to encrypt the image indicated by the image link to be accessed, and the front-end application decrypts the encrypted image and displays the decrypted image on the target scene page. Since the image authentication identifier and the image authentication function are added to the image security component, the security of image access is guaranteed; in addition, the back-end server returns the encrypted image, which further ensures the security of the image during network transmission.

[0153] Each module in the above-mentioned image security access method and image encryption device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0154] In an exemplary embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as shown in FIG. Fig. 9As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a method for secure access to a picture and a method for encrypting a picture are implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0155] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0156] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the steps in the above-mentioned picture security access method and picture encryption method embodiments are implemented.

[0157] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned picture security access method and picture encryption method embodiments are implemented.

[0158] In one embodiment, a computer program product is provided, including a computer program, which, when executed by a processor, implements the steps in the above-mentioned picture security access method and picture encryption method embodiments.

[0159] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0160] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0161] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0162] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A method for securely accessing a picture, characterized in that: Applied to a front-end application, the method includes: When entering the target scene page of the front-end application, the image security component is loaded, and the image link to be accessed, the image authentication identifier and the dynamic verification parameters are obtained from the image security component; When the picture authentication identifier indicates to perform picture authentication, based on the dynamic verification parameter, the picture authentication function in the picture security component is used to perform picture authentication; If the picture authentication passes, the picture link to be accessed is sent to the back-end server to instruct the back-end server to encrypt the picture indicated by the picture link to be accessed based on a preset encryption algorithm, and return the encrypted picture to the front-end application; When the encrypted image is received, the encrypted image is decrypted using the image decryption function in the image security component, and the decrypted image is displayed in the target scene page.

2. The method according to claim 1, characterized in that The dynamic verification parameters include a dynamic timestamp, a login authentication identifier, and a preset encryption key value; the image authentication function in the image security component is used to perform image authentication based on the dynamic verification parameters, including: Using the preset encryption key value to encrypt the dynamic timestamp and the login authentication identifier; The encrypted information is used as a parameter of the image authentication function in the image security component, and the image authentication function is executed to obtain a picture authentication result; the picture authentication function is used to decrypt the encrypted information. If it is determined based on the decrypted timestamp that the picture authentication has not expired, and it is determined based on the decrypted login authentication identifier that the login authentication has passed, then it is determined that the picture authentication has passed, and the picture authentication result is returned.

3. The method according to claim 1, characterized in that The displaying of the decrypted image in the target scene page includes: Obtaining picture size information and watermark information from the picture security component; Determine the number of watermarks according to the image size information; Based on the watermark quantity and the watermark information, a watermark is added to the decrypted image, and the watermarked image is displayed in the target scene page.

4. The method according to claim 1, characterized in that: The step of decrypting the encrypted image using the image decryption function in the image security component includes: Generate a key using a pre-shared encoding sequence initial value; The encrypted picture is decrypted using the key to obtain a decrypted picture.

5. The method according to any one of claims 1 to 4, characterized in that: The method further comprises: In the event of a decryption failure, the encrypted image is displayed in the target scene page.

6. A method for encrypting a picture, characterized in that: Applied to a backend server, the method comprises: When receiving a picture link to be accessed sent by a front-end application, encrypt the picture indicated by the picture link to be accessed based on a preset encryption algorithm; the picture link to be accessed is the picture authentication function in the picture security component used by the front-end application to perform picture authentication based on dynamic verification parameters when the picture authentication identifier indicates to perform picture authentication, and is sent to the back-end server when the picture authentication passes; the picture link to be accessed, the picture authentication identifier and the dynamic verification parameters are all obtained by the front-end application loading the picture security component when entering the target scene page, and from the picture security component; The encrypted image is returned to the front-end application to instruct the front-end application to decrypt the encrypted image using the image decryption function in the image security component upon receiving the encrypted image, and to display the decrypted image in the target scene page.

7. The method according to claim 6, characterized in that The preset encryption algorithm includes a first encryption algorithm and a second encryption algorithm; encrypting the picture indicated by the to-be-accessed picture link based on the preset encryption algorithm includes: Generate a key stream having the same size as the picture indicated by the picture link to be accessed by using the first encryption algorithm; The picture indicated by the to-be-accessed picture link is encrypted based on the key stream and the second encryption algorithm to obtain an encrypted picture.

8. The method according to claim 7, characterized in that The step of encrypting the picture indicated by the to-be-accessed picture link based on the key stream and the second encryption algorithm to obtain the encrypted picture includes: Separate the channels of the picture indicated by the picture link to be accessed to obtain a multi-channel picture; For each channel image, a preset encoding rule and the key stream are used to determine the ciphertext image corresponding to the channel image; The encrypted image is determined based on the ciphertext images corresponding to each of the multi-channel images.

9. A picture security access system, characterized in that: The system comprises: The front-end application is used to load the image security component when entering the target scene page, and obtain the image link to be accessed, the image authentication identifier and the dynamic verification parameters from the image security component; when the image authentication identifier indicates to perform image authentication, the image authentication function in the image security component is used to perform image authentication based on the dynamic verification parameters; when the image authentication passes, the image link to be accessed is sent to the back-end server; The back-end server is used to, upon receiving the link of the picture to be accessed sent by the front-end application, encrypt the picture indicated by the link of the picture to be accessed based on a preset encryption algorithm, and return the encrypted picture to the front-end application; The front-end application is also used to decrypt the encrypted image using the image decryption function in the image security component when receiving the encrypted image sent by the back-end server, and display the decrypted image in the target scene page.

10. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the image security access method described in any one of claims 1 to 5 and the steps of the image encryption method described in any one of claims 6 to 8 are implemented.

Images