An Encryption Algorithm Upgrade Method for Panoramic VR Resources

Abstract

The present application discloses an encryption and decryption method, an electronic device, and a storage medium for panoramic VR resource files, aiming to improve the security, flexibility, and efficiency of resource protection. The method includes: realizing the dynamic upgrade and automatic re-encryption of the encryption algorithm through the collaborative operation of the client and the server; before the client loads the encrypted VR resource file, dynamically selecting an appropriate encryption and decryption algorithm unit for decryption by parsing the encrypted meta-information in the file, and requesting the server to update if the algorithm unit is missing; the server periodically or according to the client's request pushes the latest algorithm unit and triggers the automatic re-encryption of the encrypted resource files. This method has the characteristics of high efficiency, security, and automation, and is widely applicable to the encryption protection of panoramic VR resources.

Description

Technical Field

[0001] This application relates to the field of computer technology, and particularly to the field of network security technology. Background Art

[0002] With the rapid development of computer technology, virtual reality technology (VR) has attracted much attention in recent years due to the unique sense of reality and immersion it brings to users. The content creation associated with VR technology has also shown a booming development trend, especially panoramic VR resources. Such resources have a wide range of application scenarios in fields such as culture and tourism, education, etc., including panoramic images, panoramic videos, and related picture, audio, and video content.

[0003] The file types of panoramic VR resources are diverse, and there are significant differences in volume, with file sizes ranging from a few KB to hundreds of MB. This results in panoramic VR resources generally occupying a large amount of storage space on PC devices. For this reason, users usually adopt the method of offline caching to store the resources on the client side to improve access performance. However, due to the multimedia creation nature of panoramic VR resources, most of them are original resources, with characteristics such as high data value, rapid iteration and update of resource packages, and diverse user needs. The rich exclusive data has extremely high requirements for its security, and resource anti-theft has become an urgent problem to be solved.

[0004] In order to protect the security of panoramic VR resources, encryption processing is generally adopted at present. Common encryption methods include symmetric encryption and asymmetric encryption, but any encryption scheme has the possibility of being cracked or leaked. Once the encryption algorithm or key is leaked, the resources will face serious theft risks. In addition, over time, the leakage risk will further increase. Therefore, the security and reliability of the encryption scheme need to be upgraded urgently.

[0005] Currently, the mainstream solution to this problem is to update the encryption key, and re-encrypt the resource file to avoid resource leakage or take remedial measures after leakage. This upgrade method usually relies on mature symmetric / asymmetric encryption algorithms. However, the existing solutions have obvious deficiencies in the following aspects.

[0006] Algorithm upgrade limitation: Only the encryption key can be updated, and the encryption algorithm cannot be directly upgraded. If the algorithm needs to be upgraded, usually the terminal program also needs to be synchronously updated, and the implementation is relatively complex.

[0007] Algorithm support singularity: Currently, most solutions only support one encryption algorithm, and there is insufficient support for scenarios that require multiple encryption algorithms.

[0008] Efficiency problem: In the face of resource scenarios with large differences in file volume, the encryption and decryption efficiency is low.

[0009] Manual Dependency: The encryption upgrade process relies on manual intervention, resulting in lower automation and reliability.

[0010] To address the above issues, this application proposes an encryption and decryption process and an encryption and decryption algorithm upgrade process specifically for panoramic VR resources. By introducing a dynamic algorithm upgrade module and a resource re-encryption mechanism, it can effectively improve the security and encryption and decryption efficiency of resource protection, while reducing the dependence on manual intervention, providing an efficient and reliable solution for the protection of panoramic VR resources. Summary of the Invention

[0011] This application aims to provide an encryption and decryption method, an electronic device, and a storage medium for panoramic VR resource files. By implementing the dynamic upgrade of the encryption and decryption algorithm and automatic re-encryption, it solves the problems of untimely algorithm updates, poor flexibility, and insufficient security in the prior art. The application can dynamically select the optimal encryption and decryption algorithm according to the size characteristics and usage requirements of VR resource files, and supports the independent update and diverse selection of algorithm modules, thus significantly improving the efficiency, reliability, and adaptability of resource protection.

[0012] According to the first aspect of this application, an encryption and decryption method for panoramic VR resource files is provided, including:

[0013] S101: The local client has stored at least one encrypted VR resource file and / or the local client downloads at least one encrypted VR resource file from the server;

[0014] S102: Before loading at least one of the encrypted VR resource files, the local client determines whether it can decrypt the encrypted VR resource file to be loaded through at least one algorithm unit in the local encryption and decryption algorithm module;

[0015] S103: According to the judgment result of step S102, the local client decrypts and loads the encrypted VR resource file to be loaded, or the client pauses the loading process of the encrypted VR resource file that cannot be decrypted and requests the server to update the local encryption and decryption algorithm module;

[0016] S104: The server conducts a security verification of the client's identity. After the verification passes, it sends the latest algorithm unit related to the VR encrypted file to be loaded to the client for updating the local encryption and decryption algorithm module; if the security policy verification fails, the client is remotely locked;

[0017] S105: The local client uses at least one of the latest algorithm units in the updated local encryption and decryption algorithm module to decrypt the encrypted VR resource file to be loaded.

[0018] An encryption and decryption method for panoramic VR resource files further includes:

[0019] S107: At every first interval duration, the server actively sends a re-encryption instruction to the client and pushes at least one re-encryption algorithm unit, or at every first interval duration, the local client sends a re-encryption request to the server to obtain at least one re-encryption algorithm unit;

[0020] S108: The local client uses the algorithm unit of the local encryption and decryption module or obtains the algorithm unit from the server to first decrypt at least one encrypted VR resource file, and then re-encrypt the decrypted VR resource file using one of at least one re-encryption algorithm unit;

[0021] S109: The local client performs replacement and / or addition operations on the algorithm unit of the local encryption and decryption module according to the re-encryption algorithm unit.

[0022] A method for encrypting and decrypting panoramic VR resource files further includes:

[0023] S110: At every second interval duration, the local client performs a recycling operation on the algorithm unit in the local encryption and decryption module based on all the currently stored encrypted VR resource files.

[0024] According to a second aspect of the present application, there is provided an electronic device, including: at least one processor; and a memory communicatively connected to the at least one processor; wherein, the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the above-mentioned encryption algorithm upgrade method for panoramic VR resources in the first aspect.

[0025] According to a third aspect of the present application, there is provided a non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to cause the computer to execute the above-mentioned encryption algorithm upgrade method for panoramic VR resources in the first aspect.

[0026] According to a fourth aspect of the present application, there is provided a computer program product, including computer instructions, where the computer instructions are stored in a computer-readable storage medium, and when the computer instructions are executed by a processor, the above-mentioned encryption algorithm upgrade method for panoramic VR resources in the first aspect is implemented.

[0027] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present application, nor is it used to limit the scope of the present application. Other features of the present application will become easily understood through the following description.

[0028] By adopting the above solution, the encryption and decryption algorithms of the client can be updated in a timely manner, enhancing the security of the local client for storing VR resource files.

[0029] The beneficial technical effects of this application are as follows.

[0030] Improve decryption efficiency and flexibility: By dynamically parsing VR resource files, the optimal encryption and decryption algorithm module is selected according to the size characteristics and usage requirements of the file. When the client cannot decrypt the local VR resource file, it can actively request the server to update the algorithm module to achieve dynamic decryption of the file. This mechanism ensures the efficiency of encryption and decryption operations and resource availability, especially maintaining a smooth decryption experience even in scenarios with large differences in file sizes.

[0031] Enhance resource security: VR resource files usually have a large volume, and users need to download them to the local for storage first to improve access and loading speeds. However, the resource files saved locally are prone to risks such as invalidation of encryption algorithms or leakage of keys during long-term storage. This application realizes dynamic re-encryption of local resource files by the server regularly pushing the latest encryption algorithm module to the client or the client regularly requesting algorithm updates from the server. This dynamic update mechanism effectively reduces the risks of encryption algorithm invalidation and key leakage, significantly improving the long-term security of VR resources. In addition, selecting appropriate encryption algorithms according to file characteristics further optimizes the security protection strategy.

[0032] Reduce manual dependence: The upgrade of encryption and decryption algorithms and the process of resource re-encryption are fully automated. Whether it is the update of the algorithm module or the re-encryption operation of the resource file, it is automatically completed by the system without manual intervention by the user. This high degree of automation not only improves the convenience and reliability of the system but also reduces potential security risks caused by human operations.

[0033] Improve algorithm flexibility and compatibility: The algorithm module is designed as multiple sets of independent algorithm units, which can support independent upgrades and diverse selections at the unit level. Through the dynamic algorithm switching mechanism, the system can quickly adapt to the optimal algorithm according to different scenario requirements and file characteristics, significantly enhancing the adaptability and resource processing ability of the system. At the same time, this modular design is convenient for expansion and maintenance and can easily cope with future technological evolution and demand changes.

[0034] Optimize the file encryption structure: Detailed encryption meta-information is embedded in the encrypted file, including key information such as the serial number of the algorithm unit required for decryption, the length of the metadata, and the initialization parameters. By analyzing the file size characteristics and application scenarios, the system can dynamically select and switch algorithms to maximize encryption and decryption efficiency. The design of this file structure significantly enhances the adaptability and processing efficiency of the system, providing efficient encryption protection for diverse panoramic VR resources. Description of the Drawings

[0035] The accompanying drawings are used to better understand the solution of the present application and do not limit the present application. Among them:

[0036] Figure 1 is a schematic flowchart of an encryption and decryption method for panoramic VR resource files according to an embodiment of the first aspect of the present application;

[0037] Figure 2 is a schematic structural diagram of an algorithm module according to an embodiment of the first aspect of the present application;

[0038] Figure 3 is a schematic unfolded structural diagram of an encrypted resource file according to an embodiment of the first aspect of the present application;

[0039] Figure 4 is a schematic flowchart of an encryption and decryption process for VR resource files according to an embodiment of the first aspect of the present application; Detailed implementation manners

[0040] The following describes exemplary embodiments of the present application with reference to the accompanying drawings. Various details of the embodiments of the present application are included to facilitate understanding, and they should be considered merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present application. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted below.

[0041] In the first aspect of the present application, an encryption and decryption method for panoramic VR resource files is provided. As Figure 1 shown, it includes:

[0042] S101: The local client has stored at least one encrypted VR resource file and / or the local client downloads at least one encrypted VR resource file from the server.

[0043] Specifically, the server in this embodiment can be a local server, a cloud server, a server cluster, etc., which is used to store and manage panoramic VR resource files and their corresponding encryption and decryption algorithm units, and supports concurrent access and dynamic update requests from multiple clients. The server can be designed based on a distributed architecture to improve the stability and efficiency of resource management and algorithm push. The local client can be a device such as a computer, a smart phone, a tablet device, a virtual reality terminal, etc. that supports the playback and storage of panoramic VR resources and can communicate with the server through the network. The specific implementation forms of the server and the client in this embodiment are not limited, and it is applicable to centralized and distributed network environments to ensure that the system has good scalability and compatibility to meet the needs of different application scenarios and devices.

[0044] S102: Before loading at least one of the encrypted VR resource files, the local client determines whether it can decrypt the encrypted VR resource file to be loaded through at least one algorithm unit in the local encryption and decryption algorithm module.

[0045] Step S102 may further include:

[0046] The local client determines whether it can decrypt the encrypted VR resource file to be loaded through at least one algorithm unit in the local algorithm module, including: the local client parses the encrypted VR resource file to obtain encrypted meta-information, and searches for the corresponding algorithm unit in the local algorithm module according to the algorithm unit serial number in the parsed encrypted meta-information; if there is a corresponding algorithm unit, it obtains a judgment result that the encrypted VR resource file can be decrypted, and if there is no corresponding algorithm unit, it obtains a judgment result that the encrypted VR resource file cannot be decrypted.

[0047] Specifically, the algorithm module can be regarded as a group of algorithms containing all encryption and decryption algorithms. Its design purpose is to be compatible with the decryption of historical encrypted resources and support the flexible upgrade of future algorithms. This module is organized in an array structure, and each array element is an independent and complete encryption and decryption algorithm unit. Each algorithm unit contains four key pieces of information: serial number, name, encryption and decryption library, and extension information.

[0048] Serial number: Generally, the algorithm unit is identified by incrementing the value. The serial number of the latest algorithm is larger, which is used to dynamically select the optimal algorithm or update the algorithm module. The serial number of the latest algorithm can also be represented by a combination of letters and numbers. In this case, the algorithm with the largest numerical digit in the serial number is not necessarily the latest algorithm.

[0049] Name: As the description information of the algorithm, it is used to facilitate users or system administrators to identify the characteristics of specific algorithm units, such as algorithm type or usage.

[0050] Encryption and decryption library: A runnable code module compiled for a specific hardware or software platform, responsible for performing specific encryption and decryption operations. This module interacts with the system through an interface-oriented reverse proxy mechanism to ensure the flexibility and scalability of the algorithm.

[0051] Extension information: As an open design, it can store the dependency data of the encryption and decryption library, such as initialization parameters, multi-language or multi-platform support information. In addition, the extension information can also include the applicable scope of the algorithm (such as file size, etc.) to dynamically match the optimal algorithm during the resource encryption and decryption process.

[0052] The design of the entire algorithm module supports updates at the independent unit level, which can not only dynamically adapt to different encryption requirements but also minimize the impact of upgrades on the client and the server. At the same time, this modular structure provides a convenient way to add new algorithms to the system without large-scale changes to the existing modules or architectures, thus effectively enhancing the flexibility, scalability, and long-term maintainability of the system. In addition, this structure also enhances the compatibility of encryption and decryption algorithms across multiple platforms and scenarios, and can meet the encryption and decryption requirements of different devices and resource scenarios.

[0053] In addition, the encrypted VR resource files are uniformly stored in binary format. This format design aims to balance storage efficiency and compatibility. In this embodiment, for the convenience of explanation, the logical hierarchical structure of the file is shown in the figure, while the actual storage form is a continuous binary stream. The encrypted VR resource file consists of two parts: encrypted meta-information and encrypted main data.

[0054] The encrypted meta-information is stored at the starting position of the file and is used to describe the encryption-related attributes of the file. It contains the following four key fields.

[0055] Special marker: A byte data with a fixed length, and the value can be set to a specific digital or character sequence, which is used to identify that the file is an encrypted file and avoid conflicts with the special markers of other file types. The design of the special marker enhances the recognizability of the file and the reliability of system parsing.

[0056] Algorithm serial number: Identifies the encryption algorithm unit used by the current file, corresponding to the serial number in the algorithm module. The system quickly locates and matches the encryption and decryption algorithm units through this serial number to ensure the accurate execution of the file decryption and re-encryption processes.

[0057] Algorithm metadata length: Records the byte length of the algorithm metadata. Some encryption and decryption algorithms require additional parameter support, and the length information is used to identify the boundary of the metadata. If the value is zero, it means that the current algorithm does not require additional metadata support.

[0058] Algorithm metadata: Stores parameters related to the encryption and decryption algorithms, such as initialization vectors, random number seeds, or platform-specific parameters, etc. When the algorithm metadata length is not zero, this field contains valid data, providing necessary information for the correct execution of the algorithm.

[0059] The encrypted main data represents the main data part that stores the actual VR resource content in the form of a binary stream. This part of the data is encrypted using the encryption algorithm specified in the encrypted meta-information. The design of the encrypted main data ensures that the file content cannot be directly parsed in the encrypted state, thus effectively protecting the security of VR resources.

[0060] With this file structure design, the encrypted meta-information is first parsed when the file is loaded to quickly determine the file encryption status and the corresponding algorithm unit, enabling dynamic selection of the appropriate decryption algorithm. At the same time, this design provides convenience for the subsequent expansion and upgrade of the algorithm module without modifying the main data structure of the file, significantly enhancing the flexibility and compatibility of the system.

[0061] In this embodiment, between step S101 and step S102, it may further include: the server actively pushes the algorithm unit to the client, and the algorithm unit is used for the client to decrypt at least one encrypted VR resource file.

[0062] S103: According to the judgment result of step S102, the local client decrypts and loads the encrypted VR resource file to be loaded, or the client pauses the loading process of the encrypted VR resource file that cannot be decrypted and requests the server to update the local encryption and decryption algorithm module.

[0063] S104: The server performs a security verification on the client's identity. After the verification passes, it sends the latest algorithm unit related to the VR encrypted file to be loaded to the client for updating the local encryption and decryption algorithm module; if the security policy verification fails, the client is remotely locked.

[0064] In this embodiment, in step S104, the server performs multi-level security verification on the client's identity to ensure that the update operation of the encryption and decryption algorithm module is only performed on legitimate clients. Specifically, the security verification includes the following aspects.

[0065] Identity authentication: The server verifies its legitimacy through the client's unique identifier (such as device ID, user account, or digital certificate). The client needs to provide encrypted identity credentials, and the server performs authentication by matching the information in the database.

[0066] Communication encryption: During the verification process, the communication between the server and the client is encrypted using a security protocol (such as TLS / SSL) to prevent man-in-the-middle attacks or data theft and ensure the security of the transmission of verification information.

[0067] Behavior analysis: The server analyzes based on the client's access records and behavior patterns (such as request frequency, geographical location, device characteristics, etc.) to identify potential abnormal behaviors. If an abnormal request is found, the server can require additional verification steps (such as multi-factor authentication) or directly reject the request.

[0068] Dynamic token verification: The server sends a one-time dynamic token to the client, and the client needs to return the encrypted result of the token to verify its possession of the legitimate key. The use of dynamic tokens can effectively prevent replay attacks.

[0069] Policy Review: The server checks the time, location of the client request, and the current risk level according to the set security policy. If it is found that the request does not meet the policy requirements, such as coming from a high-risk area or an abnormal time period, the server will reject the verification and may trigger an alarm.

[0070] Failure Handling: If the verification fails, the server will immediately take defensive measures, including restricting further access of the client, triggering a remote locking mechanism, and even notifying the relevant security team to intervene to prevent potential threats from causing greater damage to the system.

[0071] Through the above multi-level security verification mechanism, the server can effectively filter illegal requests, ensure that the operation of updating the encryption and decryption algorithm module is carried out in a safe and reliable environment, and further guarantee the security of VR resources.

[0072] S105: The local client uses at least one of the latest algorithm units in the updated local encryption and decryption algorithm module to decrypt the encrypted VR resource file to be loaded.

[0073] S106: When at least one decrypted VR resource file is no longer in the loading state, the decrypted VR resource file is encrypted using the original algorithm unit so that the VR resource file is restored to the encrypted state.

[0074] S107: Every first interval duration, the server actively sends a re-encryption instruction to the client and pushes at least one re-encryption algorithm unit, or every first interval duration, the local client sends a re-encryption request to the server to obtain at least one re-encryption algorithm unit.

[0075] Specifically, the first interval duration can be 30 days, 60 days, 90 days, 180 days or other periods set according to the security policy. The main function of regular update is to prevent the algorithm unit from being leaked, cracked or having a cracking risk, and to be able to timely replace the new algorithm unit to re-encrypt the VR resources. Especially after the algorithm unit has been used for a period of time, or when the VR device has not loaded and used the resource file for a long time, and the old resource file of the client is still encrypted and protected by the old algorithm unit, there is a relatively high possibility of the above risks. Through this mechanism, the system can ensure that the encryption and decryption operations always use the safest and verified algorithms, thereby enhancing the overall security of the system.

[0076] S108: The local client uses the algorithm unit of the local encryption and decryption module or obtains the algorithm unit from the server to first decrypt at least one encrypted VR resource file, and then re-encrypts the decrypted VR resource file using one of at least one re-encryption algorithm unit. S109: The local client replaces and / or adds the algorithm unit of the local encryption and decryption module according to the re-encryption algorithm unit.

[0077] In this embodiment, in step S109, the re-encryption algorithm unit performs replacement and / or addition operations on the algorithm unit of the local encryption and decryption module, which further includes: the operation of the re-encryption algorithm unit replacing the existing algorithm unit and / or not deleting the existing algorithm unit, and directly adding it to the local encryption and decryption module. Specifically, the re-encryption algorithm unit is added as a new algorithm unit to the local encryption and decryption algorithm module, and the original algorithm unit remains unchanged and is not deleted; or directly replaces a certain old algorithm unit, the original algorithm unit is deleted, and the re-encryption algorithm unit has the same serial number or an overlapping serial number part as the original algorithm unit to be listed in the position of the original algorithm unit.

[0078] In step S108 of this embodiment, one of the at least one re-encryption algorithm unit re-encrypts the decrypted VR resource file, including: selecting one of the at least one re-encryption algorithm unit to re-encrypt the decrypted VR resource file according to the volume size of the VR resource file.

[0079] The volume size of the resource file is an important basis for selecting an appropriate encryption algorithm. Generally, larger files (such as those exceeding 100 MB) may require more efficient encryption and decryption algorithms to ensure the performance and speed of the encryption and decryption processes. The size of VR resource files usually ranges from 5 MB to 50 GB or larger, depending on the file type, resolution, duration, and content complexity.

[0080] For example, a low-resolution 360° video file may be only about 100 MB, while a high-resolution 4K video or VR game resource file may reach 10 GB or larger. In addition to video files, VR pictures (such as 360-degree panoramic images) are also an important part of VR resources. Generally speaking, the size of VR pictures usually ranges from 5 MB to 500 MB, depending on the resolution, color depth, and detail level of the image. High-resolution VR pictures may exceed 100 MB, and extremely high-resolution panoramic pictures may exceed 500 MB. Therefore, for VR resource files of different sizes (including pictures and videos), the server will select an appropriate encryption algorithm according to the volume size of the resource file.

[0081] For example, for larger files (such as those exceeding 1 GB), a more efficient encryption algorithm may be selected or block encryption may be used to improve the encryption and decryption speed and reduce the processing burden. Especially for VR resource files larger than 10 GB, more powerful encryption and decryption algorithms may be required to ensure the efficiency of the encryption process and avoid slow encryption operations due to insufficient resources.

[0082] The server is relatively less sensitive to the encryption process. The client needs to select an appropriate encryption algorithm based on the size of the file, processing power, and performance characteristics of the selected algorithm to ensure that the encryption operation meets security requirements and does not have too much impact on the user experience. In particular, during the re-encryption process, the client can select an applicable re-encryption algorithm according to the size of the file for re-encryption to ensure that while improving the encryption and decryption efficiency, the data security is not reduced.

[0083] In this embodiment, the encryption and decryption process of the VR resource file is as follows.

[0084] 1. Initially, the unencrypted VR resource file is encrypted by the encryption and decryption module. The latest algorithm unit is used in the encryption process, and an appropriate encryption algorithm is selected based on the latest serial number to generate the encrypted VR resource file. This encrypted file will be saved on the server and wait for the client request.

[0085] 2. When the user plays the VR resource on the client, the corresponding VR resource file needs to be downloaded from the server first. At this time, what the client downloads is the encrypted VR resource file, rather than the original unencrypted file.

[0086] 3. After the client receives the encrypted VR resource file, it decrypts it through the local encryption and decryption algorithm module. The decryption process is as follows.

[0087] (1) Parse the encrypted VR resource file and extract the encrypted meta-information. The encrypted meta-information includes important parameters such as algorithm serial number, algorithm type, key length, etc. These information are used to determine the specific algorithm and decryption method during the decryption process.

[0088] (2) According to the algorithm serial number in the parsed encrypted meta-information, the client queries the algorithm unit stored locally and selects an appropriate decryption algorithm unit. If there is no corresponding algorithm unit locally on the client, the system will automatically update and load the latest algorithm.

[0089] (3) Use the algorithm metadata in the encrypted meta-information and the local encryption and decryption library of the client to decrypt according to the selected decryption algorithm. After decryption, the client obtains the decrypted VR resource file.

[0090] 4. The client then plays the decrypted VR resource file to ensure that the user can smoothly experience the VR content.

[0091] 5. When the client no longer plays the VR resource file, if the VR resource file is no longer in the loading state at this time, the original algorithm unit is used to encrypt the VR resource file to restore the encrypted state.

[0092] S110: At every second interval duration, the local client performs a recycling operation on the algorithm units in the local encryption and decryption module based on all the currently stored encrypted VR resource files.

[0093] In the step S110, the second interval duration is 7 days to 30 days. Since VR encrypted resource files will be deleted by users due to storage space and other reasons after being used for a period of time. When the same type of VR encrypted resource files are no longer stored in the user's electronic device, the algorithm units in the local encryption and decryption module will face the risk of being misappropriated for research (such as algorithm logic) due to long-term non-use. Therefore, through the recycling operation, when there are no corresponding algorithm units for all the stored encrypted VR resource files, the algorithm units in the client's local encryption and decryption module are deleted and recycled.

[0094] The method of this application improves the timeliness and accuracy of the encryption and decryption process of panoramic VR resource files by implementing the dynamic upgrade and automatic re-encryption of the encryption and decryption algorithms. The system can dynamically select the optimal encryption and decryption algorithm according to different VR resource file characteristics and usage requirements to ensure the decryption efficiency and security of the files. In addition, by automatically updating the algorithm module, the risks of encryption algorithm failure and key leakage are avoided, manual intervention is reduced, and resource protection is optimized. This method significantly improves the flexibility and adaptability of the system, ensures the security of VR resources, and effectively reduces the consumption of computing resources.

[0095] According to the embodiments of this application, this application also provides an electronic device, a readable storage medium, and a computer program product.

[0096] The electronic device can be various forms of digital computers, such as laptop computers, desktop computers, servers, mainframe computers, etc., or mobile devices, such as smartphones, wearable devices, etc. The connection and functions of the components shown are only examples and do not limit the implementation manner of this application.

[0097] The device includes a computing unit that can execute specified processing operations by reading a program in a read-only memory or a program loaded from a storage unit into a random access memory. The random access memory stores both the data and programs required for the operation of the device at the same time. The computing unit, read-only memory, and random access memory are connected by a bus. The input / output interface is also connected to the bus to provide the device with the function of interacting with the outside world.

[0098] The input / output interface is connected to multiple components, including an input unit (such as a keyboard, mouse), an output unit (such as a display, speaker), a storage unit (such as a disk, optical disc), and a communication unit. The communication unit supports the device to exchange data with other devices through a network (such as the Internet or a telecommunications network).

[0099] The computing unit can be a general-purpose or special-purpose processing component, such as a central processing unit, a graphics processing unit, an artificial intelligence chip, a digital signal processor, etc. These components can execute functions related to this application, such as the encryption and decryption operations of VR resource files. The encryption and decryption functions can be implemented as computer programs stored in the storage unit. When loaded into the random access memory and executed by the computing unit, they can implement the encryption and decryption methods of the resource files. For the special requirements of VR resources, such as real-time loading and content decoding, the device will dynamically allocate computing resources to ensure that the user's immersive experience will not be disturbed by the operation of the file protection mechanism. In addition, the system will automatically adjust the processing strategy of the computing unit for resources based on the priority or characteristics of file usage to maximize efficiency.

[0100] The method of this application can also be implemented through various combinations of hardware and software, such as integrated circuits, field programmable gate arrays, application specific integrated circuits, chip systems, etc. The programmable processor can interpret and execute these methods through program code to complete the specified functions and operations.

[0101] The program code can be written in a variety of programming languages and stored in a machine-readable medium for use by the processor. The code can be executed entirely on the local device or partially run on a remote device, depending on the implementation.

[0102] The machine-readable medium includes various forms for storing programs, such as read-only memory, random access memory, optical storage devices (such as CD-ROMs), magnetic storage devices (such as hard disks), and other forms of electronic, optical, or electromagnetic media.

[0103] Users can interact with the device through the interaction device to input information or receive feedback. For example, the display device is used to display information, and the input device (such as a keyboard, touch screen) receives user operations, and the feedback may be provided in visual, auditory, or tactile forms.

[0104] The system and technology of this application can be implemented in a computing system including a client, a server, and middleware. The client interacts with the system through a user interface or a browser, the server provides resources or services, and the components are connected through a communication network (such as a local area network, a wide area network, or the Internet).

[0105] The client and the server usually interact through a communication network to form a system with a client-server relationship. The server can be in a centralized, distributed, or implementation form combined with blockchain technology.

[0106] It should be understood that various forms of steps shown above can be used, reordered, added, or deleted. For example, the steps described in this application can be executed in parallel or sequentially, as long as the desired results of the technical solution of this application can be achieved, and there is no limitation here.

[0107] The above specific embodiments do not constitute a limitation on the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub - combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principle of the present application shall be included within the protection scope of the present application.

Claims

1. A method for encrypting and decrypting panoramic VR resource files, comprising: S101: The local client has stored at least one encrypted VR resource file and / or the local client downloads at least one encrypted VR resource file from the server; S102: Before loading at least one of the encrypted VR resource files, the local client determines whether it can decrypt the encrypted VR resource file to be loaded through at least one algorithm unit in the local encryption and decryption algorithm module; S103: According to the judgment result of step S102, the local client decrypts and then loads the encrypted VR resource file to be loaded, or the client pauses the loading process of the encrypted VR resource file that cannot be decrypted and requests the server to update the local encryption and decryption algorithm module; S104: The server performs a security verification on the client identity. After the verification passes, the server sends the latest algorithm unit related to the encrypted VR resource file to be loaded to the client for updating the local encryption and decryption algorithm module; if the security policy verification fails, the client is remotely locked; S105: The local client uses at least one of the latest algorithm units in the updated local encryption and decryption algorithm module to decrypt and then load the encrypted VR resource file to be loaded; S106: When at least one decrypted VR resource file is no longer in the loading state, the original algorithm unit is used to encrypt the decrypted VR resource file so that the VR resource file returns to the encrypted state.

2. The method according to claim 1, wherein, In step S102, the local client determines whether it can decrypt the encrypted VR resource file to be loaded through at least one algorithm unit in the local encryption and decryption algorithm module, including: the local client parses the encrypted VR resource file to obtain encrypted meta-information, and searches for the corresponding algorithm unit in the local encryption and decryption algorithm module according to the algorithm unit serial number in the parsed encrypted meta-information; if there is a corresponding algorithm unit, it is determined that the encrypted VR resource file can be decrypted, and if there is no corresponding algorithm unit, it is determined that the encrypted VR resource file cannot be decrypted.

3. According to the method described in claim 1, between the step S101 and the step S102, the following steps are further included: The server actively pushes the algorithm unit to the client, and the algorithm unit is used for the client to decrypt at least one encrypted VR resource file.

4. The method according to claim 1, further comprising: S107: Every first interval duration, the server actively sends a re-encryption instruction to the client and pushes at least one re-encryption algorithm unit, or every first interval duration, the local client sends a re-encryption request to the server to obtain at least one re-encryption algorithm unit; S108: The local client uses the algorithm unit of the local encryption and decryption algorithm module or obtains the algorithm unit from the server to first decrypt at least one encrypted VR resource file, and then re-encrypts the decrypted VR resource file with at least one of the re-encryption algorithm units; S109: The local client replaces and / or adds the algorithm unit of the local encryption and decryption algorithm module according to the re-encryption algorithm unit.

5. The method according to claim 4, wherein, In step S107, the first interval duration is 30 days - 180 days.

6. The method according to claim 4, wherein, In the step S108, one of the at least one re-encryption algorithm units re-encrypts the decrypted VR resource file, including: selecting one of the at least one re-encryption algorithm units to re-encrypt the decrypted VR resource file according to the volume size of the VR resource file.

7. The method according to claim 4, wherein In the step S109, the local client replaces and / or adds algorithm units to the local encryption and decryption algorithm module according to the re-encryption algorithm unit, including: the operation of replacing the existing algorithm unit with the re-encryption algorithm unit and / or directly adding it to the local encryption and decryption algorithm module without deleting the existing algorithm unit.

8. The method according to claim 1, further comprising: S110: At every second interval duration, the local client performs a recycling operation on the algorithm units in the local encryption and decryption algorithm module based on all the encrypted VR resource files currently stored locally.

9. The method according to claim 8, wherein In the step S110, the second interval duration is 7 days to 30 days.

10. An electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein, the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method according to any one of claims 1-9.

Images