A tamper-proof watermark drawing method, system and terminal

Abstract

The application discloses a tamper-proof watermark drawing method and system and a terminal, and relates to the technical field of information security and content protection. The method comprises the following steps: obtaining at least one basic template from a pre-established marking rule library, combining a current time stamp and random seed data to generate initial marking data, and ensuring that the initial marking data has unpredictable characteristics to obtain a preliminary dynamic marking result. The tamper-proof watermark drawing method and system and the terminal realize the safe protection, controllable distribution and accurate tracing of digital content, effectively prevent the content from being tampered with or unauthorized access, and improve the security and flexibility of digital copyright management.

Description

Technical Field

[0001] This invention relates to the field of information security and content protection technology, specifically to a method, system, and terminal for drawing tamper-proof watermarks. Background Technology

[0002] In the field of information security and content protection, protecting digital content from illegal copying or alteration is a crucial task. This area is directly related to the maintenance of intellectual property rights, the protection of data privacy, and the healthy development of the digital economy. Its importance is self-evident, especially given the increasing prevalence of digital content today. However, current mainstream protection methods often rely on fixed templates or preset marking methods. This static approach is inadequate in the face of increasingly complex attack methods, making it easy to crack or bypass, and failing to meet the demands for high security.

[0003] A significant drawback of existing methods is their reliance on pre-designed, fixed patterns, lacking flexibility and adaptability. Once these patterns are mastered or reverse-engineered by attackers, the protection mechanism becomes ineffective. This limitation severely compromises the reliability of content protection in dynamic environments, necessitating new approaches to address ever-changing threats. Therefore, the primary challenge lies in achieving dynamic tag generation, ensuring the uniqueness and unpredictability of each generated tag to prevent attackers from pre-obtaining or mimicking it. The dynamic generation characteristic requires the system to adjust its strategy in real-time for each operation, further complicating the verification mechanism. This involves ensuring both efficiency and accuracy in the face of dynamic changes, preventing protection failure due to vulnerabilities in the verification process. These two factors are closely intertwined: the uncertainty of dynamic generation directly impacts the design complexity of the verification process; if verification cannot keep pace with dynamic changes, the entire protection system risks collapse.

[0004] Therefore, this application proposes a method, system, and terminal for drawing tamper-proof watermarks. Summary of the Invention

[0005] The purpose of this invention is to provide a method, system, and terminal for drawing anti-tampering watermarks, thereby solving the problems existing in the prior art.

[0006] To achieve the above objectives, the present invention provides the following technical solution: a method for drawing an anti-tampering watermark, the method comprising:

[0007] By using a pre-established tag generation rule base, at least one basic template is obtained from the rule base. Combined with the current timestamp and random seed data, initial tag data is generated to ensure that the initial tag data has unpredictable characteristics, thus obtaining preliminary dynamic tag results.

[0008] Based on the preliminary dynamic marking results, the decrypted marking information is obtained. The decrypted marking information is then compared with the pre-stored marking generation records. If the comparison results are consistent, it is confirmed that the digital content has not been tampered with, and the verification status information is confirmed.

[0009] Based on the verified status information, access permissions to the digital content carrier are released, and an unlock command is sent to the receiving end through the permission control module. At the same time, the operation timestamp, event type classification, identity association data, result status description, and environmental parameter snapshot of this operation are recorded to generate initial log data.

[0010] The initial log data is protected using a specific data encryption method, stored in a designated backup storage path, and bound to the unique identity code and temporary session identifier through a traceability query interface to obtain a complete operation traceability record and determine the final access authorization result.

[0011] Preferably, obtaining the decrypted tagging information based on the preliminary dynamic tagging results includes encrypting and converting the preliminary dynamic tagging results using an irreversible transformation method to generate encrypted tagging data, ensuring that the encrypted tagging data is unique each time it is generated, and determining the final dynamic tagging content.

[0012] Preferably, obtaining the decrypted tagging information based on the preliminary dynamic tagging results further includes embedding the tagging content into the target digital content based on the final dynamic tagging content, forming protected content data with tags through content metadata binding, and obtaining the protected digital content carrier.

[0013] Preferably, the process of obtaining the decrypted tagging information based on the preliminary dynamic tagging results also includes obtaining a unique identity code, access request time, geographical location data, device type information, network connection status, user role classification, historical access records, and temporary session identifier from the receiving end when distributing the protected digital content carrier, forming a complete identity tagging information set.

[0014] Preferably, obtaining the decrypted tagging information based on the preliminary dynamic tagging results further includes determining whether the unique identity code meets the access conditions for the identity identification information set in combination with a preset authorization rule base, and verifying whether the geographical location data is within the allowed range. If both meet the requirements, the corresponding verification key data is generated.

[0015] Preferably, obtaining the decrypted tagging information based on the preliminary dynamic tagging results further includes decrypting the protected content data with tags by verifying the key data, extracting the embedded dynamic tagging content, and obtaining the decrypted tagging information.

[0016] Preferably, the traceability query interface is bound to the operation log through blockchain technology to ensure the immutability and traceability of the operation log.

[0017] Preferably, the environmental parameter snapshot includes multiple parameters such as operating device information, network status, and system load.

[0018] A system for drawing anti-tamper-evident watermarks, used to implement the steps of the method for drawing anti-tamper-evident watermarks, the system comprising:

[0019] The tag generation module is used to obtain at least one basic template from a pre-established tag generation rule base, combine it with the current timestamp and random seed data to generate initial tag data, ensuring that the initial tag data has unpredictable characteristics, and obtain preliminary dynamic tag results;

[0020] The tag verification module is used to obtain the decrypted tag information based on the preliminary dynamic tag results. The decrypted tag information is compared with the pre-stored tag generation records. If the comparison results are consistent, it is confirmed that the digital content has not been tampered with, and the verification status information is determined.

[0021] The access control module is used to release access permissions to digital content carriers based on the verified status information. The access control module sends an unlock command to the receiving end and records the operation timestamp, event type classification, identity association data, result status description and environmental parameter snapshot of this operation to generate initial log data.

[0022] The log encryption module is used to protect the initial log data using a specific data encryption method, store it in a designated backup storage path, and bind it to the unique identity code and temporary session identifier through a traceability query interface to obtain a complete operation traceability record and determine the final access authorization result.

[0023] A terminal with an anti-tamper-evident watermark includes:

[0024] The tag generation unit is used to obtain at least one basic template from a pre-established tag generation rule base, combine it with the current timestamp and random seed data, generate initial tag data, ensure that the initial tag data has unpredictable characteristics, and obtain preliminary dynamic tag results;

[0025] The tag verification unit is used to obtain the decrypted tag information based on the preliminary dynamic tag results, and compare it with the pre-stored tag generation record. If the comparison results are consistent, it is confirmed that the digital content has not been tampered with, and the verification status information is determined.

[0026] The access control unit is used to release access permissions to the digital content carrier based on the verified status information, send an unlock command to the receiving end, and record the operation timestamp, event type classification, identity association data, result status description and environmental parameter snapshot of this operation to generate initial log data.

[0027] The log encryption unit is used to protect the initial log data using a specific data encryption method, store the encrypted log data in a specified backup storage path, and bind it to the unique identity code and temporary session identifier through a traceability query interface to obtain a complete operation traceability record and determine the final access authorization result.

[0028] The storage unit is used to store encrypted log data and supports redundant backups to ensure data availability and security during log querying and tracing.

[0029] As can be seen from the above technical solution, the present invention has the following beneficial effects:

[0030] This anti-tampering watermarking method, system, and terminal generate dynamic markers through preset rules and embed them into the target content, forming tamper-evident protected data. During content distribution, the system collects the recipient's identity information, combines it with authorization rules to determine access conditions, and generates a verification key. The key is used to decrypt the protected data, extract the markers, and verify the integrity of the content. Upon successful verification, access permissions are released, and an operation log is recorded and encrypted. This invention can also dynamically adjust the permission scope based on historical records and suspend authorization in case of network anomalies. This method achieves secure protection, controllable distribution, and precise traceability of digital content, effectively preventing content tampering or unauthorized access, and improving the security and flexibility of digital rights management. Attached Figure Description

[0031] Figure 1 This is a flowchart of the method of the present invention;

[0032] Figure 2 This is a system connection diagram of the present invention. Detailed Implementation

[0033] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0034] like Figure 1 As shown, the present invention provides a technical solution: a method for drawing an anti-tampering watermark, the method comprising:

[0035] By using a pre-established tag generation rule base, at least one basic template is obtained from the rule base. Combined with the current timestamp and random seed data, initial tag data is generated to ensure that the initial tag data has unpredictable characteristics, thus obtaining preliminary dynamic tag results.

[0036] Based on the preliminary dynamic marking results, the decrypted marking information is obtained. The decrypted marking information is then compared with the pre-stored marking generation records. If the comparison results are consistent, it is confirmed that the digital content has not been tampered with, and the verification status information is confirmed.

[0037] Based on the verified status information, access permissions to the digital content carrier are released, and an unlock command is sent to the receiving end through the permission control module. At the same time, the operation timestamp, event type classification, identity association data, result status description, and environmental parameter snapshot of this operation are recorded to generate initial log data.

[0038] The initial log data is protected using a specific data encryption method, stored in a designated backup storage path, and bound to the unique identity code and temporary session identifier through a traceability query interface to obtain a complete operation traceability record and determine the final access authorization result.

[0039] The anti-tampering watermarking method of this invention ensures the integrity and security of digital content and prevents watermarks and content from being tampered with through a unique mark generation process, dynamic data generation technology, and encryption protection methods. The specific working principle is as follows:

[0040] Tag generation and dynamic randomization mechanism

[0041] This method first provides multiple basic templates through a pre-established tag generation rule base. Each template contains basic elements of a watermark, such as graphics, symbols, or text. These templates serve as the basis for generating watermark tags, and the system uses them to generate unique watermark data.

[0042] The logic for constructing the tag generation rule base can be as follows, but this does not constitute a limitation of this application, as follows:

[0043] Layered and categorized architecture: A three-layer architecture of "base layer - application layer - dynamic layer" is adopted. The base layer stores general graphic / text templates (such as vector graphics and hash string templates); the application layer matches templates according to content type (images / videos / documents); the dynamic layer dynamically calls template combination rules based on timestamps and device environment.

[0044] Graphic template: Stored in SVG vector format, containing basic primitives (lines, Bézier curves), color channels (RGB + transparency), and geometric transformation parameters (rotation angle, scaling ratio).

[0045] Text template: Defined in JSON format, including font family (e.g., "Microsoft YaHei"), font size, font weight, encoding method (UTF-8), and dynamic variable placeholders.

[0046] To ensure the unpredictability and uniqueness of the watermark, the system combines the current timestamp and random seed data for generation. The timestamp is the current system time (accurate to the millisecond level), while the random seed data consists of pseudo-random numbers generated by an encryption algorithm (such as SHA-256). The system inputs these two elements along with the base template into the generation function to generate preliminary marker data.

[0047] The generating function works by combining the content of the base template with a timestamp and random seed data. The random seed data uses a cryptographically secure pseudo-random number generator (CSPRNG), with SHA-256_DRBG (based on the NIST SP 800-90B standard) recommended. The entropy source combination is as follows:

[0048] Hardware entropy sources: CPU instruction cycle jitter, disk I / O latency;

[0049] Software entropy sources: system clock nanosecond values ​​and mouse movement trajectory coordinate sequences.

[0050] Specifically, the system concatenates the timestamp and random seed data into a long string, then performs cryptographic hashing on this string to obtain a unique encrypted value. This encrypted value is combined with the data from the base template to generate the final dynamic marker. Each generated watermark marker is unpredictable, ensuring that even under the same conditions, the generated watermark markers are not identical.

[0051] This tagging method, based on dynamic data generation, makes each generated watermark unpredictable, thus greatly enhancing the anti-tampering function.

[0052] For unpredictability verification, after every 1000 seed generation cycles, it must pass a full set of statistical tests according to NIST SP 800-22 (such as frequency test, run test, and spectrum test), with a pass rate of ≥98%.

[0053] Decryption and Integrity Verification

[0054] Once the tag data is generated, the system decrypts the initially generated tags to obtain the decrypted tag information. The system uses a known key and encryption algorithm (e.g., AES symmetric encryption algorithm, parameter specifications: key length: 256 bits (32 bytes), derived from PBKDF2WithHmacSHA256 (iteration 100,000 times); initialization vector (IV): 12-byte random value, generated by os.urandom(12); authentication tag: 16 bytes, automatically generated in GCM mode) for decryption to ensure that only legitimate users can obtain the correct tag data.

[0055] The decrypted tag information is compared with pre-stored tag records in the system. If the decrypted tag information matches the pre-stored record, the system confirms that the digital content has not been tampered with and returns a verification successful status message. If the decrypted tag information does not match the pre-stored record, the system will detect an anomaly in the tag data, indicating that the digital content may have been tampered with, and the system will refuse to grant access permissions.

[0056] This verification process ensures the security of every piece of digital content and prevents watermarks from being maliciously modified or replaced.

[0057] Verified access control and log generation

[0058] Once verification is successful, the system releases access permissions to the digital content carrier. Through the access control module, the system sends an unlock command to the receiving end, allowing the user to access the digital content. Simultaneously, the system records the entire operation, generating detailed log information. These logs include the operation timestamp, event type, user identity, operation result status, and environmental parameter snapshots.

[0059] The environmental parameter snapshots include operation-related environmental information such as network status, device information, and geographical location. This information helps improve the transparency and security of the operation process, ensuring that each operation is traceable and verifiable.

[0060] These log data are detailed records of the operation process, used for subsequent auditing and troubleshooting.

[0061] Data encryption and backup storage

[0062] To ensure the security and immutability of log data, the system encrypts the initial log data. During encryption, the system uses an encryption key to encrypt the log data, ensuring that the log data cannot be illegally accessed or tampered with even during storage or transmission.

[0063] The encrypted log data will be stored in a designated backup storage path to further enhance data security. The system will also bind log data with a unique identity code and a temporary session identifier through a dedicated query interface to generate a complete operation traceability record. Whenever a log query is needed, the system can quickly locate the relevant operation record using the unique identity code and session identifier, and verify the compliance of the operation.

[0064] This log storage and encryption protection mechanism ensures the integrity and traceability of data, and also prevents the tampering or loss of operation records.

[0065] By concatenating a base template with the current timestamp and random seed data into a data string, and then performing cryptographic hashing on this string, the encrypted hash value is used as the core element of the watermark, ensuring that the generated watermark is unpredictable and unique.

[0066] Use symmetric encryption algorithms (such as AES) to encrypt tokenized data and operation logs. Symmetric encryption means that encryption and decryption use the same key, and only a user with that key can decrypt the data. This encryption method ensures data security while providing efficient encryption and decryption operations.

[0067] When generating operation logs, the system captures environmental parameters related to the operation, such as device type, network status, and geographical location. This information not only helps ensure the legality of the operation but also provides clues for subsequent investigations if problems arise.

[0068] Log data is encrypted using encryption algorithms to prevent unauthorized reading or tampering. The encrypted log data is then stored in a secure backup location to ensure data security and availability.

[0069] It provides a traceability query interface, allowing administrators or auditors to query operation records based on unique identification codes and temporary session identifiers. Each operation record contains a complete operation process and environmental parameters, ensuring the transparency and auditability of the operations.

[0070] This invention effectively enhances the tamper-proof and security of digital content by dynamically generating unpredictable watermarks and combining them with encrypted verification and access control mechanisms. The system ensures that each generated watermark is unique through timestamps and random seed data, preventing watermark tampering or extraction. Simultaneously, log data during the operation is encrypted and stored, ensuring its immutability and traceability, thereby improving the transparency and auditability of the operation. The overall solution improves the security, data integrity, and operational compliance of digital content, while reducing potential security risks.

[0071] Based on the preliminary dynamic tagging results, the decrypted tagging information is obtained by using an irreversible transformation process to encrypt and convert the preliminary dynamic tagging results, generating encrypted tagging data, ensuring that the encrypted tagging data is unique each time it is generated, and determining the final dynamic tagging content.

[0072] The anti-tampering watermarking method of this invention ensures the uniqueness of each generated watermark by irreversibly encrypting the initially generated dynamic marking results, effectively enhancing the tamper-proof nature of digital content. First, the system generates preliminary dynamic marking data. This data includes basic template information, combined with the current timestamp and random seed data. The timestamp provides the current time (accurate to milliseconds or higher), while the random seed data is generated using an encryption algorithm to increase randomness. The combination of the timestamp and the random seed ensures the uniqueness of each generated watermark, preventing duplication of marked content.

[0073] Next, the system combines the initial tag data with the timestamp and random seed data to form a new data string. This string contains the basic tag information, the time, and the data generated by the random seed. Then, the system processes this string using an irreversible encryption algorithm to generate encrypted tag data. This encryption algorithm can be a hash algorithm (such as SHA-256) or a symmetric encryption algorithm (such as AES). In a hash algorithm, the system takes the generated string as input, processes it, and obtains a fixed-length hash value. This hash value is the encrypted tag data, which cannot be reversed or decrypted to return to the original data. For a symmetric encryption algorithm, the system uses an encryption key to encrypt the data; the generated encrypted data cannot be decrypted without the key.

[0074] Because the encryption algorithm is irreversible, each generated encrypted marker is unique. Even if the initial marker data is the same, variations in the timestamp and random seed data will result in different encrypted marker data each time, ensuring the uniqueness and unpredictability of the watermark. This encrypted marker data will be embedded into the digital content as the final dynamic watermark to identify and verify the integrity of the content.

[0075] This encryption process ensures that the marked data cannot be reverse-engineered or tampered with, effectively improving the security and tamper-proof capabilities of digital content. The watermark not only possesses uniqueness but also provides unforgeable evidence during subsequent verification, preventing content from being altered or copied without authorization.

[0076] By employing an irreversible transformation process to encrypt and convert the initial dynamic marking results, this invention ensures the uniqueness of each generated watermark mark and prevents the original mark content from being obtained through reverse decryption. This encryption method effectively enhances the watermark's tamper-proof capability, making the digital content impossible to alter or copy. Furthermore, using the irreversibly transformed encrypted data as the final mark content not only enhances the security of the mark but also ensures the unpredictability of the generation process, thereby guaranteeing the integrity and security of the data.

[0077] Based on the preliminary dynamic tagging results, the decrypted tagging information also includes embedding the tagging content into the target digital content according to the final dynamic tagging content, forming protected content data with tags through content metadata binding, and obtaining the protected digital content carrier.

[0078] In the anti-tampering watermarking method of the present invention, the generated dynamic watermark mark is embedded in the target digital content to ensure the tamper-proof nature of the content. Specifically, the preliminary dynamic marking result is first encrypted to generate encrypted mark data. Then, the system binds the encrypted watermark mark with the metadata of the target digital content through a "content metadata binding" method to form a new protected content data.

[0079] First, the target digital content, such as images, videos, or documents, is analyzed to extract its metadata. Metadata typically includes basic file information such as filename, file size, creation time, modification time, file format, and file author; this information describes the fundamental characteristics of the digital content. In this step, the system obtains all relevant metadata for the target digital content and combines it with an encrypted dynamic watermark.

[0080] Next, the system combines the encrypted watermark with the metadata to form a new dataset. This new dataset includes not only the target digital content itself, but also the watermark and its associated metadata. Specifically, the system merges the watermark content with the digital content's metadata into a single entity, ensuring that the watermark data and the target content's metadata are bound together, forming an immutable and protected content dataset.

[0081] In this process, the watermark is embedded in the digital content and verified through metadata binding. The purpose of the metadata is to ensure that the watermark is always closely associated with the target digital content. Any tampering with the target digital content will cause changes to the associated metadata, thus failing verification. Through this binding method, the integrity of the watermark and the digital content is guaranteed, and any unauthorized modifications will be detected and marked as tampering by the system in a timely manner.

[0082] Ultimately, the protected content data marked with an encrypted watermark constitutes a "protected digital content carrier." This protected content data can be stored not only in digital media but also transmitted over the network. It is immutable; any modification to the content will break the binding relationship between the watermark and metadata, thus effectively preventing content tampering or theft.

[0083] In this way, the present invention ensures that the watermark of each digital content is unique and irreversible, while the binding of metadata makes every access, modification, or dissemination of digital content traceable and verifiable. This not only enhances the security of digital content but also provides a reliable guarantee for subsequent content verification.

[0084] By binding an encrypted watermark to the metadata of the target digital content, this invention enhances the tamper-proof capabilities of digital content. Due to the tight integration of the watermark and metadata, any modification to the target content will be immediately detected, effectively improving content protection security. Furthermore, watermarked protected content data ensures the integrity of digital content during storage, transmission, and use, avoiding the risk of watermark extraction, tampering, or deletion. This method not only strengthens the security of digital content but also provides a reliable basis for subsequent verification and traceability.

[0085] Based on the preliminary dynamic tagging results, the decrypted tagging information also includes, when the protected digital content carrier is distributed, the unique identity code, access request time, geographical location data, device type information, network connection status, user role classification, historical access records, and temporary session identifier obtained from the receiving end, forming a complete identity identification information set.

[0086] In the anti-tampering watermarking method of the present invention, in addition to embedding the encrypted dynamic mark into the target digital content and binding it with content metadata to form protected content data, a series of identity information and operation information are also obtained from the receiving end during the distribution of the protected content data to enhance the security and traceability of the digital content. This information includes, but is not limited to, unique identity encoding, access request time, geographical location data, device type information, network connection status, user role classification, historical access records, and temporary session identifiers. All of these pieces of information together form a complete identity identification information set.

[0087] Unique identity code

[0088] Each user in the system has a unique identification code. This code is generated using an encryption algorithm based on the user's registration information (such as email address, username, or other personal information). The generated code is unique, ensuring the uniqueness of each user in the system. When distributing digital content, the receiving system extracts and records the user's unique identification code for subsequent traceability and verification.

[0089] Access request time

[0090] Whenever a receiving end requests access to protected digital content, the system records the time of the access request. This time information is typically accurate to milliseconds, used to pinpoint the exact moment each access occurred. In this way, the system can ensure that each request can be traced back to a specific point in time, providing the temporal context of the access behavior.

[0091] Geographic data

[0092] It also acquires the receiving device's geographic location information. This data can be inferred from the device's GPS positioning system or its IP address. The acquired geographic location data (such as longitude, latitude, or city information) helps the system understand the physical location where each access occurs. This information can further enhance the security of digital content access and prevent unauthorized remote access.

[0093] Device type information

[0094] Device type information records the type of device a user uses to access digital content. This information is typically provided by the browser or operating system of the receiving device and helps the system identify the type of device the user is using, such as a mobile phone, tablet, or computer. In this way, the system can monitor access behavior from different types of devices, ensuring that only compliant devices can access protected content.

[0095] Network connection status

[0096] Network connection status refers to the current network connection method of the receiving device, such as Wi-Fi or mobile data. Obtaining network connection status helps the system identify the network environment during access and understand whether there are potential security risks. For example, when the network connection is unstable or an insecure public network is used, the system may issue warnings or restrict access.

[0097] User Role Classification

[0098] User role classification refers to the different levels of permissions assigned to users in the system. Users with different roles are granted different access permissions. Common user roles include administrators, regular users, and visitors. By recording user role information, the system can precisely control each user's access permissions, ensuring that content can only be accessed by authorized users.

[0099] Historical access records

[0100] Historical access records are used to track users' past access behavior, including the time of access, the content accessed, and the actions performed. These records provide the system with a historical trajectory of user behavior, helping administrators or auditors analyze and review access behavior, and discover potential security vulnerabilities or inappropriate behavior.

[0101] Temporary session identifier

[0102] Each time a user accesses the system, a temporary session identifier is generated. This identifier is unique and identifies the user within a single session. The temporary session identifier, along with the user's access time, device information, and other details, is recorded to track and correlate all user actions within the same session. This not only enhances system traceability but also helps in quickly locating problems in the event of a security incident.

[0103] After all the above information (unique identity code, access request time, geographic location data, device type information, network connection status, user role classification, historical access records, and temporary session identifiers) is collected, it is combined into a complete identity information set. Whenever a receiving end accesses protected content, the system generates and stores this information set, ensuring that each access to digital content can be accurately traced and verified. By combining this information, the system can provide a detailed behavioral record for each access, providing sufficient data support for subsequent security audits.

[0104] This complete set of identity information is stored along with the protected digital content carrier, serving as the foundation for each access. This means that any modification to the digital content or unauthorized access will be recorded in detail. Using this information, the system can effectively identify and verify each access request and determine whether it complies with access permissions and security standards.

[0105] By acquiring a detailed set of identity information from the receiving end during the distribution of protected digital content, this invention enables comprehensive monitoring and traceability of each access. The collection of unique identity codes, access request times, geographic location data, device type information, network connection status, user role classification, historical access records, and temporary session identifiers not only provides crucial evidence for subsequent security audits but also enables real-time detection of illegal or non-compliant access behaviors. The introduction of this information set significantly enhances the protection capabilities of digital content, ensuring that only authorized users can access and manipulate content, thereby improving the overall security and controllability of the system. Furthermore, based on this information, the system can perform fine-grained access control and permission management, avoiding the risks of abuse and unauthorized access.

[0106] Based on the initial dynamic marking results, the decrypted marking information also includes, for the identity information set, combined with the preset authorization rule base, determining whether the unique identity code meets the access conditions, and verifying whether the geographical location data is within the allowed range. If both meet the requirements, the corresponding verification key data is generated.

[0107] In the anti-tampering watermarking method of the present invention, in addition to embedding the encrypted watermark mark into the target digital content and combining it with metadata to generate protected content data, a verification process for the receiver's identity information set is also involved. This process combines the identity information provided by the receiver with a preset authorization rule base, and ensures that only qualified users can access the target digital content by verifying the unique identity code and geographical location data. The specific process is as follows:

[0108] Unique identity code verification

[0109] Each user in the system has a unique identification code, which is typically generated by the system using an encryption algorithm based on the user's registration information (such as email address, username, and mobile phone number). This unique identification code is the user's unique identifier in the system and is used to determine whether the user has permission to access digital content. When a receiving end requests access to digital content, the system extracts the user's unique identification code and compares it with records in a pre-defined authorization rule base. The system determines whether the identity has access rights based on the information in the authorization rule base. The authorization rule base contains the mapping relationship between each identity and its permissions, such as which users have access rights and which roles can access specific content. If the unique identification code provided by the receiving end matches the access conditions in the rule base, the identity verification passes, and the system continues to execute subsequent steps.

[0110] Geographic data verification

[0111] In addition to verifying the unique identity code, the system also verifies the receiver's geographic location data to ensure that the access request originates from an authorized geographic area. The receiver device infers its geographic location using GPS or IP address, and the system obtains the receiver's location information, typically longitude and latitude, or geographic identifiers such as city and country.

[0112] The received geographic location data is compared with the allowed geographic areas in a pre-defined rule base. If the receiver's geographic location is within the allowed range (e.g., a specific country or city), the geographic location verification passes. Conversely, if the receiver's geographic location exceeds the restricted area in the rule base, the access request is rejected.

[0113] Generate verification key data

[0114] After the unique identity code and geolocation data have been verified, the system generates corresponding verification key data. The verification key data is a set of encrypted data used for authorization verification, ensuring that only verified users can continue to access the protected digital content. Generating the verification key data involves encrypting the verified identity information, geolocation information, and other relevant information.

[0115] When generating verification key data, the system concatenates the unique identity code and geographical location information into a set of data, and then encrypts this data. Typically, the system uses a symmetric encryption algorithm (such as AES) or an asymmetric encryption algorithm (such as RSA) to encrypt the concatenated data to generate the final verification key data.

[0116] This encryption process ensures that the generated verification key data is unique and secure, and can only be generated through a legitimate user identity and a geographically appropriate access request. This key data will then be used to unlock digital content or for further verification.

[0117] Verification process

[0118] After generating the verification key data, the system compares it with the verification key provided by the receiving end. Each time the receiving end requests access, the system regenerates the verification key using the received unique identity code and geographical location information. The system then compares the generated verification key with the previously stored verification key data.

[0119] If the two verification keys match, it means that the receiving end's access request is legitimate, and the system will allow access;

[0120] If the verification keys do not match, it means that the access request has failed verification. The system will refuse access and record the access behavior.

[0121] This verification process ensures the legitimacy and compliance of each access, effectively preventing unauthorized access.

[0122] By combining unique identity codes, geolocation data, and a pre-defined authorization rule base to determine access conditions, this invention ensures that every access to digital content complies with authorization requirements. The combination of unique identity code verification and geolocation data verification allows the system to more precisely control which users can access digital content under what conditions. The generation of verification key data ensures that only users meeting all access conditions can access the content, effectively preventing unauthorized access and content tampering. Through this multi-layered verification mechanism, this invention significantly enhances the security of digital content and provides more granular access control and permission management, ensuring the compliance and reliability of digital content during distribution and use.

[0123] Based on the preliminary dynamic tagging results, the decrypted tagging information also includes decrypting the protected content data with tags by verifying the key data, extracting the embedded dynamic tagging content, and obtaining the decrypted tagging information.

[0124] In the anti-tampering watermark drawing method of the present invention, in addition to generating an encrypted watermark mark and embedding it into the target digital content, it also includes decrypting the protected digital content carrier through verification key data to extract the embedded watermark mark content, thereby ensuring the integrity and security of the digital content. The specific working principle of this method is as follows:

[0125] Generate verification key data:

[0126] After user authentication and geolocation verification are successful, the system generates a verification key. This verification key is based on the unique identity code and geolocation information provided by the receiving end. This information is then encrypted to generate a unique verification key.

[0127] First, the system concatenates the received unique identity code (e.g., user ID or email address) and geographic location information (e.g., latitude and longitude or IP address) using an encryption algorithm (such as AES, SHA, etc.) to obtain a string combining identity and geographic location information. This string is then processed by an encryption algorithm to generate the final verification key data. This verification key data will be used for subsequent decryption operations.

[0128] Decrypt watermarked protected content data:

[0129] Once the verification key data is generated, the system uses this key to decrypt the protected digital content carrier. The protected digital content carrier already contains an embedded encrypted watermark. The system uses the newly generated verification key data to decrypt the protected content data.

[0130] By decrypting the verified key data, the system can recover the encrypted watermark embedded in the protected content. The decryption process typically uses symmetric encryption algorithms (such as AES) or asymmetric encryption algorithms (such as RSA). This step ensures that only authenticated and geolocated users can decrypt and retrieve the watermark, thus preventing unauthorized users from accessing and tampering with the watermark content.

[0131] Extracting embedded dynamic tag content:

[0132] After decrypting the watermarked protected content data, the system successfully extracted the encrypted watermark marker. This watermark marker is the original dynamic watermark content generated using a timestamp and a random seed. The decrypted watermark marker content is the original watermark data, containing the file's unique identification information.

[0133] The decrypted watermark not only verifies the authenticity of digital content but also checks whether the content has been tampered with during transmission and storage. If the decrypted watermark matches the pre-stored watermark information, it indicates that the digital content has not been tampered with during distribution. If they do not match, it means the digital content may have been tampered with, and the system will refuse further access to the content.

[0134] Verify the consistency of watermark markers:

[0135] Once decryption is successful and the watermark is extracted, the system compares it with the original watermark data. This verification process ensures that the digital content has not been tampered with. The watermark contains unique data generated using a timestamp and a random seed, guaranteeing that each generated watermark is different and related to the uniqueness of the content itself.

[0136] The integrity of digital content is verified by comparing the decrypted watermark with the stored watermark record. If they match, the verification is successful, and the digital content can be considered complete and undisturbed; if the match fails, a message will be displayed indicating that the content has been tampered with, preventing unauthorized modification or alteration.

[0137] Through the aforementioned decryption steps, secure protection and verification of the protected digital content carrier are achieved. By generating verification key data and using it for decryption, the system ensures that only users with legitimate identity verification and geolocation validation can access and extract the watermark. This process not only guarantees the integrity of the digital content but also provides an effective mechanism to prevent tampering and forgery. This method improves the tamper-resistance of digital content, ensuring that the watermark cannot be tampered with, deleted, or forged during content distribution, storage, and use. Through encryption and verification mechanisms, this invention significantly enhances the security and traceability of digital content, providing a reliable and innovative solution for digital content protection.

[0138] The traceability query interface is bound to the operation log through blockchain technology to ensure the immutability and traceability of the operation log.

[0139] In the anti-tampering watermarking method of this invention, the generation and recording of operation logs is a core component of content protection. During each access, modification, or verification of digital content, the system records detailed information about the operation. This information includes the operation's timestamp, user identity information, operation type (e.g., access, modification, or verification), operation result (e.g., success or failure), and metadata related to the operation (e.g., device information, network status, etc.). This operation log data provides detailed evidence for subsequent content auditing and security verification, ensuring that every operation can be traced and analyzed.

[0140] To ensure the immutability and traceability of operation logs, this invention utilizes blockchain technology to bind the operation logs to the blockchain. The core characteristics of blockchain are decentralization, distributed storage, and data immutability. Whenever the system generates a new operation log, this log data is processed using a cryptographic hash algorithm to generate a unique hash value. This hash value is then recorded in the blockchain, and the blockchain's consensus mechanism ensures data synchronization across multiple nodes. Due to the decentralized nature of blockchain, any tampering or forgery will be detected by other nodes, thus guaranteeing the security, accuracy, and consistency of the log data.

[0141] The traceability query interface makes querying operation logs more efficient and transparent. When users or administrators need to query operation logs, they can submit a query request through the traceability query interface. The system then retrieves relevant data records from the blockchain based on the request conditions (such as operation time, user identity, etc.). Due to the structural characteristics of the blockchain, the operation logs stored within it cannot be tampered with or deleted, ensuring that the query results are always accurate and genuine, further improving the reliability and security of data access. Each query directly obtains encrypted, verified, and tamper-proof operation logs from the blockchain, ensuring the credibility of the query results.

[0142] By combining operation logs with blockchain technology, this invention not only enhances the immutability of operation logs but also significantly improves the security and transparency of log information. The immutability of the blockchain ensures that all recorded operation logs cannot be forged or altered, while the traceability query interface provides a convenient and reliable way for administrators or users to view and audit all operation records in real time. This mechanism effectively prevents tampering, abuse, or forgery, ensuring the integrity of digital content and the compliance of access.

[0143] By combining operation logs with blockchain technology, this invention ensures the immutability and traceability of operation logs. Blockchain technology, through decentralized distributed storage and encrypted verification mechanisms, ensures that no operation log can be tampered with, deleted, or forged after it has been recorded. This not only enhances the security of the digital content protection process but also provides reliable data support for subsequent auditing, verification, and compliance checks.

[0144] Furthermore, the use of blockchain technology improves the efficiency and reliability of operation log queries. Through the traceability query interface, users or administrators can access all relevant operation logs in real time, ensuring that every content operation is clearly recorded and traceable to the specific action taken. This combination of technologies provides strong support for content protection systems, effectively preventing unauthorized tampering and abuse.

[0145] The environmental parameter snapshot includes various parameters such as operating device information, network status, and system load.

[0146] In the anti-tampering watermarking method of this invention, the generation of environmental parameter snapshots is a crucial step in ensuring the security and traceability of digital content. The system not only records information such as user identity, access time, and geographical location in the operation log, but also further enhances the comprehensiveness of content protection by collecting and storing environmental parameter snapshots. Specifically, the environmental parameter snapshots include various parameters such as operating device information, network status, and system load. These parameters provide a detailed environmental context during the access operation, which is helpful for subsequent security audits and problem tracing.

[0147] First, the device information refers to detailed information about the device used by the user when accessing content, including device type (such as mobile phone, computer, tablet, etc.), device model, operating system type and version, etc. This information helps the system identify the device used for each access operation, ensuring that the device is authorized. If a user accesses digital content on an unauthorized device, the system will record and trigger an alarm to prevent unauthorized access.

[0148] Secondly, network status refers to the device's network connection type during access, such as Wi-Fi, 4G, 5G, etc., as well as the stability of the network connection. Recording network status not only helps monitor network security issues but also provides more accurate access condition judgments. For example, when a device accesses the network through an insecure public Wi-Fi network, the system can use network status parameters to determine whether enhanced authentication measures are needed to improve security.

[0149] Finally, system load refers to the resource consumption of the system when processing access requests, such as CPU utilization, memory usage, and network bandwidth usage. System load information reflects the system's working status when executing access requests. If the system load is too high, it may indicate a potential attack (such as a distributed denial-of-service attack). In this case, the system can take appropriate protective measures or temporarily restrict access to ensure system stability and security.

[0150] By collecting these environmental parameters, the system generates a detailed snapshot of the environmental parameters and stores it along with the operation log. This snapshot provides rich contextual information for each access to digital content, enabling any abnormal access behavior to be promptly detected and analyzed during subsequent audits.

[0151] By recording environmental parameters such as operating device information, network status, and system load, this invention significantly enhances the multi-dimensional security of digital content protection. Environmental parameter snapshots provide a detailed view of the operating environment during access, helping to detect abnormal access behavior and providing crucial data support for subsequent security audits. For example, the system can identify insecure access networks through network status parameters, determine whether access is being made by unauthorized devices through device information, and provide early warnings of potential attacks through system load information. The comprehensive recording of these environmental parameters ensures the reliability and accuracy of content protection, effectively improving the system's anti-tampering capabilities and response speed, and providing strong protection for the integrity, traceability, and security of digital content.

[0152] like Figure 2 As shown, a system for drawing anti-tamper-evident watermarks is also provided, used to implement the steps of the method for drawing anti-tamper-evident watermarks, the system comprising:

[0153] The tag generation module is used to obtain at least one basic template from a pre-established tag generation rule base, combine it with the current timestamp and random seed data to generate initial tag data, ensuring that the initial tag data has unpredictable characteristics, and obtain preliminary dynamic tag results;

[0154] The tag verification module is used to obtain decrypted tag information based on the preliminary dynamic tag results, and compare the decrypted tag information with the pre-stored tag generation records. If the comparison results are consistent, it is confirmed that the digital content has not been tampered with, and the verification status information is determined.

[0155] The access control module is used to release access permissions to digital content carriers based on the verified status information. The access control module sends an unlock command to the receiving end and records the operation timestamp, event type classification, identity association data, result status description and environmental parameter snapshot of this operation to generate initial log data.

[0156] The log encryption module is used to protect the initial log data using a specific data encryption method, store it in a designated backup storage path, and bind it to the unique identity code and temporary session identifier through a traceability query interface to obtain a complete operation traceability record and determine the final access authorization result.

[0157] The anti-tampering watermarking system of this invention works collaboratively through multiple modules to sequentially implement steps such as marker generation, marker verification, access control, log recording, and encrypted storage, ensuring the tamper-proof nature of digital content, access control, and audit traceability. The detailed working principles of each module are as follows:

[0158] The main task of the tag generation module is to obtain basic templates from a pre-established tag generation rule base and, combined with the current timestamp and random seed data, generate initial dynamic tag data. First, the system selects at least one basic template from the rule base. This basic template contains the basic elements of watermark tags (such as graphics, symbols, and text). Then, the module combines the current timestamp and random seed data; these two dynamic parameters ensure the unpredictability and uniqueness of each generated tag. The timestamp is the current system time, accurate to milliseconds or higher, and the random seed data consists of pseudo-random numbers generated by the system using an encryption algorithm. By inputting this data into the tag generation function, the system generates preliminary dynamic tag results, guaranteeing the unpredictability and non-replicability of the tags.

[0159] The task of the tag verification module is to decrypt the tag information based on the initial dynamic tagging results and compare it with the pre-stored tag generation records. The system decrypts the initially generated tag data to recover the original content of the encrypted watermark tag. After decryption, the system compares the tag information with the pre-stored tag generation records. The purpose of this comparison is to verify whether the digital content has been tampered with. If the decrypted tag information matches the stored tags, the system confirms that the digital content has not been tampered with and generates a verification passed status message. If the tag information does not match, an alarm is triggered and further access is denied.

[0160] The access control module determines whether to release access to the digital content carrier based on the verification success status information returned by the tag verification module. If the tag verification is successful, the module will send an unlock command to the receiving end, allowing it to access the digital content. Simultaneously, the access control module also records key information about this operation, including an operation timestamp, event type (e.g., "verification successful," "verification failed"), user identity association data (e.g., user ID or username), operation result status description (e.g., "success" or "failure"), and environmental parameter snapshots (e.g., device information, network status). This information is used to generate initial log data for subsequent auditing and traceability.

[0161] The log encryption module is responsible for protecting the security of the initial log data, ensuring that the operation logs are not tampered with during storage and transmission. This module uses specific data encryption methods (such as AES or RSA encryption) to encrypt the initial log data and stores the encrypted log data in a designated backup storage path. The encrypted log data stored in the backup path ensures data security, privacy, and immutability. Furthermore, the log encryption module also binds to a unique identity code and temporary session identifier through a traceability query interface to generate a complete operation traceability record. This operation traceability record provides reliable evidence for subsequent audits and compliance checks. Ultimately, the system ensures the integrity, authenticity, and immutability of the operation logs through this mechanism.

[0162] Through the coordinated operation of the aforementioned modules, the anti-tampering watermarking system of this invention can efficiently complete the protection, verification, access control, and operation log management of digital content. The marker generation module ensures the unpredictability and uniqueness of the watermark markers, preventing them from being cracked or tampered with; the marker verification module effectively detects the integrity of the content through decryption and comparison functions, ensuring that the content has not been illegally modified; the access control module provides a robust access control and auditing mechanism through precise identity verification and log recording; and the log encryption module ensures the security and traceability of operation records through encryption and traceability functions. Through these functions, the system provides comprehensive anti-tampering measures, not only ensuring the integrity of digital content but also providing full recording and traceability of operational activities, enhancing the system's security, transparency, and reliability.

[0163] A terminal with an anti-tamper-evident watermark is also provided, including:

[0164] The tag generation unit is used to obtain at least one basic template from a pre-established tag generation rule base, combine it with the current timestamp and random seed data, generate initial tag data, ensure that the initial tag data has unpredictable characteristics, and obtain preliminary dynamic tag results;

[0165] The tag verification unit is used to obtain the decrypted tag information based on the preliminary dynamic tag results, and compare it with the pre-stored tag generation record. If the comparison results are consistent, it is confirmed that the digital content has not been tampered with, and the verification status information is determined.

[0166] The access control unit is used to release access permissions to the digital content carrier based on the verified status information, send an unlock command to the receiving end, and record the operation timestamp, event type classification, identity association data, result status description and environmental parameter snapshot of this operation to generate initial log data.

[0167] The log encryption unit is used to protect the initial log data using a specific data encryption method, store the encrypted log data in a specified backup storage path, and bind it to the unique identity code and temporary session identifier through a traceability query interface to obtain a complete operation traceability record and determine the final access authorization result.

[0168] The storage unit is used to store encrypted log data and supports redundant backups to ensure data availability and security during log querying and tracing.

[0169] The anti-tamper watermarking system terminal of this invention works collaboratively through multiple modules to complete functions such as digital content protection, verification, access control, log recording, and secure data storage. Each unit in the terminal device implements the security, integrity, and audit traceability functions of digital content.

[0170] The anti-tamper-evident watermarking terminal of this invention ensures the security, integrity, and traceability of digital content through the collaborative work of multiple functional units. The marker generation unit ensures that each generated watermark is unique and unpredictable; the marker verification unit verifies the integrity of the content to prevent tampering; the access control unit precisely manages access permissions for the content and records detailed logs of all operations; the log encryption unit ensures the security of the operation logs during storage and transmission; and the storage unit provides redundant data backups to ensure high availability of the log data.

[0171] These modules work together to enhance the tamper-proof nature of digital content, access control capabilities, operational auditing, and data security, ensuring the transparency and reliability of the system.

[0172] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A method of drawing a tamper-evident watermark, characterized by, The method comprises: According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; According to the state information of the verification passed, the access permission of the digital content carrier is released, the unlocking instruction is sent to the receiving end through the permission control module, and the operation time stamp, event type classification, identity association data, result state description and environment parameter snapshot of this operation are recorded to generate initial log data; According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; According to the preliminary dynamic marking result, the decrypted marking information is obtained, and the decrypted marking information is compared with the pre-stored marking generation record. If the comparison result is consistent, it is confirmed that the digital content has not been tampered with, and the state information of the verification is determined to be passed; 2. The method of claim 1, wherein: The environment parameter snapshot comprises operation device information, network state, system load and various parameters.

3. The method of claim 1, wherein: The system comprises:

4. The method of claim 1, wherein: ​ 5. A system for drawing a tamper-proof watermark for implementing the steps of the method for drawing a tamper-proof watermark according to any one of claims 1 to 4, characterized in that, ​ The marking generation module is configured to obtain at least one basic template from a rule library of pre-established marking generation rules, combine a current time stamp with random seed data, generate initial marking data, ensure that the initial marking data has unpredictable characteristics, and obtain a preliminary dynamic marking result. The marking verification module is configured to obtain decrypted marking information according to the preliminary dynamic marking result, compare the decrypted marking information with pre-stored marking generation records, and if the comparison result is consistent, confirm that the digital content has not been tampered with, and determine state information of a verification pass. The permission control module is configured to release access permission to the digital content carrier according to the state information of the verification pass, send an unlocking instruction to the receiving end through the permission control module, record operation time stamps, event type classifications, identity association data, result state descriptions, and environment parameter snapshots of this operation, and generate initial log data. The log encryption module is configured to protect the initial log data by using a specific data encryption method, store the initial log data to a specified backup storage path, bind the identity unique code and the temporary session identifier through a trace query interface, obtain complete operation trace records, and determine a final access authorization result.

6. A terminal of a tamper-proof watermark, characterized by The marking generation unit is configured to obtain at least one basic template from a rule library of pre-established marking generation rules, combine a current time stamp with random seed data, generate initial marking data, ensure that the initial marking data has unpredictable characteristics, and obtain a preliminary dynamic marking result. The marking verification unit is configured to obtain decrypted marking information according to the preliminary dynamic marking result, compare the decrypted marking information with pre-stored marking generation records, and if the comparison result is consistent, confirm that the digital content has not been tampered with, and determine state information of a verification pass. The permission control unit is configured to release access permission to the digital content carrier according to the state information of the verification pass, send an unlocking instruction to the receiving end, record operation time stamps, event type classifications, identity association data, result state descriptions, and environment parameter snapshots of this operation, and generate initial log data. The log encryption unit is configured to protect the initial log data by using a specific data encryption method, store the encrypted log data to a specified backup storage path, bind the identity unique code and the temporary session identifier through a trace query interface, obtain complete operation trace records, and determine a final access authorization result. The storage unit is configured to store the encrypted log data and support redundant backup, so as to ensure data availability and security during log query and trace. According to the preliminary dynamic marking result, the decrypted marking information includes encrypted marking data generated by using an irreversible transformation processing method to encrypt and convert the preliminary dynamic marking result, so as to ensure that the encrypted marking data has uniqueness in each generation and determine the final dynamic marking content. ​ According to the preliminary dynamic marking result, the decrypted marking information further comprises embedding the marking content into the target digital content according to the final dynamic marking content, forming the protected content data with the marking through the content metadata binding mode, and obtaining the protected digital content carrier; The decrypted marking information according to the preliminary dynamic marking result further comprises obtaining the identity unique code, the access request time, the geographic location data, the device type information, the network connection state, the user role classification, the historical access record and the temporary session identification from the receiving end when the protected digital content carrier is distributed, and composing a complete identity identification information set; The decrypted marking information according to the preliminary dynamic marking result further comprises judging whether the identity unique code meets the access condition and simultaneously checking whether the geographic location data is within the allowed range in combination with the preset authorization rule library for the identity identification information set, and generating the corresponding verification key data if both meet the conditions.

Images