File sharing and commission sharing group printing system based on encryption tamper-proofing

Abstract

The application discloses a file sharing and commission group printing system based on encryption tamper-proofing, and belongs to the technical field of printing management, and specifically comprises the following steps: performing semantic structure analysis on a to-be-printed file, dividing the to-be-printed file into a plurality of logical units with independent semantics, extracting a multi-dimensional feature vector for each unit, combining a user real-time operation to generate a dynamic encryption factor, independently encrypting each logical unit and generating a check code, combining the check code into a structured encryption file package, publishing the file package to a sharing platform, generating a verifiable link according to a user strategy, receiving a group application from other users, verifying the matching degree of the authority and the strategy, and joining a group set if the matching degree meets a standard, monitoring the cumulative progress of a printing demand, performing commission calculation when a trigger condition is met, generating a distribution scheme according to a rule and an actual size, generating a unified printing task by fusing a printing preference, and sending the unified printing task to a printing equipment cluster. The application guarantees file encryption safety and tamper-proofing, and improves the cooperation printing efficiency and the user participation initiative.

Description

Technical Field

[0001] This invention relates to the field of print management technology, specifically to a file-sharing, commission-based group printing system based on encryption and tamper-proof technology. Background Technology

[0002] With the continuous development of information technology and the popularization of digital office environments, file sharing and printing services are becoming increasingly important in daily work and business activities. Especially in scenarios involving remote collaboration and multiple users, how to efficiently and securely organize file printing tasks and rationally allocate related costs and benefits has become a common concern for both businesses and individual users. Traditional file printing methods have certain limitations in handling multi-party collaboration and complex access control, driving the development of print management systems towards integration, intelligence, and collaboration.

[0003] Existing technologies include various systems that support online file sharing and print management. Some systems offer user access control, print job scheduling, and cost statistics, enabling basic control over printing activities and cost sharing. Other solutions employ technologies such as encrypted transmission and storage, and digital authentication to ensure file security during transmission and access. Furthermore, some systems attempt to introduce simple rebate or group-buying mechanisms to encourage users to print collectively, thereby reducing unit costs and improving resource utilization efficiency.

[0004] However, most existing file encryption methods are static or fixed strategies, making it difficult to adapt to changes in user behavior and file content. They also lack fine-grained support for tamper prevention and dynamic security protection. Furthermore, when organizing shared printing among multiple users, existing solutions often do not adequately consider the negotiation and integration of printing parameters, which can easily lead to unexpected output results due to setting conflicts. Summary of the Invention

[0005] The purpose of this invention is to provide a file-sharing, commission-based group-buying and printing system based on encryption and tamper-proof technology, solving the following technical problems:

[0006] Most existing systems use static encryption strategies for files, which are difficult to adapt to changes in user operations and file content, and lack fine-grained support. When multiple people share printing, the system cannot fully consider the negotiation and integration of printing parameters, and the output may not meet expectations due to setting conflicts.

[0007] The objective of this invention can be achieved through the following technical solutions:

[0008] A file-sharing, commission-based, group-buying, and printing system based on encryption and tamper-proof technology includes:

[0009] The semantic parsing module is used to perform semantic structure parsing on the file to be printed. Based on the parsing results, the file is divided into multiple logical units with independent semantics, and multi-dimensional feature vectors are extracted for each logical unit.

[0010] The dynamic encryption module is used to generate dynamic encryption factors based on real-time user operation behavior. The dynamic encryption factors are used to independently encrypt each logical unit and generate a unit check code. All encrypted logical units, feature vectors and check codes are combined into a structured encrypted file package.

[0011] The platform sharing module is used to publish structured encrypted file packages to the sharing platform, generate verifiable sharing links according to the sharing policies set by the user, and embed commission calculation rules and group purchase trigger conditions in the links;

[0012] The group-buying verification module is used to receive group-buying applications submitted by other users through verifiable shareable links. The group-buying application includes the applicant's identity information and printing preference settings. It verifies the matching degree between the applicant's permissions and the sharing policy. Once the matching degree meets the requirements, the application is added to the group-buying set.

[0013] The commission monitoring module is used to monitor the cumulative progress of printing demand in the group purchase collection. When the cumulative progress meets the group purchase triggering conditions, the commission calculation process is automatically executed, and a commission allocation plan is generated according to the commission calculation rules and the actual printing scale.

[0014] The unified printing module is used to generate a unified print job by merging all printing preference settings in the group purchase set. The unified print job contains a coordinated set of printing parameters, including media specifications, output standards and post-processing requirements, and sends the unified print job to the printing device cluster.

[0015] As a further aspect of the present invention: the specific process of semantic structure parsing of the document to be printed in the semantic parsing module is as follows:

[0016] Natural language processing techniques are used to analyze the semantic boundaries of text content, and chapter titles, paragraph breaks, and chart positions are identified based on syntactic analysis and semantic role labeling. Multimodal feature extraction is performed on non-text content, and thematic regions in images are identified through convolutional neural networks. Table recognition algorithms are used to extract row and column structure information from tables.

[0017] Content is aggregated into logical units based on semantic relevance and spatial layout features. Each logical unit maintains complete semantic information and visual coherence. A digital fingerprint based on content hash and feature vector is generated for each logical unit. The digital fingerprint integrates the semantic features of the text, the visual features of the image, and the structural features of the table. The digital fingerprint is used for subsequent encryption factor generation and content integrity verification, and is also used as the verification basis during decryption.

[0018] As a further aspect of the present invention: the specific process of generating dynamic encryption factors in the dynamic encryption module, based on the user's real-time operation behavior, is as follows:

[0019] Real-time collection of user action behavior data in the current session, including mouse movement trajectory coordinate sequence, keyboard input time interval distribution and interface element interaction frequency statistics, converting action behavior data into temporal feature vectors, and using temporal coding technology to preserve the temporal dynamic characteristics of action behavior;

[0020] The temporal feature vector and the digital fingerprint of the logic unit are fused together in a multimodal manner. The fusion process adopts a feature weighting mechanism based on attention weights and dynamically adjusts the fusion weights according to the content sensitivity of different logic units.

[0021] Based on the fusion calculation results, a time-sensitive dynamic encryption factor is generated. Each logical unit corresponds to a unique encryption factor instance. The dynamic encryption factor is set with a life cycle parameter. It will automatically expire after the preset validity period and be regenerated for verification.

[0022] As a further aspect of the present invention: the specific process of independently encrypting each logical unit and generating a unit check code using dynamic encryption factors in the dynamic encryption module is as follows:

[0023] The encryption algorithm is adaptively selected based on the content type and sensitivity of the logical unit. Text content uses a format-preserving encryption algorithm, image content uses a visual security encryption algorithm, and tabular data uses a structure-preserving encryption algorithm.

[0024] Using dynamic encryption factors as input keys, a key stream required for actual encryption is generated through a key expansion algorithm; stream encryption mode is used to encrypt logic units block by block, maintaining the semantic structure and visual layout integrity of the logic units during the encryption process;

[0025] A hash tree-based unit check code is generated for each encrypted logical unit. The unit check code is calculated by incorporating the encrypted content, encryption factor, and decryption parameters. The unit check code is stored in the header of the encrypted file package as a verification of the integrity of the content and the authenticity of the source during subsequent decryption.

[0026] As a further aspect of the present invention: the key expansion algorithm specifically includes:

[0027] The dynamic encryption factor is used as the initial seed input into the chaotic mapping system. A chaotic sequence is generated through multiple iterations. The control parameters of the chaotic mapping system are dynamically adjusted according to the content feature vector of the logical unit, so that the generated key stream is associated with the content feature.

[0028] The chaotic sequence is quantized and converted into a key stream byte sequence that meets the requirements of the encryption algorithm. A feedback mechanism is introduced during the key stream generation process, and the encryption state of the previous logical unit is used as the initial condition of the chaotic mapping system of the next logical unit to establish the encryption correlation between logical units.

[0029] The final generated key stream has content-related randomness, and there are unpredictable correlations between the key streams of adjacent logical units.

[0030] As a further aspect of the present invention: the specific process of generating a verifiable sharing link according to the user-set sharing strategy in the platform sharing module is as follows:

[0031] Parse the metadata area of ​​the structured encrypted file package to extract file identifiers, creation timestamps, and content digest information; generate multi-level access control policies based on the user's sharing policy settings, with the access control policies specifying in detail the user identity types, geographical restrictions, and time validity periods allowed to participate in group buying;

[0032] The file identifier, multi-level access control policy, and rebate calculation rules are serialized into policy description data blocks. The policy description data blocks are then encrypted using an asymmetric encryption algorithm to generate a security policy token with a digital signature.

[0033] The security policy token is combined with the platform service base address to generate the original sharing link. A timestamp verification parameter and a random number challenge value are added to the original sharing link to prevent replay attacks. The complete link is then URL-securely encoded to generate the final verifiable sharing link.

[0034] As a further aspect of the present invention: the specific process of verifying the matching degree between the applicant's permissions and the sharing strategy in the group-buying verification module is as follows:

[0035] Parse the security policy token in the verifiable shareable link, decrypt it using the corresponding private key to obtain the original policy description data block; verify whether the applicant's digital identity credentials meet the user identity type requirements in the multi-level access control policy; check whether the application was initiated within the validity period specified in the policy, and whether the applicant's geographical location meets the regional restriction requirements;

[0036] After verification, the encrypted content block of the specified logical unit is extracted from the structured encrypted file package as needed, and the dynamic encryption factor is regenerated using the operation behavior data provided by the applicant to decrypt and verify the encrypted logical unit.

[0037] Record the applicant's printing preference settings details, including specific parameters such as the number of copies to print, color mode, single or double-sided printing, add the printing request to the group purchase collection, and update the current printing scale statistics and remaining demand calculation in the collection in real time.

[0038] As a further aspect of the present invention: the specific process of the commission calculation in the commission monitoring module is as follows:

[0039] The step-wise calculation parameters defined in the commission calculation rules are analyzed, including the calculation coefficients and allocation ratio weights for each scale interval; the total commission amount is determined by a multi-segment linear interpolation method based on the actual total printing scale, and printing complexity coefficients and resource consumption factors are introduced in the calculation process;

[0040] A commission distribution plan is formulated, which comprehensively considers the initial contribution of the file uploader and the print scale contribution of other participants. A structured commission execution instruction is generated, which includes the identity authentication information of each beneficiary, the precise commission amount, and the specified settlement method code. The commission execution instruction is sent to the payment processing system through a secure channel to trigger the fund allocation operation.

[0041] As a further aspect of the present invention: the specific process of generating a unified printing task in the unified printing module is as follows:

[0042] Aggregate all printing preference settings data in the group purchase collection, and perform consistency analysis and conflict detection on each setting item;

[0043] For media specification parameters, special media type requirements are detected and the highest specification requirements are retained first; for output standard parameters, the quality level distribution of each requirement is comprehensively analyzed, and the union of quality parameters is used as the final output standard; for post-processing requirements, the technical compatibility between each requirement is evaluated, and the final post-processing solution is determined through a requirement voting mechanism.

[0044] The total number of copies printed is calculated to generate the total number of copies printed, and the total amount of resources required is calculated. The decrypted file content, the consistent set of printing parameters, and the total number of copies printed are combined into a unified print job description file. The unified print job is encapsulated using an industry-standard job description language.

[0045] The beneficial effects of this invention are:

[0046] This invention effectively enhances the anti-tampering capabilities and security of files during sharing and printing by combining semantic parsing and dynamic encryption factors. The method of generating encryption keys based on real-time user actions strengthens the dynamism and uniqueness of encryption, solving the problem of static encryption strategies being easily cracked. Independent encryption and unit verification mechanisms for logical units ensure the integrity of file content and the authenticity of its source. Regarding group printing organization, the system employs multi-level access control and parameter negotiation mechanisms, automatically integrating multiple parties' printing preferences and generating a consistent set of printing parameters. This avoids print quality issues caused by conflicting settings and improves resource utilization efficiency. Simultaneously, this invention introduces a commission calculation model based on multi-dimensional factors, comprehensively considering print scale, content complexity, and resource consumption, achieving accurate and fair commission allocation and enhancing user participation in collaborative printing. The overall system, through the organic combination of encryption and anti-tampering, intelligent group printing, and accurate commission, improves the efficiency and user experience of multi-party collaborative printing while ensuring security. Attached Figure Description

[0047] The invention will now be further described with reference to the accompanying drawings.

[0048] Figure 1 This is a schematic diagram of the modules of the present invention. Detailed Implementation

[0049] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0050] Please see Figure 1 As shown, this invention is a file-sharing, commission-based, group-buying, and printing system based on encryption and tamper-proof technology, comprising:

[0051] The semantic parsing module focuses on the semantic processing of the document to be printed. First, it performs a comprehensive semantic structure analysis of the document content, identifying chapter titles, paragraph breaks, and chart positions for text, and extracting visual features and structural information for non-text content such as images and tables. Then, based on the parsing results, the document is divided into multiple logical units with independent semantics. Each unit maintains complete meaning and visual coherence. Finally, a multi-dimensional feature vector covering text semantics, image vision, and table structure is extracted for each logical unit, providing basic data for subsequent encryption.

[0052] The dynamic encryption module generates dynamic encryption factors based on real-time user actions. Specifically, it collects data such as mouse movement trajectories, keyboard input time intervals, and interaction frequency of interface elements. This data is then converted into feature information to generate time-sensitive encryption factors. These factors are then used to independently encrypt each logical unit. During encryption, the appropriate method is matched according to the unit's content type to preserve the original structure. Simultaneously, a unit checksum is generated for each encrypted unit. Finally, the encrypted logical units, multi-dimensional feature vectors, and checksums are integrated into a structured encrypted file package to ensure file security.

[0053] The platform's sharing module is responsible for file publishing and sharing link generation. First, it publishes the structured encrypted file package to the sharing platform. Then, it generates a verifiable sharing link based on the user's set sharing policy. The sharing policy includes the scope of users allowed to participate in group buying, the sharing validity period, and other content. The link also embeds commission calculation rules and group buying trigger conditions to ensure that only users who meet the policy can access it, while providing a basis for subsequent processes.

[0054] The group-buying verification module processes group-buying applications, receiving applications submitted by users via links. The applications include user identity information and printing preference settings. The module verifies the matching degree between the applicant's permissions and sharing policies, including checking whether the user type meets the requirements and whether the application time is within the validity period. Once the matching is qualified, the application is added to the group-buying collection, and the group-buying participation status is updated in real time.

[0055] The commission monitoring module tracks the group purchase progress, which is reflected by indicators such as the number of participants and the total number of printed copies. When the progress meets the group purchase trigger conditions, the module automatically executes the commission calculation process. Based on the preset commission rules, combined with the actual printing scale and user contribution, it generates a clear distribution plan for the commission amount of each party.

[0056] The unified printing module integrates printing needs, collects the printing preferences of all users in the group purchase, and generates a unified printing task after coordination and fusion: in terms of media specifications, it prioritizes reasonable and common needs; in terms of output standards, it determines the resolution and color accuracy based on user requirements; and in terms of post-processing requirements, it reaches a consensus based on technical feasibility and the needs of most users. Finally, the task containing coordination parameters is sent to the printing equipment cluster to ensure output quality.

[0057] In a preferred embodiment of the present invention, the specific process of semantic structure parsing of the document to be printed in the semantic parsing module is as follows:

[0058] First, deep analysis of the text content in the document is conducted using natural language processing (NLP) techniques, with the core objective of clarifying the semantic boundaries of the text. Specifically, syntactic analysis breaks down the grammatical structure of sentences, identifying the logical relationships between components such as subject, verb, and object. Semantic role labeling further determines the semantic function of each word, such as distinguishing between the subject, object, or modifier of an action. Based on these two technologies, chapter titles can be accurately identified, specifically by capturing text features with hierarchical markers, such as "1. Overview" and "2.1 Technical Principles," as well as the semantic distinction between titles and body text. Simultaneously, paragraph segmentation is accurately determined, using a combination of line breaks, punctuation marks, and semantic pauses to avoid splitting semantically coherent content into different paragraphs. Furthermore, the location of charts and graphs can be pinpointed by recognizing text markers such as "As shown in Figure X" and "Data Explanation in Table X," establishing a connection between charts and their corresponding explanatory text.

[0059] Next, for the non-text content in the file, a multimodal feature extraction process is initiated. For image content, a convolutional neural network is used for processing. This network starts from the pixel layer of the image and extracts features such as edges, textures, and shapes layer by layer, ultimately focusing on and identifying the main subject area in the image, such as data curves in charts or core components in diagrams, ensuring that subsequent processing can accurately lock onto key information in the image. For table content, a specialized table recognition algorithm is used to first detect the outline of the table or cell boundaries, then distinguish between the table header and data rows, and further extract the correspondence between each row and column to clarify the row and column structure information of the table, laying the foundation for subsequent integration of table features.

[0060] Finally, based on semantic relevance and spatial layout features, text, images, tables, and other content are aggregated into logical units. Semantic relevance is determined by the content theme; for example, paragraphs, corresponding explanatory images, and data tables related to the same technical point are grouped together. Spatial layout features refer to the positional relationships of content within the file, ensuring that adjacent and related content is included in the same unit. Each resulting logical unit maintains complete semantic information while exhibiting visual coherence. Building upon this, a digital fingerprint is generated for each logical unit. This fingerprint is based on a content hash and a feature vector. The content hash provides a unique identifier for the unit's overall content, while the feature vector extracts the unit's key attributes. The combination of these two elements allows the digital fingerprint to comprehensively encompass the semantic features of text, the visual features of images, and the structural features of tables. This digital fingerprint not only serves as a crucial basis for generating subsequent dynamic encryption factors but also verifies the integrity of the file content. During decryption, comparing the fingerprint confirms that the logical unit has not been tampered with, ensuring the authenticity of the content.

[0061] In another preferred embodiment of the present invention, the specific process of generating dynamic encryption factors in the dynamic encryption module based on the user's real-time operation behavior is as follows:

[0062] The system collects real-time user action data during the current session. This data encompasses three core types of information: mouse movement trajectory coordinate sequences, which record the continuous set of coordinate points formed on the screen when the user operates the mouse, such as the coordinate changes corresponding to the movement path from the "File Upload" button to the "Preview" button; keyboard input time interval distribution, which calculates the time difference between each key press, such as the difference in interval between "Print" and "Print," or "Print" and "Parameters" when entering the word "Print Parameters"; and interface element interaction frequency statistics, which calculates the number and frequency of user actions such as clicking buttons, drop-down menus, and selecting options within a specific time period, such as the number of times the "Adjust Format" button is clicked within one minute, or the frequency of opening the "Paper Size" drop-down menu. After collection, this scattered action data is converted into a temporal feature vector. Using time as the axis, different types of action data are organized into vector form according to the order of occurrence, with the action information of each time segment corresponding to one dimension of the vector. Simultaneously, temporal coding technology is used to align the occurrence nodes of different operations through timestamps, preserving the temporal dynamic characteristics of the operation behavior, such as the order of moving the mouse and then entering the keyboard, and the interval between two click operations. This avoids the loss of key temporal dimension information in static data and ensures that the temporal feature vector can truly reflect the uniqueness of the user's operation.

[0063] Subsequently, the temporal feature vector and the digital fingerprint of the logical unit are fused using a multimodal method. The temporal feature vector represents the dynamic characteristics of user operations, while the digital fingerprint represents the content characteristics of the logical unit. These two types of information belong to different modalities, and the fusion process requires a collaborative feature weighting mechanism based on attention weights. Specifically, the content sensitivity of each logical unit is first analyzed. For example, table units containing core business data and text paragraphs involving privacy information have high content sensitivity; ordinary explanatory text and unimportant decorative images have low content sensitivity. The fusion weights are dynamically adjusted based on the sensitivity results: for highly sensitive logical units, the weight of the digital fingerprint in the fusion calculation is increased, making the encryption factor more aligned with content security requirements and reducing the risk of content leakage; for low-sensitivity logical units, the weight of the temporal feature vector is appropriately increased, allowing the encryption factor to better reflect the uniqueness of user operations and reducing unnecessary computational resource consumption. Through this weighting mechanism, the fusion result can both correlate with user operation behavior and match the content security level of the logical unit, laying the foundation for subsequent generation of encryption factors.

[0064] Finally, dynamic encryption factors with time-sensitive validity are generated based on the fusion calculation results. Each logical unit corresponds to a unique encryption factor instance. Even if the same user operates on the same file, the encryption factors generated by different logical units are completely independent, preventing the leakage of one encryption factor from affecting the security of all units. Simultaneously, a lifecycle parameter is set for the dynamic encryption factor, with a preset validity period, such as 30 minutes or 1 hour. After this period, the original encryption factor automatically expires. If the encrypted logical unit needs to be used again, real-time user operation data must be collected again, multimodal fusion calculation must be performed again, a new encryption factor must be generated, and verification must be completed. This time-sensitive control further reduces the risk of encryption factors being stolen and misused, improving the dynamic security of the encryption mechanism.

[0065] In a preferred embodiment, the specific process of independently encrypting each logical unit using dynamic encryption factors and generating a unit checksum in the dynamic encryption module is as follows:

[0066] First, the encryption algorithm is adaptively selected based on the content type and sensitivity of the logical unit, achieving "one type of content, one suitable algorithm". For text content, a format-preserving encryption algorithm is used. This type of algorithm only encrypts the core information of the text (such as character encoding and key data) during the encryption process, without changing the original format attributes of the text, such as font, font size, line spacing, paragraph alignment, etc., ensuring that the decrypted text can be directly viewed, edited, or printed without readjusting the format. For image content, a visual security encryption algorithm is used. After encryption, the visual effect of the image remains basically unchanged, and users can still clearly identify the main elements in the image, such as the curve trend in the chart and the component structure in the diagram. However, any tampering with the image pixels or content will be detected by subsequent verification, which does not affect normal viewing and prevents the image from being maliciously modified. For tabular data, a structure-preserving encryption algorithm is used. The row and column structure of the table is the core of data association. This type of algorithm ensures that the number of rows, columns, and the correspondence between cells in the table do not change after encryption. Only the specific data within the cell is encrypted, avoiding data reading errors due to structural confusion, while ensuring the security of the data content.

[0067] Next, using a dynamic encryption factor as the input key, a key stream required for actual encryption is generated through a key expansion algorithm. The dynamic encryption factor, as the initial key, is typically too short to meet the requirement of block-by-block encryption of logical units. The key expansion algorithm expands the initial key into a longer key stream according to preset rules. The length of the key stream matches the size of the logical unit, ensuring that each data block receives the corresponding encryption key. Then, a stream encryption mode is used to encrypt the logical units block by block: first, the logical units are naturally divided into blocks according to semantic structure and visual layout, such as text units by paragraphs, image units by thematic regions, and table units by rows or columns; then, each data block is encrypted sequentially using the corresponding segments from the key stream. For example, the first data block uses the first N bits of the key stream, the second data block uses the next N bits, and so on, until all data blocks are encrypted. The entire encryption process strictly follows the original structure of the logical unit, ensuring the semantic structure of the encrypted logical unit remains intact. For example, paragraphs are not fragmented, and the row and column relationships in tables are not interrupted; the visual layout also remains consistent with the original document, so no readjustment is needed after decryption, directly meeting viewing or printing requirements.

[0068] Finally, a unit checksum based on a hash tree is generated for each encrypted logical unit. The hash tree is a tree structure composed of multiple hash values. The hash value of each data block serves as a leaf node, while non-leaf nodes are calculated by combining the hash values ​​of all their subordinate leaf nodes. This structure ensures that any tampering with a data block will cause a change in its corresponding hash value, thus affecting the root node value of the entire hash tree. When calculating the unit checksum, the encrypted logical unit content, the corresponding dynamic encryption factor, and key parameters required for decryption (such as the algorithm identifier, key length, and data block division rules) are all included in the hash calculation, ensuring that this core information related to encryption and decryption is verified for integrity. After calculation, the unit checksum is stored in the header area of ​​the encrypted file package for quick retrieval during subsequent decryption operations. During decryption, the system recalculates the hash values ​​of the current encrypted content, encryption factor, and decryption parameters, and compares them with the stored unit checksum. If they match, the content has not been tampered with and the source is authentic and reliable, allowing normal decryption. If they do not match, the content is deemed abnormal, and the decryption process is immediately terminated to ensure file security.

[0069] In another preferred embodiment, the key expansion algorithm specifically includes:

[0070] A dynamic encryption factor is used as the initial seed input to the chaotic mapping system. The chaotic mapping system is a dynamic system with nonlinear characteristics, extremely sensitive to initial conditions. Even slight differences in the initial seed can generate completely different sequences after multiple iterations. After inputting the initial seed, the chaotic mapping system iterates multiple times according to preset iteration rules, gradually generating complex chaotic sequences. During this process, the control parameters of the chaotic mapping system are dynamically adjusted based on the content feature vector of the logical unit: for example, if the dimension value reflecting data sensitivity in the content feature vector is high, the complexity of the control parameters is increased, making the generated chaotic sequence fluctuate more violently and have stronger randomness; if the content feature vector shows that the logical unit is ordinary content, the complexity of the control parameters is appropriately reduced, reducing computational resource consumption while ensuring security. Through this parameter adjustment, the generated chaotic sequence is deeply correlated with the content features of the logical unit, ensuring that logical units with different content correspond to chaotic sequences with different characteristics, laying the foundation for the uniqueness of the subsequent key stream.

[0071] The chaotic sequence undergoes quantization. Since a chaotic sequence is a continuous numerical sequence, while encryption algorithms require discrete byte sequences (typically ranging from 0 to 255), quantization converts the continuous values ​​into discrete bytes that meet the algorithm's requirements. The quantization process first establishes a correspondence between numerical ranges and bytes, for example, dividing the continuous values ​​of 0-1 into 256 equally spaced intervals, each interval corresponding to a byte value. Then, each value in the chaotic sequence is assigned to its corresponding interval, generating the corresponding byte, ultimately forming a complete keystream byte sequence. Simultaneously, a feedback mechanism is introduced during keystream generation: the encryption state of the previous logical unit is used as the initial condition for the chaotic mapping system of the next logical unit. This "encryption state" includes the end of the keystream of the previous logical unit, intermediate calculation results during the encryption process, and a digest of the content feature vector of that logical unit. Through this feedback mechanism, the generation of the chaotic sequence of the next logical unit depends on the encryption process of the previous logical unit, thereby establishing an encryption correlation between logical units and preventing security vulnerabilities caused by independent and uncorrelated keystreams of multiple logical units.

[0072] The final generated keystream possesses two core characteristics: First, content-related randomness. Because the keystream generation process incorporates the content feature vectors of logical units, the keystreams corresponding to logical units with different content exhibit significant differences in random patterns and fluctuation characteristics. This satisfies the encryption algorithm's requirement for key randomness while further enhancing the uniqueness of the keystream through content association, preventing fixed keystream patterns and making it difficult for attackers to crack. Second, unpredictable correlations exist between the keystreams of adjacent logical units. Although a correlation is established through a feedback mechanism, due to the sensitivity of the chaotic mapping system to initial conditions, even if an attacker obtains the keystream of the previous logical unit, they cannot deduce or predict the keystream of the next logical unit through reverse engineering. Even minor changes in the encryption state of the previous logical unit are amplified after iteration by the chaotic mapping system, resulting in unpredictable keystream characteristics in the next logical unit. This "correlated and unpredictable" characteristic further enhances the security of the keystream, effectively preventing attackers from analyzing adjacent keystreams to obtain patterns and thus crack the encrypted content.

[0073] In another preferred embodiment of the present invention, the specific process of generating a verifiable sharing link according to the user-set sharing strategy in the platform sharing module is as follows:

[0074] The metadata area of ​​the structured encrypted file package is parsed to extract three key types of information. The file identifier is a unique identifier assigned to the encrypted file package by the platform, consisting of a string of characters. It is used to accurately locate the corresponding file package in the platform database, avoiding confusion with other files. The creation timestamp records the specific time the structured encrypted file package was generated, including year, month, day, hour, minute, and second. The timestamp can be used to help determine the validity and freshness of the file package later. The content summary information is the result of feature extraction from the overall content of the encrypted file package. It briefly reflects the core content characteristics of the file package and is used to quickly verify whether the file package matches the sharing target, preventing the file package from being replaced during sharing. These three types of information together constitute the basic data for link generation, ensuring that subsequent steps can accurately associate the target file with the sharing rules.

[0075] Next, a multi-level access control policy is generated based on the user's sharing strategy. Users can set sharing strategies according to their actual needs, such as allowing only internal colleagues to participate in group buying, restricting access to users in specific cities, and setting the link to be valid for 7 days. The platform's sharing module will translate these strategies into specific multi-level access control rules. Specifically, the allowed user identity types for group buying will clearly define the scope of legitimate users, which could be individual users registered on the platform, employees of specific companies, or contacts manually added by the user; geographical restrictions will define the user's geographical location range, which could be a province, city, country, or region, and only users within this range can subsequently submit group buying applications through the link; the validity period will set a specific time range, calculated from the moment the link is generated. After this period, the link will automatically expire and can no longer be used to apply for group buying. The generation of multi-level access control policies strictly limits the usage permissions of the shared link, avoiding security risks caused by irrelevant users or expired use.

[0076] The file identifier, multi-level access control policies, and rebate calculation rules are then serialized into a policy description data block. The serialization process integrates these three types of scattered information into a unified data block according to a preset format, ensuring a clear information structure and facilitating transmission and decryption. Next, an asymmetric encryption algorithm is used to encrypt the policy description data block. Asymmetric encryption algorithms have a pair of keys, one for encryption and one for decryption; here, the public key is used to encrypt the data block. Only the platform system or verification module holding the corresponding private key can decrypt it, effectively preventing the data block from being stolen or tampered with during transmission. After encryption, a digital signature is added to the data block. The digital signature is generated by the user's or platform's exclusive key and proves the authenticity of the data block's origin. Subsequent verification can confirm that the data block has not been forged by verifying the signature, ultimately forming a security policy token with a digital signature.

[0077] Finally, the security policy token is combined with the platform service base address to generate the original sharing link. The platform service base address is the platform's basic access address, used to guide users to the group-buying application page. Attaching the security policy token to the base address creates the original link that associates files with access rules. To further enhance security, a timestamp verification parameter and a random number challenge value are added to the original sharing link. The timestamp verification parameter is bound to the link generation time; subsequent verification checks if the current time and the time in the parameter are within the validity period, preventing expired links from being reused. The random number challenge value is a randomly generated string of characters that is different each time a link is generated. Even if an attacker obtains the parameters of an old link, they cannot forge a new link by reusing the parameters, effectively preventing replay attacks. After adding the parameters, the complete link undergoes URL security encoding, converting special characters in the link into a format that conforms to network transmission standards, avoiding link failures due to character incompatibility. Finally, a verifiable sharing link that is accessible, secure, and controllable is generated.

[0078] In another preferred embodiment of the present invention, the specific process of verifying the matching degree between the applicant's permissions and the sharing strategy in the group-buying verification module is as follows:

[0079] The security policy token in the verifiable shareable link is parsed, and the corresponding private key is used to decrypt it to obtain the original policy description data block. The group-buying verification module first extracts the security policy token from the user-submitted shareable link, and then calls the corresponding private key stored on the platform to decrypt the token. Since it was previously encrypted with a public key, only this private key can successfully decrypt it, ensuring that the decrypted policy description data block is original and undisturbed. The original data block obtained after decryption contains the file identifier, multi-level access control policies, and rebate calculation rules. The module will extract the multi-level access control policies from it as the basis for subsequent permission verification.

[0080] Next, multi-dimensional permission verification is performed. First, it verifies whether the applicant's digital identity credentials meet the user identity type requirements in the multi-level access control policy. When submitting a group-buying application, the applicant must provide digital identity credentials, which may include platform account information, enterprise employee ID authentication results, mobile phone verification information, etc. The module compares these credentials with the identity type defined in the access control policy. For example, if the policy requires "only enterprise employees to participate," it will check whether the applicant has enterprise authentication information; if not, the application will be rejected directly. Then, it checks whether the application initiation time is within the validity period specified in the policy. The module obtains the current time and compares it with the time validity period in the access control policy. If the current time has exceeded the validity period, the applicant will be notified that the link has expired and the application cannot continue. Simultaneously, it checks whether the applicant's geographical location complies with regional restrictions. The module may determine the applicant's geographical location through the applicant's IP address, device location information, etc. If it is not within the policy-allowed area, the application will also be rejected. Only when all three verifications pass is the applicant's permission considered to be initially matched with the sharing policy.

[0081] After successful verification, the module extracts the encrypted content blocks of the specified logical units from the structured encrypted file package as needed. Applicants may only need to view a portion of the file to confirm printing requirements. Based on the applicant's viewing request, the module extracts the relevant encrypted content blocks of the logical units from the corresponding structured encrypted file package, rather than the entire file package, reducing data transmission volume and security risks. Then, the module regenerates dynamic encryption factors using the action data provided by the applicant. When submitting the application, the applicant simultaneously performs actions such as clicking the application button or filling in preference settings. The module collects this action data, regenerates the dynamic encryption factors according to the dynamic encryption module's generation rules, and then uses these factors to decrypt and verify the extracted encrypted logical units. If decryption is successful and the decrypted content matches the file digest, it indicates that the applicant's actions were legitimate and the content has not been tampered with, completing the final content verification. If decryption fails or the content is inconsistent, the application is deemed abnormal, and the subsequent process is terminated.

[0082] Finally, the module records the applicant's printing preference settings, including specific parameters such as the number of copies, color mode, and single / double-sided printing. The number of copies refers to the number of documents the applicant needs to print. The color mode may be color or black and white printing, and single / double-sided printing is divided into single-sided and double-sided printing. The module records these parameters in detail as a basis for subsequent integration and unified printing tasks. Simultaneously, the applicant's printing needs are added to the group-buying pool. The group-buying pool aggregates the printing needs of all legitimate applicants, and the module updates the current printing scale statistics in the pool in real time, such as the total number of copies collected and the number of participating users. It also calculates the remaining demand. Based on the group-buying trigger condition, such as "group-buying is triggered when the total number of copies printed reaches 50," the module subtracts the current total number of copies from the value corresponding to the trigger condition to determine how many more copies are needed to meet the group-buying conditions, ensuring that the group-buying progress is clear and controllable.

[0083] In another preferred embodiment of the present invention, the specific process of the commission calculation in the commission monitoring module is as follows:

[0084] First, we analyze the tiered calculation parameters defined in the commission calculation rules. These two types of parameters are the foundation for determining the commission amount and distribution ratio. The calculation coefficient for each scale interval corresponds to the base commission ratio under different printing scales. For example, the scale interval is divided according to the total number of prints, and different intervals will be matched with different calculation coefficients. The larger the printing scale, the higher the corresponding calculation coefficient is usually, thus incentivizing more users to participate in group buying and expand the scale. The distribution ratio weight is used to define the benchmark for the commission sharing of different participating roles. For example, a basic distribution ratio weight is set for file uploaders and ordinary participants. This will be adjusted later based on actual contributions to ensure that the weight reflects the core value of different roles. During the analysis process, the interval division standards, corresponding calculation coefficient values, and basic distribution ratio weights of each role within the rules will be extracted one by one and organized into a structured parameter table to provide a clear basis for subsequent calculations.

[0085] Next, a multi-segment linear interpolation method is used to determine the total rebate amount based on the actual total print volume. The actual total print volume is the sum of the number of copies printed by all participants in the group purchase. When the total volume falls between two adjacent tiered intervals, the multi-segment linear interpolation method smoothly transitions the rebate ratio corresponding to that total volume through the calculation coefficients of the two intervals, avoiding significant fluctuations in the rebate amount due to interval jumps. The calculation process also incorporates a printing complexity coefficient and a resource consumption factor to further optimize the accuracy of the total rebate amount. The printing complexity coefficient is determined based on the processing difficulty of the document content. For example, documents containing numerous charts, complex layouts, or multi-page tables are more difficult to process, and the corresponding complexity coefficient will increase accordingly. The resource consumption factor is determined based on the resource costs consumed during printing. For example, using high-specification paper, color ink, or requiring special consumables will increase the resource consumption factor. These two factors are combined with the base rebate amount obtained through interpolation calculation to ultimately determine the total rebate amount that aligns with the actual cost and difficulty.

[0086] Following this, a commission distribution plan is formulated, which comprehensively considers the initial contribution of the file uploader and the printing scale contribution of other participants. The initial contribution of the file uploader is reflected in initiating group purchases, providing documents to be printed, and setting reasonable sharing strategies, which are the core foundation for the group purchase to be established. Therefore, a certain percentage will be allocated to this contribution. The printing scale contribution of other participants is determined based on the number of copies they print. The more copies printed, the greater the contribution to the total scale, and the higher the corresponding allocation percentage. After combining both factors, a structured commission execution instruction is generated. The instruction contains the identity authentication information of each beneficiary. This information is usually the beneficiary's unique account identifier on the platform and the verification information of the linked payment account, ensuring that funds are accurately distributed to the corresponding account. It also contains the precise commission amount, which is derived from the total commission amount according to the distribution plan, accurate to the smallest monetary unit. Furthermore, it contains the specified settlement method code. Different codes correspond to different fund settlement methods. For example, code "01" represents platform balance settlement, code "02" represents bank card transfer, and code "03" represents third-party payment account transfer, etc. Finally, the rebate execution instruction is sent to the payment processing system through a secure channel. The secure channel uses encrypted transmission to prevent the instruction from being stolen or tampered with during transmission. After receiving the instruction, the payment processing system will automatically perform the fund allocation operation according to the instruction content and distribute the rebate amount to the designated account of each beneficiary.

[0087] In another preferred embodiment of the present invention, the specific process of generating a unified printing task in the unified printing module is as follows:

[0088] The data aggregates the printing preference settings of all participants in the group-buying platform. This data covers three core categories: media specifications, including paper size, paper material, and paper thickness; output standard parameters, including print resolution, color mode, and print precision; and post-processing requirements, including binding method, cutting specifications, and lamination type. After aggregation, consistency analysis and conflict detection are performed on all settings. The preferences of all participants are compared one by one to identify discrepancies. For example, some participants may choose A4 paper, while others may choose A3 paper; some may require color printing, while others may require black and white printing. These differences represent preference conflicts that need to be addressed.

[0089] Differentiated coordination strategies are adopted to address different types of parameter conflicts. For media specifications, the first step is to check for special media type requirements. Special media types typically refer to non-standard paper types, such as coated paper, kraft paper, and self-adhesive paper. These media have specific usage scenarios, and if such requirements exist, they will be prioritized. Then, the highest media specification requirement is determined based on this. For example, if both standard A4 paper and A4 coated paper are required, A4 coated paper will be prioritized. If no special media requirements exist, paper size, thickness, and other parameters are compared, and the highest specification setting is retained to ensure that the printing media meets the basic needs of all participants. For output standard parameters, the quality level distribution of each requirement is analyzed, and the number of participants selecting different quality parameters and the intensity of their requirements are statistically analyzed. Then, the union of the quality parameters is used as the final output standard. For example, if some participants require a print resolution of 300 DPI and others require 600 DPI, the final output standard is determined to be 600 DPI; if some participants require color printing and others require black and white printing, the final output standard is determined to be color printing, ensuring that the final print quality covers the upper limit of all participants' requirements. For post-processing requirements, the technical compatibility between requirements is first assessed. For example, perfect binding and saddle stitching cannot be performed simultaneously, and lamination may conflict with certain cutting methods. After eliminating combinations with compatibility issues, the final solution is determined through a demand voting mechanism. All participants vote on the remaining feasible post-processing options, and the option with the most votes becomes the final post-processing requirement, taking into account the needs of most participants and the feasibility of the process.

[0090] Finally, the number of copies printed by all participants is tallied, and the total number of copies printed by each participant is added together to obtain the total print quantity. Then, based on the total print quantity and the determined media specifications, the total amount of resources required is calculated, such as the total amount of paper and the estimated ink or toner consumption. The decrypted file content, the consistent set of printing parameters, and the total print quantity information are integrated to form a unified print job description file. The unified print job is encapsulated using an industry-standard job description language. This language is universal and standardized, and can be recognized by clusters of printing devices of different brands and models, ensuring that the printing devices can accurately interpret the various parameters in the job and complete the printing operation according to the unified standard, avoiding print quality deviations caused by differences in parameter interpretation.

[0091] The foregoing has provided a detailed description of one embodiment of the present invention, but this description is merely a preferred embodiment and should not be construed as limiting the scope of the invention. All equivalent variations and modifications made within the scope of the claims of this invention should still fall within the patent coverage of this invention.

Claims

1. A tamper-proofing encryption-based file sharing and commission group printing system, characterized in that, The method comprises the following steps: A semantic analysis module is used to perform semantic structure analysis on a file to be printed, and the file is divided into multiple logical units with independent semantics according to the analysis result, and a digital fingerprint based on a content hash and a feature vector is generated for each logical unit; A dynamic encryption module is used to generate a dynamic encryption factor in combination with real-time operation behavior of a user, and each logical unit is independently encrypted using the dynamic encryption factor and a unit check code is generated, and all encrypted logical units, feature vectors and check codes are combined into a structured encrypted file package; A platform sharing module is used to publish the structured encrypted file package to a sharing platform, and a verifiable sharing link is generated according to a sharing strategy set by the user, and the link embeds a commission calculation rule and a group purchase triggering condition; A group purchase verification module is used to receive a group purchase application submitted by another user through the verifiable sharing link, and the application contains the identity information and printing preference settings of the applicant, and the matching degree of the applicant's authority and the sharing strategy is verified, and the application is added to a group purchase set when the matching degree meets the requirements; A commission monitoring module is used to monitor the cumulative progress of printing demand in the group purchase set, and when the cumulative progress meets the group purchase triggering condition, a commission calculation process is automatically executed, and a commission distribution scheme is generated according to the commission calculation rule and the actual printing scale; A unified printing module is used to generate a unified printing task according to all printing preference settings in the group purchase set, and the unified printing task contains a coordinated printing parameter set, and the printing parameter set contains medium specifications, output standards and post-processing requirements, and the unified printing task is sent to a printing device cluster; In the dynamic encryption module, the specific process of generating a dynamic encryption factor in combination with real-time operation behavior of a user is as follows: Real-time operation behavior data of the user in the current session is collected, including mouse movement trajectory coordinate sequences, keyboard input time interval distribution and interface element interaction frequency statistics, the operation behavior data is converted into a time sequence feature vector, and time sequence encoding technology is used to retain the time dynamic characteristics of the operation behavior; The time sequence feature vector and the digital fingerprint of the logical unit are subjected to multi-modal fusion calculation, and a feature weighting mechanism based on attention weight is used in the fusion process, and the fusion weight is dynamically adjusted according to the content sensitivity of different logical units; A dynamic encryption factor with timeliness is generated according to the fusion calculation result, and each logical unit corresponds to a unique encryption factor instance, and the dynamic encryption factor is provided with a life cycle parameter, and automatically expires after a preset valid time period, and is re-generated for verification; In the dynamic encryption module, the specific process of independently encrypting each logical unit using the dynamic encryption factor and generating a unit check code is as follows: An encryption algorithm is adaptively selected according to the content type and sensitivity of the logical unit, a format-preserving encryption algorithm is used for text content, a visual security encryption algorithm is used for image content, and a structure-preserving encryption algorithm is used for table data; The dynamic encryption factor is used as an input key, a key stream required for actual encryption is generated through a key expansion algorithm, and a stream encryption mode is used for block-by-block encryption processing of the logical unit, and the semantic structure and visual layout integrity of the logical unit are maintained during the encryption process. A hash tree-based unit check code is generated for each encrypted logical unit, the unit check code is calculated by taking the encrypted content, the encryption factor and the decryption parameter into account, and the unit check code is stored in the header of the encrypted file package as content integrity and authenticity verification during subsequent decryption.

2. The tamper-evident encryption-based file sharing, referral, and group printing system of claim 1, wherein, The specific process of the semantic analysis module for semantic structure analysis of the to-be-printed file is as follows: The semantic boundaries of the text content are analyzed by using the natural language processing technology, the chapter title, paragraph separation and chart position are identified based on the syntax analysis and semantic role labeling, the multi-modal feature extraction is performed on the non-text content, the theme area in the image is identified by using the convolutional neural network, and the row and column structure information in the table is extracted by using the table identification algorithm; The content is aggregated into logical units according to the semantic correlation and spatial layout features, each logical unit maintains complete semantic information and visual coherence, the digital fingerprint of the logical unit integrates the semantic features of the text, the visual features of the image and the structural features of the table, the digital fingerprint is used as the encryption factor generation and content integrity verification, and is used as the verification basis during decryption.

3. The tamper-evident encryption-based file sharing and commission group printing system according to claim 1, wherein, The key expansion algorithm specifically includes: The dynamic encryption factor is input into the chaotic mapping system as an initial seed, a chaotic sequence is generated through multiple iterations, the control parameters of the chaotic system are dynamically adjusted according to the content feature vector of the logical unit, so that the generated key stream is associated with the content features; The chaotic sequence is quantized to convert it into a key stream byte sequence that meets the requirements of the encryption algorithm, a feedback mechanism is introduced in the key stream generation process, the encryption state of the previous logical unit is used as the initial condition of the chaotic system of the next logical unit, and the encryption correlation between the logical units is established; The finally generated key stream has content-related random characteristics, and the key streams of adjacent logical units have unpredictable correlation.

4. The tamper-evident, file-sharing, commission-bonus, group-buying, printing system based on encryption according to claim 1, characterized in that, In the platform sharing module, the specific process of generating a verifiable sharing link according to the sharing strategy set by the user is as follows: The metadata area of the structured encrypted file package is parsed to extract the file identifier, the creation timestamp and the content digest information; a multi-level access control strategy is generated according to the sharing strategy set by the user, and the access control strategy specifies in detail the user identity type allowed to participate in the group purchase, the geographical area restriction and the time validity period; The file identifier, the multi-level access control strategy and the commission calculation rule are serialized into a strategy description data block, the strategy description data block is encrypted by using an asymmetric encryption algorithm to generate a secure strategy token with a digital signature; The secure strategy token and the platform service base address are combined to generate an original sharing link, a timestamp verification parameter and a random challenge value are added to the original sharing link to prevent replay attacks, and the complete link is subjected to URL security encoding processing to generate a final verifiable sharing link.

5. The tamper-evident encryption-based file sharing and commission affiliate group printing system of claim 1, wherein, In the group verification module, the specific process of verifying the matching degree of the applicant's authority and the sharing strategy is as follows: The security policy token in the verifiable sharing link is parsed, the original policy description data block is obtained by decrypting with the corresponding private key, it is verified whether the applicant digital identity certificate meets the user identity type requirement in the multi-level access control policy, it is checked whether the application initiation time is within the validity period specified by the policy, and whether the geographic location of the applicant meets the regional restriction requirement; After verification, the encrypted content block of the specified logical unit is extracted from the structured encryption file package as needed, the dynamic encryption factor is regenerated using the operation behavior data provided by the applicant, and the encrypted logical unit is decrypted and verified; The printing preference setting details of the applicant are recorded, including the number of printed copies, color mode, single-sided or double-sided printing, the printing requirements are added to the group purchase set, and the current printing scale statistics and remaining demand quantity calculation in the set are updated in real time.

6. The tamper-evident encryption-based file sharing, referral, and group printing system of claim 1, wherein, The specific process of the return commission calculation flow in the return commission monitoring module is: The step-by-step calculation parameters defined in the return commission calculation rule are parsed, including the calculation coefficients and distribution proportion weights of each scale interval; the total return commission amount is determined by using a multi-section linear interpolation calculation method according to the actual total printing scale, and the printing complexity coefficient and resource consumption factor are introduced in the calculation process; A return commission distribution scheme is developed, which takes into account the initial contribution of the file uploader and the printing scale contribution value of other participants, generates a structured return commission execution instruction containing the identity authentication information of each beneficiary, the exact return commission amount value, and the specified settlement method code, sends the return commission execution instruction to the payment processing system through a secure channel, and triggers the fund distribution operation execution.

7. The tamper-evident encryption-based file sharing and commission affiliate group printing system of claim 1, wherein, In the unified printing module, the specific process of generating a unified printing task is: Aggregate all printing preference setting data in the group purchase set, and perform consistency analysis and conflict detection on each setting item; For medium specification parameters, detect special medium type requirements and prioritize the highest specification requirements; for output standard parameters, analyze the quality level distribution of each requirement, and use the union of quality parameters as the final output standard; for post-processing requirements, evaluate the technical compatibility between requirements, and determine the final post-processing scheme through a demand voting mechanism; Calculate the total printing quantity by counting all the printed copies, and calculate the total amount of resources required, combine the decrypted file content, the coordinated printing parameter set, and the total printing quantity information into a unified printing task description file, and encapsulate the unified printing task using an industry standard job description language.

Images