Webpage snapshot signature method and device

Abstract

The embodiment of the invention discloses a signature method and device for a webpage snapshot, and the method comprises the following steps: loading a target webpage in a uniformly configured headless browser environment, automatically detecting and removing dynamic contents in the target webpage according to a preset dynamic element recognition rule, and generating purified webpage document object model (DOM) data; in the webpage state after the de-dynamic processing, respectively collecting standardized webpage DOM data and a webpage rendering image snapshot; hash abstracts of the webpage DOM data and the webpage rendering image snapshot are calculated respectively, and two abstract values obtained through calculation are combined to generate a webpage snapshot signature; and storing the webpage DOM data, the webpage rendering image snapshot, the webpage snapshot signature and the corresponding metadata information in a secure storage medium together. According to the embodiment of the invention, the consistency and reproducibility of webpage snapshot contents can be improved, the tamper-proof capability of webpage evidence storage is enhanced, and the accuracy and robustness of tamper detection are improved.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of computers, and particularly relates to a signature method and device for a web snapshot. BACKGROUND

[0002] With the rapid development of the Internet and e-commerce, the importance of web content in commercial transactions, copyright protection, judicial evidence, etc. is increasingly prominent. Especially in the field of electronic evidence, through the web snapshot technology, the web content is forensically and evidentially stored, which becomes an important means to ensure the authenticity and effectiveness of network content and protect rights and interests.

[0003] However, modern web pages usually contain a large amount of dynamic content, such as ad pop-ups, timestamps, asynchronously loaded data, and user personalized displays, etc. These dynamic elements cause significant differences in the performance of web snapshots at different time points or in different environments, directly affecting the consistency and credibility of the snapshots. Traditional snapshot technology mostly uses single image screenshots or HTML source code hashes, which lack effective processing of dynamic content, leading to differences in snapshot data and affecting the legal effectiveness of the evidence storage results.

[0004] In addition, the generation of web snapshots also faces the problem of browser environment differences. Different operating systems, browser versions, font library configurations, and network conditions will affect the rendering effect of the web page, causing slight differences in the snapshots of the same web page in different environments, further increasing the variability and verification difficulty of the snapshots.

[0005] Therefore, how to improve the legal effectiveness and practical application value of web snapshots while ensuring the stability and tamper resistance of the snapshots has become a technical problem that needs to be solved in the current electronic evidence field.

[0006] Application Content

[0007] The purpose of the embodiments of the present application is to provide a signature method and device for a web snapshot to solve the defects of insufficient stability and tamper resistance in the prior art.

[0008] To solve the above technical problems, the present application is implemented as follows:

[0009] In a first aspect, a signature method for a web snapshot is provided, comprising the following steps:

[0010] Loading a target web page in a uniformly configured headless browser environment, automatically detecting and removing dynamic content in the target web page according to a preset dynamic element identification rule, and generating a purified web Document Object Model (DOM) data;

[0011] Collecting standardized web DOM data and web rendering image snapshots respectively under the state of the de-dynamic processing of the web page;

[0012] calculate hash digests of the webpage DOM data and the webpage rendered image snapshot respectively, and combine the two calculated digest values to generate a webpage snapshot signature;

[0013] store the webpage DOM data, the webpage rendered image snapshot, the webpage snapshot signature, and corresponding metadata information in a secure storage medium.

[0014] In a second aspect, a webpage snapshot signature device is provided, comprising:

[0015] a loading module configured to load a target webpage in a unified configuration headless browser environment, automatically detect and remove dynamic content in the target webpage according to a preset dynamic element identification rule, and generate purified webpage document object model (DOM) data;

[0016] a collection module configured to collect standardized webpage DOM data and webpage rendered image snapshot respectively under a webpage state after de-dynamic processing;

[0017] a calculation module configured to calculate hash digests of the webpage DOM data and the webpage rendered image snapshot respectively, and combine the two calculated digest values to generate a webpage snapshot signature;

[0018] a storage module configured to store the webpage DOM data, the webpage rendered image snapshot, the webpage snapshot signature, and corresponding metadata information in a secure storage medium.

[0019] The embodiments of the present application can improve the consistency and reproducibility of webpage snapshot content by removing dynamic content in the target webpage. The parallel hash signature mechanism of DOM structure and image snapshot can enhance the tamper-proofing capability of webpage evidence, and improve the accuracy and robustness of tamper detection. BRIEF DESCRIPTION OF DRAWINGS

[0020] Figure 1 is a webpage snapshot signature method flowchart provided by the embodiments of the present application;

[0021] Figure 2 is a structural schematic diagram of a webpage snapshot signature device provided by the embodiments of the present application. DETAILED DESCRIPTION

[0022] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative labor fall within the scope of the present application.

[0023] Currently, web snapshot and content verification techniques are mainly based on the following methods:

[0024] 1. Single image screenshot hash method

[0025] Automatically take a full-screen screenshot of the webpage through the browser, then perform a hash operation on the image data to generate a digest signature. This method is intuitive and simple, but it is highly susceptible to dynamic content and environmental differences, resulting in unstable snapshot hashes that are difficult to reproduce and verify.

[0026] 2. HTML source code hash method

[0027] Directly hash the HTML source code of the webpage to ensure the consistency of the content structure. However, dynamic scripts, asynchronous data, and personalized content result in significant differences in the source code, and the visual presentation state of the webpage cannot be reflected, limiting the security.

[0028] 3. De-dynamic technology

[0029] Filter or replace dynamic elements in the webpage through manual or rule-based methods to reduce the variability of the webpage snapshot content. However, existing techniques rely on empirical rules and lack systematic dynamic element identification and processing mechanisms, and do not have a unified standard process, limiting their effectiveness.

[0030] In web forensics, electronic evidence, and webpage monitoring scenarios, how to achieve stable, reliable, and verifiable snapshot generation and signature mechanisms for webpage content to address the following challenges:

[0031] 1. Dynamic nature of webpage content

[0032] Modern webpage content contains a large number of dynamic elements (such as advertisements, timestamps, animations, and asynchronous loading data), which can cause differences in snapshot results each time, making hash verification inconsistent and affecting legal effectiveness and verification reliability.

[0033] 2. Browser environment difference problem

[0034] Different operating systems, browser versions, font libraries, or network conditions can cause slight differences in webpage rendering, affecting snapshot consistency and comparability, and reducing evidence standardization levels.

[0035] 3. Lack of multi-dimensional signature mechanism in traditional snapshot verification methods

[0036] Most verification mechanisms are based on HTML text or image hash digests, which can be easily bypassed by tampering, lack parallel authentication means for webpage DOM structure and image content, and reduce security and tamper resistance.

[0037] 4. Lack of standardized snapshot reconstruction verification process

[0038] Once the web page content is questioned or needs judicial verification, the existing method is difficult to quickly and normatively restore the web page state according to the saved signature and snapshot data, which affects the legal effect of the evidence preservation result.

[0039] To meet the technical standards of electronic evidence and legal compliance, the embodiments of the present application improve the legal credibility and actual availability of web page electronic evidence preservation technology through a series of technical means: first, the de-dynamic processing rules are introduced to remove the variable elements such as advertisements, timestamps, random animations, etc. in the web page, so as to improve the consistency and reproducibility of the web page snapshot content, and ensure that the snapshot results of the same web page at different times and in different environments are highly consistent; secondly, the parallel hash signature mechanism of DOM structure and image snapshot is constructed, and the web page source code structure and visual display result are signed at the same time, forming a double verification path, enhancing the tamper-proofing ability of web page evidence preservation, and improving the accuracy and robustness of tamper detection; thirdly, a set of snapshot reconstruction and signature verification process is provided to realize the standardized snapshot reconstruction verification process, so that in the process of judicial evidence or content tracing, the web page state at that time can be accurately restored based on the saved snapshot data and signature information and legal verification can be completed; in addition, through the unified Puppeteer browser environment configuration and standardized rendering processing, the snapshot fluctuation caused by browser environment difference is resisted, and the influence of environmental factors such as operating system, font, network fluctuation on the consistency of web page snapshot is reduced.

[0040] The signature method of the web page snapshot provided by the embodiments of the present application will be described in detail below in combination with the drawings, specific embodiments and application scenarios.

[0041] As shown in the figure, the signature method of the web page snapshot provided by the embodiments of the present application is a flow chart, and the method comprises the following steps: Figure 1

[0042] Step 101, loading the target web page in the unified configuration of the headless browser environment, automatically detecting and removing the dynamic content in the target web page according to the preset dynamic element recognition rule, and generating the purified web document object model (DOM) data.

[0043] Among them, the dynamic element recognition rule includes the matching rule for the advertisement area, the timestamp node, the animation effect and the random number generation script, and performs the content shielding, replacing or removing operation when the corresponding element is detected.

[0044] Step 102, collecting standardized web page DOM data and web page rendering image snapshot under the de-dynamic processed web page state.

[0045] ​In this embodiment, before collecting the webpage rendering image snapshot, the webpage rendering image can also be preprocessed by color standardization, size unification and irrelevant area cropping, so as to reduce the influence of different browser environments on the consistency of the snapshot.

[0046] In step 103, the hash digest of the webpage DOM data and the hash digest of the webpage rendering image snapshot are calculated respectively, and the two digest values obtained by calculation are combined to generate a webpage snapshot signature.

[0047] In the embodiment, the hash digest of the webpage DOM data is generated by using an SHA-256 algorithm, and the hash digest of the webpage rendering image snapshot is generated by using a perceptual hashing algorithm.

[0048] In step 104, the webpage DOM data, the webpage rendering image snapshot, the webpage snapshot signature and the corresponding metadata information are stored in a secure storage medium.

[0049] In the embodiment, after the webpage DOM data, the webpage rendering image snapshot, the webpage snapshot signature and the corresponding metadata information are stored in the secure storage medium, the webpage state can also be reproduced by using a headless browser based on the stored webpage DOM data and webpage rendering image snapshot in the verification stage, and the hash digest is recalculated and compared with the webpage snapshot signature, so as to determine whether the webpage content is tampered.

[0050] The embodiment of the application can improve the consistency and reproducibility of the webpage snapshot content by eliminating the dynamic content in the target webpage; and can enhance the anti-tampering ability of the webpage evidence and improve the accuracy and robustness of tampering detection by constructing a parallel hash signature mechanism of the DOM structure and the image snapshot.

[0051] In the embodiment of the application, a snapshot signature method for webpage content anti-tampering verification based on Puppeteer is proposed, which realizes the consistency, stability and security of the webpage snapshot by a systematic technical solution. The overall technical solution includes the following key links:

[0052] 1. Webpage de-dynamic processing

[0053] By using a predefined dynamic content rule set, dynamic elements (such as advertisement modules, time stamps, animation effects, etc.) in the webpage are automatically identified and eliminated, so as to reduce the fluctuation of the webpage snapshot content and ensure the high consistency of the snapshot.

[0054] 2. Dual-channel snapshot collection

[0055] The Puppeteer headless browser is used to automatically load the webpage, and the DOM structure data and the corresponding page rendering screenshot (image snapshot) after dynamic processing are collected respectively to ensure that the structure layer and the visual layer of the content are recorded completely.

[0056] 3. Parallel hash signature mechanism

[0057] The webpage DOM data and the image snapshot are standardized and hashed respectively to generate two digest values, and the two digests are combined to calculate the final signature to form a multi-dimensional webpage snapshot authentication identifier, enhancing the tamper-proofing capability.

[0058] 4. Snapshot storage and management

[0059] The generated webpage DOM data, image snapshot and corresponding dual-channel signature are stored uniformly to form a queryable and traceable electronic evidence data package, facilitating subsequent verification and legal review.

[0060] 5. Snapshot reconstruction and verification process

[0061] A standardized reconstruction process is designed for the stored snapshot and signature, and Puppeteer is used to restore the webpage state at that time, recalculate and compare the signature to complete the webpage content tamper-proofing verification, ensuring the legality and effectiveness of the electronic evidence.

[0062] 6. Environment difference standardization processing

[0063] By standardizing the Puppeteer browser running environment configuration (including browser version, font library and network conditions, etc.) and the rendering process, the inconsistency of snapshots caused by environmental differences is reduced, and the cross-platform stability of the snapshots is improved.

[0064] The embodiments of the present application take into account the dynamic nature of webpage content, environmental complexity and legal evidence requirements, forming a systematic, standardized and highly secure webpage snapshot signature verification technology, which greatly improves the credibility and scope of application of webpage content electronic evidence.

[0065] Specifically, the webpage content tamper-proofing verification snapshot signature method of the embodiments of the present application is implemented based on the Puppeteer automated browser environment according to the following steps:

[0066] Step 1: Webpage loading and environment initialization

[0067] A headless browser environment with unified configuration is started through Puppeteer, and parameters such as fixed browser version, font library, network conditions, etc. are set to ensure standardization of the rendering environment. The target webpage is loaded and the page is fully rendered, including asynchronous data loading.

[0068] Step two: De-dynamic processing

[0069] According to the preset dynamic content rule set, the webpage DOM is traversed and analyzed. Automatically identify dynamic elements (such as advertising area, timestamp node, animation effect, random number generation script, etc.), and perform shielding, replacement or removal operations on these elements. Re-render the webpage and output the "purified" webpage DOM structure.

[0070] Step three: Dual-channel snapshot collection

[0071] In the de-dynamic webpage environment, the following data is collected: webpage DOM structure data (standardized processing, filtering irrelevant attributes and unordered node sorting), webpage rendering screenshot (image snapshot), which can be processed using perceptual hashing algorithm to enhance the ability to resist environmental changes.

[0072] Step four: Hash signature generation

[0073] Calculate the hash value of the DOM data and the image snapshot respectively, and generate the DOM hash value and the image hash value. Merge the two hash values to calculate the final snapshot signature digest, which is used as the anti-tamper authentication identifier of the webpage content.

[0074] Step five: Snapshot and signature storage

[0075] Store the standardized webpage DOM data, image snapshot and corresponding dual-channel signature in a secure database or file system to form a complete electronic evidence package. At the same time, record the snapshot generation time, webpage URL, environment configuration information and other metadata.

[0076] Step six: Snapshot reconstruction and verification

[0077] In the verification phase, by reading the stored snapshot data and signature information, the Puppeteer is used to restore the DOM structure and rendering effect of the webpage snapshot. Recalculate the DOM and image hash to generate the verification signature. Compare the verification signature with the stored signature to determine whether the webpage content has been tampered with. According to the comparison result, output the verification pass or fail conclusion and generate the verification report.

[0078] Step seven: Exception handling and log recording

[0079] Capture and handle abnormal situations (such as network interruption, element recognition failure, environmental abnormalities, etc.) during snapshot collection and verification. Detailed operation logs and exception information are recorded for subsequent audit and problem tracing.

[0080] To implement the webpage content anti-tamper verification snapshot signature method proposed in the embodiments of the present application, the specific implementation steps are as follows:

[0081] Step 1: Start and environment preparation

[0082] A headless browser is launched using Puppeteer, which uniformly specifies the browser version, operating system font configuration, and network environment parameters to ensure the standardization of web rendering environment. The browser window size and DPI are set to ensure consistent screenshot resolution.

[0083] Step 2: Webpage Loading and Waiting

[0084] Enter the target webpage URL, load the webpage, and wait for all key resources (including asynchronous data, scripts, and style sheets) to be loaded. By setting a reasonable timeout and page loading state monitoring mechanism, ensure the stability of the webpage content.

[0085] Step 3: Dynamic Content Identification and De-dynamic Processing

[0086] According to the predefined dynamic element rule set, parse the webpage DOM, automatically locate the timestamp, ad area, scroll animation, and random number generation node. Perform content screening, replacement, or removal operations on the identified dynamic elements to ensure that dynamic content does not affect the snapshot results. Re-render and confirm the webpage state after de-dynamic processing.

[0087] Step 4: Snapshot Data Collection

[0088] Collect the processed webpage DOM structure, perform node sorting, attribute standardization, and irrelevant information filtering, and output standardized DOM data. Use Puppeteer to capture a full-screen screenshot of the webpage, and combine image preprocessing (such as cropping and color standardization) to prepare for subsequent hash calculation.

[0089] Step 5: Hash Digest Calculation and Signature Generation

[0090] Calculate the digest value using a secure hash algorithm (such as SHA-256) on the standardized DOM data. Generate a digest for the preprocessed image snapshot using perceptual hashing or other robust image hashing algorithms. Combine the two digest values and use a signature algorithm (such as digital signature or HMAC) to generate the final snapshot signature.

[0091] Step 6: Data Storage and Management

[0092] Store the standardized DOM, image snapshot, signature value, and metadata (URL, timestamp, environment configuration, etc.) securely. Support data querying, exporting, and subsequent calling to ensure data integrity and traceability.

[0093] Step 7: Snapshot Reconstruction and Verification

[0094] During the verification phase, stored snapshot data is retrieved, and Puppeteer is used to recreate the webpage state at that time. The DOM and image hash digests are recalculated to generate a verification signature. This signature is compared with the stored signature to determine whether the webpage content has been tampered with, and the verification result and related report are output.

[0095] Step 8: Anomaly Handling and Security Assurance

[0096] Real-time monitoring and handling of abnormal situations (network anomalies, resource loading failures, rule failures, etc.). Ensuring encrypted storage and access control of snapshot data to guarantee the security of electronic evidence.

[0097] Compared with the prior art, the embodiments of this application have the following advantages:

[0098] 1. Enhanced multi-dimensional anti-tampering capabilities

[0099] Existing technologies typically employ only a single image hash or HTML hash, while this invention simultaneously calculates hashes for the DOM structure of the webpage and the image snapshot, and performs a synthetic signature, covering both the structural and visual layers of the webpage content, significantly improving the robustness and accuracy of anti-tampering measures.

[0100] 2. Improve snapshot consistency and stability

[0101] By combining dual-channel data collected after de-dynamic processing, the frequent changes of a single hash signature due to dynamic content are avoided, thereby ensuring the consistency of snapshot signatures in different times and environments and enhancing the credibility of electronic evidence.

[0102] 3. Improve the applicability of the law

[0103] The dual-channel signature structure facilitates judicial or third-party institutions to accurately determine whether webpage content has been tampered with through both structural and visual verification, meeting the stringent requirements of legal review and electronic evidence preservation.

[0104] 4. Better fault tolerance

[0105] Even if some dynamic content on the webpage is not completely removed, the signatures of the image and DOM channels complement each other, which can reduce verification failures caused by anomalies in a single channel and improve the overall verification success rate.

[0106] 5. Adaptable to changing webpage environments

[0107] By combining dual-channel signature with environment-specific normalization, signature fluctuations caused by rendering differences across different browsers and platforms are effectively mitigated, improving cross-environment snapshot consistency and verification reliability.

[0108] like Figure 2 The diagram shown is a structural schematic of a webpage snapshot signing device provided in an embodiment of this application, comprising:

[0109] The loading module 210 is configured to load a target webpage in a unified configuration headless browser environment, automatically detect and remove dynamic content in the target webpage according to a preset dynamic element identification rule, and generate a purified webpage document object model (DOM) data.

[0110] The dynamic element identification rule includes matching rules for an advertisement region, a timestamp node, an animation effect, and a random number generation script, and performs content shielding, replacement, or removal operations when the corresponding elements are detected.

[0111] The collection module 220 is configured to collect standardized webpage DOM data and a webpage rendering image snapshot in a state after the de-dynamic processing.

[0112] The computing module 230 is configured to calculate hash digests of the webpage DOM data and the webpage rendering image snapshot, respectively, and combine the two calculated digest values to generate a webpage snapshot signature.

[0113] The hash digest of the webpage DOM data is generated by using an SHA-256 algorithm, and the hash digest of the webpage rendering image snapshot is generated by using a perceptual hashing algorithm.

[0114] The storage module 240 is configured to store the webpage DOM data, the webpage rendering image snapshot, the webpage snapshot signature, and corresponding metadata information in a secure storage medium.

[0115] Further, the device further includes:

[0116] The judgment module is configured to reproduce a webpage state by using a headless browser based on the stored webpage DOM data and webpage rendering image snapshot in a verification stage, and recalculate hash digests and compare the hash digests with the webpage snapshot signature to determine whether the webpage content is tampered.

[0117] The preprocessing module is configured to perform preprocessing such as color standardization, size unification, and irrelevant region cropping on the webpage rendering image to reduce the influence of different browser environments on the consistency of the snapshot.

[0118] The embodiments of the present application can improve the consistency and reproducibility of the content of the webpage snapshot by removing the dynamic content in the target webpage, and can enhance the anti-tampering ability of the webpage evidence and improve the accuracy and robustness of the tampering detection by constructing a parallel hash signature mechanism of the DOM structure and the image snapshot.

[0119] The embodiment of the present application further provides a computer readable storage medium, and the computer readable storage medium stores a computer program. The computer program is executed by a processor to realize each process of the signature method of the webpage snapshot and achieve the same technical effects. To avoid repetition, details are not described herein. The computer readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, an optical disk or the like.

[0120] It should be noted that in this document, the terms "comprising", "including", or any other variant thereof are intended to cover a non-exclusive inclusion, so that processes, methods, articles, or apparatuses that comprise a list of elements not only include those elements, but also include other elements that are not expressly listed, or other elements inherent in such processes, methods, articles, or apparatuses. Without more limitations, the element defined by the statement "comprising a" does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0121] From the above description of the embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be realized by means of software and necessary general hardware platforms, of course, they can also be realized by hardware, but in many cases the former is a better embodiment. Based on this understanding, the technical solutions of the present application can be embodied in the form of a software product, which is stored in a storage medium (such as a ROM / RAM, a magnetic disk, an optical disk), and includes a plurality of instructions for making a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) execute the methods described in the embodiments of the present application.

[0122] The embodiments of the present application are described above in combination with the drawings, but the present application is not limited to the above-mentioned specific embodiments, which are only illustrative and not restrictive. Those skilled in the art can make many forms under the inspiration of the present application without departing from the scope of the present application and the protection scope of the claims.

Claims

1. A method for signing webpage snapshots, characterized in that, Includes the following steps: The target webpage is loaded in a uniformly configured headless browser environment. Based on the preset dynamic element recognition rules, dynamic content in the target webpage is automatically detected and removed, and purified webpage document object model (DOM) data is generated. In the de-dynamic webpage state, standardized webpage DOM data and webpage rendered image snapshots are collected respectively; Calculate the hash digests of the webpage DOM data and the webpage rendered image snapshot respectively, and merge the two calculated digest values ​​to generate a webpage snapshot signature; The webpage DOM data, the webpage rendered image snapshot, the webpage snapshot signature, and the corresponding metadata information are stored together in a secure storage medium.

2. The method according to claim 1, characterized in that, After storing the webpage DOM data, the webpage rendered image snapshot, the webpage snapshot signature, and the corresponding metadata information together in a secure storage medium, the method further includes: During the verification phase, based on the stored webpage DOM data and webpage rendering image snapshots, a headless browser is used to reproduce the webpage state, and the hash digest is recalculated and compared with the webpage snapshot signature to determine whether the webpage content has been tampered with.

3. The method according to claim 1, characterized in that, The dynamic element recognition rules include matching rules for advertising areas, timestamp nodes, animation effects, and random number generation scripts, and perform content blocking, replacement, or removal operations when the corresponding element is detected.

4. The method according to claim 1, characterized in that, Before capturing the webpage rendering image snapshot, the process also includes: Preprocessing is performed on web page rendered images to standardize colors, unify sizes, and crop irrelevant areas, in order to reduce the impact of different browser environments on snapshot consistency.

5. The method according to claim 1, characterized in that, The hash digest of the webpage DOM data is generated using the SHA-256 algorithm, and the hash digest of the webpage rendered image snapshot is generated using the perceptual hashing algorithm.

6. A signature device for webpage snapshots, characterized in that, include: The loading module is used to load the target webpage in a uniformly configured headless browser environment, automatically detect and remove dynamic content in the target webpage according to preset dynamic element recognition rules, and generate purified webpage document object model (DOM) data. The acquisition module is used to collect standardized webpage DOM data and webpage rendered image snapshots in the state of the webpage after the dynamic processing is removed. The calculation module is used to calculate the hash digests of the webpage DOM data and the webpage rendered image snapshot respectively, and merge the two calculated digest values ​​to generate a webpage snapshot signature; The storage module is used to store the webpage DOM data, the webpage rendered image snapshot, the webpage snapshot signature, and the corresponding metadata information together in a secure storage medium.

7. The apparatus according to claim 6, characterized in that, Also includes: The judgment module is used to reproduce the webpage state using a headless browser based on the stored webpage DOM data and webpage rendering image snapshot during the verification phase, and recalculate the hash digest and compare it with the webpage snapshot signature to determine whether the webpage content has been tampered with.

8. The apparatus according to claim 6, characterized in that, The dynamic element recognition rules include matching rules for advertising areas, timestamp nodes, animation effects, and random number generation scripts, and perform content blocking, replacement, or removal operations when the corresponding element is detected.

9. The apparatus according to claim 6, characterized in that, Also includes: The preprocessing module is used to perform color standardization, size uniformity, and irrelevant area cropping on web page rendered images to reduce the impact of different browser environments on snapshot consistency.

10. The apparatus according to claim 6, characterized in that, The hash digest of the webpage DOM data is generated using the SHA-256 algorithm, and the hash digest of the webpage rendered image snapshot is generated using the perceptual hashing algorithm.

Images