Data security-oriented three-dimensional model system authorization authentication method and system, and storage medium

By using a multi-factor authentication method that combines user account passwords, hardware information, and 3D model feature recognition, the problem of single authorization authentication method and low security in existing 3D model systems is solved, thus achieving higher data security.

CN121935902APending Publication Date: 2026-04-28SICHUAN JIANSHAN TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
SICHUAN JIANSHAN TECH CO LTD
Filing Date
2024-10-25
Publication Date
2026-04-28

AI Technical Summary

Technical Problem

Existing 3D model systems have limited authorization and authentication methods, resulting in low security, vulnerability to attacks, and an inability to meet complex security requirements.

Method used

It adopts a multi-factor authentication method, including user account password information, user terminal hardware information and collection timestamp, combined with specific regional and global identity information, and verifies user access rights through 3D model feature recognition, providing a multi-factor authentication mechanism.

Benefits of technology

It improves the security of the 3D model system, prevents role impersonation and password theft, enhances data security, and meets complex security requirements.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121935902A_ABST
    Figure CN121935902A_ABST
Patent Text Reader

Abstract

The invention discloses a three-dimensional model system authorization authentication method and system and a storage medium for data security, and the method mainly comprises the steps: obtaining an authorization authentication request initiated by a user side of a three-dimensional model system, responding to a user identity collection request, and obtaining the first identity information of the user side; responding to a three-dimensional model resource loading request, and acquiring corresponding second identity information of one or more three-dimensional model resources preloaded into the three-dimensional model system; in response to an identity authentication request, acquiring third identity information which is stored in a verification module and corresponds to the first identity information; according to the first identity information, the second identity information and the third identity information, performing access permission verification on user identity and use permission verification of three-dimensional model resources; and if the access permission verification and the use permission verification both pass, allowing the user side to load the requested three-dimensional model resources. According to the method, the security of the three-dimensional model resources is effectively improved through multi-authorization authentication.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of data security technology, and in particular to an authorization and authentication method, system and storage medium for a three-dimensional model system for data security. Background Technology

[0002] In today's digital age, data security has become a critical issue. 3D modeling systems are widely used in numerous fields, such as industrial design, architectural planning, virtual reality, and urban metaverse. These 3D models contain a wealth of valuable information, including intellectual property, trade secrets, and sensitive data. Therefore, ensuring the security of 3D model data is of paramount importance.

[0003] Currently, many 3D modeling systems fail to adequately implement data security and protection measures during delivery. In some cases, users can log in and use the system without authentication after installation, posing a serious risk of data leakage. Common authorization, encryption, and authentication methods for 3D modeling systems fall into two main categories: account and password authentication, where users simply enter their correct username and password to log in; and authorization serial numbers or authorization files, which grant access after authorization. However, these authentication methods are relatively simplistic, relying solely on username and password authentication is far from sufficient. More reliable multi-factor authentication is needed, and these systems are vulnerable to attacks such as role impersonation, password theft, and tampering, failing to meet complex security requirements. Existing technologies in this area still have many shortcomings. Summary of the Invention

[0004] In view of this, the purpose of this application is to provide a data security-oriented authorization and authentication method for a 3D model system, an online authentication method, and related storage media, authorization and authentication system, and online authentication system, in order to solve the problems of the single authorization method and low security of existing authorization methods.

[0005] Firstly, embodiments of this application provide a method for authorizing and authenticating a three-dimensional model system.

[0006] In one embodiment, the authorization and authentication method mainly includes the following steps: obtaining an authorization and authentication request initiated by the user terminal of the 3D model system, the authorization and authentication request including a user identity collection request, an identity authentication request, and a 3D model resource loading request; responding to the user identity collection request, obtaining first identity information of the user terminal; responding to the 3D model resource loading request, obtaining second identity information of one or more 3D model resources preloaded into the 3D model system; responding to the identity authentication request, obtaining third identity information stored in the verification module corresponding to the first identity information; verifying the user's access rights based on the first identity information and the third identity information; verifying the user's access rights to use the 3D model resources based on the first identity information, the second identity information, and the third identity information; if both the access rights verification and the access rights verification pass, then feedback is given allowing the 3D model system of the user terminal to load the requested one or more 3D model resources.

[0007] In one embodiment, the first identity information may include at least one or more of user account password information, user terminal hardware information, and collection timestamp, and at least includes user account password information; the user terminal hardware information is used to verify the binding status between the user terminal and the user account; the collection timestamp is used to verify the real-time nature of user identity collection.

[0008] In one embodiment, the second identity information may include specific region identity information; the specific region identity information is used to represent the specific region identity of a specific region existing in the 3D model resource, including specific region identification information and / or specific region 3D feature information; the specific region includes a target region associated with the user account; the specific region identification information includes identification information pre-configured for the specific region existing in the 3D model resource, used to verify the user account's access rights to the 3D model resource through the identification information; the specific region 3D feature information includes feature information automatically calculated by performing 3D model feature recognition on the specific region existing in the 3D model resource, used to verify the user account's access rights to the 3D model resource through the feature information.

[0009] In one embodiment, the second identity information may include global identity information; the global identity information is used to represent the global identity of the 3D model resource, including global identification information and / or global 3D feature information; the global identification information includes identification information pre-configured for the 3D model resource, used to verify the user account's access rights to the 3D model resource through the identification information; the global 3D feature information includes feature information automatically calculated by performing 3D model feature recognition on the 3D model resource, used to verify the user account's access rights to the 3D model resource through the feature information.

[0010] In one embodiment, the second identity information includes model precision limitation information; the model precision limitation information is used to verify the user's permission to use the precision of the 3D model resources loaded in the 3D model system.

[0011] In one embodiment, the second identity information may include roaming interaction permission information; the roaming interaction permission information is used to verify the user's roaming interaction permission in the three-dimensional scene formed by loading the three-dimensional model resources.

[0012] In one embodiment, the feature information may include three-dimensional anti-counterfeiting information; the specific region three-dimensional feature information includes feature information automatically calculated by performing feature recognition of a specific region containing three-dimensional anti-counterfeiting information in the three-dimensional model resource; the global three-dimensional feature information includes feature information automatically calculated by performing feature recognition of three-dimensional anti-counterfeiting information in the three-dimensional model resource.

[0013] Secondly, embodiments of this application provide an online authentication method for a three-dimensional model system.

[0014] The online authentication method may include the steps corresponding to the authorization authentication method described in the first aspect, and the cloud server performs online authentication on the user terminal. The online authentication method mainly includes the following steps: obtaining an authorization authentication request initiated by the user terminal of the 3D model system, the authorization authentication request including a user identity collection request, an identity authentication request, and a 3D model resource loading request; responding to the user identity collection request, obtaining the first identity information of the user terminal; responding to the identity authentication request, obtaining the third identity information stored in the verification module corresponding to the first identity information; responding to the 3D model resource loading request, obtaining the second identity information of one or more 3D model resources preloaded into the 3D model system; performing access permission verification on the user identity based on the first identity information and the third identity information on the cloud server; performing 3D model resource usage permission verification on the user identity based on the first identity information, the second identity information, and the third identity information on the cloud server; if both the access permission verification and the usage permission verification pass, feedback is given that the 3D model system of the user terminal is allowed to load the requested one or more 3D model resources.

[0015] In one embodiment, the online authentication method further includes: responding to the 3D model resource loading request, determining whether the user terminal has one or more of the 3D model resources to be loaded; if not, after completing the access permission verification and the usage permission verification, sending the pre-loaded 3D model resources to the user terminal or providing online access permission.

[0016] Thirdly, embodiments of this application provide a three-dimensional model system authorization and authentication system.

[0017] The authorization and authentication system is configured to perform authorization and authentication based on the authorization and authentication method described in the first aspect.

[0018] Specifically, the authorization and authentication system mainly includes a first processing module, a second processing module, a third processing module, a communication module, an access permission verification module, a usage permission verification module, and a fourth processing module.

[0019] The system includes a communication module for acquiring and parsing authorization and authentication requests initiated by the user verification module, the authorization and authentication requests including a user identity acquisition request, an identity authentication request, and a 3D model resource loading request; a first processing module for responding to the user identity acquisition request and acquiring the first identity information of the user; a second processing module for responding to the 3D model resource loading request and acquiring the second identity information of one or more 3D model resources preloaded into the 3D model system; a third processing module for responding to the identity authentication request and acquiring the third identity information stored in the verification module corresponding to the first identity information; an access permission verification module for verifying the user's access permissions based on the first identity information and the third identity information; a usage permission verification module for verifying the user's usage permissions for 3D model resources based on the first identity information, the second identity information, and the third identity information; and a fourth processing module for, if both the access permission verification and the usage permission verification pass, providing feedback allowing the user's 3D model system to load one or more requested 3D model resources.

[0020] Fourthly, embodiments of this application also provide a computer-readable storage medium for storing a computer program. When a computer reads the computer program in the storage medium, the computer runs the authorization and authentication method described in the first aspect or the online authentication method described in the second aspect.

[0021] Fifthly, embodiments of this application also provide an electronic device, including: a memory and a processor, wherein the memory stores a computer program executable by the processor, and when the computer program is executed by the processor, it performs the authorization authentication method as described in the first aspect or the online authentication method as described in the second aspect.

[0022] In summary, by adopting the above technical solution, the beneficial effects of the present invention can solve the problem that existing user account password authentication methods cannot meet the complex security requirements of 3D model system applications. Attached Figure Description

[0023] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments of this application will be briefly introduced below. It should be understood that the following drawings only show some embodiments of this application and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0024] Figure 1 This is a flowchart illustrating an authorization and authentication method provided in an embodiment of this application.

[0025] Figure 2This is a schematic diagram of the system architecture of an authorization and authentication system provided in an embodiment of this application. Detailed Implementation

[0026] The embodiments of the technical solution of this application will now be described in detail with reference to the accompanying drawings. These embodiments are only used to more clearly illustrate the technical solution of this application and are therefore merely examples, and should not be used to limit the scope of protection of this application.

[0027] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs; the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this application.

[0028] In the description of the embodiments of this application, technical terms such as "first" and "second" are used only to distinguish different objects and should not be construed as indicating or implying relative importance or implicitly specifying the number, specific order, or primary and secondary relationship of the indicated technical features. In the description of the embodiments of this application, "multiple" means two or more, unless otherwise explicitly defined.

[0029] like Figure 1 As shown, in one embodiment, the authorization and authentication method mainly includes steps S100-S700, which mainly involve at least three authentication methods such as user account password authentication, user terminal identity authentication, and 3D model resource authentication.

[0030] S100, Obtain the authorization and authentication request initiated by the user terminal of the 3D model system. The authorization and authentication request includes a user identity acquisition request, an identity authentication request, and a 3D model resource loading request.

[0031] S200, responding to the user identity collection request, obtain the first identity information of the user terminal.

[0032] S300, in response to the 3D model resource loading request, obtain the second identity information of one or more 3D model resources preloaded into the 3D model system.

[0033] S400, in response to the identity authentication request, obtain the third identity information stored in the verification module that corresponds to the first identity information.

[0034] S500, verify the user's identity and access permissions based on the first identity information and the third identity information;

[0035] S600, verify the user's access rights to the 3D model resources based on the first identity information, the second identity information and the third identity information.

[0036] S700, if both the access permission verification and the usage permission verification pass, feedback is given allowing the user's 3D model system to load one or more of the requested 3D model resources.

[0037] In some embodiments, the first identity information includes at least one or more of user account password information, user terminal hardware information, and collection timestamp, and at least includes user account password information. The user terminal hardware information is used to verify the binding status between the user terminal and the user account. The collection timestamp is used to verify the real-time nature of user identity collection.

[0038] For example, in step S200, responding to the user identity collection request and obtaining the user's first identity information can be done simply through the user's account and password information for initial authorization authentication. In some embodiments, authorization authentication can also be performed using the user's account and password information and the user's hardware information. This not only verifies the correctness of the user's entered account and password but also verifies the physical hardware device of the user's terminal to ensure that the user can only log in and use the device on the bound authorized hardware device. The user's hardware information can include hardware serial number, hardware model, network card MAC address, and BIOS information, such as the motherboard, CPU, hard drive, and graphics card of the user's terminal. The BIOS information includes the BIOS version number and manufacturer information. In some embodiments, authorization authentication can also be performed using the user's account and password information, user's hardware information, and a collection timestamp. When obtaining the user's entered account and password information and user's hardware information, a timestamp is generated simultaneously for real-time collection and to prevent tampering.

[0039] In some embodiments, steps S100-S700 can all be performed on the local user terminal. In other embodiments, steps S100-S700 can be an online authentication process, jointly completed by the user terminal and the cloud server.

[0040] For example, step S100 may involve the cloud server obtaining an authorization and authentication request initiated by the user terminal of the 3D model system, parsing the request, and breaking it down into a user identity acquisition request, an identity authentication request, and a 3D model resource loading request, and executing steps S200-S400 respectively.

[0041] When executing S200, the required primary identity information can be extracted directly from the user identity collection request, such as user account password information, user terminal hardware information, and collection timestamp. In some embodiments, after the initial authorization authentication of the user account password is completed, the cloud server instructs the user terminal to collect user terminal hardware information. If the user account password verification fails, the authorization authentication is terminated directly, and a verification failure notification is sent.

[0042] In step S300, when the 3D model resource is already stored on the user terminal, the cloud server instructs the user terminal to obtain the second identity information. When the 3D model resource is stored on the cloud server, the cloud server obtains the second identity information of the requested 3D model resource from the resource library based on the user account and / or user terminal hardware information.

[0043] In step S400, the verification module is stored on a cloud server. Alternatively, the initial user verification module can be stored on the local user terminal, and the secondary verification module can be stored on the cloud server. In step S500, the cloud server verifies the user's access rights based on the first identity information and the third identity information. In step S600, the cloud server verifies the user's access rights to the 3D model resources based on the first identity information, the second identity information, and the third identity information. In step S700, if both the access rights verification and the usage rights verification pass, the cloud server provides permission for the user's 3D model system to load one or more requested 3D model resources.

[0044] In some embodiments, after the cloud server responds to the 3D model resource loading request during the online authentication process, it can further determine whether the user terminal has stored one or more of the requested 3D model resources. If not, after completing the access permission verification and the usage permission verification, the pre-loaded 3D model resources are sent to the user terminal or online access permissions are provided.

[0045] In one embodiment, the second identity information may include at least one of global identity information, specific region identity information, model accuracy limitation information, and roaming interaction permission information, and can be configured in any way according to specific usage requirements.

[0046] The global identity information is mainly used to represent the global identity of the 3D model resource, including global identification information and / or global 3D feature information; wherein, the global identification information includes identification information pre-configured for the 3D model resource, used to verify the user account's access rights to the 3D model resource through the identification information; the global 3D feature information includes feature information automatically calculated and generated by performing 3D model feature recognition on the 3D model resource, used to verify the user account's access rights to the 3D model resource through the feature information.

[0047] The specific region identity information is mainly used to represent the specific region identity existing in the 3D model resource, including specific region identification information and / or specific region 3D feature information; wherein, the specific region includes a target region associated with the user account; the specific region identification information includes identification information pre-configured for the specific region existing in the 3D model resource, used to verify the user account's access rights to the 3D model resource through the identification information; the specific region 3D feature information includes feature information automatically calculated and generated by performing 3D model feature recognition on the specific region existing in the 3D model resource, used to verify the user account's access rights to the 3D model resource through the feature information.

[0048] In this context, "global" refers to the entire space of the 3D scene displayed after the 3D model resources are loaded into the 3D model system, while "specific region" refers to a designated area or a portion of the space within the entire 3D scene that meets relevant rules. Both global 3D feature information and global identifier information, as well as specific region 3D feature information and specific region identifier information, involve feature information and identifier information. The difference between 3D feature information and identifier information is that identifier information is one or more labels configured according to preset configuration rules, while 3D feature information is 3D model feature point information automatically generated according to a preset feature recognition algorithm. In some embodiments, the identifier information can be a 3D scene name, such as a model name, game name, city name, place name, park name, character name, user-associated name, etc.

[0049] In some embodiments, the feature information may include scene 3D features of the 3D model, such as the regional features, distribution features, and / or distinctive features of any 3D model in the scene, such as building models, vegetation models, mountain models, river models, and lake models. In some embodiments, the feature information may also include 3D anti-counterfeiting information; the 3D anti-counterfeiting information includes hidden watermarks and / or visible watermarks. The 3D feature information of a specific area includes feature information automatically calculated by performing feature recognition on a specific area existing in the 3D model resource that includes scene 3D features and / or 3D anti-counterfeiting information; the 3D feature information of the entire domain includes feature information automatically calculated by performing feature recognition on the 3D model resource that includes scene 3D features and / or 3D anti-counterfeiting information.

[0050] In some embodiments, the model precision limitation information is used to verify the user's permission to use the precision of the 3D model resources loaded in the 3D model system. The model precision limitation information can be the highest precision in the entire scene, the precision level required by the user, the precision level of a specified area, etc., and can be divided into various precision levels, such as L1-L5 levels, or meter-level, sub-centimeter-level, centimeter-level, millimeter-level, etc.

[0051] The roaming interaction permission information is used to verify the user's roaming interaction permissions in the 3D scene formed by loading the 3D model resources. The roaming interaction permission information may include restrictions such as the roaming range in the scene space, whether the user can view the 3D model up close, and whether the user can view the internal structure.

[0052] During authorization and authentication, if any of the following does not match: the first identity information of the user initiating the authorization request, the second identity information of the 3D model resource to be loaded, and the third identity information stored in the verification module, namely, the global identity information, the specific region identity information, the model precision limitation information, and the roaming interaction permission information, then the authorization fails and the user client is not allowed to load and access the corresponding 3D model resource. In some embodiments, the user client may also be prevented from loading and running the 3D model system.

[0053] like Figure 2 As shown in the embodiments of this application, a three-dimensional model system authorization and authentication system is also disclosed.

[0054] The authorization and authentication system is configured to perform authorization and authentication based on the authorization and authentication method.

[0055] Specifically, the authorization and authentication system mainly includes a first processing module, a second processing module, a third processing module, a communication module, an access permission verification module, a usage permission verification module, and a fourth processing module.

[0056] The system includes a communication module for acquiring and parsing authorization and authentication requests initiated by the user verification module, the authorization and authentication requests including a user identity acquisition request, an identity authentication request, and a 3D model resource loading request; a first processing module for responding to the user identity acquisition request and acquiring the first identity information of the user; a second processing module for responding to the 3D model resource loading request and acquiring the second identity information of one or more 3D model resources preloaded into the 3D model system; a third processing module for responding to the identity authentication request and acquiring the third identity information stored in the verification module corresponding to the first identity information; an access permission verification module for verifying the user's access permissions based on the first identity information and the third identity information; a usage permission verification module for verifying the user's usage permissions for 3D model resources based on the first identity information, the second identity information, and the third identity information; and a fourth processing module for, if both the access permission verification and the usage permission verification pass, providing feedback allowing the user's 3D model system to load one or more requested 3D model resources.

[0057] This application also discloses an online authorization system for a 3D model system. The online authorization system mainly consists of a cloud server and a user terminal, and is configured to perform authorization authentication based on the online authentication method. The cloud server mainly includes a first processing module, a second processing module, a third processing module, a communication module, an access permission verification module, a usage permission verification module, and a fourth processing module.

[0058] This application also discloses a computer-readable storage medium for storing a computer program. When a computer reads the computer program from the storage medium, the computer runs the authorization and authentication method described in the first aspect or the online authentication method described in the second aspect. The storage medium can be implemented using any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read Only Memory (EPROM), Programmable Red-Only Memory (PROM), Read-Only Memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0059] This application also discloses an electronic device, including a memory and a processor. The memory stores a computer program executable by the processor. When the computer program is executed by the processor, it performs the authorization authentication method as described in the first aspect or the online authentication method as described in the second aspect.

[0060] It should be understood that the disclosed systems and methods can also be implemented in other ways, as provided in the embodiments of this application. The apparatus embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code, which contains one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, or they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram and / or flowchart, and combinations of blocks in block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions. In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0061] The above description is only an optional implementation of the embodiments of this application, but the protection scope of the embodiments of this application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the embodiments of this application should be covered within the protection scope of the embodiments of this application.

Claims

1. A method for authorizing and authenticating a 3D model system for data security, characterized in that: The authorization and authentication method includes the following steps: Obtain the authorization and authentication request initiated by the user terminal of the 3D model system. The authorization and authentication request includes a user identity acquisition request, an identity authentication request, and a 3D model resource loading request. In response to the user identity collection request, obtain the first identity information of the user terminal; In response to the 3D model resource loading request, obtain the second identity information of one or more 3D model resources preloaded into the 3D model system; In response to the identity authentication request, obtain the third identity information corresponding to the first identity information stored in the verification module; The user's identity is verified for access permissions based on the first identity information and the third identity information; The user's access rights to use 3D model resources are verified based on the first identity information, the second identity information, and the third identity information. If both the access permission verification and the usage permission verification pass, then feedback is given allowing the user's 3D model system to load one or more of the requested 3D model resources.

2. The authorization and authentication method according to claim 1, characterized in that, The first identity information includes at least one or more of the following: user account password information, user terminal hardware information, and collection timestamp, and at least includes user account password information; The user terminal hardware information is used to verify the binding status between the user terminal and the user account; The collection timestamp is used to verify the real-time nature of user identity collection.

3. The authorization and authentication method according to claim 1, characterized in that, The second identity information includes identity information specific to a particular region; The specific region identity information is used to represent the specific region identity of a specific region existing in the three-dimensional model resource, including specific region identification information and / or specific region three-dimensional feature information; The specific area includes the target area associated with the user account; The specific region identification information includes identification information pre-configured for specific regions existing in the 3D model resource, used to verify the user account's access rights to the 3D model resource through the identification information; The specific region three-dimensional feature information includes feature information automatically calculated by performing three-dimensional model feature recognition on specific regions existing in the three-dimensional model resource, and is used to verify the user account's access rights to the three-dimensional model resource through feature information.

4. The authorization and authentication method according to claim 1, characterized in that: The second identity information includes global identity information; The global identity information is used to represent the global identity of the 3D model resource, including global identification information and / or global 3D feature information; The global identification information includes identification information pre-configured for the 3D model resource, used to verify the user account's access rights to the 3D model resource through the identification information; The global 3D feature information includes feature information automatically calculated by performing 3D model feature recognition on the 3D model resource, which is used to verify the user account's access rights to the 3D model resource through the feature information.

5. The authorization and authentication method according to claim 1, characterized in that: The second identity information includes model accuracy limitation information; The model accuracy limitation information is used to verify the user's permission to use the accuracy of the 3D model resources loaded in the 3D model system.

6. The authorization and authentication method according to claim 1, characterized in that: The second identity information includes roaming interaction permission information; The roaming interaction permission information is used to verify the user's roaming interaction permissions in the 3D scene formed by loading the 3D model resources.

7. The authorization and authentication method according to claim 3 or 4, characterized in that: The feature information includes three-dimensional anti-counterfeiting information; The specific region's three-dimensional feature information includes feature information automatically calculated by performing feature recognition containing three-dimensional anti-counterfeiting information on specific regions existing in the three-dimensional model resource; The global 3D feature information includes feature information automatically calculated and generated by performing 3D anti-counterfeiting information feature recognition on the 3D model resources.

8. An online authentication method for 3D model systems oriented towards data security, characterized in that: The online authentication method includes the steps corresponding to the authorization authentication method as described in any one of claims 1-7, and the cloud server performs online authentication on the user terminal; The online authentication method includes the following steps: Obtain the authorization and authentication request initiated by the user terminal of the 3D model system. The authorization and authentication request includes a user identity acquisition request, an identity authentication request, and a 3D model resource loading request. In response to the user identity collection request, obtain the first identity information of the user terminal; In response to the identity authentication request, obtain the third identity information corresponding to the first identity information stored in the verification module; In response to the 3D model resource loading request, obtain the second identity information of one or more 3D model resources preloaded into the 3D model system; The cloud server verifies the user's identity and access permissions based on the first identity information and the third identity information. The cloud server verifies the user's access rights to 3D model resources based on the first identity information, the second identity information, and the third identity information. If both the access permission verification and the usage permission verification pass, then feedback is given allowing the user's 3D model system to load one or more of the requested 3D model resources.

9. The online authentication method according to claim 8, characterized in that, The online authentication method also includes: In response to the 3D model resource loading request, determine whether the user terminal has one or more of the 3D model resources to be loaded. If not, after completing the access permission verification and the usage permission verification, send the pre-loaded 3D model resources to the user terminal or provide online access permission.

10. A three-dimensional model system authorization and authentication system for data security, characterized in that: The authorization and authentication system is configured to perform authorization and authentication based on the authorization and authentication method as described in any one of claims 1-7; The authorization and authentication system includes: The communication module is used to acquire and parse the authorization and authentication requests initiated by the user verification module, which include user identity acquisition requests, identity authentication requests, and 3D model resource loading requests. The first processing module is used to respond to the user identity collection request and obtain the first identity information of the user terminal. The second processing module is used to respond to the 3D model resource loading request and obtain the second identity information of one or more 3D model resources preloaded into the 3D model system. The third processing module is used to respond to the identity authentication request and obtain the third identity information stored in the verification module that corresponds to the first identity information; The access permission verification module is used to verify the user's access permissions based on the first identity information and the third identity information. The permission verification module is used to verify the user's permission to use 3D model resources based on the first identity information, the second identity information and the third identity information. The fourth processing module is used to, if both the access permission verification and the usage permission verification pass, provide feedback allowing the user's 3D model system to load one or more of the requested 3D model resources.

11. A computer-readable storage medium, characterized in that: The storage medium is used to store computer programs. When the computer reads the computer programs in the storage medium, the computer runs the authorization authentication method as described in claims 1-7 or the online authentication method as described in claims 8-9.