A method and apparatus for presenting a digital human image, a terminal device, and a storage medium

Abstract

Embodiments of the present application disclose a digital human image presentation method and device, terminal equipment and a storage medium. The method is applied to the terminal equipment. The method comprises the following steps: a processor of the terminal equipment receives decrypted digital human data from an electronic device and extracts identity information; the digital human data is generated by the electronic device according to obtained user data of a target user; the processor of the terminal equipment verifies a management background signature carried in the identity information by using a pre-set root certificate public key, and verifies whether the terminal equipment is in a list of devices allowed to display; the signature comprises a digital identity certificate signature of a creator and a license certificate signature of a content distribution platform; if the identity information passes the verification and the terminal equipment is in the list of devices allowed to display, the processor of the terminal equipment sends the digital human data to a display for display. The presentation method can improve the security of digital human image presentation.

Description

Technical Field

[0001] This application relates to the fields of digital content security and display terminal technology, and in particular to a method, apparatus, terminal device and storage medium for presenting a digital human image. Background Technology

[0002] After generating digital human data, electronic devices can verify the visitor's identity using verification devices. Once verification is successful, the digital human data is sent to the terminal device for display. However, if the main system of the electronic device is compromised, it may forge a "verification successful" result. Alternatively, if the verification software of the verification device is uninstalled, the verification function may become ineffective.

[0003] Therefore, there is an urgent need for a safe method to present the image of a digital human. Summary of the Invention

[0004] This application provides a method, apparatus, terminal device, and storage medium for presenting a digital human image, in order to improve the security of presenting a digital human image.

[0005] In a first aspect, one embodiment of this application provides a method for presenting a digital human image, applied to a terminal device, the method comprising: The processing unit receives decrypted digital human data from the electronic device and extracts identity information; wherein, the digital human data is generated by the electronic device based on the user data of the target user, the electronic device stores encrypted digital human data, and the target user is located in the target area; The processing unit uses a pre-configured root certificate public key to verify the management backend signature carried in the identity information and to verify whether the terminal device is in the list of allowed devices; the signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature. If the identity information is verified and the terminal device is in the list of allowed devices, the processing unit will send the digital human data to the display unit for display.

[0006] Secondly, one embodiment of this application provides a digital human image presentation device, applied to a terminal device, the device comprising: The processing unit is used to: receive decrypted digital human data from an electronic device and extract identity information; wherein the digital human data is generated by the electronic device based on the user data of the target user, the electronic device stores the encrypted digital human data, and the target user is located in the target area; The processing unit is also used to: verify the management backend signature carried in the identity information using a pre-set root certificate public key, and verify whether the terminal device is in the list of allowed devices; wherein, the signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature; If the identity information is verified and the terminal device is in the list of allowed devices, the processing unit is also used to: send the digital human data to the display unit for display; The display unit is used to display the digital human image represented by digital human data.

[0007] Thirdly, one embodiment of this application provides an electronic device, including a memory, a processing unit, and a computer program stored in the memory and executable on the processing unit, wherein the processing unit executes the computer program to implement the steps of any of the above methods.

[0008] Fourthly, one embodiment of this application provides a computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processing unit, implement the steps of any of the above methods.

[0009] Fifthly, one embodiment of this application provides a computer program product, including a computer program that, when executed by a processing unit, implements the steps of any of the above methods.

[0010] The digital human image presentation method provided in this application embodiment is applied to a terminal device. The method includes: a processing unit receiving decrypted digital human data from an electronic device and extracting identity information. The digital human data is generated by the electronic device based on user data of a target user. The electronic device stores encrypted digital human data, and the target user is located in a target area. The processing unit uses a pre-set root certificate public key to verify the management backend signature carried in the identity information and verifies whether the terminal device is in the list of allowed display devices. The signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature. If the identity information verification is successful and the terminal device is in the list of allowed display devices, the processing unit sends the digital human data to the display unit for display. Applying this method can improve the security of digital human image presentation. Attached Figure Description

[0011] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the embodiments of this application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0012] Figure 1 A system architecture diagram of the application process of a digital human model provided in an embodiment of this application; Figure 2 A flowchart illustrating a method for presenting a digital human image according to an embodiment of this application; Figure 3 A schematic diagram of the structure of a digital human image presentation device provided in an embodiment of this application; Figure 4 This is a schematic diagram of the structure of a terminal device provided in an embodiment of this application. Detailed Implementation

[0013] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings.

[0014] refer to Figure 1 This is a system architecture diagram of an application process for a digital human model provided in an embodiment of this application. The electronic device 11 is used to generate the digital human model, the verification device 12 is used for security verification, and the first target terminal 131 and the second target terminal 132 are used to display the digital human image represented by the digital human model. It should be noted that... Figure 1 The quantity of targets in the diagram is for illustrative purposes only and does not constitute a specific limitation. In this embodiment, a terminal device is used for illustration; the terminal device can be either a first target terminal or a second target terminal. This is merely an example and does not constitute a specific limitation. Furthermore, the display process does not depend on the display screen of the target terminal and can be performed directly.

[0015] To further illustrate the technical solutions provided in the embodiments of this application, a detailed description is provided below in conjunction with the accompanying drawings and specific implementation methods. Although the embodiments of this application provide method operation steps as shown in the following embodiments or drawings, the method may include more or fewer operation steps based on conventional or non-inventive methods. In steps where there is no logically necessary causal relationship, the execution order of these steps is not limited to the execution order provided in the embodiments of this application.

[0016] The following is combined Figure 1 The application scenarios shown illustrate the technical solutions provided in the embodiments of this application.

[0017] refer to Figure 2 This application provides a method for presenting a digital human image, applied to a terminal device. The terminal device includes a processing unit and a display unit, with the processing unit connected in series between a video input signal and a display panel driver interface. The method includes the following steps: S201: The processing unit receives the decrypted digital human data from the electronic device and extracts the identity information.

[0018] Digital human data is generated by electronic devices based on the user data of the target user. The electronic devices store encrypted digital human data, and the target user is located in the target area.

[0019] S202: The processing unit uses the pre-set root certificate public key to verify the management backend signature carried in the identity information and to verify whether the terminal device is in the list of allowed devices.

[0020] The signatures include the creator's digital identity credential signature and the content distribution platform's license credential signature.

[0021] S203: If the identity information is verified and the terminal device is in the list of devices allowed to be displayed, the processing unit will send the digital human data to the display unit for display.

[0022] The digital human image presentation method provided in this application embodiment is applied to a terminal device. The method includes: a processing unit receiving decrypted digital human data from an electronic device and extracting identity information. The digital human data is generated by the electronic device based on user data of a target user. The electronic device stores encrypted digital human data, and the target user is located in a target area. The processing unit uses a pre-set root certificate public key to verify the management backend signature carried in the identity information and verifies whether the terminal device is in the list of allowed display devices. The signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature. If the identity information verification is successful and the terminal device is in the list of allowed display devices, the processing unit sends the digital human data to the display unit for display. Applying this method can improve the security of digital human image presentation.

[0023] Regarding S201, the electronic device acquires the target user's user data, generates digital human data based on the user data, and stores the encrypted digital human data. The target user is located in the target area, and the environment in which the target area is located is called the local environment. The electronic device is set in the local environment, and the verification device is set at the network boundary of the local environment.

[0024] The processing unit is independent of the main system of the electronic device. The main system cannot access the verification logic and signature key inside the processing unit, and cannot bypass it to directly drive the display unit (such as the display panel), because the display panel only receives the signal output by the processing unit, and the main system cannot forge the verified information.

[0025] The processing unit first receives the decrypted digital human data from the electronic device and extracts the identity information for identity verification.

[0026] Regarding S202, in order to perform authentication, the processing unit applies a pre-configured root certificate public key to verify the management backend signature carried in the identity identification information and verifies whether the terminal device is in the list of allowed devices. For example, the signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature.

[0027] Regarding S203, if the identity information is verified and the terminal device is in the list of devices allowed to be displayed by the terminal, the display unit of the terminal device can send the digital human data to the display unit for display.

[0028] Specifically, the processing unit allows the video signal to the display unit, and the content represented by the digital human data is forcibly displayed, which the main system cannot prevent. If the verification fails, or the terminal device is not in the list of devices allowed for terminal display, the processing unit physically cuts off the signal path to the display unit, making the content invisible.

[0029] In this embodiment of the application, the security of digital human data is ensured by performing mandatory verification on the terminal device.

[0030] Based on the above technical solution, the terminal device can also store logs, which include the hash value of the identity information, timestamp, content hash value of the digital human data, verification result, and operation type. Optionally, the operation type can be the electronic device actively sending out digital human data, or an external device wanting to access the digital human data of the electronic device.

[0031] When a terminal device stores multiple sets of logs, these sets constitute a hash block. The terminal device signs the hash value of the block header and stores the signed result in a tamper-proof area, forming a segmented hash chain structure. In this way, any modification to the logs will cause the signature to become invalid or the hash chain to break, meaning it can be detected. When the storage area is full, the oldest log entry with the oldest timestamp is automatically overwritten in whole blocks. The overwritten old block's chip-signed block header hash can still serve as cryptographic proof that the block once existed.

[0032] In this embodiment of the application, by securely storing the verification behavior, the verification behavior is ensured to be securely recorded and can also be traced.

[0033] In practical applications, terminal devices can typically be personal or public terminals. When the terminal is a personal terminal, logs are stored in the processing unit; when the terminal is a public terminal, logs are stored in the processing unit and then sent to the management backend via a secure channel. This hierarchical strategy simultaneously meets the needs of privacy protection and public safety.

[0034] Based on the above technical solution, the terminal device can also receive and verify retrieval requests. Upon successful verification, the terminal device sends the logs indicated in the retrieval request to the source device of the retrieval request. Optionally, the logs also carry the signature of the processing unit and a hash chain integrity certificate. If the verification fails, no logs are exported; furthermore, the retrieval operation itself is recorded as a new log entry.

[0035] Furthermore, to further ensure the security of digital human data, before sending the digital human data to the display unit for display, the terminal device generates a blind watermark based on the user identifier, order number, and current timestamp; the blind watermark is then embedded into the digital human data. Optionally, the blind watermark uses a robust watermarking algorithm that can resist common attacks such as compression, cropping, and format conversion; copyright holders can extract the watermark from the disseminated content to accurately locate infringing users. This design further ensures the security of digital human data.

[0036] In practical applications, terminal devices can also send digital human data to physical robots so that the physical robots can perform operations instructed by the digital human data.

[0037] To illustrate the technical solution of this application, several specific scenarios will be used below: Scenario 1: Public screen terminal, mandatory verification before displaying digital human content.

[0038] A shopping mall's public screen is displaying a digital human image represented by digital human data. Before displaying it, it must pass mandatory verification by a processing unit. The processing unit is connected in series in the video signal path, extracts the digital human's identity identifier and the management backend signature from the signal, verifies the signature's validity using a pre-set root certificate public key, and simultaneously queries a locally stored blacklist.

[0039] If all verifications pass, the processing unit allows the video signal to the display panel, and the digital human image is forcibly displayed on the screen. If verification fails, the processing unit physically cuts off the signal path to the display panel, and the screen displays no content. After verification, the processing unit generates a signature log, stores it locally, and forcibly sends it back to the management backend via a secure channel.

[0040] Scenario 2: Verification and local storage of digital human images before their physical appearance on a personal terminal.

[0041] A user sees a digital human video on their phone. Before the video is displayed, the phone's built-in processing unit verifies the management backend signature embedded in the video using a pre-installed root certificate public key and checks the local blacklist. Once all verifications are successful, the processing unit allows the signal to the display panel, and the video plays normally.

[0042] The processing unit generates a signed log entry, which is stored in the phone's local secure storage area and is not sent externally via the network interface. The log entry is signed with an internal key of the processing unit and protected by a segmented hash chain. Users do not need to worry about the existence of the log entry during daily use; they can simply view the content normally.

[0043] Scenario 3: Compliance retrieval, obtaining verification logs from a specified device.

[0044] A case requires access to verification logs of a specific digital person involved in the case from a particular mobile phone. Law enforcement agencies initiate a request to retrieve the logs from the target device based on an electronic evidence retrieval notice issued by the court. The processing unit within the device verifies the validity of the retrieval order signature in an internal secure environment.

[0045] Upon successful verification, the processing unit exports matching log entries according to specified conditions, along with its signature and hash chain integrity proof, and sends them back to law enforcement agencies in encrypted form. If verification fails, no logs are exported. The retrieval operation itself is recorded as a new log entry by the processing unit. Upon receiving the logs, law enforcement agencies can verify the hardware signature and hash chain integrity online to confirm the logs' authenticity and lack of tampering.

[0046] Scenario 4: Watermark embedding and infringement tracing.

[0047] In this scenario, buyer D purchased a monthly subscription to an AI-generated movie and then illegally recorded and distributed the film online. The copyright holder extracted a blind watermark from the distributed video, pinpointing D as the source of the leak.

[0048] Step 1: Embedding the watermark after successful verification. Buyer D purchased a monthly viewing subscription to an AI movie through legitimate channels. Each time D plays the movie, the terminal processing unit automatically generates a blind watermark and embeds it into the video stream after verifying the content signature and before releasing the signal to the display panel. The watermark contains D's digital human ID, purchase order number, and current timestamp. The watermark is embedded in a way that is imperceptible to the human eye and does not affect the normal viewing experience. The embedding operation is completed independently by the processing unit at the hardware layer, and cannot be interfered with by the main system and player software.

[0049] Step 2: Extracting the watermark after infringement. D illegally recorded the movie and distributed it online. The copyright holder used a watermark extraction tool to extract the embedded blind watermark information from the pirated video files, obtaining D's digital human ID and order number. The robust algorithm used for the watermark allows it to be extracted even after the video has been compressed, cropped, and converted.

[0050] Step 3: Tracing the source of infringement. The copyright holder queries D's digital human ID through the digital human management backend to confirm that D is indeed the purchaser of the order. The copyright holder submits a retrieval request through the platform's corresponding interface. After the backend verifies the legal documents, it automatically aggregates D's purchase records, signature verification logs, and watermark extraction results to generate a standardized evidence package.

[0051] Step 4: Verification. The online verification unit signature and hash chain integrity of the evidence packet are checked to confirm that the watermark information has not been tampered with. The digital ID and order number of D embedded in the watermark corroborate the purchase records and signature verification logs in the background, forming a complete chain of evidence. D is held liable for infringement.

[0052] The embodiments of this application have the following beneficial effects: Hardware-level verification, independent of the main system, ensures that verification results cannot be forged or bypassed; while protecting user privacy, it generates an immutable record of each verification action. In other words, hardware-level mandatory verification is performed before displaying digital human data, and each verification action is recorded in a hardware-signed log.

[0053] like Figure 3 As shown, based on the same inventive concept as the above-described digital human image presentation method, this application embodiment also provides a digital human image presentation device, which is applied to a terminal device and includes a processing unit 31 and a display unit 32.

[0054] The processing unit 31 is configured to: receive decrypted digital human data from an electronic device and extract identity information; wherein the digital human data is generated by the electronic device based on the user data of the target user, the electronic device stores encrypted digital human data, and the target user is located in the target area; The processing unit 31 is also used to: verify the management backend signature carried in the identity information using a pre-set root certificate public key, and verify whether the terminal device is in the list of allowed devices; wherein, the signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature; If the identity information is verified and the terminal device is in the list of devices allowed to be displayed, the processing unit 31 is further configured to: send the digital human data to the display unit for display; Display unit 32 is used to display a digital human image represented by digital human data.

[0055] In an optional implementation, the processing unit 31 is further configured to: The storage logs include hash values ​​of identity information, timestamps, content hash values ​​of digital human data, verification results, and operation types.

[0056] In one optional implementation, multiple sets of logs constitute a hash block, and the processing unit 31 is further configured to: The hash value of the block header is signed, and the signed result is stored in a tamper-proof area to form a segmented hash chain structure.

[0057] In one optional implementation, if the terminal device is a personal terminal, the log is stored in the processing unit; if the terminal is a public terminal, the log is stored in the processing unit and sent to the management backend via a secure channel.

[0058] In an optional implementation, the processing unit 31 is further configured to: Receive and verify the request; After successful verification, the logs are retrieved according to the instructions in the retrieval request and sent to the source device of the retrieval request; the logs also carry the signature of the processing unit and proof of hash chain integrity.

[0059] In one optional implementation, before sending the digital human data to the display unit for display, the processing unit is further configured to: Generate a blind watermark based on the user identifier, order number, and current timestamp; Embedding blind watermarks into digital human data.

[0060] In an optional implementation, the processing unit 31 is further configured to: Digital human data is sent to a physical robot so that the physical robot can perform the operations instructed by the digital human data.

[0061] The digital human image presentation device proposed in this application embodiment adopts the same inventive concept as the above-mentioned digital human image presentation method and can achieve the same beneficial effects, which will not be repeated here.

[0062] Based on the same inventive concept as the aforementioned method for presenting digital human figures, this application also provides a terminal device, which can specifically be a desktop computer, portable computer, smartphone, tablet computer, personal digital assistant (PDA), server, etc. Figure 4 As shown, the terminal device may include a processor 401 and a memory 402.

[0063] Processor 401 can be a general-purpose processor, such as a central processing unit (CPU), digital signal processor (DSP), application-specific integrated circuit (ASIC), field-programmable gate array (FPGA), or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component, capable of implementing or executing the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly manifested as being executed by a hardware processor, or executed by a combination of hardware and software modules within the processor.

[0064] Memory 402, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules. Memory may include at least one type of storage medium, such as flash memory, hard disk, multimedia card, card-type memory, random access memory (RAM), static random access memory (SRAM), programmable read-only memory (PROM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), magnetic storage, magnetic disk, optical disk, etc. Memory is any other medium capable of carrying or storing desired program code in the form of instructions or data structures that can be accessed by a computer, but is not limited thereto. Memory 402 in this embodiment may also be a circuit or any other device capable of implementing storage functions for storing program instructions and / or data.

[0065] Those skilled in the art will understand that all or part of the steps of the above method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it performs the steps of the above method embodiments. The aforementioned computer storage medium can be any available medium or data storage device that a computer can access, including but not limited to: mobile storage devices, random access memory (RAM), magnetic storage (e.g., floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (e.g., CDs, DVDs, BDs, HVDs, etc.), and semiconductor storage (e.g., ROMs, EPROMs, EEPROMs, non-volatile memory (NAND flash), solid-state drives (SSDs)) and other media capable of storing program code.

[0066] Alternatively, if the integrated units described above in this application are implemented as software functional modules and sold or used as independent products, they can also be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of the embodiments of this application, or the parts that contribute to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the methods of the various embodiments of this application. The aforementioned storage medium includes: mobile storage devices, random access memory (RAM), magnetic memory (e.g., floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical memory (e.g., CDs, DVDs, BDs, HVDs, etc.), and semiconductor memory (e.g., ROMs, EPROMs, EEPROMs, non-volatile memory (NAND flash), solid-state drives (SSDs), etc.) and other media capable of storing program code.

[0067] Based on the same inventive concept, this application also provides a computer program product, which includes computer program code. When the computer program code is run on a computer, it causes the computer to execute any of the digital human image presentation methods described above. Since the principle of the above computer program product in solving the problem is similar to that of the digital human image presentation method, the implementation of the above computer program product can refer to the implementation of the method, and repeated details will not be repeated.

[0068] The above embodiments are only used to provide a detailed description of the technical solutions of this application. However, the description of the above embodiments is only for the purpose of helping to understand the methods of the embodiments of this application and should not be construed as a limitation on the embodiments of this application. Any changes or substitutions that can be easily conceived by those skilled in the art should be covered within the protection scope of the embodiments of this application.

Claims

1. A method for presenting a digital human image, characterized in that, Applied to a terminal device, the terminal device including a processing unit and a display unit, the method includes: The processing unit receives decrypted digital human data from the electronic device and extracts identity information; wherein, the digital human data is generated by the electronic device based on the user data of the target user, the electronic device stores encrypted digital human data, and the target user is located in the target area; The processing unit uses a pre-set root certificate public key to verify the management backend signature carried in the identity information and to verify whether the terminal device is in the list of allowed devices; wherein, the signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature; If the identity information is verified and the terminal device is in the list of allowed devices, the processing unit will send the digital human data to the display unit for display.

2. The method according to claim 1, characterized in that, The method further includes: The system stores logs, which include the hash value of the identity information, a timestamp, the content hash value of the digital human data, verification results, and operation types.

3. The method according to claim 2, characterized in that, Multiple log sets constitute a hash block; The hash value of the block header is signed, and the signed result is stored in a tamper-proof area to form a segmented hash chain structure.

4. The method according to claim 2 or 3, characterized in that, If the terminal device is a personal terminal, the log is stored in the processing unit; if the terminal is a public terminal, the log is stored in the processing unit and sent to the management backend through a secure channel.

5. The method according to claim 1, characterized in that, The method further includes: Receive a request for invocation and verify the request for invocation; After successful verification, the terminal device sends the log indicated by the retrieval request to the source device of the retrieval request; wherein, the log also carries the signature of the processing unit and the hash chain integrity proof.

6. The method according to claim 1, characterized in that, Before sending the digital human data to the display unit for display, the method further includes: Generate a blind watermark based on the user identifier, order number, and current timestamp; The blind watermark is embedded in the digital human data.

7. The method according to any one of claims 1-3 and 5-6, characterized in that, The method further includes: The digital human data is sent to a physical robot so that the physical robot performs the operations indicated by the digital human data.

8. A device for presenting a digital human image, characterized in that, Applied to a terminal device, the device includes: The processing unit is configured to: receive decrypted digital human data from an electronic device and extract identity information; wherein the digital human data is generated by the electronic device based on the user data of the target user, the electronic device stores encrypted digital human data, and the target user is located in the target area; The processing unit is further configured to: apply a pre-set root certificate public key to verify the management backend signature carried in the identity information, and verify whether the terminal device is in the list of allowed devices; wherein, the signature includes the creator's digital identity credential signature and the content distribution platform's license credential signature; If the identity information is verified and the terminal device is in the list of allowed devices, the processing unit is further configured to: send the digital human data to the display unit for display; The display unit is used to display the digital human image represented by the digital human data.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having computer program instructions stored thereon, characterized in that, When executed by a processor, the computer program instructions implement the steps of the method according to any one of claims 1 to 7.

Images