WO2018072061A1

WO2018072061A1 - Method and device for encrypting electronic file

Info

Publication number: WO2018072061A1
Application number: PCT/CN2016/102270
Authority: WO
Inventors: 曾国坤; 叶伟雄
Original assignee: 哈尔滨工业大学深圳研究生院
Priority date: 2016-10-17
Filing date: 2016-10-17
Publication date: 2018-04-26

Abstract

Provided are a method and device for encrypting an electronic file. The method for encrypting an electronic file comprises the following steps: upon receiving a first biometric information set sent by a first terminal, extracting, from the first biometric information set, a characteristic data item corresponding to each biometric information item, wherein the first biometric information set comprises multiple biometric information items of a user collected by the first terminal (S10); performing, according to a preset fusion algorithm, fusion on multiple extracted characteristic data items to generate a corresponding digital watermark (S20); and embedding the digital watermark in an electronic file to be encrypted to perform encryption on the electronic file (S30). The invention increases security for an electronic file.

Description

Electronic file encryption method and device

Technical field

The present invention relates to the field of information security technologies, and in particular, to an encryption method and apparatus for an electronic file.

Background technique

With the development of computer networks and information technology, the security of electronic documents such as e-mail, electronic contracts, electronic documents, audio and video has become increasingly prominent. In the prior art, in order to protect these electronic files from being illegally stolen by an attacker, they are usually encrypted by using a secret key. However, the attacker can crack the secret key by means of corresponding means. Once the secret key is cracked, the electronic file can be arbitrarily copied, modified, etc., and the security of the electronic file is not high.

Summary of the invention

The main object of the present invention is to provide an encryption method and device for an electronic file, which aims to solve the technical problem that the security of the electronic file is not high.

To achieve the above object, the present invention provides an encryption method for an electronic file, and the method for encrypting the electronic file includes the following steps:

And acquiring, according to the first biometric information group sent by the first terminal, feature data corresponding to each biometric information in the first biometric information group, wherein the first biometric information group is the a plurality of biometric information of a user collected by the first terminal;

And extracting the extracted plurality of feature data according to a preset fusion algorithm to generate a corresponding digital watermark;

The generated digital watermark is embedded in an electronic file to be encrypted to encrypt the electronic file.

Preferably, the first biometric information group includes user voice information, user palm information, and user handwritten signature information.

Preferably, after the step of embedding the generated digital watermark in an electronic file to be encrypted, the method further includes:

When receiving the second biometric information group sent by the second terminal, verifying feature data corresponding to each biometric information in the second biometric information group and feature data corresponding to the digital watermark embedded in the electronic file Whether it matches;

Authorizing, by the second terminal, the content of the electronic file when the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file .

Preferably, when receiving the second biometric information group sent by the second terminal, verifying feature data corresponding to each biometric information in the second biometric information group and a number embedded in the electronic file The steps of matching the feature data corresponding to the watermark include:

And acquiring feature data corresponding to each biometric information in the second biometric information group when receiving the second biometric information group sent by the second terminal;

Comparing the feature data corresponding to each biometric information in the second biometric information group with the feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verifying the second biometric Whether the feature information group matches the digital watermark embedded in the electronic file, wherein, for each biometric information, the corresponding feature data in the second biometric information group corresponds to the digital watermark embedded in the electronic file When the feature data is matched, the feature data corresponding to each biometric information in the second biometric information group is verified to match the feature data corresponding to the digital watermark embedded in the electronic file.

Preferably, when receiving the second biometric information group sent by the second terminal, verifying feature data corresponding to each biometric information in the second biometric information group and a number embedded in the electronic file Before the step of matching the feature data corresponding to the watermark, the method further includes:

Receiving a user identity verification command to the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back the collected Second biometric information set.

Preferably, the first biometric information group and the second biometric information group include user voice information, user palm information, and user handwritten signature information.

Preferably, when a plurality of digital watermarks are embedded in the electronic file, the biometric information in the second biometric information group is verified when the second biometric information set sent by the second terminal is received. The step of matching the corresponding feature data with the feature data corresponding to the digital watermark embedded in the electronic file includes:

When receiving the second biometric information group sent by the second terminal, verifying whether the digital watermark corresponding feature data and the second biometric information group are present in the plurality of digital watermarks embedded in the electronic file Matching the feature data corresponding to the biometric information, wherein the second biometric information is verified when the feature data corresponding to the digital watermark matches the feature data corresponding to each biometric information in the second biometric information group The feature data corresponding to each biometric information in the group matches the feature data corresponding to the digital watermark embedded in the electronic file.

Generating, according to a preset fusion algorithm, feature data corresponding to each biometric information in the second biometric information group to generate a corresponding digital watermark;

And when the generated digital watermark matches the digital watermark embedded in the electronic file, authorizing the second terminal to acquire the content of the electronic file.

In addition, in order to achieve the above object, the present invention also provides an encryption device for an electronic file, and the encryption device for the electronic file includes:

And an extraction module, configured to: when receiving the first biometric information group sent by the first terminal, extract feature data corresponding to each biometric information in the first biometric information group, where the first biometric feature The information group is a plurality of biometric information of a user collected by the first terminal;

a generating module, configured to fuse the extracted plurality of feature data according to a preset fusion algorithm to generate a corresponding digital watermark;

And a processing module, configured to embed the generated digital watermark into an electronic file to be encrypted, to encrypt the electronic file.

Preferably, the encryption device of the electronic file further includes:

a verification module, configured to verify feature data corresponding to each biometric information in the second biometric information group and a number embedded in the electronic file when receiving the second biometric information set sent by the second terminal Whether the feature data corresponding to the watermark matches;

An authorization module, configured to authorize the second terminal to acquire the feature data corresponding to each biometric information in the second biometric information group and the feature data corresponding to the digital watermark embedded in the electronic file The content of the electronic file.

Preferably, the verification module comprises:

And an extracting unit, configured to: when receiving the second biometric information group sent by the second terminal, extract feature data corresponding to each biometric information in the second biometric information group;

a verification unit, configured to compare feature data corresponding to each biometric information in the second biometric information group with feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verify Whether the second biometric information group matches the digital watermark embedded in the electronic file, wherein, for each biometric information, corresponding feature data and the electronic file in the second biometric information group When the feature data corresponding to the embedded digital watermark is matched, the feature data corresponding to each biometric information in the second biometric information group is verified to match the feature data corresponding to the digital watermark embedded in the electronic file.

Preferably, the encryption device of the electronic file further includes:

a sending module, configured to send a user identity verification command to the second terminal when the second terminal receives the electronic file acquisition request sent by the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back The collected second biometric information set.

Preferably, when a plurality of digital watermarks are embedded in the electronic file, the verification module is further configured to:

Preferably, the extracting module is further configured to: when receiving the second biometric information group sent by the second terminal, extract feature data corresponding to each biometric information in the second biometric information group;

The generating module is further configured to fuse the feature data corresponding to each biometric information in the second biometric information group according to a preset fusion algorithm to generate a corresponding digital watermark;

The encryption device of the electronic file further includes:

And an authorization module, configured to authorize the second terminal to acquire content of the electronic file when the generated digital watermark matches the digital watermark embedded in the electronic file.

The method and device for encrypting an electronic file according to the present invention, when the user needs to encrypt an electronic file, extract feature data corresponding to the plurality of biometric information of the user, and fuse the extracted plurality of feature data to generate a corresponding The digital watermark is then embedded into the electronic file to be encrypted to encrypt the electronic file. Since each person's biometric information is unique, others cannot copy the biometric information of the user, and the encryption method of the present invention is more secure than the existing encryption method by the secret key, and the electronic file is improved. safety.

DRAWINGS

1 is a schematic flow chart of a first embodiment of an encryption method for an electronic file according to the present invention;

2 is a schematic flow chart of a second embodiment of an encryption method for an electronic file according to the present invention;

3 is a schematic diagram of functional modules of a first embodiment of an encryption device for an electronic file according to the present invention;

4 is a schematic diagram of functional modules of a second embodiment of an encryption device for an electronic file according to the present invention.

detailed description

It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The invention provides an encryption method for an electronic file. Referring to FIG. 1, FIG. 1 is a schematic flowchart diagram of a first embodiment of an encryption method for an electronic file according to the present invention. In this embodiment, the method for encrypting the electronic file includes the following steps:

Step S10: When receiving the first biometric information group sent by the first terminal, extract feature data corresponding to each biometric information in the first biometric information group, where the first biometric information group a plurality of biometric information of a user collected for the first terminal;

In this embodiment, in order to protect the security of important electronic files such as pictures, documents, videos, etc., it is necessary to securely encrypt these electronic files. For example, when a user saves an electronic contract, in order to ensure the security of the contract, the contract is prevented from being illegally stolen by the attacker, and the user securely encrypts the contract. In this embodiment, an encryption system of an electronic file is formed by a terminal such as a smart phone or a PAD (tablet computer) and a corresponding server. When a user needs to securely encrypt an electronic file, the electronic file is encrypted by the server. Specifically, first, the user collects the user's own first biometric information group through the first terminal. The first biometric information group includes multiple biometric information of the user, for example, including user voice information, user palm information, user handwritten signature information, and user face information. After the user collects the first biometric information group of the user by using the first terminal, the first biometric information group collected by the first terminal is sent to the server.

Since the first terminal is affected by the surrounding environment when collecting the first biometric information group of the user, the first biometric information group may also have interference information, such as other voice information in the environment. Moreover, the watermarking capacity of the digital watermarking algorithm is small. Therefore, when the server receives the first biometric information group sent by the first terminal, the feature data corresponding to each biometric information in the first biometric information group is extracted. For example, using improved SIFT (Scale-invariant Feature Transform, extract local feature algorithm) The algorithm extracts the feature information of the user's palm, and obtains the feature data corresponding to the user's palm information through operations such as rotation angle correction and image contrast enhancement. For the user voice information, the user voice information is first subjected to pre-processing such as voice denoising and endpoint detection, for example, performing WT denoising. Then, based on the short-time energy speech effective component extraction algorithm, the pre-processed speech information is extracted, and the feature data corresponding to the user speech information is obtained. Based on DTW (Dynamic Time Warping (dynamic time rounding) algorithm extracts the feature of the user's handwritten signature information, and obtains the feature data corresponding to the user's handwritten signature information.

Step S20: merging the extracted plurality of feature data according to a preset fusion algorithm to generate a corresponding digital watermark;

When the feature data corresponding to each biometric information in the first biometric information group is extracted, the server fuses the extracted plurality of the feature data according to a preset fusion algorithm. For example, combining the data layer image fusion technology, the feature layer image fusion technology, the matching layer image fusion technology, and the decision layer image fusion technology to fuse the extracted plurality of feature data. Among them, data layer image fusion is image fusion, which is a process of merging multiple input images into a single image in a certain way. Input images can be acquired from different sensors and different channels. Feature layer image fusion refers to the feature extraction of different images, and then the feature vectors of the image are fused to obtain a new feature vector. Compared with the data layer fusion, the feature layer fusion not only retains enough feature information in the image, but also achieves compression of the image, requiring less storage space. Before the matching layer is merged, the feature vectors of each biological image need to be extracted, and the feature matching operations are performed independently, and then the feature matching scores of each single-modal biological feature can be obtained, and then the multiple feature matching scores are merged. Ultimately achieve identity. Decision layer image fusion is the decision fusion process for each single-modal biological image after the feature extraction and classification has been completed, according to the credibility of each decision. Decision-making fusion is to identify first, and then to correlate the results of each decision, and finally to achieve the best results. After the server fuses the plurality of feature data, the digital watermark corresponding to the first biometric information group is generated according to the merged feature data.

Step S30, embedding the generated digital watermark into an electronic file to be encrypted to encrypt the electronic file.

After generating the digital watermark corresponding to the first biometric information group by step S20, according to the watermark embedding algorithm, the server embeds the generated digital watermark into the electronic file to be encrypted by the user. The watermark embedding algorithm includes a time domain watermarking algorithm and a frequency domain watermarking algorithm. The time domain watermarking algorithm directly embeds the watermark into the spatial domain of the digital carrier, and utilizes the redundancy of the signal in the time domain, which is usually invisible, but the Lubang is poor. The frequency domain watermarking algorithm first transforms the carrier signal from the time domain to the frequency domain, embeds the watermark in the frequency domain subband, and then transforms the watermarked frequency domain signal into the time domain. The algorithm has good robustness and poor invisibility. The electronic file is encrypted by embedding a digital watermark corresponding to the biometric information of the user in the electronic file.

In this embodiment, when the user needs to encrypt an electronic file, when the first biometric information group sent by the first terminal is received, the feature corresponding to each biometric information in the first biometric information group is extracted. Data, and extracting the extracted plurality of feature data to generate a corresponding digital watermark, and then embedding the generated digital watermark into the electronic file to be encrypted to encrypt the electronic file. Since each person's biometric information is unique, only the user can decrypt the electronic file, and others cannot decrypt it. Compared with the existing method of encrypting the key, the security of the electronic file is improved.

Further, as shown in FIG. 2, a second embodiment of the encryption method of the electronic file of the present invention is proposed based on the first embodiment. In the second embodiment, after the step S30, the method further includes:

Step S40, when receiving the second biometric information group sent by the second terminal, verifying that the feature data corresponding to each biometric information in the second biometric information group corresponds to the digital watermark embedded in the electronic file. Whether the feature data matches;

Step S50: When the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file, the second terminal is authorized to acquire the electronic The content of the file.

In this embodiment, when the user wants to obtain the content of the encrypted electronic file, the user collects the second biometric information group through the second terminal. The second biometric information group is the same as the biometric information included in the first biometric information group, and includes, for example, user voice information, user palm information, user handwritten signature information, etc., the second terminal may be the first The terminals are the same terminal or different terminals. After the second terminal collects the second biometric information group, the collected second biometric information group is sent to the server. When the server receives the second set of biometric information sent by the second terminal, it is verified whether the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file. Specifically, in this embodiment, the step S40 includes:

Step a, when receiving the second biometric information group sent by the second terminal, extracting feature data corresponding to each biometric information in the second biometric information group;

Step b, comparing feature data corresponding to each biometric information in the second biometric information group with feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verifying the Whether the second biometric information group matches the digital watermark embedded in the electronic file, wherein for each biometric information, corresponding feature data in the second biometric information group is embedded in the electronic file When the feature data corresponding to the digital watermark is matched, the feature data corresponding to each biometric information in the second biometric information group is verified to match the feature data corresponding to the digital watermark embedded in the electronic file.

When the server receives the second set of biometric information sent by the second terminal, the feature data corresponding to each biometric information in the second biometric information set is extracted according to the manner described in the first embodiment. In this embodiment, before the step b, the method further includes:

Extracting a plurality of feature data corresponding to the digital watermark embedded in the electronic file.

In order to identify the user identity, the server extracts the feature data corresponding to each biometric information in the second biometric information group, or before extracting the feature data corresponding to each biometric information in the second biometric information group. And extracting a plurality of feature data corresponding to the digital watermark embedded in the electronic file, that is, extracting feature data corresponding to the first set of biometric data.

After the server extracts the feature data corresponding to each biometric information in the second biometric information group and extracts the plurality of feature data corresponding to the digital watermark embedded in the electronic file, the server will each of the second biometric information groups Comparing the feature data corresponding to the biometric information with the feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verifying whether the second biometric information set and the digital watermark embedded in the electronic file are verified by the comparison result match. When the biometric information matches the corresponding feature data in the second biometric information group and the feature data corresponding to the digital watermark embedded in the electronic file, the server verifies each of the second biometric information groups. The feature data corresponding to the biometric information matches the feature data corresponding to the digital watermark embedded in the electronic file, that is, the user identity authentication succeeds. For example, when the server verifies that the feature data corresponding to the user voice information in the second group of biological information matches the feature data of the user voice information corresponding to the digital watermark embedded in the electronic file, and the feature corresponding to the user's palm information in the second group of biological information The data is matched with the feature data of the user's palm information corresponding to the digital watermark embedded in the electronic file, and the feature data corresponding to the user's handwritten signature information in the second set of biological information and the user's handwritten signature information corresponding to the digital watermark embedded in the electronic file When the feature data is matched, the feature data corresponding to each biometric information in the second biometric information group is verified to match the feature data corresponding to the digital watermark embedded in the electronic file, that is, the user identity authentication is successful.

It can be understood that the feature data corresponding to the user's same biometric information may be different at different times. For example, the feature data corresponding to the user's voice information in the case of a cold is corresponding to the user's voice information in the case that the user does not have a cold. The characteristic data is different. Therefore, a preset number may also be set, the preset number of values being smaller than the number of biometric information included in the second biometric information group. When the feature data corresponding to the preset number of biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file, verifying that each biometric information in the second biometric information group corresponds to The feature data matches the feature data corresponding to the digital watermark embedded in the electronic file. For example, when the preset number is 2, if the server verifies that the feature data corresponding to the user palm information in the second group of biometric information matches the feature data of the user palm information corresponding to the digital watermark embedded in the electronic file, and the second group of creatures If the feature data corresponding to the user's handwritten signature information in the information matches the feature data of the user's handwritten signature information corresponding to the digital watermark embedded in the electronic file, whether the feature data corresponding to the user voice information in the second group of biological information is related to the electronic file The feature data matching of the user voice information corresponding to the digital watermark embedded in the digital resource is verified to match that the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file.

Further, after the step S30, the method further includes:

Step c, when receiving the second biometric information group sent by the second terminal, extracting feature data corresponding to each biometric information in the second biometric information group;

Step d: merging feature data corresponding to each biometric information in the second biometric information group according to a preset fusion algorithm to generate a corresponding digital watermark;

In step e, when the generated digital watermark matches the digital watermark embedded in the electronic file, the second terminal is authorized to acquire the content of the electronic file.

In another implementation manner, when the server receives the second biometric information group sent by the second terminal, extracting, according to the first embodiment, corresponding to each biometric information in the second biometric information group. Feature data, and then, the feature data corresponding to each biometric information in the second biometric information group is fused according to a preset fusion algorithm to generate a corresponding digital watermark. After generating the digital watermark corresponding to the second biometric information group, the server verifies whether the digital watermark corresponding to the generated second biometric information group matches the digital watermark embedded in the electronic file. And when the generated digital watermark corresponding to the second biometric information group matches the digital watermark embedded in the electronic file, the second terminal is authorized to acquire the content of the electronic file.

Further, when a plurality of digital watermarks are embedded in the electronic file, the step S40 includes:

Step f: when receiving the second biometric information group sent by the second terminal, verifying whether the digital watermark corresponding feature data exists in the plurality of digital watermarks embedded in the electronic file and the second biometric information group Matching feature data corresponding to each biometric information, wherein the second data is verified when the feature data corresponding to the digital watermark matches the feature data corresponding to each biometric information in the second biometric information group The feature data corresponding to each biometric information in the biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file.

In order to enable a plurality of users to obtain the content of the electronic file, a digital watermark corresponding to the biometric information of the plurality of users may be embedded in the electronic file. When multiple digital watermarks are embedded in the electronic file, the server compares the feature data corresponding to the second biometric information group with the feature data corresponding to each digital watermark embedded in the electronic file, and verifies whether there is a digital watermark corresponding to The feature data matches the feature data corresponding to each of the biometric information in the second biometric information group. When the feature data corresponding to a digital watermark matches the feature data corresponding to each biometric information in the second biometric information group, that is, the digital watermark matching the second biometric information group is verified to exist. At this time, the server authorizes the second terminal to acquire the content of the electronic file.

Further, in this embodiment, before the step S40, the method further includes:

Step g, when receiving the electronic file acquisition request sent by the second terminal, sending a user identity verification command to the second terminal, where the second terminal collects the second biometric information group of the user, and collects the feedback The second biometric information set.

In this embodiment, when the user wants to obtain the content of the encrypted electronic file, the user sends an electronic file acquisition request to the server through the second terminal. When the server receives the electronic file acquisition request sent by the second terminal, the server sends a user identity verification command to the second terminal. When the second terminal receives the user identity verification command sent by the server, the second terminal collects the second biometric information group of the user. And performing an operation of transmitting the collected second biometric information group to the server.

In the solution provided by the embodiment, when receiving the second biometric information group sent by the second terminal, the server verifies whether the second biometric information group matches the digital watermark embedded in the electronic file, only in the second biometric information group. When the digital watermark embedded in the electronic file is matched, the second terminal is authorized to acquire the content of the electronic file, thereby improving the security of the electronic file.

The invention further provides an encryption device for an electronic file. Referring to FIG. 3, FIG. 3 is a schematic diagram of functional modules of a first embodiment of an encryption apparatus for an electronic file according to the present invention.

In this embodiment, the encryption device of the electronic file includes:

The extracting module 10 is configured to: when receiving the first biometric information set sent by the first terminal, extract feature data corresponding to each biometric information in the first biometric information group, where the first biometric The feature information group is a plurality of biometric information of a user collected by the first terminal;

In this embodiment, an encryption system for an electronic file is formed by a terminal such as a smart phone or a PAD (tablet computer) and a corresponding server, and an encryption device for an electronic file is disposed on the server side. When the user needs to securely encrypt an electronic file, the electronic file is encrypted by the encryption device of the electronic file. Specifically, first, the user collects the user's own first biometric information group through the first terminal. The first biometric information group includes multiple biometric information of the user, for example, including user voice information, user palm information, user handwritten signature information, and user face information. After the user collects the first biometric information group of the user by using the first terminal, the first biometric information group collected by the first terminal is sent to the server.

When the server receives the first biometric information group sent by the first terminal, the extraction module 10 extracts feature data corresponding to each biometric information in the first biometric information group. For example, using improved SIFT (Scale-invariant Feature Transform, extract local feature algorithm) The algorithm extracts the feature information of the user's palm, and obtains the feature data corresponding to the user's palm information through operations such as rotation angle correction and image contrast enhancement. For the user voice information, the user voice information is first subjected to pre-processing such as voice denoising and endpoint detection, for example, performing WT denoising. Then, based on the short-time energy speech effective component extraction algorithm, the pre-processed speech information is extracted, and the feature data corresponding to the user speech information is obtained. Based on DTW (Dynamic Time Warping (dynamic time rounding) algorithm extracts the feature of the user's handwritten signature information, and obtains the feature data corresponding to the user's handwritten signature information.

The generating module 20 is configured to fuse the extracted plurality of feature data according to a preset fusion algorithm to generate a corresponding digital watermark;

When the extraction module 10 extracts the feature data corresponding to each biometric information in the first biometric information group, the generating module 20 fuses the extracted plurality of the feature data according to a preset fusion algorithm. For example, combining the data layer image fusion technology, the feature layer image fusion technology, the matching layer image fusion technology, and the decision layer image fusion technology to fuse the extracted plurality of feature data. After the merging of the plurality of feature data, the generating module 20 generates a digital watermark corresponding to the first biometric information group according to the fused feature data.

The processing module 30 is configured to embed the generated digital watermark into an electronic file to be encrypted to encrypt the electronic file.

After the digital watermark corresponding to the first biometric information group is generated by the generating module 20, the processing module 30 embeds the generated digital watermark into the electronic file to be encrypted by the user according to the watermark embedding algorithm. The watermark embedding algorithm includes a time domain watermarking algorithm and a frequency domain watermarking algorithm. The time domain watermarking algorithm directly embeds the watermark into the spatial domain of the digital carrier, and utilizes the redundancy of the signal in the time domain, which is usually invisible, but the Lubang is poor. The frequency domain watermarking algorithm first transforms the carrier signal from the time domain to the frequency domain, embeds the watermark in the frequency domain subband, and then transforms the watermarked frequency domain signal into the time domain. The algorithm has good robustness and poor invisibility. The processing module 30 encrypts the electronic file by embedding a digital watermark corresponding to the biometric information of the user in the electronic file.

In this embodiment, when the user needs to encrypt an electronic file, the extraction module 10 extracts each biometric information in the first biometric information group when receiving the first biometric information group sent by the first terminal. Corresponding feature data, the generating module 20 fuses the extracted plurality of feature data to generate a corresponding digital watermark, and then the processing module 30 embeds the generated digital watermark into the electronic file to be encrypted to encrypt the electronic file. Since each person's biometric information is unique, only the user can decrypt the electronic file, and others cannot decrypt it. Compared with the existing method of encrypting the key, the security of the electronic file is improved.

Further, as shown in FIG. 4, a second embodiment of an encryption apparatus for an electronic document of the present invention is proposed based on the first embodiment. In the second embodiment, the encryption device of the electronic file further includes:

The verification module 40 is configured to verify feature data corresponding to each biometric information in the second biometric information group and embedded in the electronic file when receiving the second biometric information group sent by the second terminal Whether the feature data corresponding to the digital watermark matches;

The authorization module 50 is configured to authorize the second terminal to acquire when the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file. The content of the electronic file.

In this embodiment, when the user wants to obtain the content of the encrypted electronic file, the user collects the second biometric information group through the second terminal. The second biometric information group is the same as the biometric information included in the first biometric information group, and includes, for example, user voice information, user palm information, user handwritten signature information, etc., the second terminal may be the first The terminals are the same terminal or different terminals. After the second terminal collects the second biometric information group, the collected second biometric information group is sent to the server. When the server receives the second set of biometric information sent by the second terminal, the verification module 40 verifies the feature data corresponding to each biometric information in the second biometric information group and the feature data corresponding to the digital watermark embedded in the electronic file. Whether it matches. Specifically, in this embodiment, the verification module 40 includes:

When the server receives the second set of biometric information sent by the second terminal, the extracting unit extracts the feature data corresponding to each biometric information in the second biometric information group according to the manner described in the first embodiment. In this embodiment, the extraction module 10 is further configured to:

In order to identify the user identity, after extracting the feature data corresponding to each biometric information in the second biometric information group, or before extracting the feature data corresponding to each biometric information in the second biometric information group, The extraction module 10 extracts a plurality of feature data corresponding to the digital watermark embedded in the electronic file, that is, extracts feature data corresponding to the first set of biometric data.

After extracting the feature data corresponding to each biometric information in the second biometric information group and extracting the plurality of feature data corresponding to the digital watermark embedded in the electronic file, the verification unit will each of the second biometric information groups Comparing the feature data corresponding to the biometric information with the feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verifying whether the second biometric information set and the digital watermark embedded in the electronic file are verified by the comparison result match. When the biometric information matches the feature data corresponding to the digital watermark embedded in the electronic file in the second biometric information group, the verification unit verifies the second biometric information group. The feature data corresponding to each biometric information matches the feature data corresponding to the digital watermark embedded in the electronic file, that is, the user identity authentication succeeds.

It can be understood that the feature data corresponding to the user's same biometric information may be different at different times. For example, the feature data corresponding to the user's voice information in the case of a cold is corresponding to the user's voice information in the case that the user does not have a cold. The characteristic data is different. Therefore, a preset number may also be set, the preset number of values being smaller than the number of biometric information included in the second biometric information group. When the feature data corresponding to the preset number of biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file, verifying that each biometric information in the second biometric information group corresponds to The feature data matches the feature data corresponding to the digital watermark embedded in the electronic file. For example, when the preset number is 2, if the verification unit verifies that the feature data corresponding to the user palm information in the second group of biometric information matches the feature data of the user palm information corresponding to the digital watermark embedded in the electronic file, and the second group The feature data corresponding to the user's handwritten signature information in the biometric information matches the feature data of the user's handwritten signature information corresponding to the digital watermark embedded in the electronic file, and whether the feature data corresponding to the user's voice information in the second set of biometric information is related to the electronic The feature data matching of the user voice information corresponding to the digital watermark embedded in the file matches that the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file.

Further, the extracting module 10 is further configured to: when receiving the second biometric information group sent by the second terminal, extract feature data corresponding to each biometric information in the second biometric information group;

The generating module 20 is further configured to fuse the feature data corresponding to each biometric information in the second biometric information group according to a preset fusion algorithm to generate a corresponding digital watermark;

The authorization module 50 is further configured to authorize the second terminal to acquire the content of the electronic file when the generated digital watermark matches the digital watermark embedded in the electronic file.

In another implementation manner, when the server receives the second biometric information group sent by the second terminal, the extraction module 10 extracts each biometric feature in the second biometric information group according to the manner in the first embodiment. The feature data corresponding to the information is then fused by the generating module 20 to the feature data corresponding to each biometric information in the second biometric information group according to a preset fusion algorithm to generate a corresponding digital watermark. After generating the digital watermark corresponding to the second biometric information group, the verification module 40 verifies whether the digital watermark corresponding to the generated second biometric information group matches the digital watermark embedded in the electronic file. When the generated digital watermark corresponding to the second biometric information group matches the digital watermark embedded in the electronic file, the authorization module 50 authorizes the second terminal to acquire the content of the electronic file.

Further, when a plurality of digital watermarks are embedded in the electronic file, the verification module 40 is further configured to:

In order to enable a plurality of users to obtain the content of the electronic file, a digital watermark corresponding to the biometric information of the plurality of users may be embedded in the electronic file. When a plurality of digital watermarks are embedded in the electronic file, the verification module 40 compares the feature data corresponding to the second biometric information group with the feature data corresponding to each digital watermark embedded in the electronic file, and verifies whether a digital watermark exists. The corresponding feature data matches the feature data corresponding to each of the biometric information in the second biometric information group. When the feature data corresponding to a digital watermark matches the feature data corresponding to each biometric information in the second biometric information group, that is, the digital watermark matching the second biometric information group is verified to exist. At this time, the authorization module 50 authorizes the second terminal to acquire the content of the electronic file.

Further, in this embodiment, the encryption device of the electronic file further includes:

In this embodiment, when the user wants to obtain the content of the encrypted electronic file, the user sends an electronic file acquisition request to the server through the second terminal. When the server receives the electronic file acquisition request sent by the second terminal, the sending module sends the user identity verification command to the second terminal. When the second terminal receives the user identity verification command sent by the server, the second terminal collects the second biometric information group of the user. And performing an operation of transmitting the collected second biometric information group to the server.

In the solution provided by the embodiment, when receiving the second biometric information group sent by the second terminal, the verification module 40 verifies whether the second biometric information group matches the digital watermark embedded in the electronic file, only in the second biometric feature. When the information group matches the digital watermark embedded in the electronic file, the authorization module 50 authorizes the second terminal to acquire the content of the electronic file, thereby improving the security of the electronic file.

The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the present invention and the drawings are directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of the present invention.

Claims

An encryption method for an electronic file, characterized in that the encryption method of the electronic file comprises the following steps:

And acquiring, according to the first biometric information group sent by the first terminal, feature data corresponding to each biometric information in the first biometric information group, wherein the first biometric information group is the a plurality of biometric information of a user collected by the first terminal;

And extracting the extracted plurality of feature data according to a preset fusion algorithm to generate a corresponding digital watermark;

The generated digital watermark is embedded in an electronic file to be encrypted to encrypt the electronic file.
The method for encrypting an electronic file according to claim 1, wherein the first biometric information group includes user voice information, user palm information, and user handwritten signature information.
The method of encrypting an electronic file according to claim 1, wherein after the step of embedding the generated digital watermark in an electronic file to be encrypted, the method further comprises:

When receiving the second biometric information group sent by the second terminal, verifying feature data corresponding to each biometric information in the second biometric information group and feature data corresponding to the digital watermark embedded in the electronic file Whether it matches;

Authorizing, by the second terminal, the content of the electronic file when the feature data corresponding to each biometric information in the second biometric information group matches the feature data corresponding to the digital watermark embedded in the electronic file .
The method of encrypting an electronic file according to claim 3, wherein said verifying each biometric feature in said second biometric information group upon receiving said second biometric information set transmitted by said second terminal The step of matching the feature data corresponding to the information with the feature data corresponding to the digital watermark embedded in the electronic file includes:

And acquiring feature data corresponding to each biometric information in the second biometric information group when receiving the second biometric information group sent by the second terminal;

Comparing the feature data corresponding to each biometric information in the second biometric information group with the feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verifying the second biometric Whether the feature information group matches the digital watermark embedded in the electronic file, wherein, for each biometric information, the corresponding feature data in the second biometric information group corresponds to the digital watermark embedded in the electronic file When the feature data is matched, the feature data corresponding to each biometric information in the second biometric information group is verified to match the feature data corresponding to the digital watermark embedded in the electronic file.
The method of encrypting an electronic file according to claim 3, wherein said verifying each biometric feature in said second biometric information group upon receiving said second biometric information set transmitted by said second terminal Before the step of matching the feature data corresponding to the information with the feature data corresponding to the digital watermark embedded in the electronic file, the method further includes:

Receiving a user identity verification command to the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back the collected Second biometric information set.
The method of encrypting an electronic file according to claim 3, wherein the first biometric information group and the second biometric information group include user voice information, user palm information, and user handwritten signature information.
The method for encrypting an electronic file according to claim 3, wherein when the plurality of digital watermarks are embedded in the electronic file, the verification unit receives the second biometric information group transmitted by the second terminal The step of matching the feature data corresponding to each biometric information in the second biometric information group with the feature data corresponding to the digital watermark embedded in the electronic file includes:

When receiving the second biometric information group sent by the second terminal, verifying whether the digital watermark corresponding feature data and the second biometric information group are present in the plurality of digital watermarks embedded in the electronic file Matching the feature data corresponding to the biometric information, wherein the second biometric information is verified when the feature data corresponding to the digital watermark matches the feature data corresponding to each biometric information in the second biometric information group The feature data corresponding to each biometric information in the group matches the feature data corresponding to the digital watermark embedded in the electronic file.
The method for encrypting an electronic file according to claim 4, wherein said each biometric feature in said second biometric information set is verified when said second biometric information set transmitted by said second terminal is received Before the step of matching the feature data corresponding to the information with the feature data corresponding to the digital watermark embedded in the electronic file, the method further includes:

Receiving a user identity verification command to the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back the collected Second biometric information set.
The method of encrypting an electronic file according to claim 1, wherein after the step of embedding the generated digital watermark in an electronic file to be encrypted, the method further comprises:

And acquiring feature data corresponding to each biometric information in the second biometric information group when receiving the second biometric information group sent by the second terminal;

Generating, according to a preset fusion algorithm, feature data corresponding to each biometric information in the second biometric information group to generate a corresponding digital watermark;

And when the generated digital watermark matches the digital watermark embedded in the electronic file, authorizing the second terminal to acquire the content of the electronic file.
The method for encrypting an electronic file according to claim 9, wherein when the second biometric information set transmitted by the second terminal is received, each biometric feature in the second biometric information set is extracted. Before the step of the feature data corresponding to the information, the method further includes:

Receiving a user identity verification command to the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back the collected Second biometric information set.
An encryption device for an electronic file, characterized in that the encryption device of the electronic file comprises:

And an extraction module, configured to: when receiving the first biometric information group sent by the first terminal, extract feature data corresponding to each biometric information in the first biometric information group, where the first biometric feature The information group is a plurality of biometric information of a user collected by the first terminal;

a generating module, configured to fuse the extracted plurality of feature data according to a preset fusion algorithm to generate a corresponding digital watermark;

And a processing module, configured to embed the generated digital watermark into an electronic file to be encrypted, to encrypt the electronic file.
The encryption device for an electronic document according to claim 11, wherein the first biometric information group includes user voice information, user palm information, and user handwritten signature information.
The encryption device for an electronic file according to claim 11, wherein the encryption device of the electronic file further comprises:

a verification module, configured to verify feature data corresponding to each biometric information in the second biometric information group and a number embedded in the electronic file when receiving the second biometric information set sent by the second terminal Whether the feature data corresponding to the watermark matches;

An authorization module, configured to authorize the second terminal to acquire the feature data corresponding to each biometric information in the second biometric information group and the feature data corresponding to the digital watermark embedded in the electronic file The content of the electronic file.
The encryption device for an electronic file according to claim 13, wherein the verification module comprises:

And an extracting unit, configured to: when receiving the second biometric information group sent by the second terminal, extract feature data corresponding to each biometric information in the second biometric information group;

a verification unit, configured to compare feature data corresponding to each biometric information in the second biometric information group with feature data of each biometric information corresponding to the digital watermark embedded in the electronic file, and verify Whether the second biometric information group matches the digital watermark embedded in the electronic file, wherein, for each biometric information, corresponding feature data and the electronic file in the second biometric information group When the feature data corresponding to the embedded digital watermark is matched, the feature data corresponding to each biometric information in the second biometric information group is verified to match the feature data corresponding to the digital watermark embedded in the electronic file.
The encryption device for an electronic file according to claim 13, wherein the encryption device of the electronic file further comprises:

a sending module, configured to send a user identity verification command to the second terminal when the second terminal receives the electronic file acquisition request sent by the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back The collected second biometric information set.
The encryption device for an electronic document according to claim 13, wherein the first biometric information group and the second biometric information group include user voice information, user palm information, and user handwritten signature information.
The encryption device for an electronic file according to claim 13, wherein when the plurality of digital watermarks are embedded in the electronic file, the verification module is further configured to:

When receiving the second biometric information group sent by the second terminal, verifying whether the digital watermark corresponding feature data and the second biometric information group are present in the plurality of digital watermarks embedded in the electronic file Matching the feature data corresponding to the biometric information, wherein the second biometric information is verified when the feature data corresponding to the digital watermark matches the feature data corresponding to each biometric information in the second biometric information group The feature data corresponding to each biometric information in the group matches the feature data corresponding to the digital watermark embedded in the electronic file.
The encryption device for an electronic file according to claim 14, wherein the encryption device of the electronic file further comprises:

a sending module, configured to send a user identity verification command to the second terminal when the second terminal receives the electronic file acquisition request sent by the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back The collected second biometric information set.
The apparatus for encrypting an electronic file according to claim 13, wherein the extracting module is further configured to: when the second biometric information group sent by the second terminal is received, extract the second biometric information group Characteristic data corresponding to each biometric information in the medium;

The generating module is further configured to fuse the feature data corresponding to each biometric information in the second biometric information group according to a preset fusion algorithm to generate a corresponding digital watermark;

The authorization module is further configured to authorize the second terminal to acquire content of the electronic file when the generated digital watermark matches the digital watermark embedded in the electronic file.
The encryption device for an electronic file according to claim 19, wherein the encryption device of the electronic file further comprises:

a sending module, configured to send a user identity verification command to the second terminal when the second terminal receives the electronic file acquisition request sent by the second terminal, where the second terminal collects the second biometric information group of the user, and feeds back The collected second biometric information set.