The applications of social Internet of Things (SIoT) with large numbers of intelligent devices provide a novel way for social behaviors. Intelligent devices share images according to the groups of their specified owners. However, sharing images may cause privacy disclosure when the images are illegally distributed without owners’ permission. To tackle this issue, combining blind watermark with additive secret sharing technique, we propose a lightweight and privacy-preserving image sharing (LPIS) scheme with illegal distributor detection in SIoT. Specifically, the query user’s authentication information is embedded in two shares of the transformed encrypted image by using discrete cosine transform (DCT) and additive secret sharing technique. The robustness against attacks, such as JPEG attack and the least significant bit planes (LSBs) replacement attacks, are improved by modifying 1/8 of coefficients of the transformed image. Moreover, we adopt two edge servers to provide image storage and authentication information embedding services for reducing the operational burden of clients. As a result, the identity of the illegal distributor can be confirmed by the watermark extraction of the suspicious image. Finally, we conduct security analysis and ample experiments. The results show that LPIS is secure and robust to prevent illegal distributors from modifying images and manipulating the embedded information before unlawful sharing.

中文翻译：

---

在社交物联网中实现轻量级隐私保护图像共享和非法分发者检测

大量智能设备的社交物联网（SIoT）应用为社交行为提供了一种新的方式。智能设备根据其指定所有者的组共享图像。但是，共享图像可能会在未经所有者许可的情况下非法分发图像时导致隐私泄露。为了解决这个问题，结合盲水印和附加秘密共享技术，我们提出了一种轻量级和隐私保护的图像共享（LPIS）方案，在 SIoT 中检测非法分发者。具体地，通过使用离散余弦变换（DCT）和加法秘密共享技术，将查询用户的认证信息嵌入到转换后的加密图像的两份中。对攻击的鲁棒性，例如 JPEG 攻击和最低有效位平面 (LSB) 替换攻击，通过修改变换图像系数的 1/8 得到改进。此外，我们采用两个边缘服务器提供图像存储和认证信息嵌入服务，以减轻客户端的操作负担。结果，可以通过对可疑图像的水印提取来确认非法分发者的身份。最后，我们进行安全分析和大量实验。结果表明，LPIS 是安全和健壮的，可以防止非法分发者在非法共享之前修改图像和操纵嵌入的信息。我们采用两个边缘服务器提供图像存储和认证信息嵌入服务，以减轻客户端的操作负担。结果，可以通过对可疑图像的水印提取来确认非法分发者的身份。最后，我们进行安全分析和大量实验。结果表明，LPIS 是安全和健壮的，可以防止非法分发者在非法共享之前修改图像和操纵嵌入的信息。我们采用两个边缘服务器提供图像存储和认证信息嵌入服务，以减轻客户端的操作负担。结果，可以通过对可疑图像的水印提取来确认非法分发者的身份。最后，我们进行安全分析和大量实验。结果表明，LPIS 是安全和健壮的，可以防止非法分发者在非法共享之前修改图像和操纵嵌入的信息。