Method and device for verifying integrity of RTP data

Abstract

The present invention provides a method for verifying the integrity of real-time transport protocol (RTP) data, the method comprising the steps of: receiving a certificate including a public key from a first RTP control protocol (RTCP) packet transmitted in correspondence with a plurality of RTP packets including RTP data; receiving, from a second RTCP packet transmitted in correspondence with the plurality of RTP packets following the first RTCP packet, a signature value obtained by encrypting a hash value of the RTP data included in the plurality of RTP packets with a private key corresponding to the public key; and verifying the integrity of the RTP data by comparing, with the hash value of the RTP data, a hash value obtained by decrypting the signature value with the public key.

Description

RTP Data Integrity Verification Method and Device

[0001] Embodiments of the present invention relate to a method and apparatus for verifying the integrity of RTP data.

[0002] RTP (Real-time Transport Protocol) is a protocol for transmitting media data (e.g., audio, video) in real time. It plays a core role in various real-time communication services, such as internet telephony, video conferencing, and video streaming. RTP audio and video content are received via RTP packets. RTP data, including video, audio, and metadata, is transmitted within the payload portion of the RTP packet.

[0003] RTCP (Real-time Transport Control Protocol) is an essential protocol for real-time media communication that is used in conjunction with RTP to manage and control the quality of media transmission. While RTP is responsible for transmitting actual media data, RTCP monitors various events occurring during this transmission process and optimizes system performance by exchanging necessary control messages.

[0004] Conventional RTP data transmission methods cannot verify the integrity of the data itself. While data can be encrypted using methods like SRTP to prevent eavesdropping, verifying whether the received data is authentic or manipulated is another matter entirely. The Media Sign method has limitations as it utilizes SEI frames for data verification, which restricts it to the verification of data within specific video codecs such as H264 and H265. Traditionally, the integrity of all data transmitted via RTP—including audio, metadata, and video that does not use SEI—could not be verified.

[0005] The present invention aims to solve various problems, including those mentioned above, by providing a method and apparatus for verifying the integrity of RTP data. However, these problems are exemplary and do not limit the scope of the present invention.

[0006] According to one aspect of the present invention, a method for verifying the integrity of Real-time Transport Protocol (RTP) data is provided, comprising: receiving a certificate containing a public key from a first RTCP (RTP Control Protocol) packet transmitted in correspondence with a plurality of RTP packets containing RTP data; receiving a signature value from a second RTCP packet transmitted in correspondence with the plurality of RTP packets following the first RTCP packet, wherein the signature value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to the public key; and verifying the integrity of the RTP data by comparing the hash value obtained by decrypting the signature value using the public key with the hash value of the RTP data.

[0007] The first RTCP packet and the second RTCP packet may each be a first RTCP sender report and a second RTCP sender report.

[0008] The step of receiving the certificate may include receiving the certificate included in the profile-specific extension field of the first RTCP sender report.

[0009] The step of receiving the certificate may include receiving the certificate using a profile-specific extension field of the first RTCP sender report configured in the form of a TLV (type, length, value).

[0010] The step of receiving the signature value may include receiving the signature value for the RTP data included in the plurality of RTP packets corresponding to the value of the sender's packet count field of the second RTCP sender report using the profile-specific extension field of the second RTCP sender report.

[0011] The step of receiving the signature value may include receiving the signature value, which is obtained by concatenating hash values ​​for each RTP data included in the plurality of RTP packets consecutively and encrypting the result with the private key.

[0012] The step of verifying the integrity may include a step of verifying the certificate, a step of decrypting the signature value using the public key enclosed in the certificate to generate the decrypted hash value, and a step of comparing the decrypted hash value with the hash value of the RTP data.

[0013] According to one aspect of the present invention, an RTP data integrity verification device for receiving RTP (Real-time Transport Protocol) data from a camera is provided, comprising a processor, wherein the processor receives a certificate containing a public key from a first RTCP packet transmitted in correspondence with a plurality of RTP packets containing RTP data, receives a signature value in which a hash value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to the public key from a second RTCP packet transmitted subsequently from the first RTCP packet, and verifies the integrity of the RTP data by comparing a hash value obtained by decrypting the encrypted signature value using the public key with a hash value of the RTP data.

[0014] Other aspects, features, and advantages other than those described above will become clear from the following specific details, claims, and drawings for implementing the invention.

[0015] According to one embodiment of the present invention as described above, an RTP data integrity verification method and apparatus capable of effectively verifying the integrity of RTP data can be implemented. Of course, the scope of the present invention is not limited by such effects.

[0016] FIG. 1 is a diagram illustrating the configuration and operation of an RTP data integrity verification system according to an embodiment of the present invention.

[0017] FIG. 2 is a diagram illustrating the configuration and operation of an RTP data integrity verification device according to an embodiment of the present invention.

[0018] FIG. 3 is a flowchart illustrating an RTP data integrity verification method according to an embodiment of the present invention.

[0019] FIG. 4 is a flowchart illustrating an RTP data integrity verification method according to another embodiment of the present invention.

[0020] FIG. 5 is a diagram illustrating an RTCP sender report according to an embodiment of the present invention.

[0021] FIG. 6 is a diagram illustrating a profile-specific extension field of an RTCP sender report according to an embodiment of the present invention.

[0022] FIG. 7 is a diagram illustrating a method for generating a signature value for RTP data according to an embodiment of the present invention.

[0023] The present invention is capable of various modifications and may have various embodiments; specific embodiments are illustrated in the drawings and described in detail in the detailed description. The effects and features of the present invention, and the methods for achieving them, will become clear by referring to the embodiments described below in detail together with the drawings. However, the present invention is not limited to the embodiments disclosed below but can be implemented in various forms.

[0024] Hereinafter, embodiments of the present invention will be described in detail with reference to the attached drawings. When describing with reference to the drawings, identical or corresponding components are given the same reference numerals, and redundant descriptions thereof will be omitted.

[0025] In the following embodiments, terms such as "first," "second," etc. are used not in a limiting sense, but for the purpose of distinguishing one component from another. Also, singular expressions include plural expressions unless the context clearly indicates otherwise. Furthermore, terms such as "include" or "have" mean that the feature or component described in the specification exists, and do not exclude the possibility that one or more other features or components may be added.

[0026] In the drawings, the size of components may be exaggerated or reduced for convenience of explanation. For example, the size and thickness of each component shown in the drawings are depicted arbitrarily for convenience of explanation, so the present invention is not necessarily limited to what is illustrated.

[0027] In the following embodiments, when a part such as a region, component, section, block, or module is described as being on or above another part, it includes not only cases where it is directly on top of the other part, but also cases where another region, component, section, block, or module is interposed therein. Furthermore, when a region, component, section, block, or module is described as being connected, it includes not only cases where the region, component, section, block, or module is directly connected, but also cases where other regions, components, sections, blocks, or modules are interposed therein to indirectly connect them.

[0028] Hereinafter, in order to enable a person skilled in the art to easily practice the present invention, various embodiments of the present invention will be described in detail with reference to the attached drawings.

[0029] FIG. 1 is a diagram illustrating the configuration and operation of an RTP data integrity verification system according to an embodiment of the present invention. FIG. 2 is also a diagram illustrating the configuration and operation of an RTP data integrity verification device according to an embodiment of the present invention.

[0030] Referring to FIG. 1, an RTP data integrity verification system according to one embodiment of the present invention may include a camera (100, 101) and an RTP data integrity verification device (300). However, the present invention is not limited thereto, and the RTP data integrity verification system may include additional components or some components may be omitted. Some components of the RTP data integrity verification system may be separated into a plurality of devices, or a plurality of components may be merged into a single device. For example, although two cameras (100, 101) are shown in FIG. 1, the RTP data integrity verification system may include a single camera or a plurality of cameras. In addition, in another embodiment of the present invention, the RTP data integrity verification system may include additional devices other than cameras that transmit video, audio, metadata, etc.

[0031] The RTP data integrity verification device (300) may be a server device that controls the operation of the RTP data integrity verification system. For example, the RTP data integrity verification device (300) may be connected to a camera (100, 101) via a network and exchange data with each other.

[0032] A camera (100, 101) according to one embodiment of the present invention may represent a device for capturing media data such as video and audio. Additionally, a camera (100, 101) according to one embodiment of the present invention may generate metadata using media data such as video and audio. Furthermore, a camera (100, 101) according to one embodiment of the present invention may transmit video, audio, metadata, etc. to an RTP data integrity verification device (300). For example, an RTP data integrity verification device (300) according to one embodiment of the present invention may request information about media to be streamed from the camera (100, 101). Additionally, the camera (100, 101) may provide information about the requested media (codec, resolution, etc.) to the RTP data integrity verification device (300). Additionally, the camera (100, 101) may transmit media data to the RTP data integrity verification device (300) using RTP (Real-time Transport Protocol). The operation of the camera (100) is described below, but the same applies to the camera (101).

[0033] Referring to FIG. 2, an RTP data integrity verification device (300) according to one embodiment of the present invention may include a memory (330), a processor (340), and a communication unit (310). Additionally, an RTP data integrity verification device (300) according to one embodiment of the present invention may include a user interface unit (320).

[0034] The communication unit (310) may provide a function for communicating with an external device via a network. For example, a request generated by the processor (340) of the RTP data integrity verification device (300) according to program code stored in a recording device such as memory (330) may be transmitted to an external device via a network under the control of the communication unit (310). Conversely, control signals, commands, content, files, etc. provided by an external device may be received by the RTP data integrity verification device (300) via the communication unit (310) through the network. For example, control signals or commands, etc. from an external device received through the communication unit (310) may be transmitted to the processor (340) or memory (330).

[0035] The communication method is not limited and may include not only communication methods utilizing communication networks that the network may include (e.g., mobile communication networks, wired internet, wireless internet, broadcasting networks), but also short-range wireless communication between devices. For example, the network may include any one or more networks such as a PAN (personal area network), LAN (local area network), CAN (campus area network), MAN (metropolitan area network), WAN (wide area network), BBN (broadband network), and the Internet. Additionally, the network may include any one or more network topologies such as a bus network, star network, ring network, mesh network, star-bus network, tree or hierarchical network, but is not limited thereto.

[0036] Additionally, the communication unit (310) can communicate with an external server via a network. The communication method is not limited, but the network may be a short-range wireless communication network. For example, the network may be a Bluetooth, BLE (Bluetooth Low Energy), or Wi-Fi network.

[0037] Additionally, the RTP data integrity verification device (300) according to the present invention may include a user interface unit (320). The user interface unit (320) may be a means for interfacing with an input / output device. For example, the input device may include a device such as a keyboard or a mouse, and the output device may include a device such as a display for displaying a communication session of an application. As another example, the user interface unit (320) may be a means for interfacing with a device in which the functions for input and output are integrated into one, such as a touchscreen. As a more specific example, the processor (340) of the RTP data integrity verification device (300) may process instructions of a computer program loaded in memory (330), and a service screen or content configured using data provided by an external device may be displayed on a display through the user interface unit (320).

[0038] The memory (330) is a computer-readable recording medium and may include a non-perishable mass storage device such as RAM (random access memory), ROM (read only memory), and a disk drive. Additionally, program code for controlling the RTP data integrity verification device (300) may be stored in the memory (330) temporarily or permanently.

[0039] The processor (340) can control the overall operation of the RTP data integrity verification device (300). For example, the processor (340) may be implemented in a form that optionally includes a processor, an ASIC (Application-Specific Integrated Circuit), other chipsets, logic circuits, registers, communication modems and / or data processing devices known in the art to perform the above-described operation. For example, the processor (340) may perform basic arithmetic, logic, and input / output operations and, for example, execute program code stored in memory (330). The processor (340) may store data in memory (330) or load data stored in memory (330).

[0040] A processor (340) according to one embodiment of the present invention may receive a certificate containing a public key from a first RTCP packet transmitted in correspondence with a plurality of RTP packets containing RTP data. Additionally, the processor (340) may receive a signature value from a second RTCP packet transmitted following the first RTCP packet, in which the hash value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to the public key. Additionally, the processor (340) may verify the integrity of the RTP data by comparing the hash value obtained by decrypting the signature value encrypted using the public key with the hash value of the RTP data.

[0041] These processors (340) and components of the processor (340) may be implemented to execute instructions according to the code of an operating system contained in memory (330) and the code of at least one program. Here, the components of the processor (340) may be representations of different functions of the processor (340) that are performed by the processor (340) according to instructions provided by the program code stored in memory (330).

[0042] FIG. 3 is a flowchart illustrating an RTP data integrity verification method according to an embodiment of the present invention. For example, the RTP data integrity verification method according to an embodiment of the present invention can be performed by the RTP data integrity verification device (300) shown in FIG. 1.

[0043] Referring to FIG. 3, in a method for verifying the integrity of Real-time Transport Protocol (RTP) data according to an embodiment of the present invention, in step S110, a step of receiving a certificate containing a public key from a first RTCP (RTP Control Protocol) packet transmitted in correspondence with a plurality of RTP packets containing RTP data may be performed.

[0044] An RTP data integrity verification device (300) according to one embodiment of the present invention may receive a certificate included in the profile-specific extension field of a first RTCP sender report.

[0045] In addition, an RTP data integrity verification device (300) according to one embodiment of the present invention can receive a certificate using a profile-specific extension field of a first RTCP sender report configured in the form of a TLV (type, length, value).

[0046] In step S120, an RTP data integrity verification device (300) according to an embodiment of the present invention may receive a signature value in which the hash value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to a public key from a second RTCP packet transmitted in correspondence with the plurality of RTP packets following the first RTCP packet. For example, the first RTCP packet and the second RTCP packet may be the first RTCP sender report and the second RTCP sender report, respectively.

[0047] An RTP data integrity verification device (300) according to one embodiment of the present invention can receive a signature value for RTP data included in a plurality of RTP packets corresponding to the value of the sender's packet count field of the second RTCP sender report using the profile-specific extension field of the second RTCP sender report.

[0048] In addition, an RTP data integrity verification device (300) according to one embodiment of the present invention can receive a signature value in which the value obtained by concatenating hash values ​​for each RTP data included in a plurality of RTP packets is encrypted with a private key.

[0049] In step S130, an RTP data integrity verification device (300) according to one embodiment of the present invention can verify the integrity of RTP data by comparing the hash value obtained by decrypting a signature value using a public key with the hash value of the RTP data.

[0050] An RTP data integrity verification device (300) according to one embodiment of the present invention can verify a certificate. Additionally, the RTP data integrity verification device (300) can generate a decrypted hash value by decrypting a signature value using a public key enclosed in the certificate. Additionally, the RTP data integrity verification device (300) can compare the decrypted hash value with the hash value for the RTP data.

[0051] FIG. 4 is a flowchart illustrating an RTP data integrity verification method according to another embodiment of the present invention.

[0052] Referring to FIG. 4, in step S200, the camera (100) can generate RTP data including video, audio, metadata, etc. Then, in step S210, the camera (100) can transmit an RTP packet containing the RTP data to an RTP data integrity verification device (300).

[0053] In step S220, the camera (100) can generate a first RTCP (RTP Control Protocol) packet and transmit the first RTCP (RTP Control Protocol) packet to the RTP data integrity verification device (300). For example, the camera (100) can periodically transmit the first RTCP (RTP Control Protocol) packet along with RTP packets to the RTP data integrity verification device (300). For example, the first RTCP packet may be a first RTCP sender report.

[0054] Additionally, the camera (100) can transmit a certificate containing a public key using a first RTCP (RTP Control Protocol) packet transmitted in response to a plurality of RTP packets containing RTP data. For example, the camera (100) can transmit the certificate using a profile-specific extension field of the first RTCP sender report. For example, the camera (100) can transmit the certificate using a profile-specific extension field of the first RTCP sender report configured in the form of a TLV (type, length, value).

[0055] In step S230, the RTP data integrity verification device (300) can receive a certificate from the camera (100).

[0056] In step S240, the camera (100) can transmit a second RTCP packet, which is transmitted in correspondence with a plurality of RTP packets following the first RTCP packet, to the RTP data integrity verification device (300). For example, the second RTCP packet may be a second RTCP sender report. For example, the camera can use the second RTCP sender report to transmit a signature value in which the hash value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to a public key.

[0057] In step S250, the RTP data integrity verification device (300) can receive a signature value for the RTP data included in a plurality of RTP packets corresponding to the value of the Sender's packet count field of the second RTCP sender report using the Profile-specific extension field of the second RTCP sender report. For example, the RTP data integrity verification device (300) can receive a signature value in which the value obtained by concatenating the hash values ​​for each RTP data included in the plurality of RTP packets is encrypted with a private key.

[0058] In step S260, the RTP data integrity verification device (300) can verify the integrity of the RTP data by comparing the hash value obtained by decrypting the signature value using a public key with the hash value of the RTP data.

[0059] FIG. 5 is a diagram illustrating an RTCP sender report according to an embodiment of the present invention. FIG. 6 is also a diagram illustrating a profile-specific extension field of an RTCP sender report according to an embodiment of the present invention.

[0060] First, referring to FIG. 5, the structure of an RTCP sender report packet according to one embodiment of the present invention is illustrated. For example, as illustrated in FIG. 5, a sender's packet count field (510) and a profile-specific extension field (520) are illustrated.

[0061] The RTCP sender report is transmitted by sending multiple RTP data packets and then aggregating transmission-related information values ​​for those data. In this case, the part indicating how many RTP data packets were transmitted is the sender's packet count field (510). The RTCP sender report can be transmitted according to the period determined by the camera (100).

[0062] For example, in one embodiment of the present invention, the period of the RTCP sender report can be fixed at 1 second intervals. In this case, there is an effect of easily distinguishing the interval of the falsified data.

[0063] For example, as shown in FIGS. 5 and 6, the profile-specific extension field (520) may have the format TLV(type, length, value).

[0064] The first RTCP sender report can transmit a certificate through the value field (525). In this case, the type value of the certificate is 100, and the length field can represent a value equal to the string length of the certificate (utf-8).

[0065] In one embodiment of the present invention, the first RTCP sender report may transmit a list of supported signature algorithms (e.g., ECDSA, Ed25519, RSA-PSS) along with a certificate in the form of a TLV. In this case, the RTP data integrity verification device (300) on the receiver side may select a signature algorithm from the list of signature algorithms and transmit the selected signature algorithm to the camera (100) on the sender side as an RTCP receiver report. Subsequently, the camera (100) on the sender side may generate a signature value based on the selected signature algorithm and transmit the generated signature value to the RTP data integrity verification device (300) on the receiver side as a second RTCP sender report. According to one embodiment of the present invention, there is an effect of enhancing compatibility and security in various environments.

[0066] The second RTCP sender report can transmit the signature value of the RTP data through the value field (525). In this case, the type value of the signature value may be 101. The method for generating the signature value will be explained further in the description of FIG. 7.

[0067] FIG. 7 is a diagram illustrating a method for generating a signature value for RTP data according to an embodiment of the present invention.

[0068] Referring to FIG. 7, a plurality of RTP packets (700) can be transmitted from the camera (100) to the RTP data integrity verification device (300). For example, regardless of the data type of the RTP packet (700), the RTP payload area can be used to generate a signature value.

[0069] An RTP data integrity verification device (300) according to one embodiment of the present invention may have each RTP payload hashed by Sha-256 as many times as the number of sender's packet count fields included in the RTCP sender report, and then concatenate the hash values ​​(710) in a row. For example, in the case of Rtp1, rtp2, and rtp(n), the RTP data integrity verification device (300) may concatenate H(1), H(2), and H(n) when sha256(payload(rtp(n))) = H(n). Additionally, the RTP data integrity verification device (300) may have a signature value (720) obtained from the camera (100) in which the concatenated hash values ​​(710) are encrypted with a private key (730) corresponding to the public key of the certificate. <strdata>It can be provided as a digital signature value.

[0070] In this invention, the extension field of the RTCP sender report is used, making it possible to verify the integrity of all RTP data.

[0071] The device and / or system described above may be implemented as a hardware component, a software component, and / or a combination of a hardware component and a software component. The device and component described in the embodiments may be implemented using one or more general-purpose or special-purpose computers, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA), a programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing unit may execute an operating system (OS) and one or more software applications executed on the operating system. Additionally, the processing unit may access, store, manipulate, process, and generate data in response to the execution of the software. For ease of understanding, the processing unit may be described as being used as a single unit, but those skilled in the art will understand that the processing unit may include multiple processing elements and / or multiple types of processing elements. For example, the processing unit may include multiple processors or one processor and one controller. Additionally, other processing configurations, such as parallel processors, are also possible.

[0072] Software may include computer programs, code, instructions, or a combination of one or more of these, and may configure a processing unit to operate as desired or command the processing unit independently or collectively. Software and / or data may be permanently or temporarily embodied in any type of machine, component, physical device, virtual equipment, computer storage medium or device, or transmitted signal wave so as to be interpreted by the processing unit or to provide instructions or data to the processing unit. Software may be distributed over networked computer systems and may be stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

[0073] The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc., either alone or in combination. The program instructions recorded on the medium may be those specifically designed and configured for the embodiment, or they may be those known and available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes; optical recording media such as CD-ROMs and DVDs; magneto-optical media such as floptical disks; and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, and flash memory. Examples of program instructions include machine code, such as that generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc. The hardware devices described above may be configured to operate as one or more software modules to perform the operation of the embodiment, and vice versa.

[0074] Although the embodiments have been described above with reference to limited examples and drawings, those skilled in the art can make various modifications and variations from the description above. For example, suitable results can be achieved even if the described techniques are performed in a different order than described, and / or the components of the described system, structure, device, circuit, etc. are combined or assembled in a form different from described, or replaced or substituted by other components or equivalents.

[0075] Therefore, other implementations, other embodiments, and equivalents to the claims also fall within the scope of the claims set forth below.< / strdata>

Claims

1. Regarding the method for verifying the integrity of RTP (Real-time Transport Protocol) data, A step of receiving a certificate containing a public key from a first RTCP (RTP Control Protocol) packet transmitted in correspondence with a plurality of RTP packets containing RTP data; A step of receiving a signature value in which the hash value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to the public key from a second RTCP packet transmitted in correspondence with the plurality of RTP packets following the first RTCP packet; and A method for verifying the integrity of RTP data, comprising the step of verifying the integrity of RTP data by comparing the hash value obtained by decrypting the signature value using the public key with the hash value of the RTP data.

2. In Paragraph 1, A method for verifying RTP data integrity, wherein the first RTCP packet and the second RTCP packet are, respectively, the first RTCP sender report and the second RTCP sender report.

3. In Paragraph 2, A method for verifying RTP data integrity, wherein the step of receiving the certificate includes the step of receiving the certificate included in the profile-specific extension field of the first RTCP sender report.

4. In Paragraph 2, A method for verifying RTP data integrity, wherein the step of receiving the certificate includes the step of receiving the certificate using a profile-specific extension field of the first RTCP sender report configured in the form of a TLV (type, length, value).

5. In Paragraph 3, A method for verifying RTP data integrity, wherein the step of receiving the signature value comprises receiving the signature value for the RTP data included in the plurality of RTP packets corresponding to the value of the sender's packet count field of the second RTCP sender report using the profile-specific extension field of the second RTCP sender report.

6. In Paragraph 5, A method for verifying RTP data integrity, wherein the step of receiving the signature value includes receiving the signature value in which the value obtained by concatenating hash values ​​for each RTP data included in the plurality of RTP packets is encrypted with the private key.

7. In Paragraph 5, The step of verifying the integrity mentioned above is, Step of verifying the above certificate; A step of decrypting the signature value using the public key enclosed in the certificate to generate the decrypted hash value; and A method for verifying RTP data integrity, comprising the step of comparing the decrypted hash value and the hash value of the RTP data.

8. An RTP data integrity verification device that receives RTP (Real-time Transport Protocol) data from a camera, Includes a processor, The above processor receives a certificate containing a public key from a first RTCP packet transmitted in correspondence with a plurality of RTP packets containing RTP data, and Receiving a signature value in which the hash value of the RTP data included in the plurality of RTP packets is encrypted with a private key corresponding to the public key from a second RTCP packet transmitted following the first RTCP packet, and An RTP data integrity verification device that verifies the integrity of RTP data by comparing the hash value obtained by decrypting the encrypted signature value using the above public key with the hash value of the above RTP data.

Images