Monitoring video data transmission method, device, terminal equipment and storage medium
By using the MAC address and participation characteristics of the participating terminals in the video network system to generate encryption keys, the monitoring video data is encrypted and decrypted, solving the problem of poor video data security and achieving higher data transmission security.
Patent Information
- Application Number
- CN202010917557.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2020-09-03
- Publication Date
- 2025-01-10
- Estimated Expiration
- 2040-09-03
AI Technical Summary
In existing video conferencing systems, video data encryption methods are weak, resulting in poor security and easy leakage.
The target video encryption key is generated using the MAC address and participation characteristics of the participating terminal based on the video network. The monitoring video data is then encrypted and decrypted using the corresponding decryption key, ensuring that only a matching terminal can decrypt the video data.
It improves the security of video data transmission, avoids video data leakage, and enhances the security of data transmission.
Smart Images

Figure CN112165596B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of visual networking, and in particular to a monitoring video data transmission method, device, terminal equipment and storage medium. Background Art
[0002] In the field of video conferencing systems, emphasis is usually placed on the number of concurrent calls, video clarity, system usability, and system stability of the video conferencing system. These indicators are important components of an excellent video conferencing system. However, the security of the video also needs to be considered. Currently, weak encryption methods such as MD5 encryption or plain text transmission are used to encrypt video data, which can easily lead to video data leakage and poor security. Summary of the invention
[0003] In view of the above problems, embodiments of the present invention are proposed to provide a monitoring video data transmission method, apparatus, terminal device and storage medium that overcome the above problems or at least partially solve the above problems.
[0004] In a first aspect, an embodiment of the present invention provides a monitoring video data transmission method, the method is applied to a streaming media server in a visual network data encryption system, the visual network data encryption system also includes a conference scheduling terminal, the method includes:
[0005] When the visual network conference participant terminal successfully joins the conference, receiving the acquisition request sent by the conference scheduling terminal, and sending the acquisition request to the monitoring device;
[0006] Receiving first monitoring video data returned by the monitoring device;
[0007] The first monitoring video data is encrypted according to a preset destination video encryption key to obtain encrypted second monitoring video data; the preset destination video encryption key is obtained by encrypting according to the MAC address and conference characteristics of the visual network conference participant terminal, and the conference characteristics are obtained according to the conference site picture;
[0008] The second monitoring video data is sent to the visual network conference participant terminal so that the visual network conference participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, wherein the target video encryption key corresponds to the target video decryption key.
[0009] Optionally, the visual network data encryption system further includes a conference management server, and the preset destination video encryption key is obtained in the following manner:
[0010] Receive a joining key sent by the conference management server, where the joining key is obtained by the conference management server through encryption and calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, wherein the conference information includes conference ID information;
[0011] Parsing the membership key to obtain the MAC address of the visual network participant terminal and the participant characteristics;
[0012] The MAC address of the visual network participant terminal and the participant characteristics are encrypted and calculated to obtain the target video encryption key.
[0013] Optionally, the encrypting and calculating the MAC address of the visual network conference participant terminal and the conference participant feature to obtain the destination video encryption key includes:
[0014] Convert the MAC address of the visual network conference participant terminal into a first binary string;
[0015] Converting the conference attendance feature into a second binary string;
[0016] Performing an XOR operation on the first binary string and the second binary string to obtain the target video encryption key;
[0017] Correspondingly,
[0018] The joining key is obtained by the conference management server through encryption calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, and includes:
[0019] The conference management server converts the MAC address of the visual network conference participant terminal and the conference participant feature into a third binary string;
[0020] The conference management server converts the conference ID information into a fourth binary string;
[0021] The conference management server performs an XOR operation on the third binary string and the fourth binary string to obtain the conference joining key.
[0022] Optionally, the visual network data encryption system further includes a monitoring access server and a network management server, and the first monitoring video data is encrypted according to a preset destination video encryption key to obtain encrypted second monitoring video data, including:
[0023] Parsing the first monitoring video data to obtain I frame data in the first monitoring video data;
[0024] Performing an XOR operation on the target video encryption key and the I frame data to obtain I frame encrypted video data;
[0025] The first conference flag information is added to the I frame encrypted video data to obtain the encrypted second monitoring video data, wherein the first conference flag information includes the first ID information of the conference, the first ID information of the visual network participating terminal and the first ID information of the monitoring device, the first ID information of the monitoring device is the ID number assigned to the monitoring device by the monitoring access server, and the first ID information of the visual network participating terminal is the ID number assigned to the visual network number of the visual network participating terminal by the network management server.
[0026] Optionally, the visual network participant terminal decodes the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data, including:
[0027] The visual network conference participant terminal generates a destination decryption key according to the MAC address of the visual network conference participant terminal and the conference participant feature;
[0028] The visual network conference participant terminal obtains the second conference mark information, wherein the second conference mark information includes the second ID information of the conference, the second ID information of the visual network conference participant terminal, and the second ID information of the monitoring device;
[0029] The visual network conference participant terminal parses the second monitoring video data to obtain the first ID information of the conference, the first ID information of the visual network conference participant terminal and the first ID information of the monitoring device;
[0030] comparing the second conference flag information with the first conference flag information;
[0031] If the second conference flag information is the same as the first conference flag information, the destination decryption key is used to decrypt the I-frame encrypted video data in the second monitoring video data to obtain the first monitoring video data.
[0032] Optionally, the visual network conference participant terminal obtains second conference flag information, wherein the second conference flag information includes the second ID information of the conference, the second ID information of the visual network conference participant terminal, and the second ID information of the monitoring device, including:
[0033] The visual network conference participant terminal receives the heartbeat data packet sent by the network management server;
[0034] The visual network conference participant terminal parses the heartbeat data packet to obtain the second ID information of the visual network conference participant terminal;
[0035] The visual network conference participant terminal receives the second conference ID information sent by the conference scheduling terminal and the second ID information of the monitoring device.
[0036] Optionally, before sending the acquisition request of the surveillance video to the surveillance device, the method further includes:
[0037] The visual network conference participant terminal sends a network access authentication request to the network management server;
[0038] The visual network conference participant terminal receives a handshake response returned by the network management server;
[0039] The visual network conference participant terminal sends a heartbeat data packet to the network management server;
[0040] In the case of reserving a video network conference on the conference scheduling terminal, the video network conference participating terminal receives a conference joining request sent by the conference management server; wherein the conference joining request is obtained from the conference scheduling terminal;
[0041] The visual network conference participant terminal returns a successful conference joining response to the conference management server.
[0042] In a second aspect, an embodiment of the present invention provides a monitoring video data transmission device, the device is applied to a streaming media server in a visual network data encryption system, the visual network data encryption system also includes a conference scheduling terminal, and the device includes:
[0043] An acquisition module, used for receiving an acquisition request sent by the conference scheduling terminal when the visual network conference participant terminal successfully joins the conference, and sending the acquisition request to the monitoring device;
[0044] A receiving module, used for receiving the first monitoring video data returned by the monitoring device;
[0045] An encryption module, used to encrypt the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; the preset destination video encryption key is obtained by encrypting according to the MAC address and conference characteristics of the visual network conference participant terminal, and the conference characteristics are obtained according to the conference site picture;
[0046] A sending module is used to send the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, wherein the target video encryption key and the target video decryption key correspond to each other.
[0047] Optionally, the visual network data encryption system further includes a conference management server, and the streaming media server further includes a video encryption key calculation module, and the video encryption key calculation module is used to:
[0048] Receive a joining key sent by the conference management server, where the joining key is obtained by the conference management server through encryption and calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, wherein the conference information includes conference ID information;
[0049] Parsing the membership key to obtain the MAC address of the visual network participant terminal and the participant characteristics;
[0050] The MAC address of the visual network participant terminal and the participant characteristics are encrypted and calculated to obtain the target video encryption key.
[0051] Optionally, the video encryption key calculation module is specifically used to:
[0052] Convert the MAC address of the visual network conference participant terminal into a first binary string;
[0053] Converting the conference attendance feature into a second binary string;
[0054] Performing an XOR operation on the first binary string and the second binary string to obtain the target video encryption key;
[0055] Correspondingly, the conference management server includes a joining key calculation module, and the joining key calculation module is used to:
[0056] Converting the MAC address of the visual network conference participant terminal and the conference participant feature into a third binary string;
[0057] Converting the conference ID information into a fourth binary string;
[0058] An XOR operation is performed on the third binary character string and the fourth binary character string to obtain the membership key.
[0059] Optionally, the encryption module is used to:
[0060] Parsing the first monitoring video data to obtain I frame data in the first monitoring video data;
[0061] Performing an XOR operation on the target video encryption key and the I frame data to obtain I frame encrypted video data;
[0062] The first conference flag information is added to the I frame encrypted video data to obtain the encrypted second monitoring video data, wherein the first conference flag information includes the first ID information of the conference, the first ID information of the visual network participating terminal and the first ID information of the monitoring device, the first ID information of the monitoring device is the ID number assigned to the monitoring device by the monitoring access server, and the first ID information of the visual network participating terminal is the ID number assigned to the visual network number of the visual network participating terminal by the network management server.
[0063] Optionally, the visual network conference participant terminal includes a decryption module, and the decryption module is used to:
[0064] Generate a destination decryption key according to the MAC address of the visual network participant terminal and the participant characteristics;
[0065] Acquire the second conference flag information, wherein the second conference flag information includes the second ID information of the conference, the second ID information of the visual network participating terminal, and the second ID information of the monitoring device;
[0066] Parsing the second monitoring video data to obtain the first ID information of the conference, the first ID information of the visual network conference participating terminal, and the first ID information of the monitoring device;
[0067] comparing the second conference flag information with the first conference flag information;
[0068] If the second conference flag information is the same as the first conference flag information, the destination decryption key is used to decrypt the I-frame encrypted video data in the second monitoring video data to obtain the first monitoring video data.
[0069] Optionally, the decryption module is specifically used for:
[0070] The visual network conference participant terminal receives the heartbeat data packet sent by the network management server;
[0071] The visual network conference participant terminal parses the heartbeat data packet to obtain the second ID information of the visual network conference participant terminal;
[0072] The visual network conference participant terminal receives the second conference ID information sent by the conference scheduling terminal and the second ID information of the monitoring device.
[0073] Optionally, the visual network conference participant terminal further includes a network access module, and the network access module is used to:
[0074] Sending a network access authentication request to the network management server;
[0075] Receiving a handshake response returned by the network management server;
[0076] Sending a heartbeat data packet to the network management server;
[0077] Optionally, the visual network conference participant terminal further includes a conference joining module, and the conference joining module is used to:
[0078] In the case of reserving a video network conference on the conference scheduling terminal, receiving a conference joining request sent by a conference management server; wherein the conference joining request is obtained from the conference scheduling terminal;
[0079] A response indicating successful joining of the conference is returned to the conference management server.
[0080] In a third aspect, an embodiment of the present invention provides a terminal device, including: at least one processor and a memory;
[0081] The memory stores a computer program; and the at least one processor executes the computer program stored in the memory to implement the monitoring video data transmission method provided in the first aspect.
[0082] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed, the monitoring video data transmission method provided in the first aspect is implemented.
[0083] The embodiments of the present invention include the following advantages:
[0084] The monitoring video data transmission method, device, terminal device and storage medium provided by the embodiments of the present invention receive an acquisition request sent by a conference scheduling terminal when a visual network participant terminal successfully joins a meeting, and send the acquisition request to a monitoring device; receive first monitoring video data returned by the monitoring device; encrypt the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; send the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data obtained from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the participant site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding leakage of video data and improving the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS
[0085] Figure 1 is a flowchart of a monitoring video data transmission method embodiment of the present invention;
[0086] Figure 2 is a flowchart of another monitoring video data transmission method embodiment of the present invention;
[0087] Figure 3 is a flowchart of another embodiment of a monitoring video data transmission method of the present invention;
[0088] Figure 4 It is a structural block diagram of an embodiment of a monitoring video data transmission device of the present invention;
[0089] Figure 5 It is a structural schematic diagram of a terminal device of the present invention. DETAILED DESCRIPTION
[0090] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.
[0091] The visual Internet is an important milestone in the development of the Internet. It is a real-time network that can realize real-time transmission of high-definition video and push many Internet applications towards high-definition video and high-definition face-to-face communication.
[0092] The visual network adopts real-time high-definition video exchange technology. It can integrate the required services such as high-definition video conferencing, video monitoring, intelligent monitoring analysis, emergency command, digital radio and television, delayed TV, online teaching, live broadcast, VOD on demand, TV mail, personalized recording (PVR), intranet (self-operated) channels, intelligent video broadcast control, information release and dozens of other video, voice, picture, text, communication, data and other services on a single system platform, and realize high-definition quality video playback through TV or computer.
[0093] The glossary is explained as follows:
[0094] Visual network: A real-time, high-bandwidth transmission network based on Ethernet hardware, used for high-speed transmission of high-definition video and dedicated protocols.
[0095] Monitoring access service: The visual network monitoring access service system is a core device that connects Internet monitoring resources to the visual network, and is an important link in the visual network in monitoring integration applications. It supports access to monitoring front-end equipment, video monitoring systems, and video monitoring networking platforms from different manufacturers, has low-latency video and audio protocol conversion capabilities, and realizes the integration and real-time scheduling of monitoring resources in the visual network.
[0096] Streaming media server: referred to as streaming media, its main function is to collect, cache, schedule, transmit and play the media content of audio, video and multimedia files transmitted in the network.
[0097] Conference management service: It is an important support service for realizing the operation-level video conferencing of the visual network. The system can support a large number of users to conduct video conferences concurrently and ensure the effectiveness of the conference. The system supports multiple methods for conference reservation, review, scheduling and other functions. The system supports hierarchical conference management, distributed deployment, full network reservation, and display and monitoring of conference status, and supports super administrators to forcibly close "low priority meetings". System functions include user management, device management, group management, permission management, conference reservation, conference review, conference scheduling, operation record query, real-time information and historical statistics. The visual network conference management system is an important tool for visual network video conferencing system maintenance personnel to manage and ensure the conference business of the entire network.
[0098] An embodiment of the present invention provides a monitoring video data transmission method, which is used to encrypt monitoring video data and send it to a visual network participant terminal, and the visual network participant terminal decrypts the encrypted video data using a decryption key. The execution subject of this embodiment is a streaming media server in a visual network data encryption system.
[0099] Reference Figure 1 , shows a flowchart of a monitoring video data transmission method embodiment of the present invention, the method can be applied to a streaming media server in a visual network data encryption system, the visual network data encryption system also includes a conference scheduling terminal, and specifically can include the following steps:
[0100] S101, when the visual network conference participant terminal successfully joins the conference, receiving an acquisition request sent by the conference scheduling terminal, and sending the acquisition request to a monitoring device;
[0101] Specifically, an embodiment of the present invention provides a visual network data encryption system, including a conference scheduling terminal, a conference management server, and a streaming media server, which plays the monitoring video data of the monitoring device on the visual network conference terminal. In the specific embodiment, the visual network conference terminal is pre-joined to the conference, the conference scheduling terminal sends a request to obtain the monitoring video data to the conference management server, the conference management server then sends the acquisition request to the streaming media server, the streaming media server then sends the acquisition request to the monitoring access server, and the monitoring access server sends the acquisition request to the monitoring device;
[0102] S102, receiving first monitoring video data returned by the monitoring device;
[0103] Specifically, the monitoring device sends the first monitoring video data to the monitoring access server, and the monitoring access server then sends the first monitoring video data to the streaming media server.
[0104] S103, encrypting the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; the preset destination video encryption key is obtained by encrypting according to the MAC address and conference characteristics of the visual network conference participant terminal, and the conference characteristics are obtained according to the conference site picture;
[0105] Specifically, the streaming media server performs encryption calculations in advance based on the MAC address and meeting characteristics of the visual network participant terminal to obtain the target video encryption key. When the visual network participant terminal successfully joins the meeting, the visual network participant terminal collects pictures of the meeting site through the camera and processes the pictures of the meeting site to obtain the meeting characteristics, where the meeting characteristics can be human characteristics, for example, a meeting can only be held when a certain person is present, or object characteristics, for example, there is a slogan at a certain location at the meeting site, or there is an object at a specific location.
[0106] The streaming media server encrypts the first monitoring video data according to the destination video encryption key to obtain encrypted second monitoring video data.
[0107] S104. Send the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, wherein the target video encryption key corresponds to the target video decryption key.
[0108] Specifically, the streaming media server sends the second monitoring video data to the visual network conference terminal, and the visual network conference terminal encrypts the data according to its own MAC address and the characteristics of the participants at the conference site, obtains the destination video decryption key, and uses the destination video decryption key to decrypt the second monitoring video data to obtain the first monitoring video data, and displays the first monitoring video data on the visual network conference terminal. The first monitoring video data can be decrypted only when the destination video decryption key and the destination video encryption key correspond to each other;
[0109] If the MAC address of the visual network conference terminal and / or the conference characteristics of the conference site change, the visual network conference terminal will not be able to decrypt the encrypted second monitoring video data using the destination video decryption key generated based on the MAC address of the visual network conference terminal and the conference characteristics. In this case, if the second monitoring video data is mistakenly sent to the visual network conference terminal, the visual network conference terminal will not be able to obtain the destination video decryption key to decrypt the second monitoring video data, thereby avoiding leakage of the monitoring video data and improving the security of data transmission.
[0110] The monitoring video data transmission method provided by the embodiment of the present invention receives an acquisition request sent by a conference scheduling terminal when a visual network participant terminal successfully joins a conference, and sends the acquisition request to a monitoring device; receives first monitoring video data returned by the monitoring device; encrypts the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; sends the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data obtained from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the conference site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding leakage of video data and improving the security of data transmission.
[0111] Another embodiment of the present invention further supplements the monitoring video data transmission method provided in the above embodiment.
[0112] like Figure 2 As shown, a flowchart of another monitoring video data transmission method embodiment of the present invention is shown, which is applied to a streaming media server in a visual network data encryption system, wherein the visual network data encryption system also includes a conference scheduling terminal, a conference management server, a monitoring access server and a network management server. The monitoring video data transmission method includes:
[0113] S201, network access authentication of video conferencing terminal;
[0114] In step S201, it specifically includes:
[0115] S2011, the video network participant terminal sends a network access authentication request to the network management server;
[0116] S2012, the visual network conference participant terminal receives a handshake response returned by the network management server;
[0117] S2013, the video network conference participant terminal sends a heartbeat data packet to the network management server;
[0118] If the network is normal, the video network conference terminal receives the handshake response returned by the network management server. If the network cannot be connected, the video network conference terminal cannot receive the handshake response returned by the network management server.
[0119] S202, video network conference terminal entry authentication;
[0120] When all video networking terminals are connected to the network, the video networking terminals in the meeting need to undergo membership authentication. The specific membership authentication includes:
[0121] Reserving a video network conference on a conference scheduling terminal, the video network conference includes video network numbers of multiple video network terminals, the conference scheduling terminal sends a conference joining request to a conference management server, and the conference management server sends a conference joining request to the video network terminal corresponding to the video network number;
[0122] The video network conference participant terminal returns a successful conference joining response to the conference management server.
[0123] S203: After the meeting authentication is completed, the meeting assistant collects meeting characteristics and sends the meeting characteristics to the conference management server.
[0124] Specifically, when the visual network conference participant terminal completes the meeting authentication, the conference participant assistant on the visual network conference participant terminal controls the camera connected to the visual network conference participant terminal to turn on, and the camera collects conference scene pictures of each participant in the meeting. The visual network conference participant terminal processes each conference scene picture to obtain the conference feature of each conference scene picture, and the visual network conference participant terminal sends the conference feature to the conference management server, where the conference feature includes the location information of a certain area in the conference scene picture and image information corresponding to the location information, such as information of each pixel point.
[0125] S204, the conference management server sends the conference participant characteristics to the conference scheduling terminal, and the conference scheduling terminal displays the conference participant characteristics on the interface;
[0126] Specifically, the conference scheduling terminal is installed with the Pamir fusion video scheduling platform, and the conference scheduling terminal displays the meeting characteristics through the Pamir fusion video scheduling platform, for example, displaying certain slogans in the meeting site picture or a person who must attend the meeting;
[0127] S205. The host judges the displayed conference participant characteristics on the conference scheduling terminal, and the conference scheduling terminal sends a confirmation result to the conference management server. The confirmation result includes the conference participant characteristics, the MAC address of the visual network conference participant terminal, and conference information.
[0128] Specifically, if the host is sure to attend the conference site, he clicks the "Confirm" button on the Pamir Fusion Video Scheduling Platform on the conference scheduling terminal, and the conference scheduling terminal sends the confirmation result to the conference management server.
[0129] S206, the conference management server encrypts and calculates the MAC address of the video network participant terminal, the participant characteristics and the conference information to obtain a joining key, and sends the joining key to the streaming media server;
[0130] Step S206 specifically includes:
[0131] Step A1: The conference management server converts the MAC address and conference characteristics of the visual network conference participant terminal into a third binary string;
[0132] Step A2: The conference management server converts the conference ID information into a fourth binary string, wherein the conference information includes the conference ID information;
[0133] Step A3: The conference management server performs an XOR operation on the third binary string and the fourth binary string to obtain a conference joining key;
[0134] Step A4: Send the membership key to the streaming media server.
[0135] S207, the streaming media determines the video encryption key according to the membership key;
[0136] The specific step S207 includes:
[0137] Step B1, receiving a joining key sent by the conference management server, wherein the joining key is obtained by the conference management server through encryption and calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, wherein the conference information includes conference ID information;
[0138] Step B2, parsing the membership key to obtain the MAC address of the visual network participant terminal and the participant characteristics;
[0139] Step B3: encrypt and calculate the MAC address of the visual network participant terminal and the participant characteristics to obtain the target video encryption key.
[0140] The specific step B3 includes:
[0141] Step B31, converting the MAC address of the video network participant terminal into a first binary string;
[0142] Step B32, converting the conference participant feature into a second binary string;
[0143] Step B33, performing an XOR operation on the first binary string and the second binary string to obtain the target video encryption key.
[0144] S208, the streaming media server receives the acquisition request for monitoring resources sent by the conference scheduling terminal, and sends the acquisition request to the monitoring device;
[0145] S209, receiving first monitoring video data returned by the monitoring device;
[0146] Since steps S208 to S209 are Figure 1 Steps S101 and S102 in the illustrated embodiment are identical. Figure 1 Steps S101 to S102 have been described in detail in the description, so steps S208 to S209 will not be described again here.
[0147] S210, encrypting the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data;
[0148] The specific step S210 includes:
[0149] Step C1: The streaming media server parses the first monitoring video data to obtain I frame data in the first monitoring video data;
[0150] Step C2, performing an XOR operation on the target video encryption key and the I frame data to obtain I frame encrypted video data;
[0151] Step C3, adding the first conference flag information to the I frame encrypted video data to obtain the encrypted second monitoring video data, wherein the first conference flag information includes the first ID information of the conference, the first ID information of the visual network participating terminal and the first ID information of the monitoring device, the first ID information of the monitoring device is the ID number assigned to the monitoring device by the monitoring access server, and the first ID information of the visual network participating terminal is the ID number assigned to the visual network number of the visual network participating terminal by the network management server.
[0152] S211. Send the second monitoring video data to the visual network participant terminal so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data, wherein the destination video encryption key corresponds to the destination video decryption key.
[0153] Specifically, the visual network participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, including:
[0154] Step D1, the visual network conference participant terminal generates a destination decryption key according to the MAC address of the visual network conference participant terminal and the conference participant feature;
[0155] Step D2, the visual network conference participant terminal obtains the second conference mark information, wherein the second conference mark information includes the second ID information of the conference, the second ID information of the visual network conference participant terminal and the second ID information of the monitoring device;
[0156] The specific step D2 includes:
[0157] Step D21, the video network participant terminal receives the heartbeat data packet sent by the network management server;
[0158] Step D22, the visual network conference participant terminal parses the heartbeat data packet to obtain the second ID information of the visual network conference participant terminal;
[0159] Step D23, the visual network participant terminal receives the second ID information of the conference sent by the conference scheduling terminal and the second ID information of the monitoring device.
[0160] Step D3, the visual network conference participant terminal parses the second monitoring video data to obtain the first ID information of the conference, the first ID information of the visual network conference participant terminal and the first ID information of the monitoring device;
[0161] Step D4, comparing the second conference flag information with the first conference flag information;
[0162] Step D5: If the second conference flag information is the same as the first conference flag information, the I frame encrypted video data in the second monitoring video data is decrypted using the destination decryption key to obtain the first monitoring video data.
[0163] Figure 3 FIG. 1 is a flowchart of another embodiment of a monitoring video data transmission method of the present invention. Figure 3 As shown, the visual network data encryption system provided by the embodiment of the present invention includes a streaming media server, a monitoring access server, a conference scheduling terminal, a conference management server and a network management server (in Figure 3 The conference scheduling terminal is provided with a Pamir fusion video scheduling platform, and the monitoring access server is connected to the monitoring device, for example Figure 3 In the monitoring device 1, monitoring device 2, monitoring device 3 and monitoring device 4, visual network terminals A, B, and C are connected to the streaming media server and the conference management server respectively. In the system, each device is connected to the network management server, and each visual network device is pre-connected to the visual network. The visual network devices include other devices except the monitoring devices. Under the premise of ensuring successful network access, the conference management server will join each visual network terminal. The streaming media server uses a pre-calculated encryption key to encrypt the first monitoring video data sent by the monitoring device, and sends the encrypted second monitoring video data to the visual network terminal, that is, the visual network conference terminal. The visual network conference terminal then decrypts the second monitoring video data according to the decryption key, obtains the first monitoring video data, and displays the first monitoring video data.
[0164] The specific operations and steps performed by each visual networking device have been introduced in detail in the above-mentioned embodiments and will not be repeated here.
[0165] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.
[0166] The monitoring video data transmission method provided by the embodiment of the present invention receives an acquisition request sent by a conference scheduling terminal when a visual network participant terminal successfully joins a conference, and sends the acquisition request to a monitoring device; receives first monitoring video data returned by the monitoring device; encrypts the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; sends the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data obtained from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the conference site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding leakage of video data and improving the security of data transmission.
[0167] Another embodiment of the present invention provides a monitoring video data transmission device, which is used to execute the monitoring video data transmission method provided in the above embodiment.
[0168] Reference Figure 4 , shows a structural block diagram of an embodiment of a surveillance video data transmission device of the present invention, which can be applied to a streaming media server in a visual network data encryption system, wherein the visual network data encryption system also includes a conference scheduling terminal, which can specifically include the following modules: an acquisition module 401, a receiving module 402, an encryption module 403 and a sending module 404, wherein:
[0169] The acquisition module 401 is used to receive the acquisition request sent by the conference scheduling terminal when the visual network conference participant terminal successfully joins the conference, and send the acquisition request to the monitoring device;
[0170] The receiving module 402 is used to receive the first monitoring video data returned by the monitoring device;
[0171] The encryption module 403 is used to encrypt the first monitoring video data according to a preset target video encryption key to obtain the encrypted second monitoring video data; the preset target video encryption key is obtained by encrypting according to the MAC address and the conference characteristics of the visual network conference participant terminal, and the conference characteristics are obtained according to the conference site picture;
[0172] The sending module 404 is used to send the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, wherein the target video encryption key and the target video decryption key correspond to each other.
[0173] The monitoring video data transmission device provided by the embodiment of the present invention receives an acquisition request sent by a conference scheduling terminal when a visual network participant terminal successfully joins a conference, and sends the acquisition request to a monitoring device; receives first monitoring video data returned by the monitoring device; encrypts the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; sends the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data acquired from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the conference site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding leakage of video data and improving the security of data transmission.
[0174] Another embodiment of the present invention further supplements the monitoring video data transmission device provided in the above embodiment.
[0175] Optionally, the visual network data encryption system further includes a conference management server, and the streaming media server further includes a video encryption key calculation module, and the video encryption key calculation module is used to:
[0176] Receive a joining key sent by the conference management server, where the joining key is obtained by the conference management server through encryption and calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, wherein the conference information includes conference ID information;
[0177] Parsing the membership key to obtain the MAC address of the visual network participant terminal and the participant characteristics;
[0178] The MAC address of the visual network participant terminal and the participant characteristics are encrypted and calculated to obtain the target video encryption key.
[0179] Optionally, the video encryption key calculation module is specifically used to:
[0180] Convert the MAC address of the visual network conference participant terminal into a first binary string;
[0181] Converting the conference attendance feature into a second binary string;
[0182] Performing an XOR operation on the first binary string and the second binary string to obtain the target video encryption key;
[0183] Correspondingly, the conference management server includes a joining key calculation module, and the joining key calculation module is used to:
[0184] Converting the MAC address of the visual network conference participant terminal and the conference participant feature into a third binary string;
[0185] Converting the conference ID information into a fourth binary string;
[0186] An XOR operation is performed on the third binary character string and the fourth binary character string to obtain the membership key.
[0187] Optionally, the encryption module is used to:
[0188] Parsing the first monitoring video data to obtain I frame data in the first monitoring video data;
[0189] Performing an XOR operation on the target video encryption key and the I frame data to obtain I frame encrypted video data;
[0190] The first conference flag information is added to the I frame encrypted video data to obtain the encrypted second monitoring video data, wherein the first conference flag information includes the first ID information of the conference, the first ID information of the visual network participating terminal and the first ID information of the monitoring device, the first ID information of the monitoring device is the ID number assigned to the monitoring device by the monitoring access server, and the first ID information of the visual network participating terminal is the ID number assigned to the visual network number of the visual network participating terminal by the network management server.
[0191] Optionally, the visual network conference participant terminal includes a decryption module, and the decryption module is used to:
[0192] Generate a destination decryption key according to the MAC address of the visual network participant terminal and the participant characteristics;
[0193] Acquire the second conference flag information, wherein the second conference flag information includes the second ID information of the conference, the second ID information of the visual network participating terminal, and the second ID information of the monitoring device;
[0194] Parsing the second monitoring video data to obtain the first ID information of the conference, the first ID information of the visual network conference participating terminal, and the first ID information of the monitoring device;
[0195] comparing the second conference flag information with the first conference flag information;
[0196] If the second conference flag information is the same as the first conference flag information, the destination decryption key is used to decrypt the I-frame encrypted video data in the second monitoring video data to obtain the first monitoring video data.
[0197] Optionally, the decryption module is specifically used for:
[0198] The visual network conference participant terminal receives the heartbeat data packet sent by the network management server;
[0199] The visual network conference participant terminal parses the heartbeat data packet to obtain the second ID information of the visual network conference participant terminal;
[0200] The visual network conference participant terminal receives the second conference ID information sent by the conference scheduling terminal and the second ID information of the monitoring device.
[0201] Optionally, the visual network conference participant terminal further includes a network access module, and the network access module is used to:
[0202] Sending a network access authentication request to the network management server;
[0203] Receiving a handshake response returned by the network management server;
[0204] Sending a heartbeat data packet to the network management server;
[0205] Optionally, the visual network conference participant terminal further includes a conference joining module, and the conference joining module is used to:
[0206] In the case of reserving a video network conference on the conference scheduling terminal, receiving a conference joining request sent by a conference management server; wherein the conference joining request is obtained from the conference scheduling terminal;
[0207] A response indicating successful joining of the conference is returned to the conference management server.
[0208] It should be noted that each implementable method in this embodiment may be implemented separately, or may be implemented in combination in any manner without conflict, and this application is not limited thereto.
[0209] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0210] The monitoring video data transmission device provided by the embodiment of the present invention receives an acquisition request sent by a conference scheduling terminal when a visual network participant terminal successfully joins a conference, and sends the acquisition request to a monitoring device; receives first monitoring video data returned by the monitoring device; encrypts the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; sends the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data acquired from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the conference site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding leakage of video data and improving the security of data transmission.
[0211] Yet another embodiment of the present invention provides a terminal device for executing the monitoring video data transmission method provided in the above embodiment.
[0212] Figure 5 is a schematic diagram of the structure of a terminal device of the present invention, such as Figure 5 As shown, the terminal device includes: at least one processor 501 and a memory 502;
[0213] The memory stores a computer program; and the at least one processor executes the computer program stored in the memory to implement the monitoring video data transmission method provided in the above embodiment.
[0214] The terminal device provided in this embodiment receives an acquisition request sent by a conference scheduling terminal when the visual network participant terminal successfully joins the conference, and sends the acquisition request to the monitoring device; receives the first monitoring video data returned by the monitoring device; encrypts the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; sends the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data obtained from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the conference site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding leakage of video data and improving the security of data transmission.
[0215] Yet another embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed, the monitoring video data transmission method provided in any of the above embodiments is implemented.
[0216] According to the computer-readable storage medium of the present embodiment, when the visual network participant terminal successfully joins the meeting, the acquisition request sent by the conference scheduling terminal is received, and the acquisition request is sent to the monitoring device; the first monitoring video data returned by the monitoring device is received; according to the preset destination video encryption key, the first monitoring video data is encrypted to obtain the encrypted second monitoring video data; the second monitoring video data is sent to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the destination video decryption key to obtain the first monitoring video data. In this way, the MAC address and participant characteristics of the visual network participant terminal are used to generate a video encryption key, and the video data obtained from the monitoring device is encrypted. The visual network participant terminal generates a decryption key according to its own MAC address and the participant characteristics of the conference site, and decrypts the encrypted video data. If the decryption key does not match the encryption key, the encrypted video data cannot be decrypted, thereby avoiding the leakage of video data and improving the security of data transmission.
[0217] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.
[0218] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.
[0219] The embodiments of the present invention are described with reference to flowcharts and / or block diagrams of methods, electronic devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing electronic device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing electronic device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0220] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing electronic device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0221] These computer program instructions can also be loaded onto a computer or other programmable data processing electronic device so that a series of operating steps are executed on the computer or other programmable electronic device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable electronic device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.
[0222] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.
[0223] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprises" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or electronic device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or electronic device. In the absence of further restrictions, the elements defined by the sentence "comprises one..." do not exclude the presence of other identical elements in the process, method, article or electronic device including the elements.
[0224] The above is a detailed introduction to a monitoring video data transmission method and a monitoring video data transmission device provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.
Claims
1. A monitoring video data transmission method, characterized in that: A streaming media server applied to a visual network data encryption system, wherein the visual network data encryption system also includes a conference scheduling terminal, and the method includes: When the visual network conference participant terminal successfully joins the conference, receiving the acquisition request sent by the conference scheduling terminal, and sending the acquisition request to the monitoring device; Receiving first monitoring video data returned by the monitoring device; The first monitoring video data is encrypted according to a preset destination video encryption key to obtain encrypted second monitoring video data; the preset destination video encryption key is obtained by encrypting according to the MAC address and conference characteristics of the visual network conference participant terminal, the conference characteristics are obtained according to the conference site picture, and the conference characteristics include: human characteristics, object characteristics, and location information of a certain area in the conference site picture and image information corresponding to the location information; The second monitoring video data is sent to the visual network conference participant terminal so that the visual network conference participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, wherein the target video encryption key corresponds to the target video decryption key.
2. The method according to claim 1, characterized in that The visual network data encryption system also includes a conference management server, and the preset destination video encryption key is obtained in the following manner: Receive a joining key sent by the conference management server, where the joining key is obtained by the conference management server through encryption and calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, wherein the conference information includes conference ID information; Parsing the membership key to obtain the MAC address of the visual network participant terminal and the participant characteristics; The MAC address of the visual network participant terminal and the participant characteristics are encrypted and calculated to obtain the target video encryption key.
3. The method according to claim 2, characterized in that The step of encrypting and calculating the MAC address of the video network participant terminal and the participant feature to obtain the target video encryption key includes: Convert the MAC address of the visual network conference participant terminal into a first binary string; Converting the conference attendance feature into a second binary string; Performing an XOR operation on the first binary string and the second binary string to obtain the target video encryption key; Correspondingly, The joining key is obtained by the conference management server through encryption calculation of the MAC address of the visual network participant terminal, the participant characteristics and conference information, and includes: The conference management server converts the MAC address of the visual network conference participant terminal and the conference participant feature into a third binary string; The conference management server converts the conference ID information into a fourth binary string; The conference management server performs an XOR operation on the third binary string and the fourth binary string to obtain the conference joining key.
4. The method according to claim 1, characterized in that The visual network data encryption system further includes a monitoring access server and a network management server, and the first monitoring video data is encrypted according to a preset target video encryption key to obtain encrypted second monitoring video data, including: Parsing the first monitoring video data to obtain I frame data in the first monitoring video data; Performing an XOR operation on the target video encryption key and the I frame data to obtain I frame encrypted video data; The first conference flag information is added to the I frame encrypted video data to obtain the encrypted second monitoring video data, wherein the first conference flag information includes the first ID information of the conference, the first ID information of the visual network participating terminal and the first ID information of the monitoring device, the first ID information of the monitoring device is the ID number assigned to the monitoring device by the monitoring access server, and the first ID information of the visual network participating terminal is the ID number assigned to the visual network number of the visual network participating terminal by the network management server.
5. The method according to claim 4, characterized in that The visual network participant terminal decodes the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, including: The visual network conference participant terminal generates a destination decryption key according to the MAC address of the visual network conference participant terminal and the conference participant feature; The visual network conference participant terminal obtains the second conference mark information, wherein the second conference mark information includes the second ID information of the conference, the second ID information of the visual network conference participant terminal, and the second ID information of the monitoring device; The visual network conference participant terminal parses the second monitoring video data to obtain the first ID information of the conference, the first ID information of the visual network conference participant terminal and the first ID information of the monitoring device; comparing the second conference flag information with the first conference flag information; If the second conference flag information is the same as the first conference flag information, the destination decryption key is used to decrypt the I-frame encrypted video data in the second monitoring video data to obtain the first monitoring video data.
6. The method according to claim 5, characterized in that The visual network conference participant terminal obtains the second conference mark information, wherein the second conference mark information includes the second ID information of the conference, the second ID information of the visual network conference participant terminal, and the second ID information of the monitoring device, including: The visual network conference participant terminal receives the heartbeat data packet sent by the network management server; The visual network conference participant terminal parses the heartbeat data packet to obtain the second ID information of the visual network conference participant terminal; The visual network conference participant terminal receives the second conference ID information sent by the conference scheduling terminal and the second ID information of the monitoring device.
7. The method according to claim 1, characterized in that Before sending a request for acquiring the surveillance video to the surveillance device, the method further includes: The visual network conference participant terminal sends a network access authentication request to the network management server; The visual network conference participant terminal receives a handshake response returned by the network management server; The visual network conference participant terminal sends a heartbeat data packet to the network management server; In the case of reserving a video network conference on the conference scheduling terminal, the video network conference participating terminal receives a conference joining request sent by the conference management server; wherein the conference joining request is obtained from the conference scheduling terminal; The visual network conference participant terminal returns a successful conference joining response to the conference management server.
8. A monitoring video data transmission device, characterized in that: A streaming media server applied to a visual network data encryption system, wherein the visual network data encryption system also includes a conference scheduling terminal, and the device includes: An acquisition module, used for receiving an acquisition request sent by the conference scheduling terminal when the visual network conference participant terminal successfully joins the conference, and sending the acquisition request to the monitoring device; A receiving module, used for receiving the first monitoring video data returned by the monitoring device; An encryption module, used to encrypt the first monitoring video data according to a preset destination video encryption key to obtain encrypted second monitoring video data; the preset destination video encryption key is obtained by encrypting according to the MAC address of the visual network conference participant terminal and the conference participant feature, the conference participant feature is obtained according to the conference site picture, and the conference participant feature includes: human features, object features, and location information of a certain area in the conference site picture and image information corresponding to the location information; A sending module is used to send the second monitoring video data to the visual network participant terminal, so that the visual network participant terminal decrypts the second monitoring video data according to the target video decryption key to obtain the first monitoring video data, wherein the target video encryption key and the target video decryption key correspond to each other.
9. A terminal device, characterized in that: include: at least one processor and memory; The memory stores a computer program; The at least one processor executes the computer program stored in the memory to implement the monitoring video data transmission method described in any one of claims 1-7.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed, the monitoring video data transmission method described in any one of claims 1 to 7 is implemented.
Citation Information
Patent Citations
Safe data transmission method
CN105657699A
Equipment control and controlled methods, devices, computer equipment and storage medium
CN109150508A