Multimedia session access method, device, electronic device and storage medium

Abstract

The present application provides a method, device, electronic device and computer-readable storage medium for accessing a multimedia session; the method includes: receiving an access request from at least one object for a first multimedia session, the access request carries first access information, and different objects correspond to different first access information; in response to the access request, obtaining second access information for accessing the first multimedia session; based on the first access information and the second access information, respectively verifying access rights for each object to obtain corresponding verification results; when the verification result indicates that the object has access rights to access the first multimedia session, controlling the terminal of the corresponding object to access the first multimedia session. Through the present application, the privacy and security of accessing multimedia sessions can be improved.

Description

Technical Field

[0001] The present application relates to the field of cloud conference technology, and in particular to a method, device, electronic device and computer-readable storage medium for accessing a multimedia session. Background Art

[0002] With the development and popularization of Internet technology and wireless communication, more and more users use mobile terminals or computers to conduct various forms of multimedia conversations. Multimedia conversations are multi-person network conversation systems implemented using cloud conference systems. Typical examples of multimedia conversations include: live broadcasts, video / voice chats, video / voice calls, video / voice conferences, online teaching, etc.

[0003] However, in the related art, the security solution for accessing multimedia sessions is mainly to set a fixed password. The fixed password is proposed by the creator of the multimedia session. As long as the password and the session identifier of the multimedia session are obtained, the multimedia session can be accessed. Once the password is leaked, malicious users can access the multimedia session at will, thereby causing the multimedia session content to be leaked or disrupting the normal progress of the session, and the privacy and security of the multimedia session are threatened. Summary of the invention

[0004] Embodiments of the present application provide a method, device, electronic device, and computer-readable storage medium for accessing a multimedia session, which can ensure the privacy and security of accessing a multimedia session.

[0005] The technical solution of the embodiment of the present application is implemented as follows:

[0006] The embodiment of the present application provides a method for accessing a multimedia session, including:

[0007] receiving an access request for a first multimedia session from at least one object, the access request carrying first access information, and different first access information corresponding to different objects;

[0008] In response to the access request, acquiring second access information for accessing the first multimedia session;

[0009] Based on the first access information and the second access information, respectively, access authority verification is performed on each of the objects to obtain corresponding verification results;

[0010] When the verification result indicates that the object has access rights to the first multimedia session, a terminal of the corresponding object is controlled to access the first multimedia session.

[0011] In the above scheme, when the first multimedia session belongs to a session group including at least two multimedia sessions, and the multimedia sessions in the session group share the second access information; when the verification result indicates that the object has access rights to access the first multimedia session, it also includes:

[0012] Recording access authority information of the object, where the access authority information is used to indicate that the object has access authority to each multimedia session in the session group;

[0013] When receiving an access request for a second multimedia session carrying the first access information, controlling the terminal of the object to access the second multimedia session;

[0014] The second multimedia session is a multimedia session in the session group that is different from the first multimedia session.

[0015] The embodiment of the present application provides an access device for a multimedia session, including:

[0016] A receiving module, configured to receive an access request from at least one object for a first multimedia session, wherein the access request carries first access information, and different objects correspond to different first access information;

[0017] an acquisition module, configured to acquire, in response to the access request, second access information for accessing the first multimedia session;

[0018] A verification module, configured to perform permission verification on each of the objects based on the first access information and the second access information, and obtain corresponding verification results;

[0019] The access module is used to control a terminal of the corresponding object to access the first multimedia session when the verification result indicates that the object has the authority to access the first multimedia session.

[0020] In the above solution, the device further includes a generating module, wherein the generating module is configured to, before receiving an access request of at least one object for the first multimedia session through the receiving module,

[0021] Acquire the number of terminals that can access the first multimedia session;

[0022] Based on the acquired quantity, create a first target quantity of public-private key pairs, and use the created public-private key pairs as the second access information; or,

[0023] Based on the acquired number, a second target number of password information different from each other is created, and the created password information is used as the second access information.

[0024] In the above solution, when the second access information is the public-private key pair, the generation module is further used to extract the public key from the created public-private key pair to obtain the first target number of public keys;

[0025] Sending the first target number of public keys to a creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys to the terminal of the at least one object;

[0026] The public key is used by the terminal to encrypt the access identifier using the public key, and use the encrypted result as the first access information.

[0027] In the above solution, the verification module is further used to perform the following operations with respect to the access request sent by each object through the terminal:

[0028] Extracting a private key from the public-private key pair, and using the extracted private key to decrypt the encryption result to obtain the access identifier;

[0029] A target access identifier is obtained, and the target access identifier is matched with the access identifier to obtain a matching result as the verification result.

[0030] In the above solution, when the second access information is the public-private key pair, the generation module is further used to extract the public key from the created public-private key pair to obtain the first target number of public keys;

[0031] Generate an index identifier corresponding to each of the public keys, and send the generated index identifier and the first target number of public keys to the creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys and the corresponding index identifier to the terminal of the at least one object;

[0032] The public key is used by the terminal to encrypt the access identifier using the public key, and use the encrypted result and the corresponding index identifier as the first access information.

[0033] In the above solution, the verification module is further used to perform the following operations with respect to the access request sent by each object through the terminal:

[0034] Indexing the private key corresponding to the corresponding public key according to the index identifier;

[0035] Decrypting the encryption result using the indexed private key to obtain the access identifier;

[0036] A target access identifier is obtained, and the target access identifier is matched with the access identifier to obtain a matching result as the verification result.

[0037] In the above scheme, when the second access information is the password information, the generation module is also used to send the second target number of password information to the creator terminal of the first multimedia session, so that the creator terminal distributes the second target number of password information to the terminal of at least one object as the first access information.

[0038] In the above solution, the verification module is further used to perform the following operations with respect to the access request sent by each object through the terminal:

[0039] The password information sent by the terminal is matched with the created password information to obtain a matching result, and the matching result is used as the verification result.

[0040] In the above scheme, the first multimedia session belongs to a session group including at least two multimedia sessions, and the multimedia sessions in the session group share the second access information; when the verification result indicates that the object has access rights to access the first multimedia session, the access module is further used to record access rights information of the object, and the access rights information is used to indicate that the object has access rights to each multimedia session in the session group;

[0041] When receiving an access request for a second multimedia session carrying the first access information, controlling the terminal of the object to access the second multimedia session;

[0042] The second multimedia session is a multimedia session in the session group that is different from the first multimedia session.

[0043] An embodiment of the present application provides an electronic device, including:

[0044] A memory for storing executable instructions;

[0045] The processor is used to implement the multimedia session access method provided in the embodiment of the present application when executing the executable instructions stored in the memory.

[0046] An embodiment of the present application provides a computer-readable storage medium storing executable instructions. When the executable instructions are executed by a processor, the multimedia session access method provided in the embodiment of the present application is implemented.

[0047] The embodiments of the present application have the following beneficial effects:

[0048] In the embodiment of the present application, an access request carrying first access information for a first multimedia session is received from at least one object, and second access information for accessing the first multimedia session is obtained in response to the access request. Then, access authority verification is performed on each object according to the first access information and the second access information to obtain a corresponding verification result. When the verification result indicates that the object has access authority to access the first multimedia session, a terminal of the corresponding object is controlled to access the first multimedia session. Since different objects correspond to different first access information, each object has unique first access information for the same multimedia session, thereby improving the privacy and security of accessing the multimedia session. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 It is an optional structural diagram of an access system architecture for multimedia sessions provided in an embodiment of the present application;

[0050] Figure 2 is a schematic diagram of the structure of an electronic device 500 provided in an embodiment of the present application;

[0051] Figure 3 This is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application;

[0052] Figure 4 Schematic diagram of access information mapping relationship of a multimedia session access method provided in an embodiment of the present application;

[0053] Figures 5A-5C is an optional schematic diagram of a multimedia session access method provided in an embodiment of the present application;

[0054] Figure 6 Schematic diagram of access information of a multimedia session provided in an embodiment of the present application;

[0055] Figure 7 This is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application;

[0056] Figure 8 This is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application;

[0057] Fig. 9 This is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application;

[0058] Fig.10 This is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application;

[0059] Fig.11This is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application;

[0060] Fig.12 It is an interactive schematic diagram of the multimedia session access method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0061] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of this application.

[0062] In the following description, reference is made to “some embodiments”, which describe a subset of all possible embodiments, but it can be understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.

[0063] In the following description, the terms "first\second\third" involved are merely used to distinguish similar objects and do not represent a specific ordering of the objects. It can be understood that "first\second\third" can be interchanged with a specific order or sequence where permitted, so that the embodiments of the present application described here can be implemented in an order other than that illustrated or described here.

[0064] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0065] Before further describing the embodiments of the present application in detail, the nouns and terms involved in the embodiments of the present application are explained. The nouns and terms involved in the embodiments of the present application are subject to the following interpretations.

[0066] 1) Asymmetric encryption algorithm requires two keys: a public key (referred to as a public key) and a private key (referred to as a private key). The public key and the private key are a pair. If the public key is used to encrypt data, it can only be decrypted with the corresponding private key. Because encryption and decryption use two different keys, this algorithm is called an asymmetric encryption algorithm.

[0067] 2) Cloud conferencing is an efficient, convenient and low-cost conferencing format based on cloud computing technology. Users only need to use the Internet interface and perform simple and easy-to-use operations to quickly and efficiently share voice, data files and videos with teams and customers around the world. The cloud conferencing service provider helps users operate complex technologies such as data transmission and processing during the meeting.

[0068] Domestic cloud conferencing mainly focuses on service content based on the Software as a Service (SaaS) model, including telephone, network, video and other service forms. Video conferencing based on cloud computing is called cloud conferencing.

[0069] In the era of cloud conferencing, data transmission, processing, and storage are all handled by the computer resources of video conferencing manufacturers. Users no longer need to purchase expensive hardware or install cumbersome software. They only need to open a browser and log in to the corresponding interface to conduct efficient remote meetings.

[0070] 3) Multimedia session: A communication session established between at least two clients (or user accounts) through Internet technology, also known as a network session. Multimedia sessions include but are not limited to: video mode and voice mode. Video mode is a mode for conducting audio and video sessions based on video streams and audio streams, and voice mode is a mode for conducting audio sessions based on audio streams.

[0071] The inventors have discovered that in the related art, the security solution for accessing multimedia sessions is mainly to set a fixed password. The fixed password is proposed by the creator of the multimedia session. As long as the password and the session identifier of the multimedia session are obtained, the multimedia session can be accessed. Once the password is leaked, malicious users can access the multimedia session at will, thereby causing the multimedia session content to be leaked or disrupting the normal progress of the session, and the privacy and security of the multimedia session cannot be guaranteed.

[0072] Based on this, the embodiments of the present application provide a method, device, electronic device and computer-readable storage medium for accessing a multimedia session, which can improve the privacy and security of accessing a multimedia session.

[0073] First, the access system for multimedia sessions provided in the embodiment of the present application is described. Figure 1 , Figure 1 This is an optional architectural diagram of an access system 100 for a multimedia session provided in an embodiment of the present application. To implement an access application that supports a multimedia session, a terminal 400 (terminal 400 - 1 and terminal 400 - 2 are shown as examples) is connected to a server 200 via a network 300 .

[0074] In some embodiments, the terminal 400 can be a laptop, a tablet computer, a desktop computer, a smart phone, a dedicated messaging device, a portable gaming device, a smart speaker, a smart watch, etc., but is not limited thereto. The server 200 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks (CDN, Content Delivery Network), and big data and artificial intelligence platforms. The network 300 can be a wide area network or a local area network, or a combination of the two. The terminal 400 and the server 200 can be directly or indirectly connected by wired or wireless communication, which is not limited in the embodiments of the present application.

[0075] The terminal 400 is used to send an access request carrying first access information for a first multimedia session to the server 200, so as to request the server 200 to perform authority verification on the object that sends the access request through the terminal.

[0076] The server 200 is used to receive an access request for a first multimedia session sent by at least one object through the terminal 400, where the access request carries first access information, and different objects correspond to different first access information; in response to the access request, obtain second access information for accessing the first multimedia session; according to the first access information and the second access information, respectively verify the access authority of each object to obtain a corresponding verification result; when the verification result indicates that the object has the access authority to access the first multimedia session, return response information to the terminal 400 for the access request, and the terminal 400 accesses the first multimedia session based on the response information.

[0077] In some embodiments, a multimedia session client 410 (client 410-1 and client 410-2 are shown as examples) is provided on the terminal 400, the object obtains an access method for accessing the first multimedia session, and an access instruction is triggered based on an operation on the access method. In response to the access instruction, the multimedia session client 410 sends an access request for the first multimedia session carrying first access information to the server; the server receives an access request for the first multimedia session sent by at least one object through the terminal 400, the access request carries the first access information, and different objects correspond to different first access information; in response to the access request, second access information for accessing the first multimedia session is obtained; according to the first access information and the second access information, access authority verification is performed on each object respectively to obtain corresponding verification results; when the verification result indicates that the object has access authority to access the first multimedia session, the terminal 400 of the corresponding object is controlled to access the first multimedia session.

[0078] Next, an electronic device for implementing the above-mentioned multimedia session access method provided in an embodiment of the present application is described. Figure 2 , Figure 2 is a schematic diagram of the structure of an electronic device 500 provided in an embodiment of the present application. In practical applications, the electronic device 500 can be implemented as Figure 1 The terminal 400 or the server 200 in the embodiment of the present invention is an electronic device. Figure 1 Taking the server 200 as an example, an electronic device that implements the method for accessing a multimedia session in an embodiment of the present application is described. Figure 2 The electronic device 500 shown includes: at least one processor 510, a memory 550, at least one network interface 520 and a user interface 530. The various components in the electronic device 500 are coupled together via a bus system 540. It is understood that the bus system 540 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 540 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, the bus system 540 is not described in detail. Figure 2 Various buses are labeled as bus system 540 .

[0079] The processor 510 can be an integrated circuit chip with signal processing capabilities, such as a general-purpose processor, a digital signal processor (DSP), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc., where the general-purpose processor can be a microprocessor or any conventional processor, etc.

[0080] The user interface 530 includes one or more output devices 531 that enable presentation of media content, including one or more speakers and / or one or more visual display screens. The user interface 530 also includes one or more input devices 532, including user interface components that facilitate user input, such as a keyboard, mouse, microphone, touch screen display, camera, other input buttons and controls.

[0081] The memory 550 may be removable, non-removable, or a combination thereof. Exemplary hardware devices include solid-state memory, hard disk drives, optical disk drives, etc. The memory 550 may optionally include one or more storage devices that are physically remote from the processor 510.

[0082] The memory 550 includes a volatile memory or a non-volatile memory, and may also include both volatile and non-volatile memories. The non-volatile memory may be a read-only memory (ROM), and the volatile memory may be a random access memory (RAM). The memory 550 described in the embodiments of the present application is intended to include any suitable type of memory.

[0083] In some embodiments, the memory 550 can store data to support various operations, examples of which include programs, modules, and data structures, or a subset or superset thereof, as exemplarily described below.

[0084] Operating system 551, including system programs for processing various basic system services and performing hardware-related tasks, such as framework layer, core library layer, driver layer, etc., for implementing various basic services and processing hardware-based tasks;

[0085] A network communication module 552, for reaching other computing devices via one or more (wired or wireless) network interfaces 520, exemplary network interfaces 520 include: Bluetooth, Wireless Compatibility Authentication (WiFi), and Universal Serial Bus (USB);

[0086] a presentation module 553 for enabling presentation of information via one or more output devices 531 (e.g., display screen, speaker, etc.) associated with the user interface 530 (e.g., a user interface for operating peripheral devices and displaying content and information);

[0087] The input processing module 554 is used to detect one or more user inputs or interactions from one of the one or more input devices 532 and translate the detected inputs or interactions.

[0088] In some embodiments, the multimedia session access device provided in the embodiments of the present application may be implemented in a software manner. Figure 2 The access device 555 of the multimedia session stored in the memory 550 is shown, which can be software in the form of a program and a plug-in, etc., and includes the following software modules: a receiving module 5551, an acquisition module 5552, a verification module 5553 and an access module 5554. These modules are logical, so they can be arbitrarily combined or further split according to the functions implemented. The functions of each module will be explained below.

[0089] In other embodiments, the access device for the multimedia session provided in the embodiments of the present application can be implemented in hardware. As an example, the access device for the multimedia session provided in the embodiments of the present application can be a processor in the form of a hardware decoding processor, which is programmed to execute the access method for the multimedia session provided in the embodiments of the present application. For example, the processor in the form of a hardware decoding processor can adopt one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), field programmable gate arrays (FPGAs), or other electronic components.

[0090] Next, the multimedia session access method provided in the embodiment of the present application will be described in combination with the exemplary application and implementation of the server provided in the embodiment of the present application.

[0091] See also Figure 3 , Figure 3 is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application, which will be combined with Figure 3 The steps shown are explained.

[0092] Step 301: A server receives an access request for a first multimedia session sent by at least one object through a terminal. The access request carries first access information. Different objects correspond to different first access information.

[0093] Here, the first access information may be understood as password information or identification information for controlling the object to access the first multimedia session, which can uniquely identify the object, and different objects correspond to different first access information.

[0094] In some embodiments, before receiving an access request for a first multimedia session sent by at least one object through a terminal, first access information needs to be generated, and the generation of the first access information is premised on the generation of the second access information.

[0095] In actual implementation, based on Figure 3Before step 301, an operation of creating the second access information needs to be performed to obtain the second access information. After the second access information is created, first access information corresponding to the second access information is generated according to the second access information, and the first access information is broadcasted in a preset access mode. The terminal to be accessed to the multimedia session sends an access request for the first multimedia session to the server in the preset access mode, wherein the access request carries the first access information.

[0096] The second access information is explained. In some embodiments, a public-private key pair is used as the second access information, wherein the public-private key pair can be generated by an asymmetric encryption algorithm. Specifically, before receiving an access request for a first multimedia session sent by at least one object through a terminal, the number of terminals that can access the first multimedia session is obtained; based on the obtained number, a first target number of public-private key pairs is created, and the created public-private key pair is used as the second access information.

[0097] The number of terminals accessing the first multimedia session is described. The above-mentioned number of terminals can be the maximum number of terminals that can be accessed by the current multimedia session set by the multimedia session system; it can also be the initial number of terminals that can be accessed set when the current multimedia session is created. During the multimedia session, access requests sent by the terminals continue to be received until the number of access terminals has reached the threshold number of terminals for accessing the multimedia session.

[0098] According to the above number, a first target number of public-private key pairs is created, wherein the first target number is less than or equal to the above number. When the above number represents the maximum number of people who can access the first multimedia session, and the first target number is less than the above number, the public-private key pairs can continue to be created according to the number of access requests during the first multimedia session, until the number of public-private key pairs is consistent with the above number, and then the access request sent by the terminal is rejected, and an access rejection message is sent to the terminal to be accessed, such as "the number of people in the current session has reached the upper limit, and access is rejected."

[0099] In some embodiments, after the first target number of public-private key pairs are created, the server extracts the public keys in the first target number of public-private key pairs and sends the first target number of public keys to the creator terminal of the first media session. In other embodiments, after the first target number of public-private key pairs are created, the server extracts the public keys in the first target number of public-private key pairs, generates index identifiers corresponding to each public key, and distributes the index identifiers and the first target number of public keys to the terminal of the at least one object.

[0100] In actual implementation, the index identifier corresponding to each public key is generated by performing a hash calculation on each public key, and using the hash value corresponding to the generated public key as the index identifier corresponding to each public key.

[0101] After the server sends the first target number of public keys and other information to the creator terminal, it will store the first target number of public and private key pairs according to a preset saving mode.

[0102] The storage mode of the public-private key pair is described. In some embodiments, the storage mode can be a two-dimensional relationship table stored in a database. Specifically, an access information mapping relationship table is constructed, and the mapping information in the access information mapping relationship table is used to represent the one-to-one correspondence between the first access information, the second access information, the session identifier of the multimedia session, and each object identifier accessing the multimedia session.

[0103] In actual implementation, the saving mode may be stored in a database in the mode of an access information mapping relationship table. In other embodiments, the saving mode may be a formatted file saved on a server, such as an XML format document. The embodiment of the present application does not limit the saving mode of the second access information.

[0104] Exemplarily, the storage mode of the second information is described by taking the second access information as a public-private key pair as an example, see Figure 4 , Figure 4 The access information mapping relationship diagram of the multimedia session access method provided in the embodiment of the present application, the fields in the access information relationship table (number 1) include a public key (Public), a private key (Private), a user identifier (userInfo), and a session identifier, and the fields in the access information relationship table (number 2) can also be an index identifier (i.e., a hash value of a public key), a private key, a user identifier (object identifier), and a session identifier. There is a one-to-one correspondence between the fields in the access information mapping relationship table.

[0105] The creation timing of the second access information is explained. In some embodiments, the second access information may be created when the first multimedia session is created. In other instances, the second access information may be created while the first multimedia session is in progress.

[0106] In some other embodiments, the password information is used as the second access information. Specifically, before receiving an access request for the first multimedia session sent by at least one object through a terminal, the number of terminals that can access the first multimedia session is obtained; based on the obtained number, password information of a second target number that is different from each other is created, and the created password information is used as the second access information. The limitation of the second target number is consistent with the limitation of the first target number mentioned above.

[0107] When the password information that meets the second target number is different from each other, the password information of the second target number can be generated by a random algorithm, or the character string information of the second target number generated according to a preset rule can be used as the password information. The embodiment of the present application does not limit the method of generating the password information.

[0108] The generation of the first access information is explained. In some embodiments, when a public-private key pair is used as the second access information, the server sends the public key of the public-private key pair of the first target number to the creator terminal of the first multimedia session. Specifically, the server extracts the public key from the created public-private key pair to obtain the public keys of the first target number; sends the public keys of the first target number to the creator terminal of the first multimedia session, so that the creator terminal distributes the public keys of the first target number to the terminal of at least one object; wherein the public key is used by the terminal to encrypt the access identifier using the public key, and uses the encrypted result as the first access information.

[0109] In other embodiments, when the password information is used as the second access information, the server sends the second target amount of password information to the creator terminal. Specifically, when the second access information is the password information, the server sends the second target amount of password information to the creator terminal of the first multimedia session, so that the creator terminal distributes the second target amount of password information to the terminal of at least one object as the first access information.

[0110] After the first access information is created, the creator terminal notifies the waiting terminal of the first access information in a preset access mode, and explains the preset access mode. In some embodiments, the preset access mode may be a session link, and the session link address is clicked, and the server parses the parameters carried in the session link address to obtain the first access information. In other embodiments, the preset access mode may be a session QR code, and the QR code identifier corresponding to the multimedia session is scanned, and the server parses the parameter information carried in the QR code identifier to obtain the first access information.

[0111] In actual implementation, the first access information (public key or hash of the public key, random password information) is attached to the session link address, and the terminal to be accessed obtains the first access information by clicking the session link address, and then performs the subsequent multimedia session access verification process; or, a session QR code is generated according to the first access information, and the terminal to be accessed scans the session QR code to obtain the first access information

[0112] For example, see Figures 5A-5C , Figures 5A-5C This is an optional schematic diagram of a multimedia session access method provided in an embodiment of the present application. Figure 5AIn the example, the access method is a session link. The server sends the session link to the terminal to be accessed. The object (user) clicks the session link and sends an access request to the server to access the corresponding multimedia session. Figure 5B In the example, the access method is in the form of a conversation applet, which is sent to the object through an instant messaging client (such as WeChat, QQ, etc.), and the object clicks on the conversation applet to send an access request to the server to access the corresponding multimedia session; Figure 5C In the example, the access method is a session QR code. The object scans the session QR code and sends an access request to the server to access the corresponding multimedia session.

[0113] Step 302: In response to the access request, obtain second access information for accessing the first multimedia session.

[0114] The acquisition of the second access information is explained. In some embodiments, when the second access information is a public-private key pair, the above-mentioned access request is parsed to obtain the first access parameter. At this time, when the first access parameter is an encrypted multimedia session identifier and a public key sent by the creator terminal, the server searches for the private key pair corresponding to the current public key in all pre-stored public-private key pairs for the current multimedia session based on the public key obtained by the parsing (i.e., obtains the second access information corresponding to the current access request).

[0115] For example, please refer to Figure 4 , according to the public key, search for the corresponding public-private key pair in the pre-stored access information mapping relationship table (number 1).

[0116] In some embodiments, when the second access information is a public-private key pair, the above-mentioned access request is parsed to obtain the first access parameter. At this time, when the first access parameter is an encrypted multimedia session identifier, a public key and an index identifier, the server searches for the public-private key pair corresponding to the current index identifier in all pre-stored public-private key pairs for the current multimedia session based on the index identifier obtained by the parsing, and obtains the second access information corresponding to the current access request.

[0117] For example, see Figure 4 , according to the index identifier (the hash value of the public key), the corresponding public-private key pair is searched in the pre-stored access information mapping relationship table (number 2).

[0118] In some embodiments, when the second access information is password information, the server parses the above access request and obtains the first access parameter. At this time, the first access parameter is password information. The server searches for the current password information in all pre-stored password information for the current multimedia session based on the password information obtained by the analysis, and obtains the second access information corresponding to the current access request.

[0119] Step 303: Based on the first access information and the second access information, access authority verification is performed on each object to obtain corresponding verification results.

[0120] Here, the verification result is used to indicate whether each object has the authority to access the multimedia session.

[0121] The access authority verification of each object is described. In some embodiments, the second access information is a public-private key pair, and the first access information is an encryption result obtained by encrypting the access identifier using the public key. Then, the access authority verification of each object is performed based on the encryption result and the public-private key pair. Specifically, for the access request sent by each object through the terminal, the following operations are performed: extract the private key from the public-private key pair, and use the extracted private key to decrypt the encryption result to obtain the access identifier; obtain the target access identifier, and match the target access identifier with the access identifier to obtain the matching result as the verification result.

[0122] In other embodiments, the second access information is a public-private key pair, and the first access information is an encryption result after the access identifier is encrypted using the public key and a corresponding index identifier, and the access authority of each object is verified based on the encryption result, the index identifier, and the public-private key pair. Specifically, for the access request sent by each object through the terminal, the following operations are performed: the private key corresponding to the corresponding public key is indexed according to the index identifier; the encryption result is decrypted using the indexed private key to obtain the access identifier; the target access identifier is obtained, and the target access identifier is matched with the access identifier to obtain the matching result as the verification result.

[0123] For example, see Figure 4 , the access information mapping relationship table corresponding to number 2, where the index identifier is the hash value H (PublicN) of the public key. According to the index identifier, the private key PrivateN corresponding to the index identifier is found. The private key PrivateN is used to decrypt the encryption result PublicN (session identifier), obtain the corresponding session identifier, and match it with the actual conference identifier. The matching result is used as the access authority verification result.

[0124] In some embodiments, the second access information is password information, and the first access information is also password information, and the access authority of each object is verified based on the password information. Specifically, for the access request sent by each object through the terminal, the following operations are performed: the password information sent by the terminal is matched with the created password information to obtain a matching result, and the matching result is used as the verification result.

[0125] Step 304: When the verification result indicates that the object has access authority to the first multimedia session, control the terminal of the corresponding object to access the first multimedia session.

[0126] Here, the verification result is described following the matching result in step 303. In some embodiments, a target access identifier is obtained, and the target access identifier is matched with the actual access identifier. A match failure indicates that the object does not have access rights to the first multimedia session, and the object is denied access to the first multimedia session. When the match is successful, it is necessary to further determine whether the object is accessing the first multimedia session for the first time. If it is the first time, it is ultimately determined that the object has access rights to the first multimedia session, and the terminal of the corresponding object is controlled to access the first multimedia session. If it is not the first time, it is necessary to further determine whether the object information is consistent with the object information stored in the access information mapping relationship. If they are consistent, it is ultimately determined that the object has access rights to the first multimedia session, and the terminal of the corresponding object is controlled to access the first multimedia session. If they are inconsistent, the terminal of the corresponding object is denied access to the first multimedia session.

[0127] For example, see Figure 6 , Figure 6 1 is a schematic diagram of access information of a multimedia session provided in an embodiment of the present application. The object user1 to be accessed has a public key Public1, and sends an access request for a first multimedia session to a server. The access request carries a first access parameter Public1 (session identifier) ​​and an index identifier H (Public1), wherein the index identifier is a hash value obtained by hashing the public key Public1. The server parses the access request, obtains the index identifier H (Public1), and searches for the corresponding private key in the access information mapping relationship table according to the index identifier. If the object user1 accesses the first multimedia session for the first time, the corresponding private key Private1 is obtained according to the index identifier H (Public1), and the private key Private1 is used to decrypt Public1 (session identifier) ​​to obtain the corresponding session identifier, and the session identifier is matched with the session identifier corresponding to the index identifier H (Public1) in number 1. If the match is successful, it indicates that user1 has access authority to access the first multimedia session, and user1 is controlled to access the first multimedia session, and the corresponding userInfo1 information is recorded in the access information mapping relationship table, that is, the access information mapping relationship table corresponding to number 1 is changed to number 2.

[0128] If the object user1 is not accessing the first multimedia session for the first time, obtain the corresponding private key Private1 according to the index identifier H (Public1), use the private key Private1 to decrypt Public1 (session identifier) ​​to obtain the corresponding session identifier, and match it with the session identifier corresponding to the index identifier H (Public1) in number 2. If the match is successful and the corresponding userInfo1 information is obtained, further determine whether the information of the object user1 is consistent with userInfo1. If they are consistent, it is finally determined that the object user1 has the access right to access the first multimedia session, and control the terminal of the corresponding object to access the first multimedia session. If they are inconsistent, the terminal of the corresponding object is denied access to the first multimedia session.

[0129] In some embodiments, when a first multimedia session belongs to a session group including at least two multimedia sessions, and the multimedia sessions in the session group share second access information, if the verification result indicates that the object has access rights to access the first multimedia session, then the object also has access rights to access other multimedia sessions in the session group where the first multimedia session is located. Specifically, the access right information of the object is recorded, and the access right information is used to indicate that the object has access rights to each multimedia session in the session group; when an access request carrying the first access information is received for a second multimedia session, the terminal of the object is controlled to access the second multimedia session; wherein the second multimedia session is a multimedia session in the session group that is different from the first multimedia session.

[0130] In actual implementation, a certain enterprise generally opens a large number of multimedia sessions (i.e., online meetings including video conferences or voice conferences, etc.). If enterprise members use different public keys to access each meeting, it will not only waste computing resources, but also be complicated to operate. Based on this, a multimedia session group that shares the same second access information is set up. If an enterprise member has access rights to a multimedia session in the multimedia session group, then the enterprise member has access rights to any multimedia session in the multimedia session group.

[0131] Exemplarily, a whitelist corresponding to all meetings in enterprise A is set for enterprise A, and N public keys are recorded on the whitelist, and these N public keys are distributed to N enterprise members, where N is a positive integer, and each enterprise member can enter any meeting opened by enterprise A using the assigned public key; in addition, all meetings opened by enterprise A can be hierarchically set, and the corresponding whitelist of recorded public keys can also be hierarchically set to ensure that enterprise members can access multiple meetings of enterprise A by obtaining one public key. The access method for a multimedia session provided in the embodiment of the present application is still used for accessing each meeting.

[0132] To summarize, in the embodiment of the present application, the server receives an access request carrying first access information for a first multimedia session sent by at least one object through a terminal, ensures that different objects correspond to different first access information, and obtains second access information for accessing the first multimedia session in response to the access request. Then, based on the first access information and the second access information, the server performs access authority verification on each object respectively to obtain a corresponding verification result. When the verification result indicates that the object has access authority to access the first multimedia session, the terminal of the corresponding object is controlled to access the first multimedia session. Since each object has unique first access information and second access information for the same multimedia session, the privacy and security of accessing the multimedia session can be improved.

[0133] Next, the access method for multimedia session provided by the embodiment of the present application is introduced. In this embodiment, the second access information is a public-private key pair. Figure 7 This is an optional flow chart of the multimedia session access method provided in the embodiment of the present application, see Figure 7 The multimedia session access method provided in the embodiment of the present application is implemented by the server and the terminal in collaboration. Figure 7 The steps shown are explained.

[0134] Step 401: The server obtains the number of terminals that can access the first multimedia session.

[0135] Step 402: Create a first target number of public-private key pairs based on the acquired number, and use the created public-private key pairs as second access information.

[0136] Step 403: extract the public key from the created public-private key pair to obtain a first target number of public keys.

[0137] Step 404: Send the first target number of public keys to the creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys to at least one target terminal.

[0138] Step 405: The terminal uses the public key to encrypt the access identifier, and uses the encryption result as the first access information.

[0139] Step 406: The server receives an access request for the first multimedia session sent by at least one object through the terminal, where the access request carries first access information.

[0140] Here, different objects correspond to different first access information, that is, for the same multimedia session, there is a one-to-one correspondence between the object and the first access information.

[0141] Step 407: In response to the access request, obtain second access information for accessing the first multimedia session.

[0142] Step 408: extract the private key from the second access information, and use the extracted private key to decrypt the encryption result to obtain the access identifier.

[0143] Step 409: Acquire the target access identifier, and match the target access identifier with the access identifier to obtain a matching result as a verification result.

[0144] Step 410: When the verification result indicates that the object has access authority to access the first multimedia session, control a terminal of the corresponding object to access the first multimedia session.

[0145] In the embodiment of the present application, a public-private key pair is generated by an asymmetric encryption algorithm, each generated public-private key pair is unique, and the public key is distributed to the session creator terminal, and the creator terminal distributes the public key to the terminal to be accessed, so that different terminals to be accessed have different public keys, thereby ensuring the privacy and security of accessing the multimedia session. In addition, since each public key can only be used by a unique user, the purpose of locating the access user can also be achieved.

[0146] Next, the access method for multimedia session provided by the embodiment of the present application is introduced. In this embodiment, the second access information is a public-private key pair, and a corresponding index identifier is created for each public-private key pair. Figure 8 This is an optional flow chart of the multimedia session access method provided in the embodiment of the present application, see Figure 8 The multimedia session access method provided in the embodiment of the present application is implemented by the server and the terminal in collaboration. Figure 8 The steps shown are explained.

[0147] Step 501: The server obtains the number of terminals that can access the first multimedia session.

[0148] Step 502: Create a first target number of public-private key pairs based on the acquired number, and use the created public-private key pairs as second access information.

[0149] Step 503: extract the public key from the created public-private key pair to obtain a first target number of public keys.

[0150] Step 504, generate an index identifier corresponding to each public key, and send the generated index identifier and the first target number of public keys to the creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys and the corresponding index identifier to the terminal of at least one object.

[0151] Step 505: The terminal uses a public key to encrypt the access identifier, and uses the encrypted result and the corresponding index identifier as the first access information.

[0152] Step 506: The server receives an access request for the first multimedia session sent by at least one object through the terminal, where the access request carries first access information.

[0153] Here, different objects correspond to different first access information, that is, for the same multimedia session, there is a one-to-one correspondence between the object and the first access information.

[0154] Step 507: In response to the access request, obtain second access information for accessing the first multimedia session.

[0155] Step 508: index the private key corresponding to the corresponding public key according to the index identifier.

[0156] Step 509: Use the indexed private key to decrypt the encryption result to obtain an access identifier.

[0157] Step 510, obtain the target access identifier, and match the target access identifier with the access identifier to obtain a matching result as a verification result.

[0158] Step 511: When the verification result indicates that the object has access authority to access the first multimedia session, a terminal of the corresponding object is controlled to access the first multimedia session.

[0159] In the embodiment of the present application, a public-private key pair is generated by an asymmetric encryption algorithm, each generated public-private key pair is unique, and the public key is distributed to the session creator terminal, and the creator terminal distributes the public key to the terminal to be accessed, so that different terminals to be accessed have different public keys, thereby ensuring the privacy and security of accessing the multimedia session. In addition, since each public key can only be used by a unique user, the purpose of locating the access user can also be achieved.

[0160] Next, the multimedia session access method provided by the embodiment of the present application is introduced. In this embodiment, the second access information is password information. Fig. 9 This is an optional flow chart of the multimedia session access method provided in the embodiment of the present application, see Fig. 9 The multimedia session access method provided in the embodiment of the present application is implemented collaboratively by a server and a terminal.

[0161] Step 601: The server obtains the number of terminals that can access the first multimedia session.

[0162] Step 602: Create a second target quantity of password information that is different from each other based on the acquired quantity, and use the created password information as the second access information.

[0163] Step 603: Send the second target amount of password information to the creator terminal of the first multimedia session, so that the creator terminal distributes the second target amount of password information to at least one object terminal as the first access information.

[0164] Step 604: The server receives an access request for a first multimedia session sent by at least one object through a terminal, where the access request carries first access information.

[0165] Here, different objects correspond to different first access information, that is, for the same multimedia session, there is a one-to-one correspondence between the object and the first access information.

[0166] Step 605: In response to the access request, obtain password information for accessing the first multimedia session.

[0167] Step 606: Match the password information sent by the terminal with the created password information to obtain a matching result, and use the matching result as a verification result.

[0168] Step 607: When the verification result indicates that the object has access authority to the first multimedia session, a terminal of the corresponding object is controlled to access the first multimedia session.

[0169] In the embodiment of the present application, different password information is generated by a random algorithm, each password information generated is unique, and the password information is distributed to the session creator terminal, and the creator terminal distributes the password information to the terminal to be accessed, so that different terminals to be accessed have different password information, thereby ensuring the privacy and security of accessing the multimedia session. In addition, since each password information can only be used by a unique user, the purpose of locating the access user can also be achieved.

[0170] The following is an example application of the present invention in a practical application scenario. Fig.10 This is an optional flow chart of the multimedia session access method provided in the embodiment of the present application, see Fig.10 The multimedia session access method provided in the embodiment of the present application is implemented collaboratively by a server and a terminal.

[0171] Step 801: The conference creator sets a password number X.

[0172] Here, X is an integer greater than or equal to 1.

[0173] Step 802: The server generates a corresponding number of public and private key pairs.

[0174] Here, the number of public and private key pairs is equal to X above.

[0175] Step 803: The server saves the mapping between the public key hash and the private key.

[0176] Step 804: The creation terminal distributes the public key to the terminals to be connected.

[0177] Step 805: The terminal to be accessed encrypts the room number using the public key, and sends the encrypted information and the hash value of the public key to the server.

[0178] Step 806, the server determines whether the conditions for accessing the session are met, and if the conditions are met, step 807 is executed, and if the conditions are not met, step 808 is executed.

[0179] Step 807: Allow the terminal to access the session.

[0180] Step 808: denying the access session to the terminal to be accessed.

[0181] Step 809: The server records the user information corresponding to the terminal to be accessed in the password mapping.

[0182] In this embodiment, the terminal is installed with a multimedia session client (such as Tencent Conference client) and an instant messaging client (such as WeChat, QQ, etc.), and the multimedia session can be a video conference or voice conference applied for in the Tencent Conference client. The creator terminal can choose the number of passwords to be generated, and the server generates a corresponding number of public and private key pairs through an asymmetric encryption algorithm, sends the public key to the creator terminal, and saves the private key and the hash value of the public key in the database, and establishes a mapping between the private key and the public key hash value. The creator terminal distributes the public key to different terminals to be accessed. The terminals to be accessed use the public key to encrypt the session identifier (such as the conference number) of the multimedia session, and send an access request for the multimedia session to the server. The access request carries the encrypted information and the hash value of the public key. The server finds the private key corresponding to the public key in the pre-established mapping relationship according to the hash value of the public key, and decrypts the encrypted information with the private key. If the terminal to be accessed is accessing the current multimedia session for the first time and the decrypted information is the session identifier (such as the conference number) corresponding to the multimedia session, the verification is passed, and the access to the multimedia session is allowed, and the user information corresponding to the current terminal to be accessed is added to the mapping relationship corresponding to the hash of the public key. If the terminal to be accessed is not accessing the current multimedia session for the first time, but the user information corresponding to the current terminal to be accessed is the same as the user information recorded in the mapping relationship corresponding to the hash of the public key, the verification is passed, and the access to the multimedia session is allowed. If the above conditions are not met, the verification fails, and the access to the multimedia session is denied.

[0183] Next, we will explain the access process in detail. Fig.11 is an optional flow chart of a method for accessing a multimedia session provided in an embodiment of the present application, which will be combined with Fig.11The steps shown are explained.

[0184] Step 901: The creator terminal sets the number of terminals accessing the multimedia session and sends the number to the server.

[0185] Here, the number of terminals accessing the multimedia session is the same as the number of password information set by the creator terminal when creating the multimedia session.

[0186] Step 902: The server creates a first target number of public-private key pairs based on the acquired number.

[0187] Here, a first target number of public and private key pairs may be randomly generated through an asymmetric encryption algorithm, where the first target number is less than or equal to the number set in step 901 .

[0188] Step 903: extract the public key from the created public-private key pair to obtain the first target number of public keys.

[0189] Step 904: Generate an index identifier corresponding to each public key, and send the generated index identifier and the first target number of public keys to the session creator terminal.

[0190] Here, the index identifier corresponding to each public key can be obtained by performing hash calculation on each public key to obtain the hash value corresponding to each public key, and using the hash value of each public key as the corresponding index identifier.

[0191] Step 905: The server saves the mapping relationship between each index identifier and the corresponding public and private keys.

[0192] Here, the mapping relationship between each index identifier and the public and private key pair can be found in Figure 4 .

[0193] Step 906: The creator terminal distributes the first target number of public keys and corresponding index identifiers to the terminals to be connected.

[0194] Here, different terminals to be accessed correspond to different index identifiers and public keys, that is, there is a one-to-one correspondence between the terminals to be accessed, the index identifiers, and the public keys.

[0195] Step 907: The terminal to be accessed encrypts the access identifier using the public key, and uses the encryption result and the corresponding index identifier as the first access information.

[0196] Here, the session identifier may be a conference number corresponding to a video conference or a voice conference, and the access request carries the first access information. Different objects correspond to different first access information. That is, for the same multimedia session, there is a one-to-one correspondence between the object and the first access information.

[0197] Step 908: The server receives the access request, and obtains first access information in response to the access request.

[0198] Step 909 , judging whether the terminal to be accessed meets the conditions for accessing the multimedia session according to the acquired first access information, and if it meets the access conditions, executing step 910 , and if it does not meet the access conditions, executing step 913 .

[0199] Here, the specific steps of the server determining whether the current terminal to be accessed meets the conditions for accessing the multimedia session include:

[0200] Step 1001: Acquire all public and private key pairs used to access the current multimedia session.

[0201] Here, all the public and private key pairs created for the current multimedia session are obtained.

[0202] Step 1002: index the private key corresponding to the corresponding public key according to the index identifier.

[0203] Here, based on the index identifier, a search is performed among all the public and private key pairs for the current multimedia session obtained in step 1001 to find the private key corresponding to the corresponding public key.

[0204] Step 1003: Use the indexed private key to decrypt the encryption result to obtain an access identifier.

[0205] Here, the found private key is used to decrypt the encryption result in the first access parameter carried in the access request to obtain the decrypted access identifier, that is, the conference number or room number corresponding to the multimedia session.

[0206] Step 1004, obtain the target access identifier, and match the target access identifier with the access identifier. If the match is successful, execute step 910; if the match fails, execute step 913.

[0207] Here, the purpose of matching is to determine whether the terminal corresponding to the access object meets the conditions for accessing the session. If the match is successful, it means that the terminal to be accessed has the right to access the session, and if the match fails, it means that the terminal to be accessed does not have the right to access the multimedia session.

[0208] Step 910, determining whether the terminal to be accessed is accessing the multimedia session for the first time, if it is the first time, execute step 912, if it is not the first time, execute step 911.

[0209] Step 911, determine whether the user information of the terminal to be accessed is consistent with the user information in the mapping relationship, and if it is consistent, execute step 912, otherwise execute step 913.

[0210] Step 912: Allow the terminal to access the multimedia session.

[0211] Here, if the terminal to be accessed is accessing the current multimedia session for the first time, the object information corresponding to the terminal to be accessed is recorded in the mapping relationship in step 905 .

[0212] Step 913: denying the terminal to be connected from accessing the multimedia session.

[0213] In actual implementation, taking access to Tencent Conference as an example, it involves interactions between the conference creator, the creator's terminal, the conference system (server), the terminal to be accessed (the participant's terminal), the user corresponding to the terminal to be accessed (the member to be admitted), and the conference room (the current multimedia session). Fig.12 For an interactive diagram of a method for accessing a multimedia session provided in an embodiment of the present application, see Fig.12 The specific interaction process is as follows: Step 1: In each meeting, the meeting creator selects the number of public-private key pairs to be generated. Step 2: The background randomly generates the corresponding number of public-private key pairs, calculates the hash of the public key, and establishes a mapping relationship between the hash of the public key and the corresponding private key. Step 3: The conference system returns the public key to the meeting creator. Step 4: The meeting creator distributes the public key to the invited users. Step 5: When the members to be admitted access the meeting, they use the public key to sign the meeting number (that is, use the public key to encrypt the meeting number). Step 6: The members to be admitted send the corresponding signature and the hash of the public key to the Tencent Meeting background. Step 7: Verify the public key hash and ciphertext. If it is the first time to access, save the user information in the mapping. The specific method is that the conference system finds the corresponding private key according to the hash of the public key through the mapping relationship established in step 2, and uses the private key to decrypt the encrypted information. If the decrypted information is the meeting number of the meeting, and there is no user information corresponding to any access terminal in the mapping relationship corresponding to the private key, then access to the meeting is allowed, and the user information is recorded in the mapping relationship corresponding to the hash of the public key. If user information is recorded in the mapping relationship, and the recorded user information is the same as the user information corresponding to the current terminal to be accessed, access to the meeting is allowed, otherwise access to the meeting is denied. Step 8: The conference system returns the verification result to the member to be admitted. Step 9: The member to be admitted accesses the meeting based on the verification result.

[0214] In actual implementation, a certain enterprise generally opens a large number of multimedia sessions (including video conferences or voice conferences, etc.). If enterprise members use different public keys to access each meeting, it will not only waste computing resources but also make the operation more complicated. Based on this, a multimedia session group that shares the same second access information is set. If an enterprise member has access rights to a multimedia session in the multimedia session group, then the enterprise member has access rights to any multimedia session in the multimedia session group.

[0215] For example, a whitelist corresponding to all meetings in enterprise A is set for enterprise A, and N public keys are recorded on the whitelist. These N public keys are distributed to N enterprise members, and each enterprise member can enter any meeting opened by enterprise A using the assigned public key; in addition, all meetings opened by enterprise A can be hierarchically set, and the corresponding whitelist of recorded public keys can also be hierarchically set to ensure that enterprise members can access multiple meetings of enterprise A by obtaining one public key. The access method for a multimedia session provided in the embodiment of the present application is still used for accessing each meeting.

[0216] In the embodiment of the present application, different public-private key pairs are created through an asymmetric encryption algorithm to ensure the security of multimedia sessions; the uniqueness of the access information (password) for accessing the multimedia session is guaranteed through public key distribution, and a public key can be used only once. The generated public-private key pair can be bound to the user to join the meeting. After the system administrator sets it, the same public key can be used in multiple different meetings, thereby improving the convenience of accessing multimedia sessions.

[0217] The following continues to describe the exemplary structure of the multimedia session access device 555 provided in the embodiment of the present application implemented as a software module. In some embodiments, such as Figure 2 As shown, the software modules stored in the multimedia session access device 555 of the memory 550 may include:

[0218] The receiving module 5551 is configured to receive an access request for a first multimedia session sent by at least one object through a terminal, where the access request carries first access information, and different objects correspond to different first access information;

[0219] An acquisition module 5552 is used to acquire, in response to the access request, second access information for accessing the first multimedia session;

[0220] A verification module 5553, configured to perform permission verification on each of the objects based on the first access information and the second access information, and obtain corresponding verification results;

[0221] The access module 5554 is configured to control a terminal of the corresponding object to access the first multimedia session when the verification result indicates that the object has the authority to access the first multimedia session.

[0222] In some embodiments, the software modules in the access device 555 of the multimedia session stored in the memory 550 may include: a generation module 5555, used to obtain the number of terminals that can access the first multimedia session; based on the obtained number, create a first target number of public-private key pairs, and use the created public-private key pairs as the second access information; or, based on the obtained number, create a second target number of different password information, and use the created password information as the second access information.

[0223] In some embodiments, when the second access information is the public-private key pair, the generation module 5555 is also used to extract the public key from the created public-private key pair to obtain a first target number of public keys; send the first target number of public keys to the creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys to the terminals of at least one object; wherein the public key is used by the terminal to encrypt the access identifier using the public key, and use the encrypted result as the first access information.

[0224] In some embodiments, the verification module 5553 is also used to perform the following operations for the access request sent by each object through the terminal: extracting the private key from the public-private key pair, and using the extracted private key to decrypt the encryption result to obtain the access identifier; obtaining the target access identifier, and matching the target access identifier with the access identifier to obtain a matching result as the verification result.

[0225] In some embodiments, when the second access information is the public-private key pair, the generation module 5555 is also used to extract the public key from the created public-private key pair to obtain a first target number of public keys; generate an index identifier corresponding to each of the public keys, and send the generated index identifier and the first target number of public keys to the creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys and the corresponding index identifier to the terminal of at least one object; wherein the public key is used by the terminal to encrypt the access identifier using the public key, and use the encrypted result and the corresponding index identifier as the first access information.

[0226] In some embodiments, the verification module 5553 is further configured to perform the following operations with respect to the access request sent by each object through the terminal:

[0227] The private key corresponding to the corresponding public key is indexed according to the index identifier; the encryption result is decrypted using the indexed private key to obtain the access identifier; the target access identifier is obtained, and the target access identifier is matched with the access identifier to obtain a matching result as the verification result.

[0228] In some embodiments, when the second access information is the password information, the generation module 5555 is also used to send the second target amount of password information to the creator terminal of the first multimedia session, so that the creator terminal distributes the second target amount of password information to the terminal of at least one object as the first access information.

[0229] In some embodiments, the verification module 5553 is also used to perform the following operations for the access request sent by each object through the terminal: match the password information sent by the terminal with the created password information to obtain a matching result, and use the matching result as the verification result.

[0230] In some embodiments, the first multimedia session belongs to a session group including at least two multimedia sessions, and the multimedia sessions in the session group share the second access information; when the verification result indicates that the object has access rights to access the first multimedia session, the access module 5554 is further used to record access rights information of the object, where the access rights information is used to indicate that the object has access rights to each multimedia session in the session group;

[0231] When receiving an access request for a second multimedia session carrying the first access information, controlling the terminal of the object to access the second multimedia session;

[0232] The second multimedia session is a multimedia session in the session group that is different from the first multimedia session.

[0233] It should be noted that the description of the device of the embodiment of the present application is similar to the description of the above-mentioned method embodiment, and has similar beneficial effects as the method embodiment, so it will not be repeated.

[0234] An embodiment of the present application provides an electronic device, including:

[0235] A memory for storing executable instructions;

[0236] The processor is used to implement the multimedia session access method provided in the embodiment of the present application when executing the executable instructions stored in the memory.

[0237] The embodiment of the present application provides a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. The processor of the computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the multimedia session access method provided in the embodiment of the present application.

[0238] The embodiment of the present application provides a computer-readable storage medium storing executable instructions, wherein the executable instructions are stored. When the executable instructions are executed by a processor, the processor will execute the multimedia session access method provided by the embodiment of the present application, for example, Figure 3 The method shown.

[0239] In some embodiments, the computer-readable storage medium may be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, flash memory, magnetic surface storage, optical disk, or CD-ROM; or it may be various devices including one or any combination of the above memories.

[0240] In some embodiments, executable instructions may be in the form of a program, software, software module, script or code, written in any form of programming language (including compiled or interpreted languages, or declarative or procedural languages), and may be deployed in any form, including as a stand-alone program or as a module, component, subroutine or other unit suitable for use in a computing environment.

[0241] As an example, executable instructions may, but need not, correspond to a file in a file system, may be stored as part of a file that stores other programs or data, such as in one or more scripts in a HyperText Markup Language (HTML) document, in a single file dedicated to the program in question, or in multiple coordinated files (e.g., files storing one or more modules, subroutines, or code portions).

[0242] By way of example, executable instructions may be deployed to be executed on one computing device, or on multiple computing devices located at one site, or on multiple computing devices distributed across multiple sites and interconnected by a communication network.

[0243] In summary, the embodiments of the present application can improve the convenience, privacy and security of accessing multimedia sessions.

[0244] The above is only an embodiment of the present application and is not intended to limit the protection scope of the present application. Any modifications, equivalent substitutions and improvements made within the spirit and scope of the present application are included in the protection scope of the present application.

Claims

1. A method for accessing a multimedia session, characterized in that: The method comprises: receiving an access request for a first multimedia session from at least one object, the access request carrying first access information, different objects corresponding to different first access information; the first access information is an encryption result obtained by encrypting an access identifier based on a public key received by a terminal of the object; In response to the access request, obtaining second access information for accessing the first multimedia session; wherein the second access information includes a public-private key pair corresponding to the access request; Extracting a private key from the public-private key pair, decrypting the encryption result using the extracted private key to obtain the access identifier, and matching the access identifier with the target access identifier to obtain a corresponding verification result; When the verification result indicates that the object has access rights to the first multimedia session, a terminal of the corresponding object is controlled to access the first multimedia session.

2. The method according to claim 1, characterized in that: Before receiving the access request of at least one object for the first multimedia session, the method further includes: Acquire the number of terminals that can access the first multimedia session; Based on the acquired quantity, create a first target quantity of public-private key pairs, and use the created public-private key pairs as the second access information; or, Based on the acquired number, a second target number of password information different from each other is created, and the created password information is used as the second access information.

3. The method according to claim 2, characterized in that When the second access information is the public-private key pair, the method further includes: Extracting a public key from the created public-private key pair to obtain a first target number of public keys; Sending the first target number of public keys to a creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys to the terminal of the at least one object; The public key is used by the terminal to encrypt the access identifier using the public key, and use the encrypted result as the first access information.

4. The method according to claim 2, characterized in that: When the second access information is the public-private key pair, the method further includes: Extracting a public key from the created public-private key pair to obtain a first target number of public keys; Generate an index identifier corresponding to each of the public keys, and send the generated index identifier and the first target number of public keys to the creator terminal of the first multimedia session, so that the creator terminal distributes the first target number of public keys and the corresponding index identifier to the terminal of the at least one object; The public key is used by the terminal to encrypt the access identifier using the public key, and use the encrypted result and the corresponding index identifier as the first access information.

5. The method according to claim 4, characterized in that The performing access authority verification on each of the objects based on the first access information and the second access information includes: For the access request sent by each object through the terminal, perform the following operations: Indexing the private key corresponding to the corresponding public key according to the index identifier; Decrypting the encryption result using the indexed private key to obtain the access identifier; A target access identifier is obtained, and the target access identifier is matched with the access identifier to obtain a matching result as the verification result.

6. The method according to claim 2, characterized in that When the second access information is the password information, the method further includes: The second target amount of password information is sent to the creator terminal of the first multimedia session, so that the creator terminal distributes the second target amount of password information to the terminal of the at least one object as the first access information.

7. A multimedia session access device, characterized in that: The device comprises: A receiving module, configured to receive an access request from at least one object for a first multimedia session, wherein the access request carries first access information, and different objects correspond to different first access information; the first access information is an encryption result obtained by encrypting an access identifier based on a public key received by a terminal of the object; an acquisition module, configured to acquire, in response to the access request, second access information for accessing the first multimedia session; wherein the second access information includes a public-private key pair corresponding to the access request; A verification module, used to extract a private key from the public-private key pair, decrypt the encryption result using the extracted private key to obtain the access identifier, and match the access identifier with a target access identifier to obtain a corresponding verification result; The access module is used to control a terminal of the corresponding object to access the first multimedia session when the verification result indicates that the object has the authority to access the first multimedia session.

8. An electronic device, characterized in that: include: A memory for storing executable instructions; A processor, configured to implement the multimedia session access method according to any one of claims 1 to 6 when executing the executable instructions stored in the memory.

9. A computer-readable storage medium, characterized in that: Executable instructions are stored, and when the executable instructions are executed by a processor, the multimedia session access method according to any one of claims 1 to 6 is implemented.

10. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the multimedia session access method according to any one of claims 1 to 6 is implemented.

Images