Method and System for Secure Transmission of Radio and Television Live Broadcast Signals

Abstract

The present application relates to a method and system for secure transmission of radio and television live broadcast signals. The method includes the following steps: converging and converting the multicast signals in the radio and television private network into live broadcast signal pushing; the live broadcast center server reducing the bit rate of the live broadcast signal pushing and slicing; determining the geographical location information of the client and verifying whether the client has the playback permission according to the geographical location information; if the client has the playback permission, the live broadcast center server sending the video streaming address and the decryption key to the client; the client downloading the video stream according to the video streaming address and performing a decryption operation on the downloaded video stream using the decryption key to obtain the corresponding live broadcast content. This solution provides complete solution support for the secure streaming service of the live broadcast business on the large screen, transmitting the multicast live broadcast signals in the traditional intranet to the public network live broadcast center through protocol conversion dedicated lines; combining with the live broadcast signal management policy, ensuring that all services in use are within the live broadcast authorized area through the regional legality verification of the client.

Description

Technical Field

[0001] This application relates to the field of Internet transmission technologies, and particularly to a method and system for secure transmission of live broadcast signals of radio and television. Background Art

[0002] Currently, the number of smart TV users is extremely large, and there are also a large number of program resources for the film and television business content delivery of smart TVs. According to the regulations of the State Administration of Radio, Film and Television, provincial radio and television companies have the right to operate and forward live broadcast signals within their respective provinces. In the scenario where provincial radio and television provides services to smart TV operators for live broadcast signals, requirements for live stream encryption and regional usage are put forward.

[0003] In related technologies, live broadcast, as a major demand for large screens, has been restricted by issues such as copyright and security, and thus cannot be implemented on smart TV channels. Summary of the Invention

[0004] To at least partly overcome the technical problem in related technologies that live broadcast of radio and television is restricted by issues such as copyright and security and cannot be implemented on smart TV channels, this application provides a method and system for secure transmission of live broadcast signals of radio and television.

[0005] According to the first aspect of the embodiments of this application, a method for secure transmission of live broadcast signals of radio and television is provided, including:

[0006] Receiving and converting the multicast signal stream within the radio and television private network into a live broadcast signal push stream, and pushing the live broadcast signal push stream to the public network live broadcast center server;

[0007] The live broadcast center server reduces the bit rate of the live broadcast signal push stream and slices it, and then encrypts the sliced live stream;

[0008] When receiving a live broadcast request from a client, determining the geographical location information of the client, and verifying whether the client has the playback permission according to the geographical location information;

[0009] If the client has the playback permission, the live broadcast center server sends the video streaming address and the decryption key to the client;

[0010] The client downloads the video stream according to the video streaming address and decrypts the downloaded video stream using the decryption key to obtain the corresponding live broadcast content.

[0011] Further, receiving and converting the multicast signal stream within the radio and television private network into a live broadcast signal push stream includes the following steps:

[0012] Deploying a live broadcast push system server in the radio and television private network environment, receiving and converting the multicast signal stream into a live broadcast signal push stream, and pushing the live broadcast signal push stream to the public network live broadcast center server through a dedicated line network.

[0013] Further, the live center server reduces the bitrate of the live signal and slices it, including the following steps:

[0014] The live center server receives the live signal transmitted through the dedicated line network in real time, transcodes and encapsulates the live signal, and converts the live stream into a bitrate suitable for public network transmission using low-bitrate high-definition technology;

[0015] Slice the live stream after reducing the bitrate, and cache the sliced video segments according to the timestamp.

[0016] Further, encrypt the sliced live stream, including the following steps:

[0017] Encrypt the sliced live stream through the encryption and decryption module. At the same time, the encryption and decryption module saves the secret key used for the corresponding encrypted video and provides the decryption key distribution service.

[0018] Further, after encrypting the sliced live stream, the following steps are also included:

[0019] The live center server streams the encrypted live stream to the origin station of the public network standard content delivery network, and sinks the live stream to the edge nodes through the origin station for client use;

[0020] Enable the anti-leeching function on the content delivery network.

[0021] Further, the live center server obtains the live request of the client, including the following steps:

[0022] The client and the live center server obtain the token through permission verification;

[0023] The client sends a live request to the live center server carrying the token.

[0024] Further, the client downloads the video stream according to the video streaming address, including the following steps:

[0025] Select the live channel through the interface provided by the live center server, and obtain the corresponding streaming address according to the interface data;

[0026] Start downloading the video stream after splicing the anti-leeching information according to the streaming address.

[0027] Further, decrypt the downloaded video stream using the decryption secret key, including the following steps:

[0028] The client applies to the decryption key service of the live center server for the video decryption key; wherein, the video decryption key is the decryption secret key that has been encrypted twice;

[0029] After the client receives the video decryption key, it uses the decryption capability provided by the SDK to decrypt and restore the video decryption key to obtain the plaintext decryption key;

[0030] Perform decryption operations on the downloaded video stream using the plaintext decryption key.

[0031] Furthermore, the live broadcast center server determines the geographical location information of the client, including the following steps:

[0032] The live broadcast center server issues a positioning QR code to obtain the positioning information uploaded by the smart terminal through scanning. The smart terminal is a smart device with GIS positioning capabilities;

[0033] Combine the positioning information of the smart terminal with the IP location of the client to determine the geographical location information of the client.

[0034] According to the second aspect of the embodiments of the present application, a secure transmission system for radio and television live broadcast signals is provided, including: a live broadcast push server, a live broadcast center server, and a client;

[0035] The live broadcast push server is used to receive and convert the multicast signal in the radio and television private network into a live broadcast signal push, and push the live broadcast signal push to the public network live broadcast center server;

[0036] The live broadcast center server is used to reduce the bit rate and slice the live broadcast signal push, and then encrypt the sliced live broadcast stream;

[0037] When the live broadcast center server receives the live broadcast request of the client, it determines the geographical location information of the client, and verifies whether the client has the playback permission according to the geographical location information; if the client has the playback permission, the live broadcast center server sends the video stream output address and the decryption key to the client;

[0038] The client is used to download the video stream according to the video stream output address, and perform decryption operations on the downloaded video stream using the decryption key to obtain the corresponding live broadcast content.

[0039] The technical solutions provided by the embodiments of the present application have the following beneficial effects:

[0040] This solution provides complete solution support for the secure stream output service of the large screen live broadcast business, transmits the traditional multicast live broadcast signal in the intranet to the public network live broadcast center through protocol conversion dedicated line; combined with the live broadcast signal management policy, through client area legality verification, it ensures that all services used are within the live broadcast authorized area. This solution does not require in-depth integration with smart TV manufacturers, and at the same time provides good guarantee for content transmission, has no special compatibility requirements, good adaptability, and meets the encryption requirements of radio and television for the live broadcast stream transmission process.

[0041] It should be understood that the above general description and the following detailed description are merely exemplary and explanatory, and should not limit this application. Brief Description of the Drawings

[0042] The accompanying drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with this application, and are used together with the specification to explain the principles of this application.

[0043] Figure 1 It is a schematic diagram of the application environment of a method for secure transmission of radio and television live broadcast signals shown according to an exemplary embodiment.

[0044] Figure 2 It is a flowchart of a method for secure transmission of radio and television live broadcast signals shown according to an exemplary embodiment.

[0045] Figure 3 It is a flowchart of encrypted live broadcast of radio and television live broadcast signals shown according to an exemplary embodiment. Detailed Description of the Embodiments

[0046] Here, the exemplary embodiments will be described in detail, and the examples are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. On the contrary, they are merely examples of methods and systems consistent with some aspects of this application as detailed in the appended claims.

[0047] Currently, radio and television live broadcast signals are mainly operated within the province through provincial network set-top boxes, and the raw stream is transmitted within the local area network of the set-top boxes in the province in a multicast form. According to the regulations of the State Administration of Radio, Film and Television, the provincial radio and television companies have the right to operate and forward live broadcast signals within the province. The provincial radio and television has put forward requirements for live stream encryption and regional use in the scenario of providing services to smart TV operators for live broadcast signals.

[0048] The existing technical solutions connect the smart TV end and the radio and television out-stream service end through the VPN form to ensure the security of content transmission. However, the implementation of the client VPN requires deep integration with the software and hardware of smart TV manufacturers, resulting in high implementation complexity and poor compatibility.

[0049] The present invention provides a secure live broadcast service for smart TVs, thereby expanding the types of smart TV program resources and providing users with richer large-screen content services.

[0050] The method for secure transmission of radio and television live broadcast signals provided by this application can be applied as Figure 1In the application environment shown. The application environment includes a source station, a live cloud, and a client. A communicable connection can be achieved between the source station and the live cloud, and between the live cloud and the client through the network. The network system composed of the source station, the live cloud, and the client can be based on the Internet, can also be based on a local area network, or can also be based on a combined network of the Internet and a local area network, which will not be elaborated here.

[0051] The client can be a smart TV or various devices such as personal computers and laptops. An application program is running on the client. At the same time, the present application does not limit the number of clients, and can also include one or more clients.

[0052] The source station and the live cloud can be implemented by an independent server or a server cluster composed of multiple servers. During operation, an application program can be run on the source station, the live cloud, and the client to implement a method for secure transmission of a radio and television live broadcast signal.

[0053] Figure 2 It is a flowchart of a method for secure transmission of a radio and television live broadcast signal shown according to an exemplary embodiment. The method includes the following steps:

[0054] Step S1: Receive and convert the multicast signal in the radio and television private network into a live broadcast signal push stream, and push the live broadcast signal push stream to the public network live broadcast center server;

[0055] Step S2: The live broadcast center server reduces the bit rate of the live broadcast signal push stream and slices it, and then encrypts the sliced live broadcast stream;

[0056] Step S3: When receiving a live broadcast request from the client, determine the geographical location information of the client, and verify whether the client has the playback permission according to the geographical location information;

[0057] Step S4: If the client has the playback permission, the live broadcast center server sends the video output stream address and the decryption key to the client;

[0058] Step S5: The client downloads the video stream according to the video output stream address and decrypts the downloaded video stream using the decryption key to obtain the corresponding live broadcast content.

[0059] It should be understood that although Figure 2 the steps in the flowchart are shown in sequence according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps has no strict order limit, and these steps can be executed in other orders. Moreover, Figure 2At least a part of the steps therein may include multiple sub-steps or multiple stages. These sub-steps or stages do not necessarily need to be executed and completed at the same moment, but can be executed at different moments. The execution order of these sub-steps or stages does not necessarily need to be sequential, but can be executed alternately or in turn with at least a part of other steps or sub-steps or stages of other steps.

[0060] To make the objectives, technical solutions and advantages of the present invention clearer, the following further describes in detail the specific implementation process of the embodiments of the present invention in conjunction with the attached Figure 3 This solution mainly uses the support for encryption in the HLS (HTTP Live Streaming, an adaptive bitrate streaming transmission protocol based on HTTP) protocol itself to provide security guarantees for live stream transmission.

[0061] 1. Step S1 converts the multicast signal reception in the radio and television private network into a live signal push, including the following steps: Deploy a live push system server in the radio and television private network environment, convert the multicast signal reception into a live signal push, and push the live signal push to the public network live center server through a dedicated line network.

[0062] In practical applications, deploy a protocol gateway in the radio and television computer room to convert the multicast UDP (User Datagram Protocol) signal reception into a TCP protocol RTMP (Real Time Messaging Protocol) push.

[0063] Deploy a live push system server in the private network environment. After converting the RTP (Real-time Transport Protocol, hereinafter abbreviated as RTP) protocol in the private network, use RTMP (Real Time Messaging Protocol) to push the channel live signal to the public network live center service cluster through a dedicated line network.

[0064] 2. Step S2 reduces the bitrate of the live signal push by the live center server and slices it, including the following steps: The live center server receives the live signal transmitted through the dedicated line network in real time, transcodes and encapsulates the live signal, and converts the live stream into a bitrate suitable for public network transmission using low-bitrate high-definition technology; slice the live stream after reducing the bitrate, and cache the sliced video segments according to the timestamps.

[0065] Push the RTMP stream to the live center. The live center first converts the high-bitrate source into a bitrate suitable for transmission on the Internet through transcoding services.

[0066] The live broadcast center refers to the public network transcoding server and the live stream scheduling server cluster, which are used to receive the IP stream live broadcast signal pushed by the live broadcast source, and re-transcode, compress, convert the format, and output encryption for the live broadcast signal, and finally output a stable and secure live broadcast signal suitable for OTT terminal playback to the CDN.

[0067] The live broadcast center receives the live broadcast signal transmitted through the dedicated line in real time, transcodes and encapsulates the live broadcast video, converts the live stream into a bitrate suitable for public network transmission through low-bitrate high-definition technology, slices the live stream using the HLS protocol, and caches the sliced video segments according to the timestamp to meet the time-shifted viewing playback requirements.

[0068] High-bitrate source: Since the compliant live stream of radio and television is distributed to the terminal for playback through the RTP protocol in the radio and television internal network environment, and RTP multicast cannot be transmitted in the public network environment, it is necessary to deploy a live broadcast gateway system in the radio and television internal network environment (the live broadcast gateway system has dual-cross networks, that is, one of the two network cards is connected to the internal network environment to receive the live stream, and the other is connected to the Internet and communicates with the live broadcast center). By receiving the LAN RTP multicast signal, the live stream protocol is converted, and the rtmp protocol that can be transmitted on the Internet is used to transmit the internal network live broadcast signal to the public network live broadcast center.

[0069] Bitrate suitable for Internet transmission: For high-definition live broadcasts, the original raw stream bitrate in the radio and television internal network is too high (the standard-definition bitrate is 2.5Mbps, the high-definition bitrate is 8Mbps, and the 4K bitrate is 25Mbps). If no transcoding is done, the CDN bandwidth consumption will be extremely large, which will greatly increase the business operation cost.

[0070] Then, the RTMP stream is sliced into an m3u8 live stream according to the HLS protocol through the slicing service. During the slicing process, an AES128 encryption key is used to encrypt the original raw stream every 30s, and the corresponding relationship between the encryption key and the sliced ts (Transport Stream) is recorded and saved.

[0071] Step S2 encrypts the sliced live stream, including the following steps: encrypt the sliced live stream through the encryption and decryption module, and at the same time, the encryption and decryption module saves the secret key used for the corresponding encrypted video and provides the decryption key distribution service.

[0072] The sliced video is still clear stream and does not meet the security transmission requirements. It is necessary to encrypt the original clear stream through the video encryption and decryption module of the live broadcast center. At the same time, the encryption and decryption module saves the secret key used for the corresponding encrypted video and provides the decryption key distribution service.

[0073] Original raw stream: It refers to the clear stream live broadcast signal that has not been encrypted after being pushed by the live broadcast gateway and transcoded by the live broadcast center. It is not suitable for direct external output and needs to be further encrypted to ensure that the output stream is not stolen.

[0074] The HLS protocol is a streaming media network transmission protocol based on HTTP. Its working principle is to divide the entire stream into small HTTP-based files for downloading, and only download some small files each time. Each small video file is a complete video file in the MPEG2-TS format, that is, ts (Transport Stream).

[0075] 3. As the origin server of the CDN (Content Delivery Network), the live broadcast center uses the CDN distribution ability to sink the m3u8 live stream to the edge nodes for terminal use.

[0076] After encrypting the sliced live stream, the following steps are also included: The live broadcast center server sends the encrypted live stream out to the origin server of the public network standard content delivery network, and sinks the live stream to the edge nodes through the origin server for client use; The anti-leeching function is enabled on the content delivery network.

[0077] In practical applications, the live broadcast center sends out the encrypted HLS format video to the public network standard CDN, and enables the anti-leeching function on the CDN.

[0078] CDN edge nodes are also called CDN nodes and Cache nodes. When data is transmitted on the network, the transmission speed of network data will vary due to the length of the physical distance; To eliminate this speed difference, edge nodes are usually used. CDN edge nodes are CDN edge servers established on the network, used to transfer and cache data in the central CDN. Users using CDN resources access the content of the nearest edge node through algorithm scheduling, improving the speed of users' network access.

[0079] 4. In step S3, the live broadcast center server obtains the live broadcast request of the client, including the following steps: The client and the live broadcast center server obtain a token through permission verification; The client sends a live broadcast request to the live broadcast center server with the token.

[0080] Specifically, the terminal and the live broadcast center obtain the token token through oauth2 permission verification.

[0081] 5. The terminal requests the playback permission from the live broadcast center with the token.

[0082] The client integrates the live broadcast decryption SDK (Software Development Kit) development package. The development package encapsulates the CDN anti-leeching algorithm and the secret key for the video decryption key distribution service provided by the encryption and decryption module for docking with the live broadcast center service. The SDK development package is obfuscated by code, spliced with algorithms, and shelled during output to prevent the illegal acquisition of relevant client secrets.

[0083] 6. After the live broadcast center verifies the token, it returns the m3u8 start-up address to the terminal. The m3u8 contains the encrypted ts slice address of the live stream and the decryption key address. The decryption key address is the key CGI service of the live broadcast center. The start-up address is the live broadcast play address corresponding to the public network user watching the live broadcast channel in the live broadcast encryption and decryption scheme.

[0084] 7. In step S5, the client downloads the video stream according to the video streaming address, including the following steps: selects the live broadcast channel through the interface provided by the live broadcast center server, and obtains the corresponding streaming address according to the interface data; starts to download the video stream after splicing the anti-theft chain information according to the streaming address.

[0085] The terminal parses the m3u8 and requests the corresponding ts (the ts has been processed by the CDN anti-theft chain) and the decryption key. The key CGI returns the decryption key as the RSA secondary encrypted key. After the terminal obtains it, it needs to decrypt the key with the RSA private key agreed by the protocol first. The obtained plaintext key can directly decrypt the ts slice.

[0086] In step S5, the downloaded video stream is decrypted using the decryption secret key, including the following steps: the client applies to the decryption key service of the live broadcast center server for the video decryption key; wherein, the video decryption key is the decryption secret key that has been encrypted twice; after the client receives the video decryption key, it uses the decryption ability provided by the SDK to decrypt and restore the video decryption key to obtain the plaintext decryption secret key; the downloaded video stream is decrypted using the plaintext decryption secret key.

[0087] When the client plays the corresponding live broadcast channel, it selects the channel it hopes to play through the EPG (Electronic Program Guide) interface provided by the live broadcast center, obtains the corresponding CDN streaming address according to the interface data, splices the anti-theft chain information and starts to download the video stream. The downloaded video stream applies to the live broadcast center decryption key service for the video decryption secret key according to the decryption key address provided in the interface. The decryption secret key is encrypted twice during network transmission. After the client receives the secret key file, it uses the decryption ability provided by the SDK to decrypt and restore the video decryption key. The obtained plaintext secret key is used for decrypting the CDN encrypted video during the live broadcast, and finally restored to a clear video stream that can be used by the terminal system player mediaplayer. After the client decodes normally, it presents the live broadcast picture of the corresponding channel to the user.

[0088] 8. The terminal uses the local playback ability to transfer the decrypted key and the encrypted ts slice to the player for live broadcast presentation.

[0089] 9. In step S4, the live center server determines the geographical location information of the client, including the following steps: The live center server issues a positioning QR code to obtain the positioning information uploaded by the smart terminal through scanning the code. The smart terminal is a smart device with GIS positioning capabilities; combining the positioning information of the smart terminal with the IP location of the client to determine the geographical location information of the client.

[0090] Due to the requirements of live video copyright, this solution adds user usage scope verification. Combining the verification of the client's IP location and the user's first installation of scanning the code, through the GIS positioning capabilities of the mobile terminal, the legitimacy of the user's usage area is restricted.

[0091] Regarding the user area restriction, based on the verification of the IP location, this solution adds the GIS positioning capabilities of the mobile terminal when the user installs for the first time. By scanning the code on the mobile phone to obtain the user's mobile phone positioning method, combined with the IP location, the legitimacy of the user's usage area is comprehensively verified.

[0092] Due to the reasons of radio and television policies, the live broadcast signal of the provincial TV station only has a sub-license for the network within the province. However, the Internet service server is on the public network and is open to the whole network. If no geographical verification and restriction are made, there will be an over-range use of the live stream, resulting in copyright risks. Therefore, the client area verification is added to ensure the compliance of the live broadcast signal usage.

[0093] This solution relies on the mature HLS media protocol and CDN technology on the Internet, has no special compatibility requirements, has good adaptability, and meets the encryption requirements of radio and television for the live stream transmission process. That is, the ts slices are encrypted by AES128 when flowing out of the media center, and the corresponding decryption key is encrypted by the more secure RSA asymmetric encryption during the terminal request acquisition process. During the network transmission process, even if the ts slices and the decryption key are obtained, they cannot be normally parsed without the RSA private key. The RSA private key is encapsulated in the terminal in the form of sdk aar to ensure security.

[0094] This solution provides complete solution support for the secure live stream service of the large screen terminal. The multicast live broadcast signal in the traditional internal network is transmitted to the public network live center through a protocol conversion dedicated line. The performance of traditional live terminals is poor, and because of using internal network broadcast transmission, the bitrates used are all relatively high standards. Directly using this high-bitrate video stream will cause a great burden on the public network transmission bandwidth. Combining the high-performance hardware decoding capabilities of Internet terminals, re-encoding and encapsulating with H.265 to achieve a cost-saving solution for low-bitrate high-definition.

[0095] Dedicated line transmission solves the transmission security problem at the B-side. However, the service ultimately needs to be broadcast on the smart TV terminal. It is also necessary to ensure secure and reliable transmission from the live broadcast center to the smart TV terminal. Therefore, during the transcoding process in the live broadcast center, the video after transcoding transmitted through the dedicated line is encrypted and encapsulated, and decrypted and restored through a specific decryption protocol. At this time, the encrypted video stream can be distributed to the terminal for use through the CDN network. The terminal live broadcast application internally encapsulates the key for securely obtaining the video decryption key. After the terminal obtains the CDN encrypted medium, it requests the live broadcast center to obtain the video decryption key, and restores the key with the key. Finally, the CDN encrypted medium is restored using the key, and the system playback capability is used to decode and play after restoration. In this way, during the network interaction process among the live broadcast center, CDN, and client, the secure transmission of the live broadcast stream is ensured.

[0096] Finally, combined with the live broadcast signal management policy, through the client regional legality verification, it is ensured that all services are within the live broadcast authorized area. The overall solution has the advantage that it does not need to be deeply integrated with smart TV manufacturers, and at the same time, the content transmission is well guaranteed. It is a lightweight smart TV live soft terminal encryption solution that meets the control requirements.

[0097] An embodiment of the present application also provides a secure transmission system for radio and television live broadcast signals. The system includes a live broadcast push server, a live broadcast center server, and a client.

[0098] The live broadcast push server is used to receive and convert the multicast signal in the radio and television private network into a live broadcast signal push, and push the live broadcast signal push to the public network live broadcast center server.

[0099] The live broadcast center server is used to reduce the bit rate and slice the live broadcast signal push, and then encrypt the sliced live broadcast stream; when the live broadcast center server receives the live broadcast request from the client, it determines the geographical location information of the client, and verifies whether the client has the playback permission according to the geographical location information; if the client has the playback permission, the live broadcast center server sends the video streaming address and the decryption key to the client.

[0100] The client is used to download the video stream according to the video streaming address, and perform a decryption operation on the downloaded video stream using the decryption key to obtain the corresponding live broadcast content.

[0101] Regarding the system in the above embodiments, the specific steps for each module to perform operations have been described in detail in the embodiments related to the method, and will not be elaborated here. Each module in the above radio and television live broadcast signal security transmission system can be implemented in whole or in part by software, hardware, and their combination. Each of the above modules can be embedded in the processor of a computer device in hardware form or be independent of it, or can be stored in the memory of the computer device in software form, so that the processor can call and execute the operations corresponding to each of the above modules.

[0102] It can be understood that the same or similar parts in the above embodiments can be referred to each other, and the content not described in detail in some embodiments can be referred to the same or similar content in other embodiments.

[0103] It should be noted that in the description of this application, terms such as "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance. In addition, in the description of this application, unless otherwise specified, the meaning of "a plurality of" refers to at least two.

[0104] Any process or method description shown in a flowchart or described in other ways herein can be understood as representing a module, segment, or part of code including one or more executable instructions for implementing a specific logical function or process. The scope of the preferred embodiments of this application includes additional implementations, where the functions can be executed in a manner that is not shown or discussed, including in a substantially simultaneous manner according to the functions involved or in a reverse order, which should be understood by those skilled in the technical field to which the embodiments of this application belong.

[0105] It should be understood that each part of this application can be implemented by hardware, software, firmware, or their combination. In the above embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, any one or a combination of the following well-known technologies in the art can be used: discrete logic circuits with logic gate circuits for implementing logical functions on data signals, application-specific integrated circuits with appropriate combinational logic gate circuits, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0106] Those of ordinary skill in the technical field of this application can understand that all or part of the steps carried by the methods in the above embodiments can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium. When the program is executed, it includes one or a combination of the steps of the method embodiments.

[0107] In addition, each functional unit in various embodiments of the present application may be integrated into a processing module, may exist physically alone for each unit, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. When the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0108] The above-mentioned storage medium may be a read-only memory, a magnetic disk, an optical disc, or the like.

[0109] In the description of this specification, the description with reference to terms such as "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

[0110] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and should not be construed as limiting the present application. Those of ordinary skill in the art can make changes, modifications, substitutions, and variations to the above embodiments within the scope of the present application.

Claims

1. A method for secure transmission of radio and television live broadcast signals, characterized in that, it includes the following steps: Convert the multicast signal reception in the radio and television private network into a live broadcast signal push stream, and push the live broadcast signal push stream to the public network live broadcast center server; The live broadcast center server reduces the bit rate of the live broadcast signal push stream and slices it, and then encrypts the sliced live broadcast stream; When receiving the live broadcast request of the client, determine the geographical location information of the client, and verify whether the client has the playback permission according to the geographical location information; If the client has the playback permission, the live broadcast center server issues the video streaming address and the decryption key to the client; The client downloads the video stream according to the video streaming address, and decrypts the downloaded video stream using the decryption key to obtain the corresponding live broadcast content.

2. The method according to claim 1, characterized in that, Converting the multicast signal reception in the radio and television private network into a live broadcast signal push stream includes the following steps: Deploy a live broadcast push stream system server in the radio and television private network environment, convert the multicast signal reception into a live broadcast signal push stream, and push the live broadcast signal push stream to the public network live broadcast center server through a dedicated line network.

3. The method according to claim 1, characterized in that, The live broadcast center server reducing the bit rate of the live broadcast signal push stream and slicing it includes the following steps: The live broadcast center server receives the live broadcast signal transmitted through the dedicated line network in real time, transcodes and encapsulates the live broadcast signal, and converts the live broadcast stream into a bit rate suitable for public network transmission using low-bitrate high-definition technology; Slice the live broadcast stream after reducing the bit rate, and cache the sliced video segments according to the time stamp.

4. The method according to claim 3, characterized in that, Encrypting the sliced live broadcast stream includes the following steps: Encrypt the sliced live broadcast stream through the encryption and decryption module, and at the same time, the encryption and decryption module saves the key used for the corresponding encrypted video and provides the decryption key distribution service.

5. The method according to any one of claims 1-4, characterized in that, After encrypting the sliced live broadcast stream, the following steps are further included: The live broadcast center server outputs the encrypted live broadcast stream to the source station of the public network standard content distribution network, and sinks the live broadcast stream to the edge node through the source station for the client to use; Enable the anti-leeching function on the content distribution network.

6. The method according to claim 5, characterized in that, The live broadcast center server obtaining the live broadcast request of the client includes the following steps: The client obtains a token through permission verification with the live broadcast center server; The client sends a live broadcast request to the live broadcast center server carrying the token.

7. The method according to claim 6, characterized in that, The client downloading the video stream according to the video streaming address includes the following steps: Select a live broadcast channel through the interface provided by the live broadcast center server, and obtain the corresponding streaming address according to the interface data; Start downloading the video stream after splicing the anti-leeching information according to the streaming address.

8. The method according to claim 1, characterized in that, Decrypting the downloaded video stream using the decryption key includes the following steps: The client applies to the decryption key service of the live center server for a video decryption key; wherein, the video decryption key is a decryption secret key that has been doubly encrypted. After receiving the video decryption key, the client uses the decryption capability provided by the SDK to decrypt and restore the video decryption key to obtain the plaintext decryption secret key. The downloaded video stream is decrypted using the plaintext decryption secret key.

9. The method according to any one of claims 1-4, characterized in that the live center server determines the geographical location information of the client, including the following steps: The live center server issues a positioning QR code to obtain the positioning information uploaded by the smart terminal through scanning the code, and the smart terminal is a smart device with GIS positioning capability; Combining the positioning information of the smart terminal with the IP home location of the client to determine the geographical location information of the client.

10. A secure transmission system for radio and television live signals, characterized in that it includes: a live streaming server, a live center server, and a client; The live streaming server is used to receive and convert the multicast signal in the radio and television private network into a live signal stream and push the live signal stream to the public network live center server; The live center server is used to reduce the bit rate and slice the live signal stream, and then encrypt the sliced live stream; When the live center server receives the live request of the client, it determines the geographical location information of the client and verifies whether the client has the playback permission according to the geographical location information; if the client has the playback permission, the live center server sends the video stream output address and the decryption secret key to the client; The client is used to download the video stream according to the video stream output address and decrypt the downloaded video stream using the decryption secret key to obtain the corresponding live content.

Images