A video theft prevention method, device and computer readable storage medium

Abstract

The embodiment of the application provides a video anti-theft method, a video anti-theft device and a computer readable storage medium, the method comprises the following steps: a client receives a uniform resource locator (URL) corresponding to a target video sent by a dispatch center; a conversion parameter is determined; based on the conversion parameter, a first user data packet protocol (UDP) data packet corresponding to the URL is acquired; the first UDP data packet is sent to a content distribution network (CDN) server; a second UDP data packet sent by the CDN server is received; based on the conversion parameter, the target video corresponding to the second UDP data packet is acquired. The data transmitted between the client and the CDN server is transmitted in the form of a UDP data packet in the embodiment of the application, so that a video file cannot be directly acquired by a user with a resource address, and meanwhile, the UDP data packet needs to be converted to become normal media data, so that a piracy behavior of intermediate packet capturing can also be suppressed.

Description

Technical Field

[0001] This application relates to the field of Internet technology, and in particular to a video anti-theft method, device, and computer-readable storage medium. Background Technology

[0002] With the development of internet technology and the improvement of network transmission speed, video has become a major way for people to obtain information. However, the explosive growth in the number of videos has brought enormous challenges to video copyright protection and video theft prevention.

[0003] Video anti-piracy measures primarily target hotlinking and piracy. Hotlinking involves using a legitimate account to log in, complete authentication, obtain a playback URL, save the authenticated URL, and distribute it to users who attempt to play the video. For HLS or DASH videos, the entire M3U8 / MPD file is cached and distributed to these users. Piracy involves setting up a proxy between the player and the network, causing the player to connect to the server through the proxy. The proxy caches HTTP response data, saves the cached data as a video file, and then distributes it to pirate websites or cloud storage. Hotlinking directly results in video copyright holders paying significant bandwidth costs to hotlinkers without any revenue, while piracy also causes losses for video copyright holders.

[0004] Common anti-piracy methods for streaming media services on the Internet include dynamically encrypting the video address, which automatically changes the video path within a specified time. However, this method is not suitable for large content delivery networks (CDNs). Summary of the Invention

[0005] In view of this, the purpose of this application is to provide a video anti-theft method, device, and computer-readable storage medium, which can prevent video from being hotlinked or pirated, and effectively reduce the bandwidth costs for video copyright holders. The specific technical solution is as follows:

[0006] Firstly, this application provides a video anti-theft method applied to a client, the method comprising:

[0007] Receive the Uniform Resource Locator (URL) corresponding to the target video sent by the dispatch center;

[0008] Determine the conversion parameters;

[0009] Based on the conversion parameters, obtain the first user data packet protocol UDP packet corresponding to the URL;

[0010] Send the first UDP packet to the content delivery network (CDN) server;

[0011] Receive the second UDP data packet sent by the CDN server;

[0012] obtaining a target video corresponding to the second UDP data packet based on the conversion parameter.

[0013] In a possible implementation, the determining the conversion parameter comprises:

[0014] sending a parameter negotiation request to the CDN server;

[0015] receiving CDN parameters sent by the CDN server, wherein the CDN parameters comprise transmission protocol information;

[0016] determining the conversion parameter based on the CDN parameters.

[0017] In a possible implementation, the obtaining the first UDP data packet corresponding to the URL based on the conversion parameter comprises:

[0018] replacing a transmission protocol of the URL with a UDP transmission protocol in the conversion parameter to obtain the first UDP data packet.

[0019] In a possible implementation, if there are multiple second UDP data packets, the obtaining the target video corresponding to the second UDP data packet based on the conversion parameter comprises:

[0020] converting multiple second UDP data packets into multiple segment files based on a transmission control protocol in the conversion parameter;

[0021] synthesizing the multiple segment files based on a sorting algorithm in the conversion parameter to obtain the target video.

[0022] In a possible implementation, before the receiving the URL corresponding to the target video sent by the dispatch center, the method further comprises:

[0023] sending a video acquisition request to the dispatch center, wherein the dispatch center sends the URL after successful authentication, and the video acquisition request comprises a video identifier of the target video.

[0024] In a second aspect, the application provides a video anti-theft method applied to a CDN server, and the method comprises:

[0025] receiving a first UDP data packet corresponding to a URL sent by a client, wherein the first UDP data packet is obtained based on a conversion parameter, the URL corresponds to a target video, and the URL is sent by a dispatch center to the client;

[0026] send a second UDP data packet to the client, so that the client obtains the target video corresponding to the second UDP data packet based on the conversion parameter.

[0027] In a possible implementation, the method further includes:

[0028] receiving a parameter negotiation request sent by the client;

[0029] sending a CDN parameter to the client, the CDN parameter including transmission protocol information, so that the client determines the conversion parameter based on the CDN parameter.

[0030] In a third aspect, the application further provides a video anti-theft device applied to a client, the device including:

[0031] a receiving module configured to receive a URL corresponding to a target video sent by a dispatch center;

[0032] a determining module configured to determine a conversion parameter;

[0033] an obtaining module configured to obtain a first user data packet protocol (UDP) data packet corresponding to the URL based on the conversion parameter;

[0034] a sending module configured to send the first UDP data packet to a CDN server;

[0035] the receiving module is further configured to receive a second UDP data packet sent by the CDN server;

[0036] the obtaining module is further configured to obtain a target video corresponding to the second UDP data packet based on the conversion parameter.

[0037] In a fourth aspect, the application further provides a video anti-theft device applied to a CDN server, the device including:

[0038] a receiving module configured to receive a first UDP data packet corresponding to a URL sent by a client, the first UDP data packet being obtained based on a conversion parameter, the URL corresponding to a target video, the URL being sent to the client by a dispatch center;

[0039] a sending module configured to send a second UDP data packet to the client, so that the client obtains the target video corresponding to the second UDP data packet based on the conversion parameter.

[0040] In a fifth aspect, the application further provides a computer readable storage medium storing instructions, when the instructions are run on a computer, causing the computer to execute the method of any one of the first aspect or the method of any one of the second aspect.

[0041] In the embodiment of the present application, the client receives a uniform resource locator (URL) corresponding to the target video sent by the dispatching center, determines a conversion parameter, acquires a first user datagram protocol (UDP) data packet corresponding to the URL based on the conversion parameter, sends the first UDP data packet to a content distribution network (CDN) server, receives a second UDP data packet sent by the CDN server, and acquires the target video corresponding to the second UDP data packet based on the conversion parameter. In the embodiment of the present application, the data transmitted between the client and the CDN server is transmitted in the form of a UDP data packet, so that a user who steals a link cannot directly acquire a video file by using a resource address, and a UDP data packet needs to be converted into normal media data, so that the behavior of stealing a link by means of intermediate packet capture can also be suppressed. Through the embodiment of the present application, the video can be prevented from being stolen or pirated, and the bandwidth cost of a video copyright party can be effectively reduced. BRIEF DESCRIPTION OF DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings needed to be used in the embodiments or the prior art description will be briefly introduced. Obviously, the drawings in the following description are some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without creative labor.

[0043] Figure 1 A flowchart of a video anti-theft method according to an embodiment of the present application is shown;

[0044] Figure 2 A flowchart of a client player according to an embodiment of the present application is shown;

[0045] Figure 3 A flowchart of a WEB / general player according to an embodiment of the present application is shown;

[0046] Figure 4 A transmission topology diagram according to an embodiment of the present application is shown;

[0047] Figure 5 A structural diagram of a video anti-theft device according to an embodiment of the present application is shown;

[0048] Figure 6 A structural diagram of another video anti-theft device according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0049] To make the objects, technical solutions and advantages of the embodiments of the present application clearer, the following will be used to clearly and completely describe the technical solutions in the embodiments of the present application with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0050] First, some terms that can appear in the embodiments of the present application are explained.

[0051] HyperText Transfer Protocol (HTTP) is the most widely used network protocol on the Internet. All WWW files must comply with this standard. The original purpose of designing HTTP is to provide a method for publishing and receiving HTML pages.

[0052] Transmission Control Protocol (TCP) Wrappers provides enhanced security for services generated by inetd. TCP Wrappers is a replacement method for using / etc / inetd.sec. TCP Wrappers provides protection against host name and host address spoofing, which is a method of disguising as a valid user or host to gain unauthorized access to the system.

[0053] User Datagram Protocol (UDP) is a connectionless transport layer protocol in the Open System Interconnection (OSI) reference model, which provides a simple transaction-oriented unreliable information transfer service, and IETF RFC 768 is the official specification of UDP.

[0054] Content Delivery Network (CDN) is a new type of network content service system, which is based on IP network, and provides content distribution and service based on the efficiency requirement, quality requirement and content order of content access and application. From a broad perspective, CDN represents a network application service mode with high quality, high efficiency and distinct network order based on network construction.

[0055] Digital Rights Management (DRM) refers to the rights protection, use control and management technology in the production, transmission, sales and use process of digital content such as audio and video program content, documents, electronic books and the like.

[0056] HLS, full name is HTTP Live Streaming, is Apple's dynamic bit rate adaptive technology. Mainly used for PC and Apple terminal audio and video services. Including a m3u (8) index file, TS media file and key encryption string file.

[0057] Dynamic Adaptive Streaming over HTTP (DASH) is a technical standard developed by the International Standard Group MPEG.

[0058] World Wide Web (web) in web design is called the meaning of the web page.

[0059] The current phenomenon of rampant link stealing, link stealing website often use regular account access resource address, and then the resource address published to the network to provide play, so as to skip the authentication to form the link stealing, this link stealing behavior directly lead to the video copyright party need to pay a lot of bandwidth cost for link stealing user but no any benefit. In addition, there are also through the network packet capture, save the file after the release of diffusion of piracy also let the video copyright party suffer losses.

[0060] The common method of anti-link stealing of streaming media business on the Internet is as follows: dynamic encryption of film address, that is, automatically changing the film path within a specified time; binding with members, that is, each member has his own connection path, such as: rtsp: / / username:userpassip / filmname.rm; entering the play page, writing temporary access username and verification password to the database, if the connection time is exceeded, the address will be invalid; authenticating with a third-party authentication agency, such as DRM; using private protocol. However, these methods are basically not suitable for the use of large CDN, because:

[0061] 1. When using CDN cache service, the way of dynamically changing path cannot be supported, that is, CDN cannot cache data, so the use of CDN loses its meaning;

[0062] 2. If DRM is used, the cost of accessing DRM is paid every time, and the DRM service cannot accept frequent access;

[0063] 3. If the request valid time method is used, the valid time cannot be determined, for example, a film has 3 hours, and the request valid time must support 3 hours. The M3U8 file cached in the 3 hours may be widely link stolen;

[0064] 4. CDN cache servers usually belong to different CDN manufacturers, and the communication cost is high, so they cannot verify whether it is a real user request by synchronizing information;

[0065] 5, unable to solve the problem of the pirate after the packet cache;

[0066] 6, unable to cover to Web / general network player, in general, video manufacturers need not only support the client player, but also support Web / general network player, if using private protocol, Web / general network player will not be covered.

[0067] Therefore, the embodiment of the application converts the underlying transmission protocol of the regular playing mode of the HTTP protocol from TCP to UDP, solves the problems of video piracy and link stealing. After converting the transmission protocol, direct use of the intermediate cache address cannot play the video, because the original HTTP-based playing link (HLS, MP4, DASH, etc.) is based on TCP connection, and the CDN server only provides UDP connection to the outside. At the same time, the UDP data packet needs to be converted into normal media data, so the behavior of piracy through intermediate packet capture caching can also be curbed.

[0068] Please refer to Figure 1 , a flowchart of a video anti-piracy method embodiment provided by the application is shown, the embodiment of the application is applied to a client, the client refers to a program that provides local services for customers, such as application APP, browser, etc., the client can be carried in a terminal, and the terminal refers to a device capable of installing and running the client, such as a smart phone, a tablet computer, a laptop personal computer, a desktop personal computer, a small computer, a medium-sized computer, a large computer, etc. The embodiment of the application at least includes the following steps:

[0069] S11, receiving the URL corresponding to the target video sent by the dispatching center.

[0070] When the user has the demand to watch the video, the user will send a video acquisition request to the dispatching center through the client, so that the client can receive the URL corresponding to the target video sent by the dispatching center. The URL can include the authentication parameter and the CDN server host address after the dispatching center authenticates the video acquisition request.

[0071] S12, determining the conversion parameter.

[0072] The conversion parameter of the embodiment of the application is used for the conversion of the transmission protocol between the client and the CDN server, to solve the problems of video piracy and link stealing.

[0073] In one possible implementation, determining the conversion parameter can include the following steps:

[0074] S121, sending a parameter negotiation request to the CDN server, the parameter negotiation request is used to instruct the CDN parameter to return the CDN parameter;

[0075] S122, receiving the CDN parameter sent by the CDN server, wherein the CDN parameter comprises transmission protocol information;

[0076] S123, determining the conversion parameter based on the CDN parameter.

[0077] In one implementation of determining the conversion parameter based on the CDN parameter, the transmission protocol information is compared with the client transmission protocol, and the same transmission protocol is determined as the conversion parameter.

[0078] When there are multiple transmission protocols that are the same as the transmission protocol information, one of them is selected as the conversion parameter. The transmission protocol information comprises the transmission protocol supported by the CDN server, and the client transmission protocol comprises the transmission protocol supported by the client. The client transmission protocol can be a transmission protocol specified by the dispatch center or a transmission protocol specified by the client itself.

[0079] The parameter negotiation request can comprise a fragmentation algorithm, an ordering algorithm, and encryption confusion information, the fragmentation algorithm is used to indicate fragmentation of the transmitted data, the ordering algorithm is used to indicate out-of-order transmission of the transmitted data, and the encryption confusion information is used to indicate whether encryption and / or confusion is performed. The encryption confusion information can also comprise an encryption algorithm and / or a confusion algorithm. When the encryption confusion information comprises an encryption algorithm and / or a confusion algorithm, it means that the transmitted data needs to be encrypted and / or confused. The encryption algorithm and the confusion algorithm included in the encryption confusion information are universal, i.e., supported by the client and the CDN server. Generally, an AES lightweight encryption algorithm such as AES128, AES192, and AES256 is used, or a simple XOR algorithm is used for confusion. It should be noted that in actual applications, there are multiple encryption algorithms and multiple confusion algorithms, which are not limited herein.

[0080] When the parameter negotiation request comprises the fragmentation algorithm, the ordering algorithm, and the encryption confusion information, the conversion parameter can also comprise the fragmentation algorithm, the ordering algorithm, and the encryption confusion information.

[0081] S13, obtaining a first user datagram protocol (UDP) data packet corresponding to the URL based on the conversion parameter.

[0082] The application embodiment exists conversion of transmission protocols between the URL and the first UDP data packet.

[0083] In one implementation of obtaining the first UDP data packet corresponding to the URL, the transmission protocol of the URL is replaced with the UDP transmission protocol in the conversion parameter to obtain the first UDP data packet. The UDP transmission protocol can be one of KCP transmission protocol and QUIC transmission protocol.

[0084] When the encrypted obfuscated information includes an encryption algorithm and / or an obfuscation algorithm, after the transmission protocol of the URL is replaced with the UDP transmission protocol in the conversion parameter, the URL after the protocol conversion needs to be encrypted and / or obfuscated to obtain the first UDP data packet.

[0085] S14, sending the first UDP data packet to the CDN server.

[0086] S15, receiving the second UDP data packet sent by the CDN server.

[0087] After the client of the embodiment of the application sends the first UDP data packet to the CDN server, the second UDP data packet sent by the CDN server will be received, which is obtained by the CDN server through the transmission protocol conversion of the target video.

[0088] S16, obtaining the target video corresponding to the second UDP data packet based on the conversion parameter.

[0089] The second UDP data packet and the target video also have transmission protocol conversion.

[0090] One implementation of obtaining the target video corresponding to the second UDP data packet can be that the transmission protocol of the second UDP data packet is replaced with the TCP transmission protocol in the conversion parameter to obtain the target video.

[0091] In the embodiment of the application, the client receives the uniform resource locator URL corresponding to the target video sent by the dispatch center; determines the conversion parameter; obtains the first user data packet protocol UDP data packet corresponding to the URL based on the conversion parameter; sends the first UDP data packet to the content distribution network CDN server; receives the second UDP data packet sent by the CDN server; and obtains the target video corresponding to the second UDP data packet based on the conversion parameter. The data transmitted between the client and the CDN server in the embodiment of the application is transmitted in the form of a UDP data packet, and the CDN server only provides UDP service to the outside, so that the user who pirates the link cannot directly obtain the video file with the resource address, and at the same time, the UDP data packet needs to be converted to become normal media data, so that the behavior of pirating the intermediate packet can also be curbed. Through the embodiment of the application, effective prevention of video content piracy can be realized, and the bandwidth cost of the video property right party can be effectively reduced.

[0092] Next, another embodiment provided by the application will be introduced. Another video piracy prevention method embodiment provided by the embodiment of the application is applied to a video piracy prevention system, and the video piracy prevention system at least includes a client, a CDN server and a dispatch center. The embodiment of the application will explain the interaction between the modules of the video piracy prevention system.

[0093] The CDN server integrates the UDPProxy, referred to as a server UDPProxy, which can be integrated in the CDN server in the form of a software development kit (SDK) or a separate program. It should be noted that the integration manner of the server UDPProxy can be set according to actual scenarios, and the embodiments of the present application are not limited.

[0094] The client can also integrate the UDPProxy. If the client integrates the UDPProxy, the UDPProxy is referred to as a client UDPProxy, and reliable UDP transmission can be achieved between the server UDPProxy and the client UDPProxy.

[0095] Referring to FIG. 1, Figure 2 FIG. 1 shows a client player flowchart provided by an embodiment of the present application, and the embodiment of the present application at least includes the following steps:

[0096] S201, the client sends a video acquisition request to the dispatch center.

[0097] When a user has a demand to watch a video, the user sends a video acquisition request to the dispatch center through the client. The video acquisition request can include a video identifier of a target video and authentication request information. The authentication request information can include time, a client identifier, a user account, and a password. It should be noted that the content of the authentication request information can be set according to actual conditions, as long as the dispatch center can determine whether the user has the right to acquire the video according to the authentication request information, and the embodiments of the present application are not limited.

[0098] S202, the dispatch center receives the video acquisition request and performs authentication based on the video acquisition request.

[0099] After receiving the video acquisition request, the dispatch center performs authentication according to the authentication request information, and determines whether the client that sends the video acquisition request has the right to acquire the video.

[0100] S203, the dispatch center sends a URL to the client after successful authentication.

[0101] After successful authentication, the dispatch center determines the resource distribution according to the video identifier of the target video, and then sends a URL including a CDN server host address to the client. The CDN server corresponding to the CDN server host address is a server that can acquire the target video.

[0102] S204, the client receives the URL.

[0103] S205, the client UDPProxy sends a parameter agreement request to the server UDPProxy.

[0104] The client communicates with the CDN server through a client-side UDP proxy.

[0105] S206, The server UDPProxy receives a parameter agreement request.

[0106] S207, the server UDPProxy sends CDN parameters to the client UDPProxy.

[0107] After receiving the parameter agreement request, the server UDPProxy determines the transport protocols it supports and sends the CDN parameters, including the transport protocols it supports, to the client UDPProxy.

[0108] S208, the client UDPProxy determines the conversion parameters based on the CDN parameters.

[0109] S209, the client UDPProxy replaces the transport protocol of the URL with the UDP transport protocol in the conversion parameters, and obtains the first UDP data packet.

[0110] After receiving the URL, the client sends the URL to the client UDPProxy, which then converts the URL into a first UDP packet.

[0111] S210, the client UDPProxy sends the first UDP packet to the server UDPProxy.

[0112] S211, the server UDPProxy receives the first UDP packet.

[0113] The first UDP packet is obtained by converting the URL based on the conversion parameters. This URL corresponds to the target video and is sent to the client by the dispatch center.

[0114] S212, the server UDPProxy reassembles the first UDP packet and restores it to a URL.

[0115] The server UDPProxy can reassemble and restore the first UDP data into a URL based on the TCP transport protocol and encryption and / or obfuscation algorithms in the conversion parameters.

[0116] S213, the CDN server obtains the target video based on the URL.

[0117] The CDN server receives the URL sent by the server's UDP proxy and then obtains the target video based on the URL.

[0118] S214, the server UDPProxy slices the target video based on the slice algorithm in the conversion parameter to obtain a segment file or multiple segment files. If a segment file is obtained, S215 is performed; if multiple segment files are obtained, S219 is performed.

[0119] After obtaining the target video, the CDN server sends the target video to the server UDPProxy for processing. The server UDPProxy slices the target video based on the slice algorithm to avoid large data transmission between the client and the CDN server.

[0120] S215, the server UDPProxy performs conversion of the transmission protocol on the segment file to obtain a second UDP data packet.

[0121] After obtaining the segment file, the transmission protocol of the segment file is converted from the original transmission protocol supported by the segment file to the UDP transmission protocol to obtain a second UDP data packet.

[0122] S216, the server UDPProxy sends the second UDP data packet to the client UDPProxy.

[0123] S217, the client UDPProxy receives the second UDP data packet.

[0124] S218, the client UDPProxy converts the second UDP data packet into the target video based on the TCP transmission protocol in the conversion parameter.

[0125] After receiving the second UDP data packet, the client UDPProxy cannot use the second UDP data packet as normal media data, so it is necessary to convert the second UDP data packet into the target video and then send the target video to the client for display.

[0126] S219, the server UDPProxy performs conversion of the transmission protocol on the multiple segment files to obtain multiple second UDP data packets.

[0127] After obtaining the multiple segment files, the transmission protocol of each segment file is converted to obtain multiple second UDP data packets.

[0128] S220, the server UDPProxy sends the multiple second UDP data packets to the client UDPProxy.

[0129] The server UDPProxy can send the plurality of second UDP packets in a preset rule based on the sorting algorithm in the conversion parameter, one second UDP packet at a time. The preset rule is different from the order of the original split file. When the server UDPProxy sends the first second UDP packet, the packet information can be carried, the packet information being used to indicate the number of second UDP packets in this transmission, so that the client UDPProxy determines whether all the second UDP packets are received.

[0130] S221, the client UDPProxy receives the plurality of second UDP packets.

[0131] S222, the client UDPProxy converts the plurality of second UDP packets into a plurality of split files based on the TCP transmission protocol in the conversion parameter.

[0132] After the client UDPProxy receives the plurality of second UDP packets, the second UDP packets need to be converted into a plurality of split files based on the transmission protocol.

[0133] S223, the client UDPProxy synthesizes the plurality of split files based on the sorting algorithm in the conversion parameter to obtain the target video.

[0134] After the plurality of split files are obtained, the plurality of split files are sorted and synthesized based on the sorting algorithm in the conversion parameter, and the complete target video is obtained.

[0135] The embodiment of the application replaces the underlying transmission protocol of the HTTP-based media playing behavior of the client from TCP to UDP, and adds a small amount of encryption and confusion algorithm, so that the pirate cannot fundamentally pirate the link by copying and sharing the HTTP link, and cannot pirate the link by intermediate packet capture.

[0136] However, this way of integrating the client with the UDPProxy is only applicable to the application APP, and is not applicable to the browser. Therefore, when the client is a browser, the UDP transmission between the client and the server UDPProxy is implemented by a pirate-proof proxy server independent of the client, and the pirate-proof proxy server integrates the UDPProxy.

[0137] Please refer to Figure 3 , which shows a WEB / general player flowchart provided by the embodiment of the application, and the embodiment of the application at least includes the following steps:

[0138] S301, the client sends a video acquisition request to the dispatch center.

[0139] S302, the dispatching center receives a video acquisition request, and performs authentication based on the video acquisition request.

[0140] S303, the dispatching center sends a URL to the client after the authentication is successful.

[0141] The URL can indicate a host address of the anti-theft proxy server.

[0142] S304, the client receives the URL.

[0143] After receiving the URL, the client sends the URL to the anti-theft proxy server.

[0144] S305, the anti-theft proxy server sends a parameter negotiation request to the server UDPProxy.

[0145] S306, the server UDPProxy receives the parameter negotiation request.

[0146] S307, the server UDPProxy sends CDN parameters to the anti-theft proxy server.

[0147] S308, the anti-theft proxy server determines conversion parameters based on the CDN parameters.

[0148] S309, the anti-theft proxy server replaces a transmission protocol of the URL with a UDP transmission protocol in the conversion parameters to obtain a first UDP data packet.

[0149] Before sending the first UDP data packet to the server UDPProxy, the anti-theft proxy server performs anti-theft policy screening, and when it is determined that the URL is normal, the anti-theft proxy server sends the first UDP data packet to the server UDPProxy.

[0150] Because the browser WEB user is less, and the resource is less, a small amount of servers can meet the service function, and all WEB users are concentrated to a small amount of entrances, which facilitates the execution of many anti-theft policies. The anti-theft policy includes but is not limited to: IP discrimination and checking, checking whether the same URL exists, but has different source IP addresses; URL counting, whether the same URL has a large number of requests at the same time. If the above phenomena exist, the URL will be discarded, the speed will be limited, the IP will be blocked, and the situation will be reported, and manual intervention will be performed.

[0151] S310, the anti-theft proxy server sends the first UDP data packet to the server UDPProxy.

[0152] S311, the server UDPProxy receives the first UDP data packet.

[0153] S312, the server UDPProxy recombines and restores the first UDP packet into a URL.

[0154] S313, the CDN server obtains the target video based on the URL.

[0155] S314, the server UDPProxy slices the target video based on the slice algorithm in the conversion parameter to obtain one or more slice files. If one slice file is obtained, S315 is executed; if more slice files are obtained, S319 is executed.

[0156] S315, the server UDPProxy converts the transmission protocol of the one slice file to obtain a second UDP packet.

[0157] S316, the server UDPProxy sends the second UDP packet to the anti-theft proxy server.

[0158] S317, the anti-theft proxy server receives the second UDP packet.

[0159] S318, the anti-theft proxy server converts the second UDP packet into the target video based on the TCP transmission protocol in the conversion parameter.

[0160] S319, the server UDPProxy converts the transmission protocol of the more slice files to obtain more second UDP packets.

[0161] S320, the server UDPProxy sends the more second UDP packets to the anti-theft proxy server.

[0162] S321, the anti-theft proxy server receives the more second UDP packets.

[0163] S322, the anti-theft proxy server converts the more second UDP packets into the more slice files based on the TCP transmission protocol in the conversion parameter.

[0164] S323, the anti-theft proxy server synthesizes the more slice files based on the sorting algorithm in the conversion parameter to obtain the target video.

[0165] After obtaining the target video, the anti-theft proxy server sends the target video to the client, so that the client can display the target video.

[0166] In the embodiments of the present application, S301-S323 are similar to S201-S223, and the specific content can be referred to S201-S223.

[0167] The embodiment of the present application is used for the web universal browser which cannot use the application APP, and the playing link is directed to the anti-theft proxy server, and the anti-theft proxy server converts the underlying protocol and then requests the data from the CDN server. In this way, the original WEB universal player can be covered, and because the WEB player is less, the anti-theft strategy can be increased on the anti-theft proxy server, such as IP source control, repeated link statistics and prevention, etc.

[0168] Figure 4 A transmission topology diagram provided by the embodiment of the present application is shown, and in the embodiment of the present application, whether the client integrates the client UDPProxy or provides the anti-theft proxy server for the client, the video can be effectively prevented from being stolen. The original player code is slightly intruded by using the embodiment of the present application, and the cooperation of the CDN, especially the third-party CDN, is low in dependence. The anti-theft link and the anti-piracy effect based on HTTP are realized under the benefits of forward compatibility. Meanwhile, the penetration of UDP is better than that of TCP, and the speed is also better than that of TCP. This method can be transparent to live broadcast and on-demand, and the upper business logic does not need to be changed. The only change is that the independent UDPProxy module needs to be integrated and the data communication is performed by the module.

[0169] Next, a video anti-theft device provided by the present application is introduced, and the video anti-theft device introduced below can be correspondingly referred to the video anti-theft method introduced above.

[0170] Please refer to Figure 5 , a structure schematic diagram of a video anti-theft device provided by the present application is shown, which is applied to a client, and the device comprises:

[0171] The receiving module 501 is used for receiving the URL corresponding to the target video sent by the dispatching center;

[0172] The determining module 502 is used for determining the conversion parameter;

[0173] The obtaining module 503 is used for obtaining the first user data packet protocol UDP data packet corresponding to the URL based on the conversion parameter;

[0174] The sending module 504 is used for sending the first UDP data packet to the CDN server;

[0175] The receiving module 501 is also used for receiving the second UDP data packet sent by the CDN server;

[0176] The obtaining module 503 is also used for obtaining the target video corresponding to the second UDP data packet based on the conversion parameter.

[0177] In the embodiment of the present application, the determining module 502 comprises:

[0178] a sending unit, configured to send a parameter negotiation request to the CDN server;

[0179] a receiving unit, configured to receive CDN parameters sent by the CDN server, the CDN parameters comprising transmission protocol information;

[0180] a determining unit, configured to determine the conversion parameter based on the CDN parameters.

[0181] In the embodiments of the present application, the obtaining module 503 comprises:

[0182] a first converting unit, configured to replace the transmission protocol of the URL with a UDP transmission protocol in the conversion parameter to obtain the first UDP data packet.

[0183] In the embodiments of the present application, the obtaining module 503 further comprises:

[0184] a second converting unit, configured to convert a plurality of the second UDP data packets into a plurality of fragmented files based on a transmission control protocol in the conversion parameter;

[0185] a synthesizing unit, configured to synthesize the plurality of fragmented files based on a sorting algorithm in the conversion parameter to obtain the target video.

[0186] In the embodiments of the present application, the sending module 504 is further configured to send a video obtaining request to the dispatch center, and the dispatch center sends the URL after successful authentication, wherein the video obtaining request comprises a video identifier of the target video.

[0187] Please refer to Figure 6 , which shows a structural schematic diagram of another video anti-theft device provided by the present application, applied to a client, the device comprising:

[0188] a receiving module 601, configured to receive a first UDP data packet corresponding to a URL sent by a client, the first UDP data packet being obtained based on a conversion parameter, the URL corresponding to a target video, and the URL being sent to the client by a dispatch center;

[0189] a sending module 602, configured to send a second UDP data packet to the client, so that the client obtains a target video corresponding to the second UDP data packet based on the conversion parameter.

[0190] In the embodiments of the present application, the receiving module 601 is further configured to receive a parameter negotiation request sent by the client;

[0191] The sending module 602 is further configured to send a CDN parameter to the client, the CDN parameter comprising transmission protocol information, so that the client determines the conversion parameter based on the CDN parameter.

[0192] The embodiment of the present application further provides a computer readable storage medium, which stores instructions, and when the instructions are run on a computer, the computer executes the video anti-theft method.

[0193] In the embodiment of the present application, the client receives a uniform resource locator (URL) corresponding to a target video sent by a dispatch center, determines a conversion parameter, acquires a first user datagram protocol (UDP) data packet corresponding to the URL based on the conversion parameter, sends the first UDP data packet to a content distribution network (CDN) server, receives a second UDP data packet sent by the CDN server, and acquires the target video corresponding to the second UDP data packet based on the conversion parameter. In the embodiment of the present application, data transmitted between the client and the CDN server is transmitted in the form of a UDP data packet, the CDN server only provides UDP service externally, so that a user who steals a link cannot directly acquire a video file by using a resource address, and meanwhile, a UDP data packet needs to be converted to become normal media data, so that a pirate behavior of stealing a packet in the middle can also be curbed. Through the embodiment of the present application, effective anti-theft of video content can be realized, and the bandwidth cost of a video property right party can be effectively reduced.

[0194] It should be noted that the same and similar parts among various embodiments can be referred to each other. For the device embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the related parts can be referred to the part of the method embodiments.

[0195] For the foregoing embodiments, in order to simply describe, the embodiments are all expressed as a series of action combinations, but those skilled in the art should know that the present application is not limited to the action sequence described, because according to the present application, certain steps can be performed in other sequences or at the same time. Secondly, those skilled in the art should know that the embodiments described in the specification all belong to preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0196] Finally, it should be noted that, in this document, the term "only" is used simply to set off from one entity or action to another in order to avoid the use of the term "and" more than once in a single clause. Moreover, the terms "comprise", "comprises" or "comprising" or any other variation thereof are intended to cover a non-exclusive inclusion, such that a process, method, article or apparatus that comprises a list of elements does not include only those elements but can also include other elements not expressly listed or inherent to such process, method, article or apparatus. An element proceeded by "comprises a" does not, without further constraints, exclude the existence of additional identical elements in the process, method, article or apparatus that comprises the element.

[0197] The above description of disclosed embodiments enables one skilled in the art to make or use the application. Numerous modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein can be applied to other embodiments without departing from the spirit or scope of the application. Thus, the present application is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

[0198] The above description is merely that of preferred embodiments of the present application and it is to be appreciated that those skilled in the art will be able to devise numerous alterations using no more than their common general knowledge should they so desire, and such alterations, where not already deemed to fall within the equivalences of the presently disclosed embodiments, should be, nevertheless, deemed to be within the scope of the application.

Claims

1. A video anti-theft method, characterized in that, Applied to a client, the method includes: A video retrieval request is sent to the scheduling center, which authenticates the client sending the video retrieval request and determines whether the client has the permission to retrieve the video. If the authentication is successful, a Uniform Resource Locator (URL) including the CDN server host address is sent. The video retrieval request includes the video identifier of the target video. Receive the Uniform Resource Locator (URL) corresponding to the target video sent by the dispatch center; Send a parameter agreement request to the CDN server, receive CDN parameters sent by the CDN server, the CDN parameters include transport protocol information, and determine conversion parameters based on the CDN parameters. The conversion parameters include a fragmentation algorithm, a sorting algorithm, and encryption / obfuscation information. The fragmentation algorithm is used to indicate that the transmitted data is fragmented, the sorting algorithm is used to indicate that the transmitted data is sent out of order, and the encryption / obfuscation information is used to indicate whether to encrypt and / or obfuscate. Based on the conversion parameters, obtain the first user data packet protocol UDP packet corresponding to the URL; Send the first UDP packet to the content delivery network (CDN) server; Receive the second UDP data packet sent by the CDN server; Based on the conversion parameters, the target video corresponding to the second UDP data packet is obtained.

2. The method according to claim 1, characterized in that, The step of obtaining the first UDP data packet corresponding to the URL based on the conversion parameters includes: The first UDP data packet is obtained by replacing the transport protocol of the URL with the UDP transport protocol in the conversion parameters.

3. The method according to claim 1, characterized in that, If multiple second UDP packets exist, the step of obtaining the target video corresponding to the second UDP packet based on the conversion parameters includes: Based on the transmission control protocol in the conversion parameters, multiple second UDP packets are converted into multiple fragmented files; Based on the sorting algorithm in the conversion parameters, the multiple segmented files are combined to obtain the target video.

4. A video anti-theft method, characterized in that, Applied to CDN servers, the method includes: The system receives a first UDP data packet corresponding to a URL sent by a client. The first UDP data packet is obtained based on conversion parameters. The URL corresponds to the target video and is sent to the client by the scheduling center. The URL on the client side is as follows: the client sends a video retrieval request to the scheduling center, which authenticates the client sending the video retrieval request to determine whether the client has the permission to retrieve the video. After successful authentication, the system sends a Uniform Resource Locator (URL) including the CDN server host address. The video retrieval request includes the video identifier of the target video. A second UDP packet is sent to the client, enabling the client to obtain the target video corresponding to the second UDP packet based on the conversion parameters; The method further includes: Receive the parameter agreement request sent by the client; The client is sent CDN parameters, which include transport protocol information, so that the client can determine the conversion parameters based on the CDN parameters. The conversion parameters include a fragmentation algorithm, a sorting algorithm, and encryption / obfuscation information. The fragmentation algorithm is used to indicate that the transmitted data is fragmented, the sorting algorithm is used to indicate that the transmitted data is sent out of order, and the encryption / obfuscation information is used to indicate whether to encrypt and / or obfuscate.

5. A video anti-theft device, characterized in that, Applied to a client, the device includes: The receiving module is used to receive the URL corresponding to the target video sent by the dispatch center; The determining module is used to send a parameter agreement request to the CDN server, receive CDN parameters sent by the CDN server, the CDN parameters including transmission protocol information, and determine conversion parameters based on the CDN parameters. The conversion parameters include a fragmentation algorithm, a sorting algorithm, and encryption / obfuscation information. The fragmentation algorithm is used to indicate that the transmitted data is fragmented, the sorting algorithm is used to indicate that the transmitted data is sent out of order, and the encryption / obfuscation information is used to indicate whether to encrypt and / or obfuscate. The acquisition module is used to acquire a first user data packet (UDP) corresponding to the URL based on the conversion parameters. The sending module is used to send the first UDP data packet to the CDN server; The receiving module is also used to receive a second UDP data packet sent by the CDN server; The acquisition module is further configured to acquire the target video corresponding to the second UDP data packet based on the conversion parameters; The device is further configured to: send a video acquisition request to the scheduling center, whereby the scheduling center authenticates the request and determines whether the client sending the video acquisition request has the permission to acquire the video; and, upon successful authentication, send a Uniform Resource Locator (URL) including the CDN server host address, wherein the video acquisition request includes the video identifier of the target video.

6. A video anti-theft device, characterized in that, The device, applied to a CDN server, includes: The receiving module is used to receive a first UDP data packet corresponding to a URL sent by the client. The first UDP data packet is obtained based on conversion parameters. The URL corresponds to the target video and is sent to the client by the scheduling center. The URL on the client side is as follows: the client sends a video acquisition request to the scheduling center, which authenticates the client sending the video acquisition request and determines whether the client has the permission to acquire the video. After successful authentication, the scheduling center sends a Uniform Resource Locator (URL) including the CDN server host address. The video acquisition request includes the video identifier of the target video. The sending module is used to send a second UDP data packet to the client, so that the client can obtain the target video corresponding to the second UDP data packet based on the conversion parameters; The device is also used for: Receive the parameter agreement request sent by the client; The client is sent CDN parameters, which include transport protocol information, so that the client can determine the conversion parameters based on the CDN parameters. The conversion parameters include a fragmentation algorithm, a sorting algorithm, and encryption / obfuscation information. The fragmentation algorithm is used to indicate that the transmitted data is fragmented, the sorting algorithm is used to indicate that the transmitted data is sent out of order, and the encryption / obfuscation information is used to indicate whether to encrypt and / or obfuscate.

7. A computer-readable storage medium, characterized in that, The device stores instructions that, when executed on a computer, cause the computer to perform the method as described in any one of claims 1 to 3 or the method as described in claim 4.

Images