A video encryption playing method, device, equipment and storage medium

Abstract

Embodiments of the application disclose a video encryption playing method, device and equipment and a storage medium. The method comprises the following steps: receiving a first playing instruction based on a first link; sending a first resource request to a resource server according to the first playing instruction, wherein the first resource request comprises the first link; receiving a second link, a theft prevention parameter and an encryption identifier fed back by the resource server based on the first resource request, wherein the second link is obtained according to the first link; obtaining a first playing resource from the cloud according to the second link, wherein the first playing resource is an encrypted playing resource; performing splicing processing on the first playing resource according to the theft prevention parameter to obtain a second playing resource; performing decryption processing on a preset encrypted picture according to the encryption identifier to obtain key information; and performing decryption processing on the second playing resource according to the key information, and performing video playing on the decrypted second playing resource, so as to solve the problem of low security in the video playing process, improve the security of video playing, and protect the rights and interests of a video owner.

Description

Technical Field

[0001] This application relates to the field of video playback technology, and in particular to a video encryption playback method, apparatus, device, and storage medium. Background Technology

[0002] The basic principle of streaming media network transmission protocols based on HTTP (Hypertext Transfer Protocol) is to slice a large media file and record the resource paths of the slice files in an index file (such as an m3u8 file), which is then provided to the client. The client can then retrieve the corresponding media resource for playback based on the index file (such as the m3u8 file).

[0003] To improve video playback security, segment files can be encrypted. The encrypted segment file and its key address are added to the corresponding index file (e.g., an m3u8 file). The index file (e.g., the m3u8 file) is then published to an HTTP server. Any client can download and parse the index file (e.g., the m3u8 file), and then download the segment file and its corresponding key to decrypt and play the video. However, current video encryption methods have relatively low security. Summary of the Invention

[0004] This application provides a video encryption playback method, apparatus, device, and storage medium, which can solve the problem of low security during video playback, improve the security of video playback, and protect the rights and interests of video owners.

[0005] In a first aspect, embodiments of this application provide a video encryption playback method for a client, comprising:

[0006] Receive a first playback instruction based on a first link, and send a first resource request to a resource server according to the first playback instruction, wherein the first resource request includes the first link;

[0007] The resource server receives a second link, anti-theft parameters, and an encryption identifier based on the first resource request, wherein the second link is obtained from the first link.

[0008] The first playback resource is obtained from the cloud via the second link. The first playback resource is an encrypted playback resource.

[0009] The first playback resource is spliced ​​together according to the anti-theft parameters to obtain the second playback resource;

[0010] The preset encrypted image in the page corresponding to the first link is decrypted according to the encryption identifier to obtain key information;

[0011] The second playback resource is decrypted based on the key information, and the decrypted second playback resource is then played as a video.

[0012] Furthermore, the step of decrypting the preset encrypted image in the page corresponding to the first link based on the encryption identifier to obtain key information includes:

[0013] Obtain the corresponding decryption strategy based on the encryption identifier;

[0014] The preset encrypted image in the page corresponding to the first link is identified and obtained according to the decryption strategy, and the preset encrypted image is decrypted according to the decryption strategy to obtain key information.

[0015] In a second aspect, embodiments of this application provide a video encryption playback method for a resource server, comprising:

[0016] Receive a first resource request sent by the client, the first resource request including a first link;

[0017] The identity is verified based on the first resource request. When the verification is successful, the corresponding second link, anti-theft parameters and encryption identifier are obtained based on the first link.

[0018] The second link, anti-theft parameters, and encryption identifier are fed back to the corresponding client. The client is used to obtain the first playback resource from the cloud according to the second link, and to perform splicing processing on the first playback resource according to the anti-theft parameters to obtain the second playback resource. The client also performs decryption processing on the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and plays the corresponding video after decrypting the second playback resource based on the key information.

[0019] Furthermore, before receiving the first resource request sent by the client, the process includes:

[0020] Send a second resource request to the cloud, and receive a third link from the cloud based on the second resource request. The third link is generated by the cloud after encrypting and slicing the original video data to obtain the first playback resource, anti-theft parameters and the first link, based on the first link and the anti-theft parameters.

[0021] The third link is subjected to anti-theft parameter extraction and hash operation to obtain the second link, anti-theft parameters and encryption identifier, and the first correspondence between the first link corresponding to the third link and the second link, anti-theft parameters and encryption identifier is obtained;

[0022] The second link is sent to the cloud, which is used to establish a correspondence between the second link and the first playback resource.

[0023] Furthermore, the first resource request includes a client ID;

[0024] The step of verifying identity legitimacy based on the first resource request includes:

[0025] Verify the legitimacy of the identity based on the client ID in the first resource request;

[0026] The verification passes if the client ID in the first resource request is a valid ID.

[0027] Furthermore, the step of obtaining the corresponding second link, anti-theft parameters, and encryption identifier based on the first link includes:

[0028] Based on the received first link and the first comparison relationship, the corresponding second link, anti-theft parameters, and encryption identifier are obtained from the preset database.

[0029] In a second aspect, embodiments of this application provide a video encryption playback method for cloud-based applications, comprising:

[0030] Receive raw video data, perform encrypted segmentation on the raw video data to obtain a first playback resource, anti-theft parameters and a first link, wherein the first link contains information of an encryption identifier;

[0031] A third link is generated based on the first link and the anti-theft parameters;

[0032] The system receives a second resource request from the resource server and sends a corresponding third link to the resource server based on the second resource request. The resource server performs anti-theft parameter extraction and hash operation based on the third link to obtain a second link, anti-theft parameters, and an encryption identifier. It then sends the corresponding second link, anti-theft parameters, and encryption identifier to the client based on the first resource request it receives.

[0033] The client receives a third resource request sent by the client based on the second link, and sends the corresponding first playback resource to the client based on the third resource request; the client is used to splice the first playback resource according to the anti-theft parameters to obtain a second playback resource, and decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and play the corresponding video after decrypting the second playback resource based on the key information.

[0034] In a fourth aspect, embodiments of this application provide a video encryption playback device for a client, comprising:

[0035] The instruction receiving unit is configured to receive a first playback instruction based on a first link, and send a first resource request to a resource server according to the first playback instruction, wherein the first resource request includes the first link.

[0036] A link receiving unit is configured to receive a second link, anti-theft parameters, and an encryption identifier fed back by the resource server based on the first resource request, wherein the second link is obtained based on the first link;

[0037] The resource acquisition unit is used to acquire a first playback resource from the cloud according to the second link, wherein the first playback resource is an encrypted playback resource.

[0038] The splicing unit is used to splice the first playback resource according to the anti-theft parameters to obtain the second playback resource;

[0039] The decryption unit is used to decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information;

[0040] The playback unit is used to decrypt the second playback resource according to the key information and play the video of the decrypted first playback resource.

[0041] The decryption unit includes a decryption strategy acquisition module and a decryption module;

[0042] The decryption strategy acquisition module is used to obtain the corresponding decryption strategy based on the encryption identifier;

[0043] The decryption module is used to identify and obtain a preset encrypted image in the page corresponding to the first link according to the decryption strategy, and to decrypt the preset encrypted image according to the decryption strategy to obtain key information.

[0044] In a fifth aspect, embodiments of this application provide a video encryption playback device for a resource server, comprising:

[0045] The first request receiving unit is configured to receive a first resource request sent by the client, wherein the first resource request includes a first link;

[0046] The identity verification unit is used to verify the legitimacy of the identity according to the first resource request. When the verification is successful, the corresponding second link, anti-theft parameters and encryption identifier are obtained according to the first link.

[0047] The link feedback unit is used to feed back the second link, anti-theft parameters, and encryption identifier to the corresponding client. The client is used to obtain the first playback resource from the cloud according to the second link, to perform splicing processing on the first playback resource according to the anti-theft parameters to obtain the second playback resource, and to decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information. Based on the key information, the client decrypts the second playback resource and plays the corresponding video.

[0048] The video encryption playback device also includes a second request sending unit, a link modification unit, and a link sending unit;

[0049] The second request sending unit is used to send a second resource request to the cloud and receive a third link fed back by the cloud based on the second resource request. The third link is generated by the cloud after encrypting and slicing the original video data to obtain the first playback resource, anti-theft parameters and the first link, based on the first link and the anti-theft parameters.

[0050] The link modification unit is used to perform anti-theft parameter extraction and hash operation on the third link to obtain the second link, anti-theft parameters and encryption identifier, and to obtain the first correspondence between the first link corresponding to the third link and the second link, anti-theft parameters and encryption identifier.

[0051] A link sending unit is used to send the second link to the cloud, wherein the cloud is used to establish a correspondence between the second link and the first playback resource.

[0052] In a sixth aspect, embodiments of this application provide a video encryption playback device for use in the cloud, comprising:

[0053] An encryption processing unit is used to receive raw video data, perform encrypted slicing processing on the raw video data, and obtain a first playback resource, anti-theft parameters and a first link, wherein the first link contains information of an encryption identifier;

[0054] An anti-theft link generation unit is used to generate a third link based on the first link and the anti-theft parameters;

[0055] The request feedback unit is used to receive a second resource request sent by the resource server, and send a corresponding third link to the resource server based on the second resource request. The resource server is used to perform anti-theft parameter extraction and hash operation processing based on the third link to obtain the second link, anti-theft parameters and encryption identifier; and send the corresponding second link, anti-theft parameters and encryption identifier to the client based on the receipt of the first resource request.

[0056] The third request receiving unit is used to receive a third resource request sent by the client based on the second link, and send the corresponding first playback resource to the client based on the third resource request; the client is used to splice the first playback resource according to the anti-theft parameters to obtain a second playback resource, and decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and play the corresponding video after decrypting the second playback resource based on the key information.

[0057] In a seventh aspect, embodiments of this application provide a video encryption playback device, comprising:

[0058] Memory and one or more processors;

[0059] The memory is used to store one or more programs;

[0060] When the one or more programs are executed by the one or more processors, the one or more processors implement the video encryption playback method as described in the first, second or third aspect.

[0061] In an eighth aspect, embodiments of this application provide a storage medium for storing computer-executable instructions, which, when executed by a computer processor, are used to perform the video encryption playback method as described in the first, second, or third aspect.

[0062] This embodiment of the application sends a first resource request to a resource server via a first playback command generated based on a first link. It then receives a second link, anti-theft parameters, and an encryption identifier from the resource server based on the first resource request. The application retrieves the first playback resource from the cloud using the second link, concatenates the first playback resource using the anti-theft parameters to obtain the second playback resource, decrypts a preset encrypted image on the page corresponding to the first link using the encryption identifier to obtain key information, decrypts the second playback resource using the key information, and plays the decrypted second playback resource. By employing this technique, the first playback resource can only be retrieved from the cloud via the second link provided by the resource server. This avoids the problem of low security during video playback, increases interaction between the resource server and the client, and prevents security risks caused by the client directly retrieving video resources from the cloud using the first link, thus improving the security of video playback. Furthermore, decrypting the preset encrypted image on the page corresponding to the first link using the encryption identifier provided by the resource server improves the concealment of the decryption method, further enhancing the security of video playback and protecting the rights of the video owner. Attached Figure Description

[0063] Figure 1This is a flowchart of a video encryption playback method provided in an embodiment of this application;

[0064] Figure 2 This is a flowchart of another video encryption playback method provided in the embodiments of this application;

[0065] Figure 3 This is a flowchart of another video encryption playback method provided in the embodiments of this application;

[0066] Figure 4 This is a schematic diagram of the structure of a video encryption playback device provided in an embodiment of this application;

[0067] Figure 5 This is a schematic diagram of another video encryption playback device provided in an embodiment of this application;

[0068] Figure 6 This is a schematic diagram of the structure of another video encryption playback device provided in the embodiments of this application;

[0069] Figure 7 This is a schematic diagram of the structure of a video encryption playback device provided in an embodiment of this application. Detailed Implementation

[0070] To make the objectives, technical solutions, and advantages of this application clearer, specific embodiments of this application will be described in further detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are merely for explaining this application and not for limiting it. It should also be noted that, for ease of description, only the parts relevant to this application are shown in the drawings, not all of them. Before discussing exemplary embodiments in more detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although the flowcharts describe operations (or steps) as sequential processes, many of these operations can be performed in parallel, concurrently, or simultaneously. Furthermore, the order of the operations can be rearranged. The process can be terminated when its operation is completed, but may also have additional steps not included in the drawings. The process can correspond to a method, function, procedure, subroutine, subprogram, etc.

[0071] This application provides a video encryption playback method, apparatus, device, and storage medium. The aim is to enhance video playback security by modifying a first link through a resource server to obtain a second link before accessing the first playback resource from the cloud. Furthermore, the encryption identifier returned by the resource server is used to decrypt a preset encrypted image on the page corresponding to the first link, improving the concealment of the decryption method and thus enhancing video playback security and protecting the rights of the video owner. Compared to traditional video encryption playback methods, which typically slice a large media file, encrypt the slices, add the encrypted slices and their key addresses to a corresponding index file (e.g., an m3u8 file), and publish the index file (e.g., the m3u8 file) to an HTTP server, any client can download and parse the index file (e.g., the m3u8 file), and then download the slices and their corresponding keys for decryption and playback. Current video encryption playback methods have relatively low security. Therefore, this application provides a video encryption playback method to address the low security issues in existing video playback processes.

[0072] Figure 1 A flowchart of a video encryption playback method provided in this application embodiment is given. The video encryption playback method provided in this embodiment can be executed by a video encryption playback device, which can be implemented by software and / or hardware. The video encryption playback device can consist of two or more physical entities, or it can consist of a single physical entity. Generally, the video encryption playback device can be a terminal device, such as a computer device.

[0073] The following description uses a computer device as the primary example to illustrate the video encryption playback method. (Refer to...) Figure 1 The video encryption playback method, used in the cloud, specifically includes:

[0074] S101. Receive raw video data, perform encrypted segmentation processing on the raw video data, and obtain a first playback resource, anti-theft parameters and a first link, wherein the first link contains information of an encryption identifier.

[0075] The cloud refers to cloud servers. Generally, when a client needs to play a video, it needs to download the corresponding video resource from the cloud server before it can play the video on its client. To improve the privacy of video playback, the original video data needs to be encrypted in the cloud. After receiving the original video data, the cloud performs encrypted segmentation processing on the original video data to obtain the first playback resource, anti-theft parameters, and the first link. The first link contains encryption identifier information. This first playback resource is an encrypted segment file, such as an encrypted m3u8 file, which is an unplayable file and needs to be concatenated and decrypted before it can be played. The first link can be understood as a link to the content of the encrypted m3u8 file. It should be noted that the client cannot directly obtain the corresponding first playback resource based on the first link. The first link contains encryption identifier information, which is obtained based on the encrypted segmentation processing. The encryption identifier is obtained by generating a key using a preset encryption strategy and performing encrypted segmentation processing on the original video data. The encryption identifier has a correspondence with the preset encryption strategy and preset decryption strategy (i.e., a second correspondence). The client cannot obtain the first playback resource through the first link, which prevents unauthorized clients from directly obtaining video resources through the first link, thereby improving the security of private video playback and protecting the legitimate rights and interests of video owners.

[0076] It should be noted that the first link contains information about the encrypted identifier. The corresponding encrypted identifier can be obtained by performing a hash operation on the first link.

[0077] It should be noted that legitimate clients store preset decryption strategies, which can be obtained later based on the encryption identifier.

[0078] For example, after acquiring the original video data from the cloud, it undergoes DRM (Digital Rights Management) encryption and transcoding (i.e., encrypted segmentation) to generate an encrypted m3u8 file, which is the first playback resource. This encrypted m3u8 file is encrypted using a preset encryption strategy to generate a key, thus obtaining the corresponding encryption identifier along with the encrypted m3u8 file. The encryption identifier has a correspondence with the preset encryption strategy and the preset decryption strategy (i.e., a second correspondence).

[0079] It should be noted that the second mapping relationship between the encryption identifier and the preset decryption policy, as well as the decryption policy itself, are pre-stored in the corresponding legitimate client. When playing the video later, the legitimate client can obtain the corresponding decryption policy based on the encryption identifier and the mapping relationship (i.e., the second mapping relationship).

[0080] It should be noted that since an unauthorized client does not store the corresponding decryption strategy, even if the unauthorized client subsequently obtains the encryption identifier, it will not be able to perform the corresponding decryption process using the preset decryption strategy.

[0081] It should be noted that after the cloud completes the encrypted video segmentation process, it sends the first link to the client so that the client can start the video playback process based on the corresponding first link.

[0082] S102. A third link is generated based on the first link and the anti-theft parameters.

[0083] The cloud platform generates a third link based on the first link and anti-theft parameters; this third link is an anti-theft link. Since the first link contains encrypted identifier information, and the third link is generated based on the first link, it also contains encrypted identifier information. To further enhance the privacy of video playback, even clients cannot access the first playback resource through the third link, preventing unauthorized clients from directly obtaining video resources through the third link (i.e., the anti-theft link). This improves the security of private video playback and protects the legitimate rights and interests of the video's copyright holder.

[0084] For example, suppose the first link obtained through S101 above is: https: / / c-vod-hw.xiaoeknow.com / asset / 7bd7e8e887998b7253aebc036db548c5 / 9f815e3b4d4795ea5f6c827981b40615.m3u8; what are the corresponding anti-theft parameters? Given t = 643d4ef3&us = YWew4M&sign = 73d3c617d3d1a69c528e6337842afcfe, the corresponding third link can be obtained based on the first link and anti-theft parameters: https: / / c-vod-hw-k.xiaoeknow.com / asset / 7bd7e8e887998b7253aebc036db548c5 / 9f815e3b4d4795ea5f6c827981b40615.m3u8? t = 643d4ef3&us = YWew4M&sign = 73d3c617d3d1a69c528e6337842afcfe. The client cannot obtain the first playback resource through either the first or third link, thus preventing unauthorized clients from directly obtaining the first playback resource through either the first or third link. This improves the security of private video playback and protects the legitimate rights and interests of the video owner.

[0085] S103. Receive the second resource request sent by the resource server, and send the corresponding third link to the resource server based on the second resource request; the resource server is used to perform anti-theft parameter extraction processing and hash operation processing according to the third link to obtain the second link, anti-theft parameters and encryption identifier, and send the corresponding second link, anti-theft parameters and encryption identifier to the client when it receives the first resource request from the client.

[0086] Since the client cannot directly obtain the first playback resource through either the first or third link, in order to enable legitimate clients to access the first playback resource, the resource server can modify the third link to obtain a corresponding second link that can access the first playback resource. The cloud receives the second resource request sent by the resource server; this second resource request can be understood as a request to obtain the corresponding third link. Based on the received second resource request, the cloud sends the corresponding third link to the resource server.

[0087] After receiving the third link, the resource server performs anti-theft parameter extraction and hashing on it to obtain a second link, anti-theft parameters, and an encryption identifier. The second link is distinct from the first link. This difference is crucial for privacy protection. Since the third link is derived from the first link, and the second link from the third link, a first mapping relationship can be established between the first link, the second link, the anti-theft parameters, and the encryption identifier. The resource server then stores the obtained second link, anti-theft parameters, encryption identifier, and the first mapping relationship in its pre-defined database for subsequent use by clients for private video playback.

[0088] For example, since both the first and third links contain encrypted identifier information, the resource server retrieves the corresponding first link based on the third link, performs a hash operation on the first link to obtain the corresponding encrypted identifier. Alternatively, the resource server can directly perform a hash operation on the third link to obtain the corresponding encrypted identifier. The resource server also extracts anti-theft parameters from the third link to obtain anti-theft parameters. After extracting the anti-theft parameters from the third link, the resource server modifies the extracted link to obtain a second link, ensuring that the modified second link is different from the first link. Through the above modification process, the second link, anti-theft parameters, and encrypted identifier corresponding to the third link can be obtained.

[0089] The resource server is also used to receive a first resource request from a client, which is sent by the client based on a first link, and the first resource request includes the first link. Upon receiving the first resource request, the resource server determines the corresponding second link, anti-theft parameters, and encryption identifier based on the first link in the first resource request and its own pre-stored first mapping relationship, and then feeds back the corresponding second link, anti-theft parameters, and encryption identifier to the corresponding client. The resource server is also used to send the second link and the first mapping relationship to the cloud, where the cloud receives the second link and the first mapping relationship and establishes a third mapping relationship between the second link and the corresponding first playback resource.

[0090] It should be noted that the resource server is also used to send the second link and its mapping relationship with the third link back to the cloud after obtaining the second link. The cloud receives the second link and its mapping relationship with the third link, and establishes a third mapping relationship for the first playback resource corresponding to the second and third links. This allows the cloud to determine the corresponding first playback resource based on the received second link and the third mapping relationship when the client subsequently obtains resources based on the second link.

[0091] It should be noted that the resource server only sends the corresponding second link, anti-theft parameters, and encryption identifier back to the corresponding client after successfully verifying the client's identity based on the first resource request.

[0092] As described above, the system receives a second resource request from a resource server via the cloud, and then sends a corresponding third link to the resource server based on the second resource request. The resource server then modifies the third link to obtain the corresponding second link, anti-theft parameters, and encryption identifier. This allows legitimate clients to obtain the first playback resource based on the second link, thereby improving the security and privacy of video playback.

[0093] S104. Receive a third resource request sent by the client based on the second link, and send the corresponding first playback resource to the client based on the third resource request; the client is used to splice the first playback resource according to the anti-theft parameters to obtain a second playback resource, and decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and play the corresponding video after decrypting the second playback resource based on the key information.

[0094] After receiving the second link, anti-theft parameters, and encryption identifier sent by the resource server, the client generates a third resource request based on the second link. The third resource request includes the second link and is then sent to the cloud.

[0095] The cloud receives a third resource request sent by the client based on the second link. The third resource request includes the second link. Based on the second link and the third correspondence, the cloud obtains the corresponding first playback resource and sends the obtained first playback resource back to the corresponding client.

[0096] After receiving the first playback resource, the client recognizes that it is an encrypted fragmented file and requires concatenation and decryption before playback. An unauthorized client, lacking the encryption identifier and corresponding decryption strategy, cannot play the first playback resource even if it obtains it, thus enhancing the privacy and security of video playback. A legitimate client, having received anti-theft parameters and an encryption identifier from the resource server, concatenates the first playback resource received from the cloud according to the anti-theft parameters to obtain the second playback resource. It then queries the corresponding decryption strategy based on the encryption identifier and the second resource's mapping, decrypts the resource using the strategy to obtain the key information, and finally decrypts the second playback resource using the key information for video playback.

[0097] The above describes a process where the original video data is encrypted and sliced ​​in the cloud to obtain the first playback resource, anti-theft parameters, and a first link. A third link is then generated based on the first link and anti-theft parameters. When a second resource request is received from the resource server, the corresponding third link is sent to the resource server, and the second link fed back by the resource server based on the third link is received. The system also receives a third resource request from the client based on the second link and sends the corresponding first playback resource to the client based on the second link in the third resource request. Through the cooperation of the cloud, resource server, and client, unauthorized clients are prevented from obtaining the first playback resource based on the first or third link, improving the privacy and security of video playback and protecting the legitimate rights and interests of the video owner. Furthermore, through the combined effect of preset encryption and decryption strategies and encryption identifiers, even if an unauthorized client obtains the first playback resource, it cannot play the video, further enhancing the privacy and security of video playback and protecting the legitimate rights and interests of the video owner.

[0098] Figure 2 This is a flowchart of another video encryption playback method provided in the embodiments of this application, see below. Figure 2 This video encryption playback method, used on the client side, specifically includes:

[0099] S201. Receive a first playback instruction based on a first link, and send a first resource request to a resource server according to the first playback instruction, wherein the first resource request includes the first link.

[0100] The first link is a link on the page to be played in the client, which is pre-sent to the corresponding client from the cloud. To enhance video security, when playing video based on the first link, the identity of the client associated with that first link needs to be verified. Since the cloud cannot verify the client's identity, a third-party server (i.e., a resource server) is required to verify the client's identity. Only after verifying that the client is legitimate can subsequent steps for private video playback be executed.

[0101] For example, when a user clicks the first link on the page to be played on the client, the client receives a first playback instruction based on the first link and generates a first resource request based on the first playback instruction. This first resource request includes the corresponding first link. The client then sends the first resource request to the resource server. To improve the privacy of video playback, after the user clicks the first link, it is necessary to verify the legitimacy of the client's identity. This can be achieved by sending the first resource request generated based on the first link to the resource server, allowing the resource server to verify the client's identity and prevent unauthorized clients from directly obtaining video resources from the cloud, thus improving the security of video playback.

[0102] S202, Receive the second link, anti-theft parameters and encryption identifier fed back by the resource server based on the first resource request, wherein the second link is obtained based on the first link.

[0103] Before the client sends the first resource request, the original video data is encrypted and segmented in the cloud to obtain the first playback resource, anti-piracy parameters, and the first link. The first link contains encryption identifier information. This first playback resource is an encrypted segment file, such as an encrypted m3u8 file, which is unplayable and requires concatenation and decryption before playback. The first link can be understood as a link to the content of the encrypted m3u8 file. It should be noted that the client cannot directly obtain the corresponding first playback resource based on the first link. The cloud generates a third link based on the first link and the anti-piracy parameters.

[0104] Since the client cannot directly obtain the first playback resource through either the first or third link, in order to enable legitimate clients to access the first playback resource, the resource server can modify the third link to obtain a corresponding second link that can access the first playback resource. The cloud receives the second resource request sent by the resource server; this second resource request can be understood as a request for the corresponding third link, which is then modified. Based on the received second resource request, the cloud sends the corresponding third link to the resource server.

[0105] After receiving the third link, the resource server performs anti-theft parameter extraction and hashing on it to obtain a second link, anti-theft parameters, and an encryption identifier. The second link is distinct from the first link. This difference is crucial for privacy protection. Since the third link is derived from the first link, and the second link from the third link, a first mapping relationship can be established between the first link, the second link, the anti-theft parameters, and the encryption identifier. The resource server then stores the obtained second link, anti-theft parameters, encryption identifier, and the first mapping relationship in its pre-defined database for subsequent use by clients for private video playback.

[0106] It should be noted that the resource server is also used to send the second link and the correspondence between the second link and the third link back to the cloud after obtaining the second link, so that the cloud can establish a third correspondence between the second link and the third link for the first playback resource, so that when the client obtains the resource based on the second link, it can determine the corresponding first playback resource based on the second link and the third correspondence.

[0107] The resource server is also used to receive a first resource request from a client, which is sent by the client based on a first link, and the first resource request includes the first link. When the resource server receives the first resource request, it determines the corresponding second link, anti-theft parameters, and encryption identifier based on the first link and the first mapping relationship in the first resource request, and feeds back the corresponding second link, anti-theft parameters, and encryption identifier to the corresponding client.

[0108] The system receives a second link, anti-theft parameters, and an encryption identifier from the resource server based on the first resource request. The second link is derived from the first link. It's important to note that the resource server maintains a first correspondence between the first and second links, as well as the anti-theft parameters and encryption identifier. Therefore, the corresponding second link, anti-theft parameters, and encryption identifier can be obtained based on the first link and the first correspondence. By receiving the second link, anti-theft parameters, and encryption identifier from the resource server based on the first resource request, the system avoids the low security performance caused by directly obtaining resources through the first link, thus improving the security of encrypted video playback. Furthermore, the anti-theft parameters and encryption identifier ensure that even if the video resource (i.e., the first playback resource) is illegally obtained, it cannot be played normally; only legitimate client operations in conjunction with the anti-theft parameters and encryption identifier can play it normally, further enhancing the security of video playback.

[0109] S203. Obtain the first playback resource from the cloud according to the second link. The first playback resource is an encrypted playback resource.

[0110] After the client receives the second link from the resource server, it generates a third resource request based on the second link and sends the third resource request, which includes the second link, to the cloud. When the cloud receives the third resource request from the client based on the second link, it retrieves the corresponding first playback resource based on the mapping between the second and third links in the third resource request and sends the retrieved first playback resource back to the corresponding client.

[0111] It should be noted that the first playback resource is encrypted and cannot be played directly. The first playback resource is an encrypted fragmented file, which needs to be concatenated before subsequent playback can proceed.

[0112] The client receives the first playback resource from the cloud based on a third-party resource request. This first playback resource is encrypted. The client must obtain the first playback resource from the cloud via a second link provided by the resource server. This avoids the security risks associated with the client directly obtaining video resources via the first link, thus improving the security of encrypted video playback. Furthermore, the first playback resource is obtained by encrypting and slicing the original video data in the cloud. When the client obtains this first playback resource from the cloud, it cannot be played directly. It requires subsequent splicing and decryption processing based on anti-theft parameters and encryption identifiers before playback can occur, further enhancing the security of encrypted video playback.

[0113] S204. The first playback resource is spliced ​​according to the anti-theft parameters to obtain the second playback resource.

[0114] After receiving the first playback resource, the client, recognizing that it is an encrypted fragmented file, needs to concatenate it into a complete video resource before playback. If an unauthorized client illegally obtains the first playback resource, it cannot concatenate it due to the lack of corresponding anti-piracy parameters, thus preventing video playback. However, if the client is legitimate, based on the above implementation method, it can receive the anti-piracy parameters from the resource server. Therefore, upon receiving the first playback resource, it can concatenate it according to the corresponding anti-piracy parameters to obtain a complete second playback resource.

[0115] It should be noted that the second playback resource is also an encrypted playback resource, and it requires the corresponding key information to decrypt before it can be played.

[0116] S205. Decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information.

[0117] After the client obtains the second playback resource, it needs key information to decrypt and play it because the second playback resource is encrypted. If the client is unauthorized, it cannot receive the encryption identifier and does not store the corresponding decryption strategy; therefore, even if it obtains the second playback resource, it cannot play it, thus improving the privacy and security of video playback. If the client is legitimate, it receives the encryption identifier from the resource server and stores a second mapping relationship between the decryption strategy, the encryption identifier, and the preset decryption strategy. Therefore, after obtaining the second playback resource through the above implementation method, the legitimate client can query the corresponding decryption strategy based on the encryption identifier and the second mapping relationship.

[0118] The decryption strategy provided in this embodiment is to hide the key information in a preset encrypted image on the page to be played. Therefore, the client can identify and obtain the preset encrypted image on the page corresponding to the first link (i.e., the page to be played) according to the corresponding decryption strategy, and decrypt the obtained preset encrypted image according to the preset decryption strategy to obtain the key information.

[0119] As described above, the key is obtained by decrypting the preset encrypted image in the page corresponding to the first link through the encryption identifier. Compared with the existing method of encryption and decryption through encryption of relevant information fields, this embodiment uses the preset encrypted image for encryption and decryption, which makes it difficult for unauthorized users to detect and improves the security of key hiding.

[0120] S206. Decrypt the second playback resource according to the key information, and play the video of the decrypted second playback resource.

[0121] After the client obtains the second playback resource, it recognizes that this resource is encrypted and requires a key to decrypt and play. The client decrypts the preset encrypted image on the page corresponding to the first link using the encryption identifier to obtain the key. Then, it decrypts the second playback resource using the key to obtain the decrypted video, which is then played.

[0122] The above-mentioned method uses the key information obtained by decrypting the preset encrypted image through the encryption identifier to play the second playback video, thereby improving the privacy and security of the decryption method and thus improving the privacy and security of the video playback.

[0123] The above describes a process where a first playback command generated based on a first link is sent to a resource server to request a first resource. The resource server then returns a second link, anti-theft parameters, and an encryption identifier based on the first resource request. The first playback resource is retrieved from the cloud using the second link. The first playback resource is then concatenated with the anti-theft parameters to obtain a second playback resource. A preset encrypted image on the page corresponding to the first link is decrypted using the encryption identifier to obtain key information. The second playback resource is then decrypted using the key information, and the decrypted second playback resource is then played. This technique ensures that the first playback resource can only be retrieved from the cloud via the second link provided by the resource server. This avoids the problem of low security during video playback, increases interaction between the resource server and the client, and prevents security risks caused by the client directly retrieving video resources from the cloud using the first link, thus improving video playback security. Furthermore, decrypting the preset encrypted image on the page corresponding to the first link using the encryption identifier provided by the resource server enhances the concealment of the decryption method, further improving video playback security and protecting the rights of the video's copyright holder.

[0124] Figure 3 This is a flowchart of another video encryption playback method provided in the embodiments of this application, referred to... Figure 3 This video encryption playback method, used on resource servers, specifically includes:

[0125] S301. Receive a first resource request sent by the client, wherein the first resource request includes a first link.

[0126] A resource server can be understood as a third-party server independent of the client and the cloud. By working with the client and the cloud, the resource server enables encrypted video playback, thereby improving the privacy and security of video playback.

[0127] Before the resource server receives the first resource request from the client, it sends a second resource request to the cloud to request a third link for modification. The cloud performs encrypted segmentation of the original video data using the aforementioned S101 process, obtaining the first playback resource, the first link, and anti-piracy parameters. The cloud generates the third link based on the first link and anti-piracy parameters. The cloud receives the second resource request from the resource server and sends the corresponding third link to the resource server based on the second resource request. The resource server receives the third link from the cloud based on the second resource request.

[0128] After receiving the third link, the resource server performs anti-theft parameter extraction and hashing on it to obtain the corresponding second link, anti-theft parameters, and encryption identifier. The second link is different from the first link. This difference ensures privacy protection; subsequent clients can use the second link to retrieve the corresponding video resources from the cloud. Since the third link is derived from the first link, and the second link from the third link, a first mapping relationship can be established between the first and second links, anti-theft parameters, and encryption identifier. The resource server saves the obtained second link, anti-theft parameters, encryption identifier, and the first mapping relationship to its preset database for use by subsequent clients when sending their first resource requests.

[0129] For example, since both the first and third links contain encrypted identifier information, the resource server obtains the corresponding first link based on the third link, performs a hash operation on the first link to obtain the corresponding encrypted identifier. Alternatively, the resource server can directly perform a hash operation on the third link to obtain the corresponding encrypted identifier. The resource server then extracts anti-theft parameters from the third link to obtain anti-theft parameters. After extracting the anti-theft parameters, the resource server modifies the extracted link to obtain a second link, making the modified second link different from the first link. Through the above modification process, the second link, anti-theft parameters, and encrypted identifier corresponding to the third link can be obtained.

[0130] It should be noted that after the resource server receives the second link, it sends the second link and its correspondence with the third link back to the cloud. Based on the correspondence between the third link and the corresponding first playback resource, the cloud establishes a third correspondence between the second link and the corresponding first playback resource, according to the correspondence between the third link and the first playback resource, and the correspondence between the second link and the third link. This allows the cloud to determine the corresponding first playback resource based on the received second link and the third correspondence when the client subsequently retrieves resources using the second link.

[0131] The resource server receives a first resource request sent by a client, which is based on a first link and includes that first link. Based on the above, the resource server's preset database stores a first mapping relationship between the first link and a second link, anti-theft parameters, and encryption identifiers. Therefore, when the resource server receives the first resource request, it can determine the corresponding second link, anti-theft parameters, and encryption identifier based on the first link in the first resource request and the first mapping relationship stored in the preset database. It should be noted that the corresponding second link, anti-theft parameters, and encryption identifier are also stored in the resource server's preset database.

[0132] The above-mentioned modification of the third link sent from the cloud by the resource server avoids the client from directly obtaining video resources based on the first or third link, thereby improving the security of private video playback.

[0133] S302. Verify the legitimacy of the identity according to the first resource request. When the verification is successful, obtain the corresponding second link, anti-theft parameters and encryption identifier according to the first link.

[0134] To enhance the security and privacy of video playback, it is necessary to verify the client's identity. When the resource server receives the first resource request sent by the client based on the first link, it verifies the client's identity based on the first resource request. Only when the client's identity verification is successful can the second link corresponding to the first link, anti-theft parameters, and encryption identifier be sent back to the corresponding client.

[0135] For example, the first resource request includes a client ID. When the resource server receives the first resource request sent by the client based on the first link, it verifies the client's identity based on the client ID in the first resource request. If the client ID in the first resource request is a valid ID, the verification passes, proving that the client is a legitimate client. At this time, the resource server sends back the second link, anti-theft parameters, and encryption identifier corresponding to the first link in the received first resource request to the corresponding legitimate client. If the client ID in the first resource request is not a valid ID, the verification fails, proving that the client is not a legitimate client, i.e., the client is an illegitimate client. In this case, the corresponding second link, anti-theft parameters, and encryption identifier are not sent back to the corresponding client to prevent illegitimate clients from obtaining the corresponding video resources, thereby improving the security and privacy of video playback.

[0136] As described above, by verifying the legitimacy of the client's first resource request through the resource server, access by unauthorized clients or users can be blocked, ensuring that only legitimate clients and users can receive the corresponding second link, anti-theft parameters, and encryption identifier. This enhances the privacy and security of video playback and protects the legitimate rights and interests of video owners.

[0137] S303. The second link, anti-theft parameters, and encryption identifier are fed back to the corresponding client. The client is used to obtain the first playback resource from the cloud according to the second link, and to perform splicing processing on the first playback resource according to the anti-theft parameters to obtain the second playback resource; and to decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and to play the corresponding video after decrypting the second playback resource based on the key information.

[0138] When the resource server verifies the client's identity and legitimacy based on the first resource request, it sends the second link, anti-theft parameters, and encryption identifier to the corresponding client (i.e., the legitimate client). The client uses the second link to retrieve the first playback resource from the cloud, concatenates the first playback resource according to the anti-theft parameters to obtain the second playback resource, decrypts the preset encrypted image on the page corresponding to the first link according to the encryption identifier to obtain the key information, and then decrypts the second playback resource based on the key information to play the corresponding video resource.

[0139] It should be noted that the client is used for encrypted video playback according to the above S201-S206, which will not be elaborated here.

[0140] As described above, the resource server verifies the client's identity and legitimacy for the first resource request. Only upon successful verification is the second link corresponding to the first link, anti-theft parameters, and encryption identifier sent back to the corresponding client, thus improving the privacy and security of video playback. Furthermore, the resource server modifies the third link in the cloud through anti-theft parameter extraction and hash calculations, resulting in a second link that is different from both the first and third links. This ensures that subsequent video resources can only be retrieved from the cloud using the second link, improving the security of video resource retrieval. Finally, the resource server obtains the corresponding encryption identifier based on the third link and sends it back to the legitimate client, enhancing the privacy and security of key acquisition.

[0141] As described above, a third-party link is sent from the cloud to the resource server. The resource server then modifies the third-party link to obtain a corresponding encrypted identifier, which is sent to the legitimate client. This protects the key during network transmission, preventing its acquisition and tampering, and improving the security and privacy of key transmission. The client decrypts the data based on the encrypted identifier and the corresponding decryption strategy, eliminating the need for third-party proprietary encryption methods. For existing common encryption transcoding, no re-transcoding is required, improving the efficiency of existing data processing and reducing its cost.

[0142] The above describes a system where a third link is sent from the cloud to a resource server. The resource server then modifies this third link to obtain a corresponding second link and an anti-theft parameter encryption identifier, which are then sent to a legitimate client. The client retrieves the first playback resource using the second link, concatenates the first playback resource with the anti-theft parameters to obtain the second playback resource, and decrypts the second playback resource using the key information obtained from the encryption identifier. This system effectively prevents browser plugins from stealing and playing videos, thus improving video anti-theft capabilities. Key management is not heavily reliant on third-party key management services, achieving self-protection of keys, strong scalability, and improved key security and privacy. Furthermore, it supports the use of private encryption for both existing and incremental on-demand files, and supports private encryption for both widescreen and narrowscreen PC access to video modules, further enhancing the privacy and security of video playback.

[0143] The above describes a process where a first playback command generated based on a first link is sent to a resource server to request a first resource. The resource server then returns a second link, anti-theft parameters, and an encryption identifier based on the first resource request. The first playback resource is retrieved from the cloud using the second link. The first playback resource is then concatenated with the anti-theft parameters to obtain a second playback resource. A preset encrypted image on the page corresponding to the first link is decrypted using the encryption identifier to obtain key information. The second playback resource is then decrypted using the key information, and the decrypted second playback resource is then played. This technique ensures that the first playback resource can only be retrieved from the cloud via the second link provided by the resource server. This avoids the problem of low security during video playback, increases interaction between the resource server and the client, and prevents security risks caused by the client directly retrieving video resources from the cloud using the first link, thus improving video playback security. Furthermore, decrypting the preset encrypted image on the page corresponding to the first link using the encryption identifier provided by the resource server enhances the concealment of the decryption method, further improving video playback security and protecting the rights of the video's copyright holder.

[0144] Based on the above embodiments, Figure 4 This is a schematic diagram of a video encryption playback device provided in an embodiment of this application. (Reference) Figure 4 The video encryption playback device provided in this embodiment is used for a client and specifically includes: an instruction receiving unit 21, a link receiving unit 22, a resource acquisition unit 23, a splicing unit 24, a decryption unit 25, and a playback unit 26.

[0145] The instruction receiving unit 21 is configured to receive a first playback instruction based on a first link, and send a first resource request to a resource server according to the first playback instruction, wherein the first resource request includes the first link.

[0146] Link receiving unit 22 is used to receive a second link, anti-theft parameters and encryption identifier fed back by the resource server based on the first resource request, wherein the second link is obtained based on the first link;

[0147] Resource acquisition unit 23 is used to acquire a first playback resource from the cloud according to the second link, wherein the first playback resource is an encrypted playback resource;

[0148] splicing unit 24 is used to splice the first playback resource according to the anti-theft parameters to obtain the second playback resource;

[0149] Decryption unit 25 is used to decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information;

[0150] The playback unit 26 is used to decrypt the second playback resource according to the key information and play the video of the decrypted first playback resource.

[0151] Decryption unit 25 includes a decryption strategy acquisition module and a decryption module;

[0152] The decryption strategy acquisition module is used to obtain the corresponding decryption strategy based on the encryption identifier;

[0153] The decryption module is used to identify and obtain a preset encrypted image in the page corresponding to the first link according to the decryption strategy, and to decrypt the preset encrypted image according to the decryption strategy to obtain key information.

[0154] The above describes a process where a first playback command generated based on a first link is sent to a resource server to request a first resource. The resource server then returns a second link, anti-theft parameters, and an encryption identifier based on the first resource request. The first playback resource is retrieved from the cloud using the second link. The first playback resource is then concatenated with the anti-theft parameters to obtain a second playback resource. A preset encrypted image on the page corresponding to the first link is decrypted using the encryption identifier to obtain key information. The second playback resource is then decrypted using the key information, and the decrypted second playback resource is then played. This technique ensures that the first playback resource can only be retrieved from the cloud via the second link provided by the resource server. This avoids the problem of low security during video playback, increases interaction between the resource server and the client, and prevents security risks caused by the client directly retrieving video resources from the cloud using the first link, thus improving video playback security. Furthermore, decrypting the preset encrypted image on the page corresponding to the first link using the encryption identifier provided by the resource server enhances the concealment of the decryption method, further improving video playback security and protecting the rights of the video's copyright holder.

[0155] Figure 5 This is a schematic diagram of another video encryption playback device provided in an embodiment of this application. (Reference) Figure 5 The video encryption playback device provided in this embodiment is used for a resource server and specifically includes: a first request receiving unit 31, an authentication unit 32, and a link feedback unit 33.

[0156] The first request receiving unit 31 is used to receive a first resource request sent by the client, wherein the first resource request includes a first link;

[0157] The identity verification unit 32 is used to verify the legitimacy of the identity according to the first resource request. When the verification is successful, the corresponding second link, anti-theft parameters and encryption identifier are obtained according to the first link.

[0158] The link feedback unit 33 is used to feed back the second link, anti-theft parameters, and encryption identifier to the corresponding client. The client is used to obtain the first playback resource from the cloud according to the second link, to perform splicing processing on the first playback resource according to the anti-theft parameters to obtain the second playback resource, and to decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information. Based on the key information, the client decrypts the second playback resource and plays the corresponding video.

[0159] The video encryption playback device also includes a second request sending unit, a link modification unit, and a link sending unit;

[0160] The second request sending unit is used to send a second resource request to the cloud and receive a third link fed back by the cloud based on the second resource request. The third link is generated by the cloud after encrypting and slicing the original video data to obtain the first playback resource, anti-theft parameters and the first link, based on the first link and the anti-theft parameters.

[0161] The link modification unit is used to perform anti-theft parameter extraction and hash operation on the third link to obtain the second link, anti-theft parameters and encryption identifier, and to obtain a first correspondence relationship between the first link corresponding to the third link and the second link, anti-theft parameters and encryption identifier, wherein the encryption identifier has a second correspondence relationship with the corresponding decryption strategy;

[0162] A link sending unit is used to send the second link to the cloud, wherein the cloud is used to establish a correspondence between the second link and the first playback resource.

[0163] The video encryption playback device provided in this application embodiment can be used to execute the video encryption playback method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0164] Figure 6 This is a schematic diagram of another video encryption playback device provided in an embodiment of this application. (See reference...) Figure 6 The video encryption playback device provided in this embodiment is used in the cloud and specifically includes: an encryption processing unit 41, an anti-theft link generation unit 42, a request feedback unit 43, and a third request receiving unit 44.

[0165] The encryption processing unit 41 is used to receive the original video data, perform encryption slicing processing on the original video data, and obtain the first playback resource, anti-theft parameters and the first link, wherein the first link contains information of encryption identifier;

[0166] Anti-theft link generation unit 42 is used to generate a third link based on the first link and the anti-theft parameters;

[0167] The request feedback unit 43 is used to receive a second resource request sent by the resource server, and send a corresponding third link to the resource server based on the second resource request. The resource server is used to perform anti-theft parameter extraction and hash operation processing based on the third link to obtain the second link, anti-theft parameters and encryption identifier; and send the corresponding second link, anti-theft parameters and encryption identifier to the client based on the receipt of the first resource request.

[0168] The third request receiving unit 44 is used to receive a third resource request sent by the client based on the second link, and send the corresponding first playback resource to the client based on the third resource request; the client is used to splice the first playback resource according to the anti-theft parameters to obtain a second playback resource, and decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and play the corresponding video after decrypting the second playback resource based on the key information.

[0169] The video encryption playback device provided in this application embodiment can be used to execute the video encryption playback method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0170] This application provides a video encryption playback system, including a client, a resource server, and a cloud, wherein the client communicates with the resource server and the cloud. The cloud executes the video encryption playback method described in S101-S104, the client executes the video encryption playback method described in S201-S206, and the resource server executes the video encryption playback method described in S301-S303.

[0171] The video encryption playback system provided in this application embodiment can be used to execute the video encryption playback method provided in the above embodiment, and has corresponding functions and beneficial effects.

[0172] This application provides a video encryption playback device, referring to... Figure 7 The video encryption playback device includes a processor 31, a memory 32, a communication module 33, an input device 34, and an output device 35. The number of processors and the number of memories in the video encryption playback device can be one or more. The processor, memory, communication module, input device, and output device of the video encryption playback device can be connected via a bus or other means.

[0173] The memory 32, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as program instructions / modules corresponding to the video encryption playback method described in any embodiment of this application (e.g., instruction receiving unit, link receiving unit, resource acquisition unit, splicing unit, decryption unit, and playback unit in a video encryption playback device). The memory may primarily include a program storage area and a data storage area. The program storage area may store the operating system and at least one application program required for a function; the data storage area may store data created based on the use of the device. Furthermore, the memory may include high-speed random access memory and non-volatile memory, such as at least one disk storage device, flash memory device, or other non-volatile solid-state storage device. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to the device via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0174] The communication module 33 is used for data transmission.

[0175] The processor 31 executes various functional applications and data processing of the device by running software programs, instructions and modules stored in the memory, thereby realizing the above-mentioned video encryption playback method.

[0176] Input device 34 can be used to receive input digital or character information, and to generate key signal inputs related to user settings and function control of the device. Output device 35 may include display devices such as a display screen.

[0177] The video encryption playback device provided above can be used to execute the video encryption playback method provided in the above embodiments, and has corresponding functions and beneficial effects.

[0178] This application embodiment also provides a storage medium for storing computer-executable instructions. When executed by a computer processor, these computer-executable instructions are used to perform a video encryption playback method. The video encryption playback method includes: receiving a first playback instruction based on a first link; sending a first resource request to a resource server according to the first playback instruction, the first resource request including the first link; receiving a second link, anti-theft parameters, and an encryption identifier from the resource server based on the first resource request, the second link being obtained from the first link; obtaining a first playback resource from the cloud according to the second link, the first playback resource being an encrypted playback resource; concatenating the first playback resource according to the anti-theft parameters to obtain a second playback resource; decrypting a preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information; decrypting the second playback resource according to the key information; and playing the decrypted second playback resource as video.

[0179] Storage medium – any type of memory device or storage device. The term “storage medium” is intended to include: mounting media, such as CD-ROM, floppy disk, or magnetic tape devices; computer system memory or random access memory, such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc.; non-volatile memory, such as flash memory, magnetic media (e.g., hard disk or optical storage); registers or other similar types of memory elements, etc. Storage medium may also include other types of memory or combinations thereof. Furthermore, storage medium may reside in a first computer system in which the program is executed, or it may reside in a different second computer system connected to the first computer system via a network (such as the Internet). The second computer system can provide program instructions to the first computer for execution. The term “storage medium” can include two or more storage media residing in different locations (e.g., in different computer systems connected via a network). Storage medium may store program instructions (e.g., specifically implemented as a computer program) executable by one or more processors.

[0180] Of course, the computer-executable instructions provided in the embodiments of this application are not limited to the video encryption playback method described above, but can also perform related operations in the video encryption playback method provided in any embodiment of this application.

[0181] The video encryption playback device, storage medium, and video encryption playback equipment provided in the above embodiments can execute the video encryption playback method provided in any embodiment of this application. For technical details not described in detail in the above embodiments, please refer to the video encryption playback method provided in any embodiment of this application.

[0182] The above description is merely a preferred embodiment and the technical principles employed in this application. This application is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions that can be made by those skilled in the art will not depart from the scope of protection of this application. Therefore, although this application has been described in detail through the above embodiments, this application is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of this application, the scope of which is determined by the scope of the claims.

Claims

1. A method for encrypted video playback, characterized in that, For client use, including: Receive a first playback instruction based on a first link, and send a first resource request to a resource server according to the first playback instruction, wherein the first resource request includes the first link; The resource server receives a second link, anti-theft parameters, and an encryption identifier based on the first resource request, wherein the second link is obtained from the first link. The first playback resource is obtained from the cloud via the second link. The first playback resource is an encrypted playback resource. The first playback resource is spliced ​​together according to the anti-theft parameters to obtain the second playback resource; The preset encrypted image in the page corresponding to the first link is decrypted according to the encryption identifier to obtain key information; The second playback resource is decrypted based on the key information, and the decrypted second playback resource is then played as a video.

2. The method according to claim 1, characterized in that, The step of decrypting the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information includes: Obtain the corresponding decryption strategy based on the encryption identifier; The preset encrypted image in the page corresponding to the first link is identified and obtained according to the decryption strategy, and the preset encrypted image is decrypted according to the decryption strategy to obtain key information.

3. A method for encrypted video playback, characterized in that, For use as a resource server, including: Receive a first resource request sent by the client, the first resource request including a first link; The identity is verified based on the first resource request. When the verification is successful, the corresponding second link, anti-theft parameters and encryption identifier are obtained based on the first link. The second link, anti-theft parameters, and encryption identifier are fed back to the corresponding client. The client is used to obtain the first playback resource from the cloud according to the second link, and to perform splicing processing on the first playback resource according to the anti-theft parameters to obtain the second playback resource. The client also performs decryption processing on the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and plays the corresponding video after decrypting the second playback resource based on the key information.

4. The method according to claim 3, characterized in that, Before receiving the first resource request sent by the client, the process includes: Send a second resource request to the cloud, and receive a third link from the cloud based on the second resource request. The third link is generated by the cloud after encrypting and slicing the original video data to obtain the first playback resource, anti-theft parameters and the first link, based on the first link and the anti-theft parameters. The third link is subjected to anti-theft parameter extraction and hash operation to obtain the second link, anti-theft parameters and encryption identifier, and the first correspondence between the first link corresponding to the third link and the second link, anti-theft parameters and encryption identifier is obtained; The second link is sent to the cloud, which is used to establish a correspondence between the second link and the first playback resource.

5. The method according to claim 3, characterized in that, The first resource request includes the client ID; The step of verifying identity legitimacy based on the first resource request includes: Verify the legitimacy of the identity based on the client ID in the first resource request; The verification passes if the client ID in the first resource request is a valid ID.

6. The method according to claim 4, characterized in that, The step of obtaining the corresponding second link, anti-theft parameters, and encryption identifier based on the first link includes: Based on the received first link and the first comparison relationship, the corresponding second link, anti-theft parameters, and encryption identifier are obtained from the preset database.

7. A method for encrypted video playback, characterized in that, Used in the cloud, including: Receive raw video data, perform encrypted segmentation on the raw video data to obtain a first playback resource, anti-theft parameters and a first link, wherein the first link contains information of an encryption identifier; A third link is generated based on the first link and the anti-theft parameters; The system receives a second resource request from a resource server and sends a corresponding third link to the resource server based on the second resource request. The resource server performs anti-theft parameter extraction and hash operation based on the third link to obtain a second link, anti-theft parameters, and an encryption identifier. It then sends the corresponding second link, anti-theft parameters, and encryption identifier to the client based on the first resource request it receives. The client receives a third resource request sent by the client based on the second link, and sends the corresponding first playback resource to the client based on the third resource request; the client is used to splice the first playback resource according to the anti-theft parameters to obtain a second playback resource, and decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information, and play the corresponding video after decrypting the second playback resource based on the key information.

8. A video encryption playback device, characterized in that, For client use, including: The instruction receiving unit is configured to receive a first playback instruction based on a first link, and send a first resource request to a resource server according to the first playback instruction, wherein the first resource request includes the first link. A link receiving unit is configured to receive a second link, anti-theft parameters, and an encryption identifier fed back by the resource server based on the first resource request, wherein the second link is obtained based on the first link; The resource acquisition unit is used to acquire a first playback resource from the cloud according to the second link, wherein the first playback resource is an encrypted playback resource. The splicing unit is used to splice the first playback resource according to the anti-theft parameters to obtain the second playback resource; The decryption unit is used to decrypt the preset encrypted image in the page corresponding to the first link according to the encryption identifier to obtain key information; The playback unit is used to decrypt the second playback resource according to the key information and play the decrypted second playback resource as a video.

9. A video encryption playback device, characterized in that, include: Memory and one or more processors; The memory is used to store one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1-7.

10. A storage medium for storing computer-executable instructions, characterized in that, The computer-executable instructions, when executed by a processor, are used to perform the method as described in any one of claims 1-7.

Images