Video data interaction method, system and electronic device

Abstract

The present invention provides a video data interaction method, system and electronic device, and relates to the field of data processing technology. In the method, during the video data interaction between a video device and a video server based on the GB35114 protocol, the certificates of both parties are used for signature verification, and the generated key is used to realize the interaction of encrypted signaling of the video data and the interaction of the video data. The existing video transmission protocol can be encrypted and improved on the basis of the existing video transmission protocol, thereby improving the security of the video data interaction.

Description

Technical Field

[0001] The present invention relates to the field of video data interaction, and in particular to a video data interaction method, system and electronic equipment. Background Art

[0002] With the popularity of video surveillance, live broadcasting and other scenarios, the security risks of video data are gradually increasing. During the interaction of video data, problems such as unauthorized access, data leakage, video tampering, and malicious control of devices often occur, which seriously affects personal privacy and social public security. The existing technology mainly uses specific video transmission protocols during the interaction of video data. These video transmission protocols are relatively conventional and can be cracked in a targeted manner during the interaction, thus affecting the security of video data interaction. Summary of the invention

[0003] In view of this, the purpose of the present invention is to provide a video data interaction method, system and electronic device. In the process of video data interaction between a video device and a video server, the method uses the certificates of both parties to verify the signature, and uses the generated key to realize the interaction of encrypted signaling of video data and the interaction of video data. It can encrypt and improve the existing video transmission protocol on the basis of the existing video transmission protocol, thereby improving the security of video data interaction.

[0004] In a first aspect, an embodiment of the present invention provides a video data interaction method, which is applied to video data interaction between a video device and a video server based on the GB35114 protocol, and the method includes:

[0005] Based on the first certificate and device number of the video device, control the video server to generate a second certificate and key corresponding to the video device;

[0006] Control the video server to send the second certificate and the key to the video device, and control the video server to complete binding with the video device based on the second certificate and the key;

[0007] After detecting the interaction request instruction received by the video server, using the second certificate and the key to generate an encrypted signaling corresponding to the interaction request instruction, and controlling the video server to send the encrypted signaling to the bound video device;

[0008] Controlling the video device to decrypt the encrypted signaling according to the second certificate and the key to obtain a video data processing instruction corresponding to the interaction request instruction;

[0009] The video device is controlled to obtain the video data corresponding to the video data processing instruction, and the video data is sent to the video server.

[0010] In one implementation, based on the first certificate and device number of the video device, controlling the video server to generate a second certificate and a key corresponding to the video device includes:

[0011] Control the video server to receive the first certificate and device number sent by the video device;

[0012] Obtaining a server number of the video server, and generating a certificate issuance instruction corresponding to the video server using the server number, the first certificate, and the device number;

[0013] The certificate issuance instruction is used to control the video server to generate a second certificate, and the second certificate is used to obtain the corresponding key between the video device and the video server.

[0014] In one implementation, controlling the video server to send the second certificate and the key to the video device, and controlling the video server to complete binding with the video device based on the second certificate and the key, includes:

[0015] Obtaining a device number corresponding to the video device, and using the device number, the second certificate and the key to generate a certificate interaction instruction corresponding to the video server;

[0016] Using the certificate interaction instruction to control the video server to send the second certificate and the key to the video device;

[0017] The video server is controlled to complete binding with the video device through the device number corresponding to the second certificate and the key in the video device.

[0018] In one implementation, after detecting the interaction request instruction received by the video server, using the second certificate and the key to generate an encrypted signaling corresponding to the interaction request instruction, and controlling the video server to send the encrypted signaling to the bound video device, including:

[0019] After detecting the interactive request instruction received by the video server, obtaining the certificate update instruction and the encoding instruction corresponding to the interactive request instruction;

[0020] Using the certificate update instruction to update the second certificate, and using the key and the updated second certificate to generate encrypted signaling corresponding to the interaction request instruction;

[0021] After the encrypted signaling is encoded using the encoding instruction, the video server is controlled to send the encrypted signaling to the bound video device.

[0022] In one implementation, controlling the video device to decrypt the encrypted signaling according to the second certificate and the key to obtain the video data processing instruction corresponding to the interaction request instruction includes:

[0023] Obtaining a second certificate contained in the video device, and determining a key corresponding to the second certificate;

[0024] After decrypting the encrypted signaling obtained from the video device according to the key, a decryption result corresponding to the interactive request instruction is obtained;

[0025] After verifying the decryption result using the first certificate and the second certificate, the video data processing instruction included in the decryption result is obtained.

[0026] In one implementation, controlling a video device to obtain video data corresponding to a video data processing instruction and sending the video data to a video server includes:

[0027] Obtaining a video stream interaction instruction corresponding to the video data processing instruction, and using the video stream interaction instruction to control the video device to collect the video stream;

[0028] Generate video data corresponding to the video data processing instruction based on the video stream;

[0029] The video device is controlled to send the first certificate, the device number and the video data to the video server.

[0030] In one implementation, obtaining a device number corresponding to the video device, and using the device number, the second certificate, and the key to generate a certificate interaction instruction corresponding to the video server include:

[0031] Obtaining a first certificate corresponding to the video device, and controlling the video server to generate a first random number based on the first certificate;

[0032] Obtaining a second certificate corresponding to the video server, and controlling the video device to generate a second random number based on the second certificate;

[0033] The device number, the first random number, the second random number and the key are used to generate a certificate interaction instruction corresponding to the video server.

[0034] In one implementation, updating the second certificate using the certificate update instruction, and generating encrypted signaling corresponding to the interaction request instruction using the key and the updated second certificate, includes:

[0035] Using the certificate update instruction to obtain the certificate level of the second certificate in the video server;

[0036] Determine a certificate direct connection relationship between the video server and the video device based on the certificate hierarchy, and update the second certificate using the certificate direct connection relationship;

[0037] The encrypted signaling corresponding to the interaction request instruction is generated by using the key and the updated second certificate.

[0038] In a second aspect, an embodiment of the present invention provides a video data interaction system, which is applied to video data interaction between a video device and a video server based on the GB35114 protocol, and the system includes:

[0039] A key processing module, used for controlling the video server to generate a second certificate and a key corresponding to the video device based on the first certificate and the device number of the video device;

[0040] A binding execution module, used to control the video server to send the second certificate and the key to the video device, and control the video server to complete the binding with the video device based on the second certificate and the key;

[0041] The data request module is used to generate an encrypted signal corresponding to the interactive request instruction using the second certificate and the key after detecting the interactive request instruction received by the video server, and control the video server to send the encrypted signal to the bound video device;

[0042] A signaling processing module, used to control the video device to decrypt the encrypted signaling according to the second certificate and the key, and obtain a video data processing instruction corresponding to the interaction request instruction;

[0043] The data response module is used to control the video device to obtain the video data corresponding to the video data processing instruction and send the video data to the video server.

[0044] In a third aspect, an embodiment of the present invention further provides an electronic device, including a processor and a memory, wherein the memory stores computer executable instructions that can be executed by the processor, and the processor executes the computer executable instructions to implement the steps of the video data interaction method provided in the first aspect.

[0045] In a fourth aspect, an embodiment of the present invention further provides a storage medium storing computer executable instructions. When the computer executable instructions are called and executed by a processor, the computer executable instructions prompt the processor to implement the steps of the video data interaction method provided in the first aspect.

[0046] A video data interaction method, system and electronic device provided by the embodiment of the present invention, in the process of video data interaction between a video device and a video server based on the GB35114 protocol, the method first controls the video server to generate a second certificate and key corresponding to the video device based on the first certificate and device number of the video device; then controls the video server to send the second certificate and key to the video device, and controls the video server to complete the binding with the video device based on the second certificate and key; after detecting the interaction request instruction received by the video server, the encrypted signaling corresponding to the interaction request instruction is generated using the second certificate and key, and the video server is controlled to send the encrypted signaling to the bound video device; then the video device is controlled to decrypt the encrypted signaling according to the second certificate and key to obtain the video data processing instruction corresponding to the interaction request instruction; finally, the video device is controlled to obtain the video data corresponding to the video data processing instruction, and the video data is sent to the video server. In the process of video data interaction between the video device and the video server, the method uses the certificates of both parties for signature verification, and uses the generated key to realize the interaction of encrypted signaling of video data and the interaction of video data, and can encrypt and improve it on the basis of the existing video transmission protocol, thereby improving the security of video data interaction.

[0047] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention are realized and obtained by the structures particularly pointed out in the description, claims and drawings.

[0048] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0050] Figure 1 A flowchart of a video data interaction method provided by an embodiment of the present invention;

[0051] Figure 2 A flowchart of step S101 in a video data interaction method provided by an embodiment of the present invention;

[0052] Figure 3A flowchart of step S102 in a video data interaction method provided by an embodiment of the present invention;

[0053] Figure 4 A flowchart of step S301 in a video data interaction method provided by an embodiment of the present invention;

[0054] Figure 5 A flowchart of step S103 in a video data interaction method provided by an embodiment of the present invention;

[0055] Figure 6 A flowchart of step S502 in a video data interaction method provided by an embodiment of the present invention;

[0056] Figure 7 A flowchart of step S104 in a video data interaction method provided by an embodiment of the present invention;

[0057] Figure 8 A flowchart of step S105 in a video data interaction method provided by an embodiment of the present invention;

[0058] Fig. 9 A flowchart of another video data interaction method provided by an embodiment of the present invention;

[0059] Fig.10 A flowchart of a key acquisition process in a video data interaction method provided by an embodiment of the present invention;

[0060] Fig.11 A flowchart of a certificate acquisition process in a video data interaction method provided by an embodiment of the present invention;

[0061] Fig.12 A schematic diagram of a video data interaction system provided by an embodiment of the present invention;

[0062] Fig.13 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention.

[0063] icon:

[0064] 1210-key processing module; 1220-binding execution module; 1230-data request module; 1240-signaling processing module; 1250-data response module;

[0065] 101 - processor; 102 - memory; 103 - bus; 104 - communication interface. DETAILED DESCRIPTION

[0066] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution of the present invention will be clearly and completely described in combination with the embodiments below. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0067] With the popularization of video surveillance, live broadcasting and other scenes, the security risks of video data are gradually increasing. In the process of video data interaction, unauthorized access, data leakage, video tampering, malicious control of equipment and other problems often occur, which has a serious impact on personal privacy and social public security. The prior art mainly uses specific video transmission protocols in the process of video data interaction, such as GB28181 protocol, etc. These video transmission protocols are relatively conventional and are easily cracked in a targeted manner during the interaction process, thereby affecting the security of video data interaction. Based on this, the present invention implements a method, system and electronic device for video data interaction. The method uses the certificates of both video devices and video servers for signature verification during the process of video data interaction between the method and the generated key to realize the interaction of encrypted signaling of video data and the interaction of video data. It can be encrypted and improved on the basis of the existing video transmission protocol, thereby improving the security of video data interaction.

[0068] To facilitate understanding of this embodiment, a video data interaction method disclosed in an embodiment of the present invention is first described in detail. The method is applied to the video data interaction between a video device and a video server based on the GB35114 protocol. Figure 1 As shown, including:

[0069] Step S101, based on the first certificate and device number of the video device, controlling the video server to generate a second certificate and key corresponding to the video device;

[0070] Step S102, controlling the video server to send the second certificate and the key to the video device, and controlling the video server to complete binding with the video device based on the second certificate and the key;

[0071] Step S103, after detecting the interaction request instruction received by the video server, using the second certificate and the key to generate an encrypted signaling corresponding to the interaction request instruction, and controlling the video server to send the encrypted signaling to the bound video device;

[0072] Step S104, controlling the video device to decrypt the encrypted signaling according to the second certificate and the key, and obtaining a video data processing instruction corresponding to the interaction request instruction;

[0073] Step S105: Control the video device to obtain the video data corresponding to the video data processing instruction, and send the video data to the video server.

[0074] Specifically, the execution subject of the method is an electronic device or server on the upper side of the video device and the video server, and the video device and the video server can be controlled accordingly. When the video device and the video server interact with each other based on the GB35114 protocol, the method first controls the video device to send its corresponding first certificate and device number to the video server. After the video server receives the first certificate and device number, it issues a certificate to obtain a second certificate and a key between the two. After the second certificate and key are transmitted from the video server to the video device, the video server is bound to the video device. At this point, the certificates and keys of both parties are stored in the video device and the video server, and the video data can be encrypted and decrypted in the future.

[0075] The interactive execution timing of the video data starts after the video server receives the interactive request instruction. When the video server receives the interactive request instruction, it responds to the interactive request instruction using the second certificate and key in the video server, thereby generating an encrypted signal. The generation process of the encrypted signal can be generated using a specific random number, encryption algorithm, signature parameter, etc., thereby increasing the security of the signal. After the encrypted signal is generated, it is sent from the video server to the video device as a request instruction of the video device. Even if the encrypted signal is intercepted, it is difficult to crack it because it is an encrypted signal.

[0076] After the video device obtains the encrypted signaling, it uses its built-in second certificate and key to decrypt the encrypted signaling, thereby obtaining the video data processing instructions involved in the initial interaction request instruction. In a specific scenario, the relevant key frames in the encrypted transmission process of the video stream are encrypted and decrypted using the first key, and the predicted frames and two-way difference frames decoded based on the key frames are encrypted and decrypted using the second key. The first key and the second key can be fixed keys negotiated during the registration process, or dynamic keys generated using the key generation method negotiated during the registration process, or fixed keys negotiated during the registration process, or dynamic keys generated based on the key generation method negotiated during the registration process. The execution target of the video data processing instruction is the video device. Based on the video data processing instruction, the video device uses the video data it obtains as the response result of the interaction request instruction, and finally sends it to the video server, thereby completing the interaction process of the video data.

[0077] In one implementation, based on the first certificate and device number of the video device, the step S101 of controlling the video server to generate a second certificate and a key corresponding to the video device is as follows: Figure 2 As shown, including:

[0078] Step S201, controlling the video server to receive a first certificate and a device number sent by a video device;

[0079] Step S202, obtaining the server number of the video server, and generating a certificate issuance instruction corresponding to the video server using the server number, the first certificate and the device number;

[0080] Step S203: Use the certificate issuance instruction to control the video server to generate a second certificate, and use the second certificate to obtain the corresponding key between the video device and the video server.

[0081] Specifically, the video device first obtains its own first certificate and device number, and then controls the video device to send the first certificate and device number to the video server. At this time, the video server has obtained the first certificate and device number of the video device. Then, the video server obtains its own server number, and generates a certificate issuance instruction based on the server number, device number and first certificate to generate a second certificate. At this time, the server number and device number have been bound.

[0082] The video server will perform the corresponding certificate issuance process in response to the certificate issuance instruction, thereby obtaining the second certificate corresponding to the video server, and based on the generation process of the second certificate, the corresponding key between the video device and the video server can be obtained. The key can realize the decryption process of the subsequent steps under the corresponding decryption rules.

[0083] In one implementation, the video server is controlled to send the second certificate and the key to the video device, and the video server is controlled to complete the binding with the video device based on the second certificate and the key. Figure 3 As shown, including:

[0084] Step S301, obtaining a device number corresponding to the video device, and using the device number, the second certificate and the key to generate a certificate interaction instruction corresponding to the video server;

[0085] Step S302, using the certificate interaction instruction to control the video server to send the second certificate and key to the video device;

[0086] Step S303: Control the video server and the video device to complete binding through the device number corresponding to the second certificate and the key in the video device.

[0087] At this time, the video server contains the first certificate, the second certificate and the key, and the second certificate and the key need to be sent to the video device, so that the video device also contains the first certificate, the second certificate and the key. The specific transmission process is realized by relying on the device number corresponding to the video device, and the device number, the second certificate and the key are specifically used to generate the certificate interaction instruction corresponding to the video server, so that the certificate interaction instruction can be transmitted to the video device with the corresponding device number. After the video device receives the certificate interaction instruction, it can parse it to obtain the second certificate and the key, thereby realizing the second certificate and the key being saved in the video device, and finally using the device number to complete the binding process between the video server and the video device.

[0088] In one implementation, the step S301 of obtaining the device number corresponding to the video device and generating the certificate interaction instruction corresponding to the video server using the device number, the second certificate and the key is as follows: Figure 4 As shown, including:

[0089] Step S401, obtaining a first certificate corresponding to the video device, and controlling the video server to generate a first random number based on the first certificate;

[0090] Step S402, obtaining a second certificate corresponding to the video server, and controlling the video device to generate a second random number based on the second certificate;

[0091] Step S403: Generate a certificate interaction instruction corresponding to the video server using the device number, the first random number, the second random number and the key.

[0092] The process of obtaining the certificate interaction instruction needs to rely on the certificate signature processing process of both the video device and the video server, and also needs to use the corresponding random number. Specifically, first obtain the first certificate corresponding to the video device, and control the video server to generate a first random parameter based on the first certificate; similarly, obtain the second certificate corresponding to the video server, and control the video device to generate a second random number based on the second certificate. It is worth mentioning that the generation process of the first random number and the second random number can be executed at the same time.

[0093] After the first random number and the second random number are obtained, the device number and key can be used to generate the certificate interaction instruction corresponding to the video server, so as to bind the video server to the video device. Fig.10 In the description Fig.10In the implementation method, the video device first sends a registration request to the video server, and the registration request can carry various capability parameters of the video device through the first certificate for the video server to select. The video server generates a first random number R1 based on the first certificate, and returns R1 and the server number ID to the video device. After the video device generates a second random number R2 based on the second certificate, it sends R1, R2, and the server number ID to the video server. The video server then uses the above data to generate a key cryptkey, and uses R1, R2, the key cryptkey, and the device number ID to generate a certificate interaction instruction.

[0094] In one implementation, after detecting the interaction request instruction received by the video server, the encrypted signaling corresponding to the interaction request instruction is generated using the second certificate and the key, and the video server is controlled to send the encrypted signaling to the video device that has completed the binding, step S103, such as Figure 5 As shown, including:

[0095] Step S501, after detecting the interaction request instruction received by the video server, obtaining the certificate update instruction and the encoding instruction corresponding to the interaction request instruction;

[0096] Step S502, using the certificate update instruction to update the second certificate, and using the key and the updated second certificate to generate encrypted signaling corresponding to the interaction request instruction;

[0097] Step S503: After encoding the encrypted signaling using the encoding instruction, the video server is controlled to send the encrypted signaling to the bound video device.

[0098] The process of obtaining the encrypted signaling needs to be combined with specific encoding processing and certificate update processing. Specifically, after detecting that the video server receives the interactive request instruction, the certificate update instruction and encoding instruction corresponding to the instruction are obtained. Specifically, the certificate update instruction is used to update the second certificate in the video server at this time, and then use the second certificate to generate encrypted signaling; and the encoding instruction is used to encode the encrypted signaling, so as to send the encoded encrypted signaling to the video device.

[0099] In actual scenarios, this embodiment can use the GB35114 protocol for communication processing. During the binding process, the video server and the video device will exchange various parameters such as random number random1, random number random2, signature sign, encryption algorithm algorithm, VKEK, etc. The video server and the video device will sign the video data according to the corresponding private key and the other party's certificate. When the other party receives the data, it needs to use its own private key and the other party's certificate to verify the data. In subsequent other signaling interactions, the method+From+To+CallId+Date+VEKE+ message body in the message is encrypted using algorithm, and base64 encoded and added to the nonce field of the request header. After the other party receives the data, the data is verified according to the relevant rules. It is worth mentioning that VKEK is the video key encryption key data, method is the method parameter, From is the starting parameter, To is the target parameter, CallId is the corresponding ID value during the interaction, and Date is the date parameter.

[0100] In one implementation, the step S502 of updating the second certificate using the certificate update instruction and generating the encrypted signaling corresponding to the interaction request instruction using the key and the updated second certificate is as follows: Figure 6 As shown, including:

[0101] Step S601, using a certificate update instruction to obtain a certificate level of a second certificate in a video server;

[0102] Step S602, determining a certificate direct connection relationship between the video server and the video device based on the certificate hierarchy, and updating the second certificate using the certificate direct connection relationship;

[0103] Step S603: Generate encrypted signaling corresponding to the interaction request instruction using the key and the updated second certificate.

[0104] The hierarchical relationship corresponding to the second certificate needs to be considered during the certificate acquisition process. Therefore, it is necessary to first obtain the certificate hierarchy of the second certificate in the video server, and then use the certificate hierarchy to determine the certificate direct connection relationship between the video server and the video device, thereby determining the video server directly connected to the video device. When the video server involves multiple hierarchies, only the certificate corresponding to the video server directly connected to the video device is used to generate encrypted signaling. For details of the above process, see Fig.11 As shown, no further description is given.

[0105] In one implementation, the video device is controlled to decrypt the encrypted signaling according to the second certificate and the key to obtain the step S104 of the video data processing instruction corresponding to the interaction request instruction, such as Figure 7 As shown, including:

[0106] Step S701, obtaining a second certificate contained in the video device, and determining a key corresponding to the second certificate;

[0107] Step S702, after decrypting the encrypted signaling obtained from the video device according to the key, a decryption result corresponding to the interactive request instruction is obtained;

[0108] Step S703: After verifying the decryption result using the first certificate and the second certificate, the video data processing instruction included in the decryption result is obtained.

[0109] After the video device obtains the encrypted signaling, it can use its built-in first certificate, second certificate and key to decrypt the encrypted signaling, thereby obtaining the video data processing instructions involved in the initial interaction request instruction. Specifically, the encrypted signaling is decrypted by obtaining the key corresponding to the second certificate, and the decrypted result is verified by using the first certificate and the second certificate. After the verification is passed, the decrypted result is parsed to obtain the video data processing instructions contained therein.

[0110] In one implementation, the video device is controlled to obtain video data corresponding to the video data processing instruction and send the video data to the video server in step S105, such as Figure 8 As shown, including:

[0111] Step S801, obtaining a video stream interaction instruction corresponding to the video data processing instruction, and using the video stream interaction instruction to control a video device to collect a video stream;

[0112] Step S802, generating video data corresponding to the video data processing instruction based on the video stream;

[0113] Step S803: Control the video device to send the first certificate, the device number and the video data to the video server.

[0114] The executor of the video data processing instruction is the video device, and the video device at this time uses the video data processing instruction to determine the video stream interaction instruction, and the video stream interaction instruction can use the video device to collect the video stream and use the video stream as the video data corresponding to the video data processing instruction. In the process of transmitting the video data back to the video server, the first certificate and the device number need to be sent to the video server together, so that the video server uses the first certificate and the device number to verify the video data.

[0115] like Fig. 9 As shown, another flow chart of the video data interaction method includes a video device and a video server platform, and the video server platform includes four modules, namely:

[0116] Security module: Manage the secret keys of the video server platform, including uploading CA certificates, creating certificate requests, issuing device certificates, and connecting video devices or cascading them together. The devices need to hold each other's certificates and encrypt and decrypt data in the subsequent interaction logic.

[0117] Signaling interaction module: When video devices are connected or cascaded, SIP signaling communication is required, including video device registration, heartbeat, directory query, and negotiation of streaming media ports and protocols (TCP\UTP) through SIP signaling before on-demand playback.

[0118] Streaming media interaction module: extracts streaming media interaction for different streaming media connections, creates RTP stream data, pushes and closes streams, obtains stream information, obtains stream push information, etc. during the on-demand process.

[0119] Application module: connects the selected modules in series to access video devices, encrypt and decrypt during signaling sending and receiving, and is used for signature verification, encryption, decoding and verification of video streams, and control of playback and downloading of encrypted videos.

[0120] It can be seen from the video data interaction method in the above embodiment that the method uses the certificates of both parties to verify the signature during the video data interaction between the video device and the video server, and uses the generated key to realize the interaction of encrypted signaling of the video data and the interaction of the video data. It can encrypt and improve the existing video transmission protocol on the basis of the existing video transmission protocol, thereby improving the security of video data interaction.

[0121] For the video data interaction method provided in the above embodiment, the embodiment of the present invention provides a video data interaction system, which is applied to the video data interaction between the video device and the video server based on the GB35114 protocol, such as Fig.12 As shown, the system includes:

[0122] The key processing module 1210 is used to control the video server to generate a second certificate and a key corresponding to the video device based on the first certificate and the device number of the video device;

[0123] The binding execution module 1220 is used to control the video server to send the second certificate and the key to the video device, and control the video server to complete the binding with the video device based on the second certificate and the key;

[0124] The data request module 1230 is used to generate an encrypted signal corresponding to the interactive request instruction using the second certificate and the key after detecting the interactive request instruction received by the video server, and control the video server to send the encrypted signal to the bound video device;

[0125] The signaling processing module 1240 is used to control the video device to decrypt the encrypted signaling according to the second certificate and the key, and obtain the video data processing instruction corresponding to the interaction request instruction;

[0126] The data response module 1250 is used to control the video device to obtain the video data corresponding to the video data processing instruction and send the video data to the video server.

[0127] From the video data interaction system mentioned in the above embodiment, it can be seen that the system uses the certificates of both parties to verify the signature during the video data interaction between the video device and the video server, and uses the generated key to realize the interaction of encrypted signaling of the video data and the interaction of the video data. It can encrypt and improve the existing video transmission protocol on the basis of the existing video transmission protocol, thereby improving the security of video data interaction.

[0128] The video data interaction system provided in the embodiment of the present invention has the same implementation principle and technical effects as those of the aforementioned video data interaction method embodiment. For the sake of brief description, for matters not mentioned in the device embodiment, reference may be made to the corresponding contents in the aforementioned video data interaction method embodiment.

[0129] This embodiment also provides an electronic device. The structural diagram of the electronic device is as follows: Fig.13 As shown, the device includes a processor 101 and a memory 102; wherein the memory 102 is used to store one or more computer instructions, and the one or more computer instructions are executed by the processor to implement the steps of the above-mentioned video data interaction method.

[0130] Fig.13 The electronic device shown further includes a bus 103 and a communication interface 104 , and the processor 101 , the communication interface 104 and the memory 102 are connected via the bus 103 .

[0131] The memory 102 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk storage. The bus 103 may be an ISA bus, a PCI bus, or an EISA bus. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.13 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0132] The communication interface 104 is used to connect to at least one user terminal and other network units through a network interface, and send the encapsulated IPv4 message or IPv4 message to the user terminal through the network interface.

[0133] The processor 101 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 101. The above processor 101 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The disclosed methods, steps and logic block diagrams in the embodiments of the present disclosure can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present disclosure can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module may be located in a storage medium mature in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 102, and the processor 101 reads the information in the memory 102 and completes the steps of the method of the above embodiment in combination with its hardware.

[0134] An embodiment of the present invention further provides a storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the video data interaction method in the above embodiment are executed.

[0135] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0136] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0137] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0138] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that can be executed by a processor. Based on this understanding, the technical solution of the present invention can essentially or in other words, the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0139] Finally, it should be noted that the above-described embodiments are only specific implementations of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed by the present invention, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A video data interaction method, characterized in that: The method is applied to the video data interaction between the video device and the video server based on the GB35114 protocol, and the method comprises: Based on the first certificate and device number of the video device, controlling the video server to generate a second certificate and a key corresponding to the video device; Controlling the video server to send the second certificate and the key to the video device, and controlling the video server to complete binding with the video device based on the second certificate and the key; When detecting the interaction request instruction received by the video server, using the second certificate and the key to generate an encrypted signaling corresponding to the interaction request instruction, and controlling the video server to send the encrypted signaling to the bound video device; Control the video device to decrypt the encrypted signaling according to the second certificate and the key to obtain a video data processing instruction corresponding to the interaction request instruction; Controlling the video device to obtain video data corresponding to the video data processing instruction, and sending the video data to the video server; Based on the first certificate and the device number of the video device, controlling the video server to generate a second certificate and a key corresponding to the video device includes: Controlling the video server to receive the first certificate and the device number sent by the video device; Obtaining a server number of the video server, and generating a certificate issuance instruction corresponding to the video server using the server number, the first certificate, and the device number; The certificate issuance instruction is used to control the video server to generate the second certificate, and the second certificate is used to obtain the key corresponding to the video device and the video server.

2. The video data interaction method according to claim 1, characterized in that: Controlling the video server to send the second certificate and the key to the video device, and controlling the video server to complete binding with the video device based on the second certificate and the key, including: Obtaining the device number corresponding to the video device, and generating a certificate interaction instruction corresponding to the video server using the device number, the second certificate and the key; Using the certificate interaction instruction to control the video server to send the second certificate and the key to the video device; The video server is controlled to complete binding with the video device through the device number corresponding to the second certificate and the key in the video device.

3. The video data interaction method according to claim 1, characterized in that: After detecting the interaction request instruction received by the video server, using the second certificate and the key to generate an encrypted signaling corresponding to the interaction request instruction, and controlling the video server to send the encrypted signaling to the bound video device, including: After detecting the interaction request instruction received by the video server, obtaining the certificate update instruction and the encoding instruction corresponding to the interaction request instruction; Using the certificate update instruction to update the second certificate, and using the key and the updated second certificate to generate the encrypted signaling corresponding to the interaction request instruction; After the encrypted signaling is encoded using the encoding instruction, the video server is controlled to send the encrypted signaling to the bound video device.

4. The video data interaction method according to claim 1, characterized in that: Controlling the video device to decrypt the encrypted signaling according to the second certificate and the key to obtain a video data processing instruction corresponding to the interaction request instruction includes: Acquire the second certificate contained in the video device, and determine the key corresponding to the second certificate; After decrypting the encrypted signaling obtained in the video device according to the key, a decryption result corresponding to the interaction request instruction is obtained; After verifying the decryption result using the first certificate and the second certificate, the video data processing instruction included in the decryption result is obtained.

5. The video data interaction method according to claim 1, characterized in that: Controlling the video device to obtain the video data corresponding to the video data processing instruction, and sending the video data to the video server, comprises: Obtaining a video stream interaction instruction corresponding to the video data processing instruction, and using the video stream interaction instruction to control the video device to collect a video stream; Generate the video data corresponding to the video data processing instruction based on the video stream; The video device is controlled to send the first certificate, the device number, and the video data to the video server.

6. The video data interaction method according to claim 2, characterized in that: Acquiring the device number corresponding to the video device, and using the device number, the second certificate, and the key to generate a certificate interaction instruction corresponding to the video server, including: Acquire the first certificate corresponding to the video device, and control the video server to generate a first random number based on the first certificate; Acquire the second certificate corresponding to the video server, and control the video device to generate a second random number based on the second certificate; The certificate interaction instruction corresponding to the video server is generated by using the device number, the first random number, the second random number and the key.

7. The video data interaction method according to claim 3, characterized in that: Updating the second certificate by using the certificate update instruction, and generating the encrypted signaling corresponding to the interaction request instruction by using the key and the updated second certificate, including: Using the certificate update instruction, obtaining the certificate level of the second certificate in the video server; Determine a certificate direct connection relationship between the video server and the video device based on the certificate hierarchy, and update the second certificate using the certificate direct connection relationship; The encrypted signaling corresponding to the interaction request instruction is generated by using the key and the second certificate that has been updated.

8. A video data interaction system, characterized in that: The system is applied to the video data interaction between the video device and the video server based on the GB35114 protocol, and the system includes: A key processing module, used for controlling the video server to generate a second certificate and a key corresponding to the video device based on the first certificate and the device number of the video device; A binding execution module, used to control the video server to send the second certificate and the key to the video device, and control the video server to complete binding with the video device based on the second certificate and the key; a data request module, configured to, upon detecting an interaction request instruction received by the video server, generate an encrypted signaling corresponding to the interaction request instruction using the second certificate and the key, and control the video server to send the encrypted signaling to the bound video device; a signaling processing module, configured to control the video device to decrypt the encrypted signaling according to the second certificate and the key, and obtain a video data processing instruction corresponding to the interaction request instruction; A data response module, used for controlling the video device to obtain the video data corresponding to the video data processing instruction, and sending the video data to the video server; The key processing module is further used to: control the video server to receive the first certificate and the device number sent by the video device; obtain the server number of the video server, and generate a certificate issuance instruction corresponding to the video server using the server number, the first certificate and the device number; use the certificate issuance instruction to control the video server to generate the second certificate, and use the second certificate to obtain the key corresponding to the video device and the video server.

9. An electronic device, characterized in that: It comprises a processor and a memory, wherein the memory stores computer executable instructions that can be executed by the processor, and the processor executes the computer executable instructions to implement the steps of the video data interaction method according to any one of claims 1 to 7.

Images