Node communication method and device in conference system and electronic equipment

Abstract

The embodiment of the invention provides a node communication method and device in a conference system and electronic equipment, the method is applied to a regional node in the conference system, the method comprises the following steps: obtaining communication data sent by a central node, the communication data being obtained by the central node through encryption by using a first encryption mode, the first encryption key corresponding to the first encryption mode is processed by the central node by using a second encryption mode, one of the first encryption mode and the second encryption mode is a symmetric encryption mode, and the other encryption mode is an asymmetric encryption mode; and decrypting the communication data by using a first decryption key corresponding to the first encryption mode to obtain decrypted data. According to the embodiment of the invention, the communication data of the interaction node is encrypted in a mode of combining two encryption modes, so that the communication security can be improved compared with the mode of encrypting the data by only one mode in the existing modes.

Description

Technical Field

[0001] The present application relates to the field of video conferencing, and in particular to a method, device and electronic device for node communication in a conference system. Background Art

[0002] With the development of network technology and the popularization of video conferencing, video conferencing is becoming an increasingly important means of communication in people's daily life and work.

[0003] In order to meet the needs of video conferencing in different scenarios, there are also multiple corresponding deployment methods for video conferencing. For example, it can include hybrid cloud deployment, cloud deployment, and local deployment, etc. Correspondingly, in some deployment methods, there will be nodes with different functions, such as central nodes and regional nodes, where the central node can be used to control the meeting, and the regional node can be used to manage the meeting according to the instructions of the central node. In order to ensure the security, reliability and smoothness of the meeting, it is necessary to ensure the security of the interactive communication between the central node and the regional node. However, the existing communication method between the central node and the regional node is less secure.

[0004] Therefore, how to improve the communication security of nodes in the conference system has become a technical problem that needs to be solved urgently. Summary of the invention

[0005] An object of an embodiment of the present application is to provide a method, device and electronic device for node communication in a conference system. The technical solution of the embodiment of the present application can improve the security of communication.

[0006] In the first aspect, an embodiment of the present application provides a method for node communication in a conference system, which is applied to a regional node in the conference system, wherein the conference system includes the regional node and a central node, and the central node is used to control the regional node to manage the conference, and the method includes: obtaining communication data sent by the central node, the communication data is encrypted by the central node using a first encryption method, and a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; using a first decryption key corresponding to the first encryption method to decrypt the communication data to obtain decrypted data.

[0007] The embodiment of the present application encrypts the communication data of the interactive nodes by combining two encryption methods, which can improve the security of communication compared with the existing method of encrypting data by only one method.

[0008] In one embodiment, the first encryption method is a symmetric encryption method, and the second encryption method is an asymmetric encryption method. Before obtaining the communication data sent by the central node, the method also includes: generating the first encryption key; encrypting the first encryption key using the public key of the central node corresponding to the second encryption method to obtain an encrypted first encryption key; sending the encrypted first encryption key to the central node, wherein the first encryption key is obtained after the central node decrypts the key using the private key of the central node corresponding to the second encryption method, and the first decryption key is the same as the first encryption key.

[0009] In one embodiment, the first encryption key includes a randomly generated preset bit string and a sending timestamp, and the sending timestamp is the timestamp of the regional node sending data to the central node. The method also includes: sending event request data or self-status data encrypted using the first encryption key to the central node, wherein the sending timestamp is used by the central node to verify the validity of the received data using the receiving time and the sending timestamp.

[0010] In one embodiment, the first encryption method is a symmetric encryption method, and the second encryption method is an asymmetric encryption method. Before using the first decryption key corresponding to the first encryption method to decrypt the communication data, the method also includes: receiving a first encryption key sent by the central node, wherein the first encryption key is encrypted by the central node using the public key of the regional node corresponding to the second encryption method; wherein decrypting the communication data using the first decryption key corresponding to the first encryption method to obtain the decrypted data includes: decrypting using the private key of the regional node corresponding to the second encryption method to obtain the first encryption key; decrypting the communication data using the first decryption key to obtain the decrypted data, wherein the first encryption key and the first decryption key are the same.

[0011] In one embodiment, the first encryption key includes a preset bit string randomly generated by the central node and a sending timestamp, the sending timestamp is the timestamp of the central node sending request data to the regional node, and before using the first decryption key corresponding to the first encryption method to decrypt the communication data and obtain the decrypted data, the method also includes: comparing the sending timestamp with the receiving timestamp of the communication data to determine that the communication data is valid; wherein, after obtaining the decrypted data, the method also includes: generating response data, encrypting the response data using the first encryption key, and sending it to the central node.

[0012] In one embodiment, before obtaining the communication data sent by the central node, the method further includes: obtaining the public key of the central node; and sending registration information encrypted using the public key of the central node to the central node, wherein the registration information includes the public key of the regional node.

[0013] In the second aspect, an embodiment of the present application provides a method for node communication in a conference system, which is applied to a central node in the conference system, wherein the conference system includes the central node and regional nodes, and the central node is used to control the regional nodes to manage conferences. The method includes: encrypting communication data using a first encryption method, wherein a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; sending the communication data to the regional node so that the regional node decrypts the communication data using a first decryption key corresponding to the first encryption method to obtain decrypted data.

[0014] In the third aspect, an embodiment of the present application provides a device for node communication in a conference system, which is applied to a regional node in the conference system, wherein the conference system includes the regional node and a central node, and the central node is used to control the regional node to manage the conference, and the device includes: an acquisition unit, used to acquire communication data sent by the central node, the communication data is encrypted by the central node using a first encryption method, and a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; a decryption unit, used to decrypt the communication data using a first decryption key corresponding to the first encryption method to obtain decrypted data.

[0015] In a fourth aspect, an embodiment of the present application provides a device for node communication in a conference system, which is applied to a central node in the conference system, wherein the conference system includes the central node and regional nodes, and the central node is used to control the regional nodes to manage conferences. The device includes: an encryption unit, which is used to encrypt communication data using a first encryption method, and a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; a sending unit, which is used to send the communication data to the regional node, so that the regional node uses a first decryption key corresponding to the first encryption method to decrypt the communication data to obtain decrypted data.

[0016] In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, can implement the method described in the first aspect and any embodiment of the first aspect or the method described in the second aspect, that is, any embodiment of the second aspect.

[0017] In a sixth aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein when the processor executes the program, it can implement the method described in the first aspect and any embodiment of the first aspect or the method described in the second aspect, i.e. any embodiment of the second aspect.

[0018] In the seventh aspect, an embodiment of the present application provides a computer program product, wherein the computer program product includes a computer program, wherein when the computer program is executed by a processor, it can implement the method described in the first aspect and any embodiment of the first aspect or the method described in the second aspect, that is, any embodiment of the second aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solution of an embodiment of the present application, the drawings required for use in an embodiment of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0020] Figure 1 A schematic diagram of a video conferencing system provided for one embodiment of the present application;

[0021] Figure 2 A flow chart of a method for node communication in a video conferencing system provided by one embodiment of the present application;

[0022] Figure 3 A flow chart of a method for regional node registration provided for one embodiment of the present application;

[0023] Figure 4 A flow chart of a method for a regional node to request a central node provided in one embodiment of the present application;

[0024] Figure 5 A flow chart of a method for a central node to request a regional node provided in one embodiment of the present application;

[0025] Figure 6 A schematic diagram of a device provided for one embodiment of the present application;

[0026] Figure 7 A schematic diagram of a device provided for yet another embodiment of the present application;

[0027] Figure 8 A schematic diagram of an electronic device is provided for one embodiment of the present application. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0029] In the existing various video conferencing architecture deployment methods, when there are multiple nodes communicating, for example, when there are central nodes and regional nodes communicating, in order to ensure the security of the conference, it is necessary to reduce or avoid the occurrence of public network communication data being intercepted, tampered with, forged, etc. However, the security of data processing in the communication mode between the central node and the regional nodes in the existing methods is not high, and there will be certain security risks.

[0030] For example, some existing communication methods use symmetric encryption to encrypt communication data, or use asymmetric encryption, or use Message Digest Algorithm (MD5) plus salt to encrypt, but the security of these communication methods is not very high.

[0031] In view of the above problems, the present application provides a method for node communication in a conference system, which can use a combination of multiple encryption methods to improve the security of communication between nodes, thereby solving the problem of low security in the prior art.

[0032] In the following, for the sake of ease of understanding and explanation, the execution process and actions of the real-time communication method of the present application in a video conferencing system are explained as an example rather than a limitation.

[0033] The following is combined with Figure 1 A schematic diagram of a video conferencing system provided by an embodiment of the present application is exemplarily described.

[0034] like Figure 1 As shown, a video conferencing system provided by an embodiment of the present application includes: multiple user terminals, a central node, a regional node and a selection forwarding unit SFU.

[0035] In the embodiment of the present application, the central node can be used for conference control, and the regional node can be used to manage the conference according to the control of the central node, for example, to allocate conference resources, data statistics, historical conference query, user terminal billing, user terminal authority management, etc. For example, in a newly opened video conference, the central node needs to allocate the regional node first. During the conference, the regional node will report the conference information to the central node, and the central node will also control the regional node, for example, to perform resource allocation selection, renewal, shutdown and other operations. For example, during the conference, the user terminal first connects to the central node, and the central node allocates which regional node the user terminal uses. The regional node then screens out the Selective Forwarding Unit (SFU) server of the user video conference, and then the regional node records the conference information, for example, the SFU information used in the conference, etc. When other people join the conference, the regional node will notify the new members of the corresponding SFU server.

[0036] It should be understood that in the embodiments of the present application, the SFU server can be Mediasoup, Janus, Jitsi, Kurento or Medooze, etc., and the embodiments of the present application are not limited to this. The following only takes SFU as Mediasoup as an example for explanation. The SFU server can accept instructions from the control end to manage and control producer and consumer objects, and then decide whether to receive and / or send audio and / or video streams of real-time communications of the client. It should be understood that the SFU server can also be called SFU or forwarding server or media forwarding server. If there is no special explanation below, the several names of the SFU server can be replaced, and the embodiments of the present application do not limit this. It should be understood that in the present application, the control end and the SFU can be two independent devices or integrated into one device.

[0037] In the embodiments of the present application, it should be understood that the user terminal in the embodiments of the present application can also be referred to as a user terminal or a user device or a terminal device. In the real-time example of the present application, the terminal device can be installed with a browser, and real-time communication can be performed through the browser, or an APP or a small program can be installed, and real-time communication can be performed through the APP or the small program. The terminal device in the present application may include a smart phone, a tablet computer, (personal digital assistant, PDA personal digital assistant), a computer, a game console, a wearable device, a tablet computer (portable android device, PAD), etc., and the embodiments of the present application are not limited thereto.

[0038] It should be understood that the operating system running on the electronic device can be a mobile version of Android, Ubuntu mobile version, Tizen and other Linux kernel-based operating systems as well as desktop operating systems such as Windows, Mac OS, Linux, etc., but the present invention is not limited to this.

[0039] In the embodiments of the present application, the terminal device may refer to an access terminal, a user equipment (UE), a user unit, a user station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a terminal, a wireless communication device, a user agent or a user device. The access terminal may be a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA), a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a vehicle-mounted device, a wearable device, a terminal device in a 5G network or a terminal device in a future evolved Public Land Mobile Network (PLMN), etc.

[0040] It should be understood that Figure 1 In the communication system scenario shown in , only two user terminals are illustrated, but the embodiments of the present application are not limited to this. In an actual real-time communication scenario, the number of user terminals may include any number, depending on the actual situation, for example, 10, 50, 500, 5000, etc.

[0041] The following is combined with Figure 2 A flowchart of a method for node communication in a video conferencing system provided by an embodiment of the present application is exemplified.

[0042] like Figure 2 The method shown is applied to Figure 1 In the video conferencing system shown, Figure 2 The methods shown include:

[0043] 210. The central node encrypts the communication data using a first encryption method.

[0044] The first encryption key corresponding to the first encryption method is processed by the central node using the second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method.

[0045] It should be understood that the first encryption method and the second encryption method in the embodiment of the present application can be a combination of multiple encryption methods, as long as the first encryption method and the second encryption method are different. The following only takes the first encryption method as a symmetric encryption method and the second encryption method as an asymmetric encryption method as an example for illustration, but the embodiment of the present application is not limited to this.

[0046] It should be understood that there are multiple situations in which the central node uses the second encryption method to process the first encryption key. For example, in one situation, the first encryption key is obtained after the central node uses the second encryption method to decrypt it, and in another situation, the second encryption key is sent to the regional node after the central node uses the second encryption method to encrypt it. The following will combine different situations and give examples respectively.

[0047] 220. The central node sends the communication data to the regional nodes.

[0048] Correspondingly, the regional node obtains the communication data sent by the central node.

[0049] 230. The regional node decrypts the communication data using a first decryption key corresponding to the first encryption method to obtain decrypted data.

[0050] The embodiment of the present application encrypts the communication data of the interactive nodes by combining two encryption methods, which can improve the security of communication compared with the existing method of encrypting data by only one method.

[0051] It should be understood that the communication data in the embodiments of the present application may be in multiple situations, for example, it may be the response data of the central node to the request or reported data of the regional node, or it may be the request data actively sent by the central node to the regional node. The specific communication method in the embodiments of the present application will be described below for different situations.

[0052] In the first case, the regional node sends a request to the central node, and the central node feeds back communication data (i.e., response data) in response to the request of the regional node. For example, when an event occurs in a meeting, such as when a user joins, a meeting starts or ends, the regional node will actively send a request to the central node, which may include the information of the participants, the duration of the meeting, and related meeting operations, so that the central node can manage the user or verify the identity or authority of the user. For another example, the regional node will send the usage of paid functions to the central node, such as the usage of cloud recording disks, the duration and number of times of telephone joining, the duration of conference-specific equipment (e.g., H.323 equipment or Session Initiation Protocol (SIP) equipment), etc., through a request to the central node, so that the central node can perform billing management. For another example, after the regional node completes registration, the regional node will actively send a request to the central node every fixed time to report its own status data.

[0053] In this case, the first encryption key may be sent by the regional node to the central node, and the central node decrypts the first encryption key using the decryption key corresponding to the second encryption method.

[0054] Correspondingly, as another embodiment, before the regional node obtains the communication data sent by the central node, the method further includes:

[0055] The regional node generates the first encryption key;

[0056] The regional node encrypts the first encryption key using the public key of the central node corresponding to the second encryption method to obtain the encrypted first encryption key;

[0057] The regional node sends the encrypted first encryption key to the central node, wherein the first encryption key is obtained after the central node decrypts the private key of the central node corresponding to the second encryption method.

[0058] Further, as another embodiment, the first encryption key includes a randomly generated character string of preset digits and a sending timestamp, the sending timestamp is a timestamp of the regional node sending data to the central node, and the method may further include:

[0059] The regional node sends the event request data or its own status data encrypted using the first encryption key to the central node, wherein the sending timestamp is used by the central node to verify the validity of the received data using the receiving time and the sending timestamp. After the central node obtains the request data or its own status data of the regional node, and if the verification is valid, it sends response data (i.e., the communication data mentioned above) to the regional node.

[0060] In the second case, the central node actively sends a request to the regional node, that is, the communication data mentioned above is the request data of the central node. For example, the central node can actively send a request to the regional node when it needs to query user information, such as querying the user's billing usage, or when it needs to notify the regional node of the user's authority or package changes, or when the service time of the user terminal expires, the telephone conference time is exhausted, the cloud recording disk is full, etc. The central node can encrypt the communication data using the first encryption method, and process the first encryption key using the second encryption method, and send it to the regional node. For example, the first key is encrypted using the public key of the regional node, and the regional node uses the decryption key corresponding to the second encryption method (for example, the private key of the regional node) to decrypt and obtain the first encryption key, and use the first encryption key to decrypt the communication data to obtain the request data of the central node.

[0061] Optionally, in the second case, the first encryption key includes a preset digit character string randomly generated by the central node and a sending timestamp, the sending timestamp is a timestamp of when the central node sends the request data to the regional node, and before the regional node uses the first decryption key corresponding to the first encryption method to decrypt the communication data and obtains the decrypted data, the method further includes:

[0062] The regional node compares the sending timestamp with the receiving timestamp of the communication data to determine that the communication data is valid;

[0063] After the regional node obtains the decrypted data, the method further includes:

[0064] The regional node generates response data, encrypts the response data using the first encryption key, and sends the response data to the central node.

[0065] That is to say, after the regional node receives the request from the central node, it will send the response data only after verifying that the request is valid.

[0066] It should be understood that in the second case, the public key of the regional node used by the central node may be obtained during the previous registration of the regional node.

[0067] Correspondingly, as another embodiment, in the embodiment of the present application, before the regional node obtains the communication data sent by the central node, the method further includes:

[0068] The regional node obtains the public key of the central node;

[0069] The regional node sends registration information encrypted by using the public key of the central node to the central node, where the registration information includes the public key of the regional node.

[0070] After the central node obtains the public key of the regional node, it can use the public key of the regional node to asymmetrically encrypt the request data sent by the central node to the regional node.

[0071] The above describes two communication situations. In the first situation, the regional node actively sends a request to the central node; in the second situation, the central node actively sends a request to the region. Before this, it can also include the situation of regional node registration. Figure 3-Figure 5 The following describes the situation of regional node registration, the situation of regional node actively sending request to central node and the situation of central node actively sending request to regional node.

[0072] like Figure 3 As shown in FIG. , it is a flow chart of the method for regional node registration. Figure 3 The methods shown include:

[0073] 310, the regional node obtains the public key of the central node.

[0074] For example, a regional node may read the central node's public key from a third-party device, such as a dongle.

[0075] 320, the regional node generates its own public key and private key.

[0076] 330, the regional node encrypts its own public key using the central node's public key.

[0077] 340. The regional node sends a registration request message to the central node.

[0078] The registration request message carries registration information, which includes the regional node's own public key encrypted by the central node. The registration information may also include the regional node's state information when registering, etc., which is not limited in the present embodiment.

[0079] 350, the central node obtains its own private key.

[0080] 360. The regional node uses its own private key to decrypt the public key of the regional node, obtains the public key of the regional node, and stores the public key of the regional node.

[0081] 370. The central node sends a registration response message to the regional node.

[0082] The response message may include registration success or registration failure.

[0083] like Figure 4 As shown in FIG. 1 , a flow chart of a method for a regional node to request a central node. Figure 4 The methods shown include:

[0084] 410, the regional node obtains the public key of the central node.

[0085] For example, a regional node may read the central node's public key from a third-party device, such as a dongle.

[0086] 420. The regional node generates a first encryption key.

[0087] For example, the first encryption key includes a randomly generated preset digit string and a sending timestamp. For example, the preset digit string can be a 32-bit string, but the embodiments of the present application are not limited thereto.

[0088] 430. The regional node encrypts the request data using the first encryption key.

[0089] It should be understood that the request data here can be event request data sent by the regional node triggered by an event, or it can be the regional node's own status data sent actively and periodically, for example, the regional node's own status data sent at preset time intervals, such as data sent every 1s, 2s or 3s.

[0090] 440, the regional node encrypts the first encryption key using the public key of the central node.

[0091] 450. The regional node sends the encrypted request data and the first encryption key to the central node.

[0092] 460. The central node uses the private key of the central node to decrypt and obtain a first encryption key.

[0093] 470. The central node uses the first encryption key to decrypt and obtain the requested data.

[0094] 480, the central node verifies the validity of the request data.

[0095] Specifically, the central node compares the current timestamp with the sending timestamp of the regional node, and determines that the requested data is valid when the interval between the two timestamps meets a preset time condition.

[0096] It should be understood that steps 470 and 480 may exchange data, that is, the central node may decrypt the request data after verifying that the request is valid. The embodiments of the present application are not limited thereto.

[0097] 490, the central node sends response data to the regional node.

[0098] That is, the central node sends response data (communication data) encrypted using the first encryption key to the regional node. In particular, for a request sent by the regional node when an event occurs, such as requesting the central node to verify whether the user is a legitimate user, the response message may include the corresponding verification result. For a request to report its own status, the response data may be data received successfully.

[0099] 4100, the regional node decrypts the response data.

[0100] Specifically, the regional node uses the first encryption key to decrypt and obtain the response data, and then the regional node performs corresponding processing. For example, for a request to verify the identity of a user, after receiving the response data of the verification result, the regional node performs corresponding processing, such as allowing the user to join the meeting when the user is legitimate, or refusing to connect to the meeting when the user identity verification fails.

[0101] like Figure 5 As shown in FIG. 1 , it is a flow chart of the method for a central node to request a regional node. Figure 5 The methods shown include:

[0102] 510, the central node reads the stored public key of the regional node.

[0103] 520. The central node generates a first encryption key.

[0104] For example, the first encryption key includes a randomly generated preset digit string and a sending timestamp. For example, the preset digit string can be a 32-bit string, but the embodiments of the present application are not limited thereto.

[0105] 530, the central node encrypts the request data using the first encryption key.

[0106] 540, the central node encrypts the first encryption key using the public key of the regional node.

[0107] 550. The central node sends the encrypted request data and the first encryption key to the regional node.

[0108] 560. The regional node uses its own private key to decrypt and obtain the first encryption key.

[0109] 570. The regional node uses the first encryption key to decrypt and obtain the requested data.

[0110] 580, the regional node verifies the validity of the request data.

[0111] Specifically, the regional node compares the current timestamp with the sending timestamp of the central node, and determines that the requested data is valid when the interval between the two timestamps meets a preset time condition.

[0112] It should be understood that steps 570 and 580 may exchange data, that is, the central node may decrypt the request data after verifying that the request is valid. The embodiments of the present application are not limited thereto.

[0113] 590, the regional node sends response data to the central node.

[0114] That is, the regional node sends the response data (communication data) encrypted using the first encryption key to the central node. For example, in response to the request of the central node to query the usage status of the regional node SFU, the response message may include the SFU data list. In response to the instruction request to terminate the service sent by the central node, the response data may include termination success. For example, after sending the response data, the regional node will notify all online users to exit the meeting and terminate the service.

[0115] 5100, the central node decrypts the response data.

[0116] Specifically, the central node uses the first encryption key to decrypt and obtain the response data, and then the central node performs the corresponding processing. For example, for a request to query the usage status of the regional node SFU, after receiving the response data, the central node will store the received data in the database for statistics. For a request to terminate the service, after receiving the response data of successful termination, the central node will modify the corresponding regional node data in the database to control the regional node to be unavailable for meetings.

[0117] In the embodiment of the present application, during the interaction between the central node and the regional node, the requesting party encrypts the requested data, and the encryption key uses non-encryption. In addition, the symmetric encryption key is regenerated for each request, and the encryption key is encrypted twice using non-encryption, which can increase security. Furthermore, in the embodiment of the present application, non-encryption can be used only to encrypt the key that is encrypted, which can avoid performance problems caused by decrypting a large amount of data with non-encryption data.

[0118] It should be understood that the above examples of interaction between the central node and the regional nodes are merely illustrative, and in actual applications, there may be other situations of interaction data between the central node and the regional nodes, and the embodiments of the present application are not limited thereto.

[0119] Please refer to Figure 6 , Figure 6A block diagram showing the composition of an apparatus for node communication in a conference system provided by an embodiment of the present application is shown. Figure 6 The device 600 shown may be a regional node. It should be understood that the device 600 corresponds to the regional node in the above method embodiment and can execute the various steps performed by the regional node involved in the above method embodiment. The specific functions of the device 600 can be found in the description above. To avoid repetition, the detailed description is appropriately omitted here.

[0120] Figure 6 The device 600 shown includes at least one software function module that can be stored in a memory or fixed in the device in the form of software or firmware. Figure 6 The device 600 shown includes: an acquisition unit 610, used to acquire communication data sent by the central node, the communication data is encrypted by the central node using a first encryption method, and a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; a decryption unit 620, used to decrypt the communication data using a first decryption key corresponding to the first encryption method to obtain decrypted data.

[0121] Please refer to Figure 7 , Figure 7 A block diagram showing the composition of an apparatus for node communication in a conference system provided by an embodiment of the present application is shown. Figure 7 The device 700 shown can be a central node. It should be understood that the device 700 corresponds to the central node in the above method embodiment and can execute the various steps performed by the central node involved in the above method embodiment. The specific functions of the device 700 can be found in the description above. To avoid repetition, the detailed description is appropriately omitted here.

[0122] Figure 7 The device 700 shown includes at least one software function module that can be stored in a memory or fixed in the device in the form of software or firmware. Figure 7 The device 700 shown includes: an encryption unit 710, used to encrypt communication data using a first encryption method, wherein a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; a sending unit 720, used to send the communication data to the regional node, so that the regional node uses a first decryption key corresponding to the first encryption method to decrypt the communication data and obtain decrypted data.

[0123] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the device described above can refer to the corresponding process in the aforementioned method, and will not be described in detail here.

[0124] like Figure 8 As shown, an embodiment of the present application provides an electronic device 800, which includes: a memory 810, a processor 820, and a computer program stored in the memory 810 and executable on the processor 820, wherein the processor 820 reads the program from the memory 810 through a bus 830 and executes the program to implement the method executed by the regional node or the method executed by the central node in any of the above embodiments. Optionally, Figure 8 The device shown may also include a transceiver, which may be used to send and / or receive data streams. The optional electronic device 800 may also include other hardware devices, but the embodiments of the present application are not limited thereto.

[0125] Processor 820 can process digital signals and can include various computing structures, such as complex instruction set computer structure, reduced instruction set computer structure, or a structure that implements a combination of multiple instruction sets. In some examples, processor 820 can be a microprocessor.

[0126] The memory 810 may be used to store instructions executed by the processor 820 or data related to the execution of instructions. These instructions and / or data may include codes for implementing some functions or all functions of one or more modules described in the embodiments of the present application. The processor 820 of the disclosed embodiment may be used to execute instructions in the memory 810 to implement the method performed by the central node or the regional node shown above. The memory 810 includes a dynamic random access memory, a static random access memory, a flash memory, an optical memory, or other memory known to those skilled in the art.

[0127] An embodiment of the present application further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, can implement the method performed by a central node or a regional node in any of the above methods provided in the above embodiments.

[0128] An embodiment of the present application further provides a computer program product, which includes a computer program, wherein when the computer program is executed by a processor, it can implement the method performed by a central node or a regional node in any of the above methods provided in the above embodiments.

[0129] It should be noted that the processor in the embodiment of the present invention (eg, Figure 8The processor in the embodiment of the present invention may be an integrated circuit chip with signal processing capability. In the implementation process, each step of the above method embodiment may be completed by an integrated logic circuit of hardware in the processor or an instruction in software form. The above processor may be a general processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. The general processor may be a microprocessor or the processor may be any conventional processor, etc. The software module may be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0130] It can be understood that the memory in the embodiment of the present invention (for example, Figure 8The memory in the memory may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Among them, the nonvolatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchlink DRAM (SLDRAM), and direct rambus RAM (DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0131] The application programs involved in the embodiments of the present application include any application installed on the requesting end, including but not limited to browsers, email, instant messaging services, word processing, keyboard virtualization, widgets, encryption, digital rights management, voice recognition, voice replication, positioning (such as functions provided by the global positioning system), music playback, etc.

[0132] It should be understood that the transceiver unit or transceiver in the embodiment of the present invention may also be referred to as a communication unit.

[0133] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer instruction is loaded and executed on a computer, the process or function according to the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instruction can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instruction can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrations. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).

[0134] The terms "component", "module", "system", etc. used in this specification are used to represent computer-related entities, hardware, firmware, a combination of hardware and software, software, or software in execution. For example, a component can be, but is not limited to, a process running on a processor, a processor, an object, an executable file, an execution thread, a program and / or a computer. By way of illustration, both applications running on a computing device and a computing device can be components. One or more components may reside in a process and / or an execution thread, and a component may be located on a computer and / or distributed between two or more computers. In addition, these components may be executed from various computer-readable media having various data structures stored thereon. Components may, for example, communicate through local and / or remote processes according to signals having one or more data packets (e.g., data from two components interacting with another component between a local system, a distributed system and / or a network, such as the Internet interacting with other systems through signals).

[0135] It should be understood that "one embodiment" or "an embodiment" mentioned throughout the specification means that specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present invention. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that in various embodiments of the present invention, the size of the sequence number of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0136] In addition, the terms "system" and "network" are often used interchangeably in this article. The term "and / or" in this article is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0137] It should be understood that in the embodiment of the present invention, "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B according to A does not mean determining B only according to A, and B can also be determined according to A and / or other information.

[0138] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0139] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0140] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or can be electrical, mechanical or other forms of connection.

[0141] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present invention.

[0142] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0143] In short, the above is only a preferred embodiment of the technical solution of the present invention, and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for node communication in a conference system, characterized in that: A regional node applied to a conference system, the conference system comprising the regional node and a central node, the central node being used to control the regional node to manage the conference, the method comprising: Acquire communication data sent by the central node, where the communication data is encrypted by the central node using a first encryption method, and a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; The communication data is decrypted using a first decryption key corresponding to the first encryption method to obtain decrypted data.

2. The method according to claim 1, characterized in that The first encryption mode is a symmetric encryption mode, and the second encryption mode is an asymmetric encryption mode. Before acquiring the communication data sent by the central node, the method further includes: generating the first encryption key; encrypting the first encryption key using the public key of the central node corresponding to the second encryption method to obtain an encrypted first encryption key; The encrypted first encryption key is sent to the central node, wherein the first encryption key is obtained by the central node after decryption processing using the private key of the central node corresponding to the second encryption method, and the first decryption key is the same as the first encryption key.

3. The method according to claim 2, characterized in that The first encryption key includes a randomly generated character string of preset digits and a sending timestamp, wherein the sending timestamp is a timestamp of the regional node sending data to the central node, and the method further includes: The event request data or the self-status data encrypted by using the first encryption key is sent to the central node, wherein the sending timestamp is used by the central node to verify the validity of the received data using the receiving time and the sending timestamp.

4. The method according to claim 1, characterized in that: The first encryption method is a symmetric encryption method, and the second encryption method is an asymmetric encryption method. Before decrypting the communication data using a first decryption key corresponding to the first encryption method, the method further includes: Receiving a first encryption key sent by the central node, wherein the first encryption key is encrypted by the central node using a public key of the regional node corresponding to the second encryption method; Wherein, decrypting the communication data using the first decryption key corresponding to the first encryption method to obtain decrypted data includes: Decrypting using the private key of the regional node corresponding to the second encryption method to obtain the first encryption key; The communication data is decrypted using the first decryption key to obtain decrypted data, wherein the first encryption key and the first decryption key are the same.

5. The method according to claim 4, characterized in that The first encryption key includes a preset digit character string randomly generated by the central node and a sending timestamp, the sending timestamp is a timestamp of the central node sending the request data to the regional node, and before decrypting the communication data using the first decryption key corresponding to the first encryption method to obtain the decrypted data, the method further includes: Comparing the sending timestamp with the receiving timestamp of the communication data to determine that the communication data is valid; After obtaining the decrypted data, the method further includes: Generate response data, encrypt the response data using the first encryption key, and send the response data to the central node.

6. The method according to any one of claims 1 to 5, characterized in that Before acquiring the communication data sent by the central node, the method further includes: Obtaining the public key of the central node; Sending registration information encrypted by using the public key of the central node to the central node, the registration information including the public key of the regional node.

7. A method for node communication in a conference system, characterized in that: A central node applied to a conference system, the conference system comprising the central node and regional nodes, the central node being used to control the regional nodes to manage conferences, the method comprising: Encrypting communication data using a first encryption method, wherein a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; The communication data is sent to the regional node, so that the regional node decrypts the communication data using a first decryption key corresponding to the first encryption method to obtain decrypted data.

8. A device for node communication in a conference system, characterized in that: A regional node applied to a conference system, the conference system comprising the regional node and a central node, the central node being used to control the regional node to manage the conference, the device comprising: an acquiring unit, configured to acquire communication data sent by the central node, wherein the communication data is encrypted by the central node using a first encryption method, and a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; The decryption unit is used to decrypt the communication data using the first decryption key corresponding to the first encryption method to obtain decrypted data.

9. A device for node communication in a conference system, characterized in that: A central node applied to a conference system, the conference system comprising the central node and regional nodes, the central node being used to control the regional nodes to manage conferences, the device comprising: an encryption unit, configured to encrypt communication data using a first encryption method, wherein a first encryption key corresponding to the first encryption method is processed by the central node using a second encryption method, wherein one of the first encryption method and the second encryption method is a symmetric encryption method, and the other encryption method is an asymmetric encryption method; A sending unit is used to send the communication data to the regional node, so that the regional node decrypts the communication data using the first decryption key corresponding to the first encryption method to obtain decrypted data.

10. An electronic device, characterized in that: The method comprises a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the computer program executes the method according to any one of claims 1 to 7 when being run by the processor.

Images