Data transmission method and device for sub-conferences in main conference, electronic equipment and medium
By transmitting key information in the main meeting and sub-conference and encrypting the data flow, the confidentiality and integrity of the data transmission of sub-conference data in the main meeting are solved, and a secure communication environment is realized.
Patent Information
- Application Number
- CN202411243559.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-05
- Publication Date
- 2024-12-31
AI Technical Summary
In the main meeting, the data transmission of sub-conferences poses a risk of data breach and privacy violations, and the confidentiality and integrity of the communications are required.
By transmitting the key information of the main meeting and sub-conference between the user terminal and the server, the data stream is encrypted and transmitted using encryption algorithms to ensure the confidentiality and integrity of the data in the main meeting and sub-conference.
It effectively ensures the confidentiality and integrity of communications, prevents data leakage and privacy violations, and improves the security of conference data transmission.
Smart Images

Figure CN119232379A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of information technology, and in particular to a data transmission method, device, electronic equipment and storage medium for a sub-conference in a main conference. Background Art
[0002] A sub-conference of a main conference is a small sub-conference created within a large main conference to discuss a specific topic. These sub-conferences can focus on different discussion topics, allowing conference participants related to the topic to enter a smaller, more focused environment for discussion and communication, thereby improving the efficiency and effectiveness of the meeting. In a sub-conference, participants can communicate and collaborate in real time through audio and video calls, file sharing, screen sharing, etc.
[0003] In today's network environment, data leakage and privacy violations occur frequently. Therefore, it is necessary to encrypt sub-conferences in the main conference to ensure the confidentiality and integrity of communications. Summary of the invention
[0004] In view of the above problems, embodiments of the present invention are proposed to provide a data transmission method, device, electronic device and storage medium for a sub-conference in a main conference that overcomes the above problems or at least partially solves the above problems.
[0005] In order to solve the above problem, an embodiment of the present invention discloses a data transmission method for a sub-conference in a main conference, which is applied to a user terminal participating in the main conference. The method includes:
[0006] When the user terminal joins the main conference, receiving key information of the main conference sent by the server;
[0007] Encrypting and transmitting the data stream in the main conference according to the key information of the main conference;
[0008] When the user terminal joins the sub-conference in the main conference, receiving key information of the sub-conference sent by the server;
[0009] The data stream in the sub-conference is encrypted and transmitted according to the key information of the sub-conference.
[0010] Optionally, the key information of the sub-conference includes an encrypted sub-conference key and a communication route corresponding to the sub-conference key; and encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference includes:
[0011] decrypting the encrypted sub-conference key according to a first private key to obtain a sub-conference key, wherein the first private key corresponds to a public key of the encrypted sub-conference key;
[0012] According to the sub-conference key, the data stream transmitted through the communication route corresponding to the sub-conference key is encrypted and transmitted.
[0013] Optionally, the key information of the sub-conference further includes a level of the sub-conference key, where the level indicates that the sub-conference key is used for encryption and / or decryption; and encrypting and transmitting a data stream transmitted through a communication route corresponding to the sub-conference key according to the sub-conference key, comprises:
[0014] When the level indicates that the sub-conference key is used for encryption, the sub-conference key is used to encrypt the data stream sent through the communication route corresponding to the sub-conference key and then sent;
[0015] When the level indicates that the sub-conference key is used for decryption, the sub-conference key is used to decrypt the data stream received through the communication route corresponding to the sub-conference key.
[0016] Optionally, the communication route includes communication routes of multiple data types, and the encrypting and transmitting, according to the sub-conference key, a data stream transmitted through the communication route corresponding to the sub-conference key, includes:
[0017] According to the type of data stream to be encrypted and transmitted, determining the communication line corresponding to the data stream to be encrypted and transmitted;
[0018] According to the sub-conference key corresponding to the corresponding communication line, the data stream that needs to be transmitted through the communication route corresponding to the sub-conference key is encrypted and transmitted.
[0019] Optionally, the encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference includes:
[0020] When the user terminal is set to allow receiving the data stream of the sub-conference, encrypting and transmitting the data stream in the sub-conference according to the user terminal setting and the key information of the sub-conference;
[0021] The step of encrypting and transmitting the data stream in the main conference according to the key information of the main conference includes:
[0022] When the user terminal is set to allow receiving the data stream of the main conference, the data stream in the main conference is encrypted and transmitted according to the user terminal settings and the key information of the main conference.
[0023] Optionally, the method further comprises:
[0024] When the user terminal is set to allow display of the data stream of the sub-conference, the data stream in the sub-conference is encrypted, transmitted and displayed according to the user terminal setting and the key information of the sub-conference;
[0025] When the user terminal is set to allow display of the data stream of the main conference, the data stream in the main conference is encrypted, transmitted and displayed according to the user terminal setting and the key information of the main conference.
[0026] Optionally, the key information of the main conference includes an encrypted main conference key, a communication route corresponding to the main conference key, and a level of the main conference key; and encrypting and transmitting the data stream in the main conference according to the key information of the main conference includes:
[0027] decrypting the encrypted master conference key according to a second private key to obtain the master conference key, wherein the second private key corresponds to a public key of the encrypted master conference key;
[0028] The data stream in the main conference is encrypted and transmitted according to the main conference key, the communication route corresponding to the main conference key and the level of the main conference key.
[0029] Accordingly, an embodiment of the present invention discloses a data transmission method for a sub-conference in a main conference, which is applied to a server. The method includes:
[0030] When a user terminal joins the main conference, sending key information of the main conference to the user terminal joining the main conference;
[0031] receiving a data stream sent by a user terminal joining the main conference, and sending the data stream to other user terminals joining the main conference; the data stream is encrypted by the user terminal joining the main conference according to the key information of the main conference;
[0032] When the user terminal joins the sub-conference in the main conference, sending key information of the sub-conference to the user terminal joining the sub-conference in the main conference;
[0033] A data stream sent by a user terminal joining the sub-conference is received, and the data stream is sent to other user terminals joining the sub-conference; the data stream is encrypted by the user terminal joining the sub-conference according to the key information of the sub-conference.
[0034] Optionally, the key information of the sub-conference includes an encrypted sub-conference key, and the sending the key information of the sub-conference to a user terminal of the sub-conference joining the main conference includes:
[0035] When the sub-conference is started, generating a sub-conference key for the sub-conference;
[0036] Encrypting the sub-conference key using the public key to obtain an encrypted sub-conference key;
[0037] The encrypted sub-conference key is sent to the user terminal, so that the user terminal decrypts the encrypted sub-conference key using a private key corresponding to the public key.
[0038] Accordingly, an embodiment of the present invention discloses a data transmission device for a sub-conference in a main conference, which is applied to a user terminal participating in the main conference, and the device includes:
[0039] A main conference key information receiving module, used for receiving the key information of the main conference sent by the server when the user terminal joins the main conference;
[0040] A main conference data transmission module, used to encrypt and transmit the data stream in the main conference according to the key information of the main conference;
[0041] A sub-conference key information receiving module, used for receiving the key information of the sub-conference sent by the server when the user terminal joins the sub-conference in the main conference;
[0042] The sub-conference data transmission module is used to encrypt and transmit the data stream in the sub-conference according to the key information of the sub-conference.
[0043] Optionally, the key information of the sub-conference includes an encrypted sub-conference key and a communication route corresponding to the sub-conference key, and the sub-conference data transmission module includes:
[0044] a first decryption submodule, configured to decrypt the encrypted sub-conference key according to a first private key to obtain the sub-conference key, wherein the first private key corresponds to a public key of the encrypted sub-conference key;
[0045] The first encrypted transmission submodule is used to encrypt and transmit the data stream transmitted through the communication route corresponding to the sub-conference key according to the sub-conference key.
[0046] Optionally, the key information of the sub-conference further includes a level of the sub-conference key, where the level indicates that the sub-conference key is used for encryption and / or decryption, and the encryption transmission submodule includes:
[0047] a sending unit, configured to, when the level indicates that the sub-conference key is used for encryption, use the sub-conference key to encrypt and send a data stream sent through a communication route corresponding to the sub-conference key;
[0048] The receiving unit is used to decrypt the data stream received through the communication route corresponding to the sub-conference key using the sub-conference key when the level indicates that the sub-conference key is used for decryption.
[0049] Optionally, the communication route includes communication routes of multiple data types, and the encrypted transmission submodule includes:
[0050] A communication line determination unit, configured to determine, according to the type of data stream to be encrypted and transmitted, a communication line corresponding to the data stream to be encrypted and transmitted;
[0051] The encryption transmission unit is used to encrypt and transmit the data stream that needs to be transmitted through the communication route corresponding to the sub-conference key according to the sub-conference key corresponding to the corresponding communication line.
[0052] Optionally, the sub-conference data transmission module includes:
[0053] A first user terminal setting submodule, configured to encrypt and transmit the data stream in the sub-conference according to the user terminal setting and the key information of the sub-conference when the user terminal is set to allow receiving the data stream of the sub-conference;
[0054] The main conference data transmission module includes:
[0055] The second user terminal setting submodule is used to encrypt and transmit the data stream in the main conference according to the user terminal setting and the key information of the main conference when the user terminal is set to allow receiving the data stream of the main conference.
[0056] Optionally, the device further comprises:
[0057] A first user terminal setting module, configured to encrypt, transmit and display the data stream in the sub-conference according to the user terminal setting and the key information of the sub-conference when the user terminal is set to allow display of the data stream of the sub-conference;
[0058] The second user terminal setting module is used to encrypt, transmit and display the data stream in the main conference according to the user terminal setting and the key information of the main conference when the user terminal is set to allow display of the data stream of the main conference.
[0059] Optionally, the key information of the main conference includes an encrypted main conference key, a communication route corresponding to the main conference key, and a level of the main conference key; and the main conference data transmission module includes:
[0060] A second decryption submodule, configured to decrypt the encrypted master conference key according to a second private key to obtain the master conference key, wherein the second private key corresponds to a public key of the encrypted master conference key;
[0061] The second encrypted transmission submodule is used to encrypt and transmit the data stream in the main conference according to the main conference key, the communication route corresponding to the main conference key and the level of the main conference key.
[0062] Accordingly, an embodiment of the present invention discloses a data transmission device for a sub-conference, which is applied to a server, and the device includes:
[0063] A main conference key information sending module, used for sending the key information of the main conference to the user terminal joining the main conference when the user terminal joins the main conference;
[0064] A main conference data stream transmission module, used to receive a data stream sent by a user terminal joining the main conference, and send the data stream to other user terminals joining the main conference; the data stream is encrypted by the user terminal joining the main conference according to the key information of the main conference;
[0065] A sub-conference key information sending module, used for sending the key information of the sub-conference to the user terminal joining the sub-conference in the main conference when the user terminal joins the sub-conference in the main conference;
[0066] The sub-conference data stream transmission module is used to receive the data stream sent by the user terminal joining the sub-conference and send the data stream to other user terminals joining the sub-conference; the data stream is encrypted by the user terminal joining the sub-conference according to the key information of the sub-conference.
[0067] Optionally, the key information of the sub-conference includes an encrypted sub-conference key, and the sub-conference key information sending module includes:
[0068] A sub-conference key generation sub-module, used to generate a sub-conference key for the sub-conference when the sub-conference is started;
[0069] A sub-conference key encryption sub-module, used to encrypt the sub-conference key using a public key to obtain an encrypted sub-conference key;
[0070] The sub-conference key sending module is used to send the encrypted sub-conference key to the user terminal, so that the user terminal uses the private key corresponding to the public key to decrypt the encrypted sub-conference key.
[0071] Correspondingly, an embodiment of the present invention discloses an electronic device, including: a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various steps of the data transmission method embodiment of the sub-conference in the above-mentioned main conference are implemented.
[0072] Accordingly, an embodiment of the present invention discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, each step of the embodiment of the data transmission method for a sub-conference in the main conference is implemented.
[0073] The embodiments of the present invention include the following advantages:
[0074] A data transmission method for a sub-conference in a main conference according to an embodiment of the present invention is applied to a user terminal participating in the main conference. When the user terminal joins the main conference, it receives the key information of the main conference sent by the server, and encrypts and transmits the data stream in the main conference according to the key information of the main conference. Then, when the user terminal joins the sub-conference in the main conference, it receives the key information of the sub-conference sent by the server, and encrypts and transmits the data stream in the sub-conference according to the key information of the sub-conference. Encrypting and transmitting the data stream in the main conference according to the key information of the main conference and encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference can ensure the confidentiality and integrity of the communication. BRIEF DESCRIPTION OF THE DRAWINGS
[0075] Figure 1 It is a flowchart of the steps of a data transmission method of a sub-conference in a main conference according to an embodiment of the present invention;
[0076] Figure 2 is a schematic diagram of a data transmission method for a sub-conference in a main conference according to an embodiment of the present invention;
[0077] Figure 3 is a flowchart of another method for transmitting data of a sub-conference in a main conference according to an embodiment of the present invention;
[0078] Figure 4 It is a structural block diagram of a data transmission device for a sub-conference in a main conference according to an embodiment of the present invention;
[0079] Figure 5 It is a structural block diagram of another data transmission device for a sub-conference in a main conference according to an embodiment of the present invention. DETAILED DESCRIPTION
[0080] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.
[0081] A sub-conference of a main conference is a small sub-conference created within a large main conference to discuss a specific topic. These sub-conferences can focus on different discussion topics, allowing conference participants related to the topic to enter a smaller, more focused environment for discussion and communication, thereby improving the efficiency and effectiveness of the meeting. In a sub-conference, participants can communicate and collaborate in real time through audio and video calls, file sharing, screen sharing, etc.
[0082] In today's network environment, data leakage and privacy violations occur frequently. Therefore, it is necessary to encrypt sub-conferences in the main conference to ensure the confidentiality and integrity of communications.
[0083] One of the core concepts of the embodiments of the present invention is to encrypt and transmit the data stream in the main conference according to the key information of the main conference, and to encrypt and transmit the data stream in the sub-conference according to the key information of the sub-conference, so that the confidentiality and integrity of the communication can be ensured.
[0084] Reference Figure 1 , shows a flowchart of a method for data transmission of a sub-conference in a main conference according to an embodiment of the present invention, which is applied to a user terminal participating in the main conference and may specifically include the following steps:
[0085] Step 101: When the user terminal joins the main conference, the user terminal receives key information of the main conference sent by the server.
[0086] Specifically, when the main conference is started, the server will generate a main conference key for the main conference. The main conference key is used to encrypt the data of the main conference. This key can also be called a group key. The conference is equivalent to a group. The group key can ensure the secure communication of multiple members in the group, and ensure that each group member participates in the key generation process and ensures that non-group members cannot obtain key information.
[0087] When a user terminal joins the main conference, the user terminal sends an identity authentication request to the server. Depending on the conference situation, the identity authentication request may be different. For example, some conferences may determine the list of members in advance, some conferences may determine the member types (for example, those above the ministerial level) in advance, and some conferences require the host to customize the meeting. Depending on the conference situation, the identity request may be different. It may be an identity identification code, an IP address, or an identity type. More stringent meetings may require biometric identification methods such as facial verification.
[0088] The server receives the identity authentication request from the user terminal, and after the identity authentication request is passed, sends the key information of the main conference to the user terminal, and the user terminal receives the key information of the main conference sent by the server.
[0089] The server may be a server of a video conference provider. If the video conference is not commercially available and is only used in a local area network with a relatively narrow scope, for example, only some people from a company participate in the conference. The server may also be a computer of a certain person, such as a computer of the conference host. Of course, the embodiment of the present invention does not limit the setting of the server. The user terminal may be a terminal device such as a mobile phone, a tablet computer, a notebook computer, a PDA, a PAD (Personal Digital Assistant), a PMP (Portable Media Player), etc. The embodiment of the present invention does not limit the user terminal.
[0090] Step 102: encrypt and transmit the data stream in the main conference according to the key information of the main conference.
[0091] Specifically, the user terminal joining the main conference can encrypt and send the data that needs to be sent to the main conference, that is, the data that needs to be sent to other user terminals in the main conference, according to the key information of the main conference, and decrypt and view the data in the main conference, that is, the data sent by other user terminals in the main conference after receiving it.
[0092] Step 103: When the user terminal joins the sub-conference in the main conference, the user terminal receives the key information of the sub-conference sent by the server.
[0093] Specifically, after the main conference is divided into some sub-conferences for a certain period of time, when the sub-conference is opened, the server will generate a sub-conference key for the sub-conference, send the sub-conference key information to the user terminal joining the sub-conference, and the user terminal joining the sub-conference receives the sub-conference key information. The list of members of the sub-conference can be set in advance by the authorized person. Since the members of the sub-conference are already in the main conference at this time, the server needs to find (verify) the members on the sub-conference list in the main conference, that is, passive verification without the user actively sending an identity authentication request, and then divide them into sub-conferences and distribute the key information of the sub-conference.
[0094] Step 104: encrypt and transmit the data stream in the sub-conference according to the key information of the sub-conference.
[0095] Specifically, the user terminal joining the sub-conference can encrypt and send the data that needs to be sent to the sub-conference, that is, the data that needs to be sent to other user terminals in the sub-conference, based on the key information of the sub-conference, and decrypt and view the data in the sub-conference, that is, the data sent by other user terminals in the sub-conference after receiving it.
[0096] A data transmission method for a sub-conference in a main conference according to an embodiment of the present invention is applied to a user terminal participating in the main conference. When the user terminal joins the main conference, it receives the key information of the main conference sent by the server, and encrypts and transmits the data stream in the main conference according to the key information of the main conference. Then, when the user terminal joins the sub-conference in the main conference, it receives the key information of the sub-conference sent by the server, and encrypts and transmits the data stream in the sub-conference according to the key information of the sub-conference. The user terminal encrypts and transmits the data stream in the main conference according to the key information of the main conference, and encrypts and transmits the data stream in the sub-conference according to the key information of the sub-conference, which can ensure the confidentiality and integrity of the communication.
[0097] In the embodiment of the present invention, the key information of the sub-conference includes an encrypted sub-conference key and a communication route corresponding to the sub-conference key; step 104, encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference, may specifically include the following sub-steps:
[0098] Sub-step S11, decrypting the encrypted sub-conference key according to a first private key to obtain the sub-conference key, where the first private key corresponds to the public key of the encrypted sub-conference key.
[0099] Specifically, the key information of the sub-conference may include an encrypted sub-conference key. After generating the sub-conference key of the sub-conference, the server may encrypt the sub-conference key by an asymmetric encryption algorithm to obtain the encrypted sub-conference key. The user terminal decrypts the encrypted sub-conference key according to the first private key to obtain the sub-conference key, and the first private key corresponds to the public key of the encrypted sub-conference key.
[0100] The server has a public key, and each user terminal that joins the sub-conference has a private key. The public key and the private key are corresponding. The server encrypts the sub-conference key with the public key and sends it to the user terminal that joins the sub-conference. The user terminal that joins the sub-conference decrypts it with its own private key to obtain the sub-conference key. Exemplarily, the server encrypts the sub-conference key with public key A to obtain the encrypted sub-conference key A, encrypts the sub-conference key with public key B to obtain the encrypted sub-conference key B, and then sends the encrypted sub-conference key A to user terminal A, and sends the encrypted sub-conference key B to user terminal B, wherein public key A corresponds to private key A, and public key B corresponds to private key B. User terminal A decrypts with its own private key A to obtain the sub-conference key, and user terminal B decrypts with its own private key B to obtain the same sub-conference key. Of course, the specific encryption method can be set according to actual needs in actual applications, and the embodiments of the present invention are not limited to this.
[0101] Sub-step S12, according to the sub-conference key, encrypting and transmitting the data stream transmitted through the communication route corresponding to the sub-conference key.
[0102] Specifically, the key information of the sub-conference also includes the communication route corresponding to the sub-conference key. The communication route corresponding to the sub-conference key is the communication route to which the sub-conference key is applicable. The user terminal can use the sub-conference key obtained after decryption to encrypt the data stream transmitted through the communication route corresponding to the sub-conference key.
[0103] Among them, the communication routes corresponding to the sub-conference keys received by different user terminals may be different. For example, the communication routes include communication route 1, communication route 2 and communication route 3. The communication route corresponding to the sub-conference key in the key information received by user terminal A is communication route 1, and the communication route corresponding to the sub-conference key in the key information received by user terminal B is communication route 2. Then, user terminal A can use the sub-conference key to encrypt and transmit the data stream transmitted through communication route 1 corresponding to the sub-conference key, and user terminal B can use the sub-conference key to encrypt and transmit the data stream transmitted through communication route 2 corresponding to the sub-conference key. Of course, the communication routes corresponding to the sub-conference keys received by different user terminals may also be the same, and can be set according to the communication authority of the user terminal, that is, the role of the user terminal in the sub-conference. The embodiment of the present invention does not limit this.
[0104] In the embodiment of the present invention, the key information of the sub-conference further includes the level of the sub-conference key, and the level indicates that the sub-conference key is used for encryption and / or decryption; step 104, encrypting and transmitting the data stream transmitted through the communication route corresponding to the sub-conference key according to the sub-conference key, may further include the following sub-steps:
[0105] Sub-step S21, when the level indicates that the sub-conference key is used for encryption, the sub-conference key is used to encrypt and then send the data stream sent through the communication route corresponding to the sub-conference key.
[0106] Specifically, the key information of the sub-conference includes not only the encrypted sub-conference key and the communication route corresponding to the sub-conference key, but also the level of the sub-conference key. The server sends the corresponding sub-conference key level to the user terminal according to the communication authority of the user terminal in the sub-conference, that is, the user role of the user terminal in the sub-conference.
[0107] The level of the sub-conference key indicates that the sub-conference key is used for encryption and / or decryption, that is, the corresponding authority of the sub-conference key. There are encryptable and non-encryptable permissions for sending data, and decryptable and non-decryptable permissions for receiving data. When the level of the sub-conference key indicates that the sub-conference key is used for encryption, the user terminal can use the sub-conference key to encrypt and send the data stream sent through the communication route corresponding to the sub-conference key, that is, the user terminal has the authority to send data.
[0108] In a sub-conference, different members can have different communication permissions. For example, the host should be able to randomly view the content of each sub-conference. In a sub-conference, there may be speakers and listeners (such as teachers in class), presenters and evaluators (such as work reports), judges and witnesses (such as private inquiries). This requires sub-conference participants to have different communication encryption operations.
[0109] Sub-step S22, when the level indicates that the sub-conference key is used for decryption, the sub-conference key is used to decrypt the data stream received through the communication route corresponding to the sub-conference key.
[0110] Specifically, when the level of the sub-conference key indicates that the sub-conference key is used for decryption, the user terminal can use the sub-conference key to decrypt the data stream received through the communication route corresponding to the sub-conference key, that is, the user terminal has the authority to receive data.
[0111] Exemplarily, the level of the sub-conference key can be: Level 1 indicating encryption and decryption, Level 2 indicating encryption but not decryption, and Level 3 indicating neither encryption nor decryption. For example, user terminal A is the reporter in the sub-conference, which can only send data and is not allowed to hear the discussions of other people in the conference or their evaluative remarks. Therefore, the level of the sub-conference key of user terminal A is Level 2 indicating encryption but not decryption.
[0112] In the embodiment of the present invention, the communication route includes communication routes of multiple data types. Sub-step S12, according to the sub-conference key, encrypts and transmits the data stream transmitted through the communication route corresponding to the sub-conference key, which may specifically include the following sub-steps:
[0113] Sub-step 121, determining the communication line corresponding to the data stream that needs to be encrypted for transmission according to the type of the data stream that needs to be encrypted for transmission.
[0114] Specifically, the communication route includes communication routes of multiple data types. For example, the communication route may include an audio communication route, an image communication route, and a file communication route. The audio communication route may be a route for transmitting audio data of a video conference, the image communication route may be a route for transmitting image data of a video conference, and the file communication route may be a route for transmitting shared file data of a video conference. Of course, the embodiment of the present invention does not impose specific restrictions on the setting of the communication route. User data is divided into multiple communication routes, and a corresponding key is arranged for each route. The keys of different communication routes may be the same or different.
[0115] According to the type of data stream that needs to be encrypted, the communication line corresponding to the data stream that needs to be encrypted is determined. For example, if the type of data stream that needs to be encrypted is a file, then the communication line corresponding to the data stream that needs to be encrypted is a file communication line.
[0116] Sub-step 122, according to the sub-conference key corresponding to the corresponding communication line, encrypt and transmit the data stream that needs to be transmitted through the communication route corresponding to the sub-conference key.
[0117] Specifically, continuing with the above example, the file is encrypted and transmitted according to the sub-conference key corresponding to the file communication route.
[0118] In the embodiment of the present invention, encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference includes:
[0119] When the user terminal is set to allow receiving the data stream of the sub-conference, the data stream in the sub-conference is encrypted and transmitted according to the user terminal setting and the key information of the sub-conference.
[0120] Specifically, the user can set whether the user terminal is allowed to receive the data stream of the sub-conference. For example, when the user sets the user terminal to allow receiving the data stream of the sub-conference, the data stream in the sub-conference is encrypted and transmitted according to the user terminal settings, the sub-conference key, the communication route corresponding to the sub-conference key, and the level of the sub-conference key.
[0121] Exemplarily, user terminal A is a member of the main conference and also a member of the sub-conference. The main conference key level of user terminal A is level 1 that can be encrypted and decrypted, and the sub-conference key level is level 1 that can be encrypted and decrypted. When the user sets user terminal A to only receive data from the sub-conference and not the main conference, the sub-conference key can be used for decryption, and no operation is performed using the main conference key. For example, the key control unit can be used to control the use of the sub-conference key to decrypt data transmitted through the communication route corresponding to the sub-conference key, and no operation is performed using the main conference key. The key control unit is used to control the execution of each key and the switch of the communication route. The key control unit can be integrated in the user terminal or in the video conferencing platform. It only needs the video conferencing platform to allocate a part of the storage resources and processor resources to the user terminal. However, integration in the member's terminal is definitely the safest way, because in this way, the terminal of member A obtains the encrypted data. It should be noted that the embodiment of the present invention does not limit the setting of the key control unit.
[0122] The step of encrypting and transmitting the data stream in the main conference according to the key information of the main conference includes:
[0123] When the user terminal is set to allow receiving the data stream of the main conference, the data stream in the main conference is encrypted and transmitted according to the user terminal settings and the key information of the main conference.
[0124] Specifically, the user can set whether the user terminal is allowed to receive the data stream of the main conference. For example, when the user sets the user terminal to allow receiving the data stream of the main conference, the data stream in the sub-conference is encrypted and transmitted according to the user terminal settings, the sub-conference key, the communication route corresponding to the sub-conference key, and the level of the sub-conference key.
[0125] Exemplarily, user terminal A is a member of the main conference and also a member of the sub-conference. The main conference key level of user terminal A is encryption and decryption level 1, and the sub-conference key level is encryption and decryption level 1. When the user sets user terminal A to only receive data from the main conference and not from the sub-conference, the main conference key can be used for decryption without using the sub-conference key to perform any operations.
[0126] In an embodiment of the present invention, the method further includes:
[0127] When the user terminal is set to allow display of the data stream of the sub-conference, the data stream in the sub-conference is encrypted, transmitted and displayed according to the user terminal setting and the key information of the sub-conference.
[0128] Specifically, the user can set whether the user terminal is allowed to display the data stream of the sub-conference. Display is different from receiving. Not receiving means that the data does not need to be decrypted, and not displaying means that the data needs to be decrypted, but the decrypted data is not displayed, and the calculation amount is different.
[0129] When the user sets the user terminal to allow the display of the sub-conference data stream, the data stream in the sub-conference is encrypted, transmitted and displayed according to the user terminal settings, the sub-conference key, the communication route corresponding to the sub-conference key and the level of the sub-conference key. The user can set whether the user terminal displays data according to actual needs, making encrypted communication more flexible.
[0130] When the user terminal is set to allow display of the data stream of the main conference, the data stream in the main conference is encrypted, transmitted and displayed according to the user terminal setting and the key information of the main conference.
[0131] Specifically, the user can set whether the user terminal is allowed to display the data stream of the main conference. When the user sets the user terminal to allow the display of the data stream of the main conference, the data stream in the main conference is encrypted, transmitted and displayed according to the user terminal settings, the main conference key, the communication route corresponding to the main conference key and the level of the main conference key. The user can set whether the user terminal displays data according to actual needs, making encrypted communication more flexible.
[0132] In the embodiment of the present invention, the key information of the main conference includes the encrypted main conference key, the communication route corresponding to the main conference key, and the level of the main conference key; step 102, encrypting and transmitting the data stream in the main conference according to the key information of the main conference, may specifically include the following sub-steps:
[0133] Sub-step S31, decrypting the encrypted main conference key according to a second private key to obtain the main conference key, wherein the second private key corresponds to the public key of the encrypted main conference key.
[0134] Specifically, the key information of the main conference includes the encrypted main conference key, the communication route corresponding to the main conference key, and the level of the main conference key. When the main conference is started, the server generates the main conference key for the main conference, and according to the asymmetric encryption algorithm, uses the public key to encrypt the main conference key to obtain the encrypted main conference key. The server sends the encrypted main conference key to the user terminal, and the user terminal decrypts the encrypted main conference key according to the second private key to obtain the main conference key. The second private key corresponds to the public key of the encrypted main conference key.
[0135] Sub-step S32, encrypting and transmitting the data stream in the main conference according to the main conference key, the communication route corresponding to the main conference key and the level of the main conference key.
[0136] Specifically, the server sends the encrypted main conference key to the user terminal, as well as the communication route corresponding to the main conference key and the level of the main conference key to the user terminal. The user can only encrypt and transmit the data stream in the main conference based on the main conference key, the communication route corresponding to the conference key and the level of the main conference key.
[0137] Reference Figure 2 , showing a schematic diagram of a data transmission method for a sub-conference in a main conference according to an embodiment of the present invention.
[0138] Small group learning in a teaching conference is a conference where the main conference and sub-conferences are held simultaneously, e.g. Figure 2 As shown, it includes the main classroom meeting (i.e. main meeting) and group study meeting (i.e. sub-meeting), wherein the main classroom meeting includes all class members including the teacher, and the group study meeting includes several group members, and different groups have different discussion topics, wherein members who have joined the group can only belong to the group and logically belong to the main classroom meeting, and cannot appear in multiple groups at the same time.
[0139] Refer to Table 1, which shows the roles of each member. Take members A, B, C, and D as an example: A, B, C, and D are all ordinary members of the main class. On their meeting interface, the top is the main class meeting, including all class members including the teacher (host), and there are two group study meetings below, namely Topic A discussion meeting (sub-meeting 1) and Topic B discussion meeting (sub-meeting 2).
[0140] member Meeting Roles in the current meeting First Sub-Conference-1 host Second Sub-Conference-1 Ordinary participants C Sub-session-2 host Man Main meeting Ordinary participants
[0141] Table 1
[0142] Referring to Table 2, the composition of the key string is shown. The key string includes a key, a communication route corresponding to the key, a key level, and a key control unit (user terminal setting). The key control unit of the user terminal, the key obtained from the server, the communication route corresponding to the key, and the key level are used as the key string. The key control unit is used to control the execution of each key and the switch of the communication route, which can be controlled according to the user terminal setting.
[0143]
[0144] Table 2
[0145] Member A and member B participated in the discussion meeting on topic A. In the key strings of member A and member B, key 1 corresponds to the main classroom meeting and key 2 corresponds to the discussion meeting on topic A. Member C participated in the discussion meeting on topic B. In the key string of member C, key 1 corresponds to the main classroom meeting and key 3 corresponds to the discussion meeting on topic B. Member D did not participate in the discussion group and is only an ordinary member of the main classroom. In the key string of member D, key 1 corresponds to the main classroom meeting.
[0146] Referring to Table 2, a list of members' permissions in different meetings is shown. Member A can receive and decrypt data sent by the host of the main classroom meeting (such as viewing shared files in the meeting and other meeting activities), data sent by members in the Topic A discussion meeting, and access the public data of the meeting, but does not receive data sent by members in the Topic B discussion meeting; at the same time, Member A can also set whether his mobile terminal receives or displays these data. There is a difference between receiving and displaying. If you do not receive, you do not need to decrypt. If you do not display data that needs to be decrypted but not displayed after decryption, the amount of calculation is different. For example, Member A sets that it currently only receives data from the main classroom meeting, and does not receive data from the Topic A discussion meeting. At this time, the key control unit of Member A controls Key 1 for decryption, Key 2 does not perform any operation, audio, image, and shared content lines do not communicate, and shared files include desktops, files, APPs, etc.
[0147] Member C can receive and decrypt data sent by the host of the main classroom meeting (for example, viewing and downloading files in the meeting, participating in meeting activities such as voting), data sent by members in the Topic B discussion meeting, and access the meeting public data. It does not receive data sent by members A and B in the Topic A discussion meeting, and does not accept data sent by ordinary member D in the main venue.
[0148] Member D can receive and decrypt data sent by the host of the main classroom meeting (for example, viewing and downloading files in the meeting, participating in meeting activities such as voting), but does not receive data sent by members A and B in the Topic A discussion meeting, and does not receive data sent by member C in the Topic B discussion meeting.
[0149]
[0150] Table 3
[0151] For the permission list in Table 3, refer to Table 4, which shows the settings of the key string of member A (the host of sub-conference 1).
[0152] Among them, key level 1 is encryption and decryption, key level 2 is encryption but not decryption, and key level 3 is not encryption but decryption.
[0153]
[0154] Table 4
[0155] Referring to Table 5, the key string settings of member B (a common participant of sub-conference 1) are shown.
[0156] Among them, key level 1 is encryption and decryption, key level 2 is encryption but not decryption, and key level 3 is not encryption but decryption.
[0157]
[0158] Table 5
[0159] Referring to Table 6, the setting of the key string of member C (sub-conference 2-host) is shown.
[0160] Among them, key level 1 is encryption and decryption, key level 2 is encryption but not decryption, and key level 3 is not encryption but decryption.
[0161]
[0162] Table 6
[0163] Referring to Table 7, the settings of the member D key string are shown.
[0164]
[0165] Table 7
[0166] In the above conference, member A and member B can simultaneously view the main classroom interface and the group interface on their mobile terminals. In the group interface, member A and member B can see the audio data and video image data sent by each other. The voice data and video image data of members in the sub-conference cannot use key 1 to send and encrypt any data in the main classroom conference.
[0167] In the above-mentioned conference, member A has different roles in different conferences. For example, member A is a student in the main classroom conference, an administrator in the topic A discussion conference, and an ordinary member in the main classroom conference. Therefore, member A has different permissions in different conferences. In the existing technology, the permissions of member A in different conferences are usually set at the conference end. For example, the administrator sets the identity of member A in the main classroom conference as a student and then sets the corresponding permissions to the permissions that the student should have: can receive and decrypt conference data, can send video data at any time, can send voice data after obtaining consent, can access conference files after obtaining consent, etc.; the administrator sets the identity of member A in the topic A discussion conference as an administrator, etc., and the above settings are all operated in the conference. The implementation method provided by the embodiment of the present invention is to set the key level in the key string of member A, so that member A can participate in different conferences as different types of members, so that A has different communication permissions in different conferences.
[0168] The embodiment of the present invention is different from the prior art in which the authority of each person is designed at the conference end. The key string of the user is designed at the user end at the key level. In this way, the role of each user in the conference is reflected by his key string. The conference end or other administrators only need to access the key string of the user to determine the conference role of the user. There is no need to set up a special authority management module at the conference end to manage user authority, which improves management efficiency and reduces the pressure on the conference end server.
[0169] In addition, through the design of the key string, user data is divided into multiple communication lines, and a corresponding key is arranged for each line. The keys of different communication lines can be the same or different. For example, the server only sends one key to member A in sub-conference A, and member A has set up different communication routes in sub-conference A. These routes correspond to the same key, but the key levels are different. Different communication lines correspond to different communication data. For example, they are divided into voice lines, video image lines, and file lines according to the communication type. Then, keys and key levels are configured for each communication line to realize communication control of different data and meet the role settings of member A in different conferences. For the server side, it can provide stable services for a large number of concurrent sub-conferences with limited server resources; for the user side, it can ensure that the user experience is still smooth in different scenarios (such as main conferences and sub-conferences in parallel).
[0170] The embodiment of the present invention realizes conference group encryption by combining symmetric encryption algorithm with asymmetric encryption algorithm, encrypts sub-conferences in video conferences, ensures confidentiality and integrity of communications, and divides the data sent and received by users into multiple communication lines through the design of key strings, and arranges corresponding keys for each line. For the server side, it can provide stable services for a large number of concurrent sub-conferences with limited server resources; for the user side, it can ensure that the user experience is still smooth in different scenarios (for example, main conferences and sub-conferences in parallel).
[0171] Reference Figure 3 , shows a flowchart of another method for transmitting data of a sub-conference in a main conference according to an embodiment of the present invention, which is applied to a server and may specifically include the following steps:
[0172] Step 201: When a user terminal joins the main conference, key information of the main conference is sent to the user terminal joining the main conference.
[0173] Specifically, when a user terminal joins the main conference, the server receives a conference joining identity authentication request sent by the user terminal, and after the identity authentication request is passed, sends the key information of the main conference to the user terminal joining the main conference.
[0174] Step 202: receiving a data stream sent by a user terminal joining the main conference, and sending the data stream to other user terminals joining the main conference; the data stream is encrypted by the user terminal joining the main conference according to the key information of the main conference.
[0175] Specifically, after the server sends the key information of the main conference to the user terminal joining the main conference, the user terminal encrypts the data to be sent according to the key information of the main conference and sends it to the server. The server receives the data stream sent by the user terminal and sends the data stream to other user terminals of the main conference.
[0176] Step 203: When the user terminal joins the sub-conference in the main conference, key information of the sub-conference is sent to the user terminal joining the sub-conference in the main conference.
[0177] Specifically, after a main conference is divided into some sub-conferences for a certain period of time, when a user terminal joins a sub-conference in the main conference, key information of the sub-conference is sent to the user terminal joining the sub-conference.
[0178] Step 204: receiving a data stream sent by a user terminal joining the sub-conference, and sending the data stream to other user terminals joining the sub-conference; the data stream is encrypted by the user terminal joining the sub-conference according to the key information of the sub-conference.
[0179] Specifically, after the server sends the key information of the sub-conference to the user terminal joining the sub-conference, the user terminal encrypts the data to be sent according to the key information of the sub-conference and sends it to the server. The server receives the data stream sent by the user terminal and sends the data stream to other user terminals of the sub-conference.
[0180] In the embodiment of the present invention, the key information of the sub-conference includes an encrypted sub-conference key, and the sending of the key information of the sub-conference to a user terminal of the sub-conference joining the main conference includes:
[0181] When the sub-conference is started, generating a sub-conference key for the sub-conference;
[0182] Encrypting the sub-conference key using the public key to obtain an encrypted sub-conference key;
[0183] The encrypted sub-conference key is sent to the user terminal, so that the user terminal decrypts the encrypted sub-conference key using a private key corresponding to the public key.
[0184] Specifically, when a sub-conference is started, the server will generate a sub-conference key for the sub-conference. For example, the main conference key can be generated based on the number of members of the main conference, and then the sub-conference key is encrypted using the public key to obtain the encrypted sub-conference key. The encrypted sub-conference key is then sent to the user terminal, so that the user terminal uses the private key corresponding to the public key to decrypt the encrypted sub-conference key to obtain the sub-conference key.
[0185] In an embodiment of the present invention, the key generated by the server can be actively updated and passively updated. Active update, one-time one-key, each time a sub-conference is opened, a new key is used, or the group key is regularly replaced according to the update cycle to prevent the key from being cracked. Passive update, when the sub-conference members temporarily change, notify the server, and the server updates the number of sub-conference members after the change and regenerates a new key. After the key is updated, when the key is replaced, the server notifies all participants to exchange the new key. At the same time, the key should be stored securely, for example, using a hardware security module (HSM) or an encrypted key library.
[0186] Based on the real-time and security requirements of data transmission in video conferences, a combination of symmetric and asymmetric encryption algorithms is chosen to implement conference group encryption. Symmetric encryption algorithms such as AES (Advanced Encryption Standard) are used for actual data encryption, while asymmetric encryption algorithms such as RSA are used for key exchange and digital signatures. Through group encryption technology, sub-conferences in the main network video conference are encrypted to ensure the confidentiality and integrity of communications.
[0187] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.
[0188] Reference Figure 4 , shows a structural block diagram of a data transmission device for a sub-conference in a main conference according to an embodiment of the present invention, which is applied to a user terminal participating in the main conference and may specifically include the following modules:
[0189] The main conference key information receiving module 301 is used to receive the key information of the main conference sent by the server when the user terminal joins the main conference;
[0190] A main conference data transmission module 302, configured to encrypt and transmit the data stream in the main conference according to the key information of the main conference;
[0191] A sub-conference key information receiving module 303, configured to receive the key information of the sub-conference sent by the server when the user terminal joins the sub-conference in the main conference;
[0192] The sub-conference data transmission module 304 is used to encrypt and transmit the data stream in the sub-conference according to the key information of the sub-conference.
[0193] In the embodiment of the present invention, the key information of the sub-conference includes an encrypted sub-conference key and a communication route corresponding to the sub-conference key, and the sub-conference data transmission module includes:
[0194] a first decryption submodule, configured to decrypt the encrypted sub-conference key according to a first private key to obtain the sub-conference key, wherein the first private key corresponds to a public key of the encrypted sub-conference key;
[0195] The first encrypted transmission submodule is used to encrypt and transmit the data stream transmitted through the communication route corresponding to the sub-conference key according to the sub-conference key.
[0196] In the embodiment of the present invention, the key information of the sub-conference further includes a level of the sub-conference key, and the level indicates that the sub-conference key is used for encryption and / or decryption. The encryption transmission submodule includes:
[0197] a sending unit, configured to, when the level indicates that the sub-conference key is used for encryption, use the sub-conference key to encrypt and send a data stream sent through a communication route corresponding to the sub-conference key;
[0198] The receiving unit is used to decrypt the data stream received through the communication route corresponding to the sub-conference key using the sub-conference key when the level indicates that the sub-conference key is used for decryption.
[0199] In an embodiment of the present invention, the communication route includes communication routes of multiple data types, and the encrypted transmission submodule includes:
[0200] A communication line determination unit, configured to determine, according to the type of data stream to be encrypted and transmitted, a communication line corresponding to the data stream to be encrypted and transmitted;
[0201] The encryption transmission unit is used to encrypt and transmit the data stream that needs to be transmitted through the communication route corresponding to the sub-conference key according to the sub-conference key corresponding to the corresponding communication line.
[0202] In the embodiment of the present invention, the sub-conference data transmission module includes:
[0203] A first user terminal setting submodule, configured to encrypt and transmit the data stream in the sub-conference according to the user terminal setting and the key information of the sub-conference when the user terminal is set to allow receiving the data stream of the sub-conference;
[0204] The main conference data transmission module includes:
[0205] The second user terminal setting submodule is used to encrypt and transmit the data stream in the main conference according to the user terminal setting and the key information of the main conference when the user terminal is set to allow receiving the data stream of the main conference.
[0206] In an embodiment of the present invention, the device further includes:
[0207] A first user terminal setting module, configured to encrypt, transmit and display the data stream in the sub-conference according to the user terminal setting and the key information of the sub-conference when the user terminal is set to allow display of the data stream of the sub-conference;
[0208] The second user terminal setting module is used to encrypt, transmit and display the data stream in the main conference according to the user terminal setting and the key information of the main conference when the user terminal is set to allow display of the data stream of the main conference.
[0209] In an embodiment of the present invention, the key information of the main conference includes an encrypted main conference key, a communication route corresponding to the main conference key, and a level of the main conference key; the main conference data transmission module includes:
[0210] A second decryption submodule, configured to decrypt the encrypted master conference key according to a second private key to obtain the master conference key, wherein the second private key corresponds to a public key of the encrypted master conference key;
[0211] The second encrypted transmission submodule is used to encrypt and transmit the data stream in the main conference according to the main conference key, the communication route corresponding to the main conference key and the level of the main conference key.
[0212] A data transmission device for a sub-conference in a main conference according to an embodiment of the present invention encrypts and transmits the data stream in the main conference according to the key information of the main conference, and encrypts and transmits the data stream in the sub-conference according to the key information of the sub-conference, thereby ensuring the confidentiality and integrity of the communication.
[0213] Reference Figure 5 , shows a structural block diagram of another data transmission device for a sub-conference in a main conference according to an embodiment of the present invention, which is applied to a server and may specifically include the following modules:
[0214] The main conference key information sending module 401 is used to send the key information of the main conference to the user terminal joining the main conference when the user terminal joins the main conference;
[0215] The main conference data stream transmission module 402 is used to receive the data stream sent by the user terminal joining the main conference, and send the data stream to other user terminals joining the main conference; the data stream is encrypted by the user terminal joining the main conference according to the key information of the main conference;
[0216] A sub-conference key information sending module 403, configured to send the key information of the sub-conference to the user terminal joining the sub-conference in the main conference when the user terminal joins the sub-conference in the main conference;
[0217] The sub-conference data stream transmission module 404 is used to receive the data stream sent by the user terminal joining the sub-conference and send the data stream to other user terminals joining the sub-conference; the data stream is encrypted by the user terminal joining the sub-conference according to the key information of the sub-conference.
[0218] In the embodiment of the present invention, the key information of the sub-conference includes an encrypted sub-conference key, and the sub-conference key information sending module includes:
[0219] A sub-conference key generation sub-module, used to generate a sub-conference key for the sub-conference when the sub-conference is started;
[0220] A sub-conference key encryption sub-module, used to encrypt the sub-conference key using a public key to obtain an encrypted sub-conference key;
[0221] The sub-conference key sending module is used to send the encrypted sub-conference key to the user terminal, so that the user terminal uses the private key corresponding to the public key to decrypt the encrypted sub-conference key.
[0222] A data transmission device for a sub-conference in a main conference according to an embodiment of the present invention encrypts and transmits the data stream in the main conference according to the key information of the main conference, and encrypts and transmits the data stream in the sub-conference according to the key information of the sub-conference, thereby ensuring the confidentiality and integrity of the communication.
[0223] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0224] An embodiment of the present invention further provides an electronic device, including:
[0225] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, it implements the various processes of the data transmission method embodiment of the sub-conference in the above-mentioned main conference and can achieve the same technical effect. To avoid repetition, it will not be repeated here.
[0226] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, each process of the data transmission method embodiment of the sub-conference in the above-mentioned main conference is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.
[0227] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.
[0228] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.
[0229] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0230] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0231] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0232] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.
[0233] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.
[0234] The above is a detailed introduction to the data transmission method, device, electronic device and storage medium for a sub-conference in a main conference provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.
Claims
1. A data transmission method for a sub-conference in a main conference, characterized in that: Applied to a user terminal participating in the main conference, the method comprises: When the user terminal joins the main conference, receiving key information of the main conference sent by the server; Encrypting and transmitting the data stream in the main conference according to the key information of the main conference; When the user terminal joins the sub-conference in the main conference, receiving key information of the sub-conference sent by the server; The data stream in the sub-conference is encrypted and transmitted according to the key information of the sub-conference.
2. The method according to claim 1, characterized in that The key information of the sub-conference includes an encrypted sub-conference key and a communication route corresponding to the sub-conference key; and encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference includes: decrypting the encrypted sub-conference key according to a first private key to obtain a sub-conference key, wherein the first private key corresponds to a public key of the encrypted sub-conference key; According to the sub-conference key, the data stream transmitted through the communication route corresponding to the sub-conference key is encrypted and transmitted.
3. The method according to claim 2, characterized in that The key information of the sub-conference further includes a level of the sub-conference key, wherein the level indicates that the sub-conference key is used for encryption and / or decryption; and encrypting and transmitting a data stream transmitted through a communication route corresponding to the sub-conference key according to the sub-conference key, comprising: When the level indicates that the sub-conference key is used for encryption, the sub-conference key is used to encrypt the data stream sent through the communication route corresponding to the sub-conference key and then sent; When the level indicates that the sub-conference key is used for decryption, the sub-conference key is used to decrypt the data stream received through the communication route corresponding to the sub-conference key.
4. The method according to claim 2, characterized in that: The communication route includes communication routes of multiple data types, and the encrypted transmission of a data stream transmitted through the communication route corresponding to the sub-conference key according to the sub-conference key includes: According to the type of data stream to be encrypted and transmitted, determining the communication line corresponding to the data stream to be encrypted and transmitted; According to the sub-conference key corresponding to the corresponding communication line, the data stream that needs to be transmitted through the communication route corresponding to the sub-conference key is encrypted and transmitted.
5. The method according to claim 1, characterized in that The step of encrypting and transmitting the data stream in the sub-conference according to the key information of the sub-conference includes: When the user terminal is set to allow receiving the data stream of the sub-conference, encrypting and transmitting the data stream in the sub-conference according to the user terminal setting and the key information of the sub-conference; The step of encrypting and transmitting the data stream in the main conference according to the key information of the main conference includes: When the user terminal is set to allow receiving the data stream of the main conference, the data stream in the main conference is encrypted and transmitted according to the user terminal settings and the key information of the main conference.
6. The method according to claim 1, characterized in that The method further comprises: When the user terminal is set to allow display of the data stream of the sub-conference, the data stream in the sub-conference is encrypted, transmitted and displayed according to the user terminal setting and the key information of the sub-conference; When the user terminal is set to allow display of the data stream of the main conference, the data stream in the main conference is encrypted, transmitted and displayed according to the user terminal setting and the key information of the main conference.
7. The method according to claim 1, characterized in that The key information of the main conference includes an encrypted main conference key, a communication route corresponding to the main conference key, and a level of the main conference key; and encrypting and transmitting the data stream in the main conference according to the key information of the main conference includes: decrypting the encrypted master conference key according to a second private key to obtain the master conference key, wherein the second private key corresponds to a public key of the encrypted master conference key; The data stream in the main conference is encrypted and transmitted according to the main conference key, the communication route corresponding to the main conference key and the level of the main conference key.
8. A data transmission method for a sub-conference in a main conference, characterized in that: Applied to a server, the method comprises: When a user terminal joins the main conference, sending key information of the main conference to the user terminal joining the main conference; receiving a data stream sent by a user terminal joining the main conference, and sending the data stream to other user terminals joining the main conference; the data stream is encrypted by the user terminal joining the main conference according to the key information of the main conference; When the user terminal joins the sub-conference in the main conference, sending key information of the sub-conference to the user terminal joining the sub-conference in the main conference; A data stream sent by a user terminal joining the sub-conference is received, and the data stream is sent to other user terminals joining the sub-conference; the data stream is encrypted by the user terminal joining the sub-conference according to the key information of the sub-conference.
9. The method according to claim 8, characterized in that The key information of the sub-conference includes an encrypted sub-conference key, and the sending of the key information of the sub-conference to a user terminal of the sub-conference joining the main conference includes: When the sub-conference is started, generating a sub-conference key for the sub-conference; Encrypting the sub-conference key using the public key to obtain an encrypted sub-conference key; The encrypted sub-conference key is sent to the user terminal, so that the user terminal decrypts the encrypted sub-conference key using a private key corresponding to the public key.
10. A data transmission device for a sub-conference in a main conference, characterized in that: Applied to a user terminal participating in the main conference, the device comprises: A main conference key information receiving module, used for receiving the key information of the main conference sent by the server when the user terminal joins the main conference; A main conference data transmission module, used to encrypt and transmit the data stream in the main conference according to the key information of the main conference; A sub-conference key information receiving module, used for receiving the key information of the sub-conference sent by the server when the user terminal joins the sub-conference in the main conference; The sub-conference data transmission module is used to encrypt and transmit the data stream in the sub-conference according to the key information of the sub-conference.
11. A data transmission device for a sub-conference in a main conference, characterized in that: The device is applied to the server of the main conference, and comprises: A main conference key information sending module, used for sending the key information of the main conference to the user terminal joining the main conference when the user terminal joins the main conference; A main conference data stream transmission module, used to receive a data stream sent by a user terminal joining the main conference, and send the data stream to other user terminals joining the main conference; the data stream is encrypted by the user terminal joining the main conference according to the key information of the main conference; A sub-conference key information sending module, used for sending the key information of the sub-conference to the user terminal joining the sub-conference in the main conference when the user terminal joins the sub-conference in the main conference; The sub-conference data stream transmission module is used to receive the data stream sent by the user terminal joining the sub-conference and send the data stream to other user terminals joining the sub-conference; the data stream is encrypted by the user terminal joining the sub-conference according to the key information of the sub-conference.
12. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the data transmission method for a sub-conference in a main conference as described in any one of claims 1-7 or claims 8-9 are implemented.
13. A computer-readable storage medium, characterized in that: The computer readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the data transmission method for a sub-conference in a main conference as described in any one of claims 1-7 or claims 8-9 are implemented.
Citation Information
Patent Citations
Management method and device for conference media stream key in IP multimedia subsystem
CN101997677A
Method for realizing sub-conference in IMS video conference, and device and system thereof
CN102111603A
Discussion group authority management method, device and system
CN104901814A
Multi-client audio and video call connection method and device, equipment and storage medium
CN112637540A
Data transmission method and device in network conference and storage medium
CN112737774A
