Information processing method and device, equipment, storage medium and program product

Abstract

The invention discloses an information processing method and device, equipment, a storage medium and a program product, and belongs to the technical field of security access. The method comprises the steps that a first request sent by a first user side is acquired, the first request comprises a target playing URL, and the target playing URL comprises target authentication information and a URL of a target video file; obtaining target classification information, wherein the target classification information comprises storage information and format information of the target video file; determining a target security policy corresponding to the target classification information according to a preset corresponding relationship between the classification information and the security policy; verifying the target authentication information according to a verification rule corresponding to the target security policy; and returning resources corresponding to the target video file to the first user side under the condition that the target authentication information passes the verification. The embodiment of the invention can adapt to various video-on-demand scenes, and the security and flexibility of video access are improved.

Description

Technical Field

[0001] The present application belongs to the field of secure access technology, and in particular, relates to an information processing method, device, equipment, storage medium and program product. Background Art

[0002] With the development of mobile Internet technology, video on demand systems are becoming more and more widely used. Compared with traditional streaming media, video on demand systems provide better user experience, but also bring certain security issues.

[0003] In the video on demand scenario, it is necessary to protect the copyright of the video and prevent the video from being illegally obtained, downloaded and distributed. The current video on demand security solutions are usually designed for a single video on demand scenario. As the video on demand application scenarios become increasingly complex, the existing security solutions can no longer meet the needs of video on demand. Summary of the invention

[0004] The embodiments of the present application provide an information processing method, apparatus, device and computer storage medium, which can adapt to various video-on-demand scenarios and improve the security and flexibility of video access.

[0005] In a first aspect, an embodiment of the present application provides an information processing method, including:

[0006] Obtaining a first request sent by a first user terminal, the first request being used to request access to a target video file, the first request including a target playback uniform resource locator (URL), the target playback URL including target authentication information and the URL of the target video file, the target playback URL being obtained in advance by the first user terminal from a video playback platform;

[0007] Obtain target classification information, the target classification information includes storage information and format information of the target video file;

[0008] According to the preset correspondence between the classification information and the security policy, determine the target security policy corresponding to the target classification information;

[0009] Verify the target authentication information according to the verification rules corresponding to the target security policy;

[0010] When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal.

[0011] In an optional implementation manner, before obtaining the first request sent by the first user terminal, the method further includes:

[0012] In response to a second request from the first user terminal, obtaining target classification information, the second request being used to obtain a playback URL of a target video file;

[0013] According to the preset correspondence between the classification information and the security policy, determine the target security policy corresponding to the target classification information;

[0014] Generate target authentication information corresponding to the target security policy;

[0015] Combine the target authentication information with the URL of the target video file to obtain the target playback URL;

[0016] The target playback URL is returned to the first user terminal, so that the first user terminal can access the target video file through the target playback URL.

[0017] In an optional implementation, the target security policy includes a first security policy, where the first security policy is a security policy corresponding to a case where the storage information of the target video file includes object (Cloud Object Storage, cos) storage;

[0018] Generate target authentication information corresponding to the target security policy, including:

[0019] In the case where the target security policy includes the first security policy, first target authentication information is generated according to the cos storage information of the target video file, the first target authentication information includes a pre-signed URL, and the pre-signed URL includes preset URL expiration information.

[0020] In an optional implementation, the target security policy includes a second security policy, and the second security policy is a security policy corresponding to a case where the format information of the target video file includes an m3u8 format;

[0021] Generate target authentication information corresponding to the target security policy, including:

[0022] In the case where the target security policy includes the second security policy, second target authentication information is generated, and the second target authentication information includes a token corresponding to the second request.

[0023] In an optional implementation, the second security strategy includes: performing dynamic bit rate adaptive technology (HTTP Live Streaming, HLS) encryption on the target video file to obtain encrypted video file slices and m3u8 index files corresponding to the encrypted video file slices, the m3u8 index file including the URL of the encrypted video file slices and encryption information, the encryption information including an encryption algorithm and a key URL;

[0024] When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal, including:

[0025] When the token verification passes, the m3u8 index file is returned to the first user terminal.

[0026] In an optional implementation, in response to the second request of the first user terminal, before acquiring the target classification information, the method further includes:

[0027] Obtaining a target video file uploaded by a second user terminal and target classification information corresponding to the target video file;

[0028] Store target video files and target classification information.

[0029] In a second aspect, an embodiment of the present application provides an information processing device, including:

[0030] An acquisition module, used to acquire a first request sent by a first user terminal, the first request is used to request access to a target video file, the first request includes a target playback uniform resource location system URL, the target playback URL includes target authentication information and the URL of the target video file, and the target playback URL is pre-acquired by the first user terminal from a video playback platform;

[0031] The acquisition module is also used to acquire target classification information, which includes storage information and format information of the target video file;

[0032] A determination module, used to determine the target security policy corresponding to the target classification information according to the preset correspondence between the classification information and the security policy;

[0033] A verification module, used to verify the target authentication information according to the verification rules corresponding to the target security policy;

[0034] The return module is used to return the resource corresponding to the target video file to the first user terminal when the target authentication information is verified.

[0035] In a third aspect, an embodiment of the present application provides an information processing device, the device comprising:

[0036] A processor and a memory storing computer program instructions; when the processor executes the computer program instructions, any one of the above information processing methods is implemented.

[0037] In a fourth aspect, an embodiment of the present application provides a computer storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, any one of the above-mentioned information processing methods is implemented.

[0038] In a fifth aspect, an embodiment of the present application provides a computer program product. When instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to perform any one of the above-mentioned information processing methods.

[0039] The information processing method, device, equipment and computer storage medium of the embodiment of the present application can obtain a first request sent by a first user terminal. The first request is used to request access to a target video file. The first request includes a target playback URL obtained in advance from a video playback platform by the first user terminal. The target playback URL includes target authentication information and the URL of the target video file. Then, the target classification information is obtained. The target classification information includes storage information and format information of the target video file. Then, according to the correspondence between the preset classification information and the security policy, the target security policy corresponding to the target classification information is determined. According to the verification rules corresponding to the target security policy, the target authentication information is verified. When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal. In this way, different authentication schemes can be adopted according to the classification information of the video file, so as to adapt to the needs of different scenarios and improve the security of video access. In addition, the embodiment of the present application associates the classification information of the video with the security policy, adopts different security policies for video files of different classifications, and is also conducive to the dynamic expansion of the security policy and improves the flexibility of the security policy configuration. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0041] Figure 1 It is a flowchart of an information processing method provided by an embodiment of the present application;

[0042] Figure 2 is a structural diagram of an information processing device provided by yet another embodiment of the present application;

[0043] Figure 3 It is a structural diagram of an information processing device provided in yet another embodiment of the present application. DETAILED DESCRIPTION

[0044] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0045] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0046] It should be noted that the acquisition, storage, use and processing of data in the embodiments of the present application are in compliance with the relevant provisions of national laws and regulations.

[0047] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0048] In the video-on-demand scenario, it is necessary to protect the copyright of the video and prevent the video from being illegally obtained, downloaded and distributed. The current video-on-demand security solutions are usually designed for a single video-on-demand scenario.

[0049] However, with the development of video on demand, its application scenarios are becoming increasingly complex. For example, video on demand can have both intranet playback scenarios and Internet playback scenarios; there are playback scenarios that include content delivery networks (CDNs) and playback scenarios that do not include CDNs. Different videos may also have different security level requirements. For example, some videos are completely public, while others are partially public. Therefore, the security solutions designed for a single video on demand scenario cannot meet the current needs of video on demand.

[0050] In order to solve the problems of the prior art, the embodiments of the present application provide an information processing method, apparatus, device and computer storage medium.

[0051] The following first introduces the information processing method provided in the embodiments of the present application with reference to the accompanying drawings.

[0052] Figure 1 FIG. 1 is a flow chart showing an information processing method provided by an embodiment of the present application. Figure 1 As shown, the method may include the following steps S110 to S150.

[0053] S110, obtaining a first request sent by a first user terminal, the first request is used to request access to a target video file, the first request includes a target playback URL, the target playback URL includes target authentication information and the URL of the target video file, and the target playback URL is pre-acquired by the first user terminal from a video playback platform.

[0054] For example, when the first user terminal needs to access the target video file, it can first obtain the target playback URL from the video playback platform. Before returning the target playback URL to the first user terminal, the video playback platform can also verify the identity of the first user terminal, and return the target playback URL to the first user terminal if the verification is successful.

[0055] S120, obtaining target classification information, where the target classification information includes storage information and format information of the target video file.

[0056] S130, determining a target security policy corresponding to the target classification information according to a preset correspondence between the classification information and the security policy.

[0057] S140, verifying the target authentication information according to the verification rules corresponding to the target security policy.

[0058] S150: When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal.

[0059] The information processing method of the embodiment of the present application can obtain a first request sent by a first user terminal. The first request is used to request access to a target video file. The first request includes a target playback URL obtained in advance by the first user terminal from a video playback platform. The target playback URL includes target authentication information and the URL of the target video file. Then, the target classification information is obtained. The target classification information includes storage information and format information of the target video file. Then, according to the correspondence between the preset classification information and the security policy, the target security policy corresponding to the target classification information is determined. According to the verification rules corresponding to the target security policy, the target authentication information is verified. When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal. In this way, different authentication schemes can be adopted according to the classification information of the video file, so as to adapt to the needs of different scenarios and improve the security of video access. In addition, the embodiment of the present application associates the classification information of the video with the security policy, adopts different security policies for video files of different classifications, and is also conducive to the dynamic expansion of the security policy and improves the flexibility of the security policy configuration.

[0060] In one embodiment, before obtaining the first request sent by the first client, the method may further include:

[0061] In response to a second request from the first user terminal, target classification information is obtained, where the second request is used to obtain a target playback URL.

[0062] According to the preset correspondence between classification information and security policy, determine the target security policy corresponding to the target classification information.

[0063] Generate target authentication information corresponding to the target security policy.

[0064] Combine the target authentication information with the URL of the target video file to obtain the target playback URL.

[0065] Return the target playback URL to the first client.

[0066] According to the above implementation, the target security policy corresponding to the target classification information can be determined according to the correspondence between the preset classification information and the security policy, and then the corresponding target authentication information can be generated and returned to the first user terminal. In this way, when the first user terminal needs to access the target video file, the authority of the first user terminal can be authenticated by the target authentication information. In this way, according to different classification information, different security policies can be adopted for different video-on-demand scenarios. In this way, it is conducive to improving the security and flexibility of video access.

[0067] In one embodiment, the target security policy may include a first security policy, and the first security policy may be a security policy corresponding to a case where the storage information of the target video file includes cos storage.

[0068] Generate target authentication information corresponding to the target security policy, which may include:

[0069] In the case where the target security policy includes the first security policy, first target authentication information is generated according to the cos storage information of the target video file, the first target authentication information includes a pre-signed URL, and the pre-signed URL includes preset URL expiration information.

[0070] Accordingly, according to the verification rules corresponding to the target security policy, the target authentication information is verified, which may include: verifying the correctness of the pre-signed URL. The verification process may be implemented by the cos platform. Specifically, the pre-signed URL may be sent to the cos platform for the cos platform to verify the pre-signed URL.

[0071] In the above implementation, the storage information of the target video file includes cos storage, which can indicate that the target video file is stored in a cos bucket. The cos storage information can include information such as a storage bucket, a cos file URL, and account credentials. The first target authentication information can be generated by a cos platform software development kit (SDK) integrated with the video playback platform. The URL time validity information can be adjusted as needed, and the time validity is usually short. The first target authentication information is spliced ​​to the URL of the target video file to obtain the target playback URL. In this way, private reading and writing of cos can be achieved. The pre-signed URL in the first target authentication information includes preset URL time validity information, and the generated target playback URL is also time-effective accordingly. Once the pre-signed URL expires, the target playback URL will also become invalid. In some examples, when the target video file is stored in a cos bucket, the access log recording function of the cos bucket can also be enabled to monitor the access to the target video file. After the video playback platform returns the resource corresponding to the target video file to the first user terminal, a corresponding access log can be generated. In some examples, the information processing method can also include: auditing the access log at a preset time. By regularly auditing access logs, you can check for abnormal access behavior, promptly identify and address potential security risks, and further improve the security of video access.

[0072] According to the above implementation, when the storage information of the target video file includes cos storage, the access request to the target video can be verified through the pre-signed URL. The pre-signed URL is time-effective and is conducive to realizing temporary and fast video resource sharing.

[0073] In one embodiment, the target security policy may include a second security policy, and the second security policy may be a security policy corresponding to a case where the format information of the target video file includes an m3u8 format.

[0074] Generate target authentication information corresponding to the target security policy, which may include:

[0075] In the case where the target security policy includes the second security policy, second target authentication information is generated, and the second target authentication information includes a token corresponding to the second request.

[0076] Accordingly, according to the verification rules corresponding to the target security policy, the target authentication information is verified, which may include: verifying the legitimacy of the token. Exemplarily, after the token corresponding to the second request is received, the video playback platform may also record the validity period of the token. Verifying the target authentication information may include: verifying the validity of the token.

[0077] In the above-mentioned embodiment, the generation of token can be realized by methods known in the art. Exemplary, token can be generated by timestamp, private key and Advanced Encryption Standard (Advanced Encryption Standard, AES) algorithm. In one example, token authentication information can be embedded in m3u8 index file. Specifically, a parameter can be appended at the end of the key URL in the m3u8 index file, and the value of the parameter is carried by the user end request. For example, the parameter name of the parameter is a default name, when the first request sent by the first user end is obtained, the target playback URL in the first request can be obtained, the token parameter corresponding to the default name is extracted from the target playback URL, and the validity of the token is verified using preset verification logic (such as key management service (Key Management Service, KMS), check token signature, etc.).

[0078] The m3u8 format is an extended version of the M3U (Moving Picture Experts Group Audio Layer 3 Uniform Resource Locator) file, which adds support for UTF-8 character encoding and can be applied to HLS technology. HLS is a streaming media transmission protocol based on the Hypertext Transfer Protocol (HTTP), which transmits media content by dividing it into smaller fragments and indexing and managing it through m3u8 files. The m3u8 format is suitable for adaptive bit rate playback, and has advantages such as cross-platform support and real-time performance. According to the above implementation method, the video file in the m3u8 format can be configured with corresponding security policies, and a video access scheme based on token authentication is implemented, which improves the security of video access.

[0079] In one embodiment, the second security policy may include: performing HLS encryption on the target video file, obtaining encrypted video file slices and m3u8 index files corresponding to the encrypted video file slices, the m3u8 index file including the URL of the encrypted video file slices and encryption information, the encryption information including the encryption algorithm and the key URL.

[0080] When the target authentication information is verified, returning the resource corresponding to the target video file to the first user terminal may specifically include:

[0081] When the token verification passes, the m3u8 index file is returned to the first user terminal.

[0082] In the above implementation, the video file slices may be TS (Transport Stream) slices, which may represent a plurality of small segments obtained by cutting the audio and video streams according to the MPEG2-TS format.

[0083] In one example, after the video playback platform performs HLS encryption on the target video file, the original m3u8 file can be downloaded from the source station and cached. Then, the #EXT-X-KEY tag of the original m3u8 file can be rewritten to increase the above-mentioned encryption information to obtain the m3u8 index file. The encryption information may include an encryption algorithm and a key URL. Exemplary, the encryption information may also include authentication parameters. When the token is verified, the m3u8 index file can be returned to the first user terminal. Accordingly, after the first user terminal receives the m3u8 index file, the m3u8 index file can be parsed to obtain the encryption algorithm and the key URL; then the corresponding address can be accessed according to the key URL to obtain the key; then the encrypted video file slice can be obtained based on the URL of the video file slice; the video file slice is decrypted according to the key and the encryption algorithm to play the target video file.

[0084] According to the above implementation, the video file slices can be encrypted and the video file slices and the encryption information can be kept separately. In this way, even if the user illegally obtains the video file slices, it cannot be decrypted and played, which is conducive to protecting the copyright of the video content and further improving the security of video access.

[0085] It is understandable that, when the storage information of the target video file includes cos storage, and the format information of the target video file includes m3u8 format, the target authentication information may include the above-mentioned first target authentication information and the second target authentication information. According to the embodiment of the present application, the corresponding security policy can also be configured for other classification information of the video file. Therefore, the security policy described in the embodiment of the present application is also not limited to the first security policy and the second security policy described above.

[0086] In one embodiment, in response to the second request of the first user terminal, before obtaining the target classification information, the method may further include:

[0087] The target video file uploaded by the second user terminal and the target classification information corresponding to the target video file are obtained.

[0088] Store target video files and target classification information.

[0089] According to the above implementation, the second user terminal can set the classification information of the video file by itself when uploading the video file. In this way, the security policy of video access can be flexibly configured according to the security requirements of the video file uploader for the video file, thereby improving the flexibility of video access.

[0090] For ease of understanding, based on the above-mentioned various embodiments, the information processing method of the embodiment of the present application is described below by taking the scheme of performing video access when the storage information of the target video file includes cos storage and the format information of the target video file includes the m3u8 format as an example. It can be understood that this example is only for explaining the embodiment of the present application and does not limit the embodiment of the present application.

[0091] Exemplary, when the video upload user uploads the target video file, the target video file can be set to be uploaded to the cos storage bucket. During the upload process or after uploading, it can be set to use an encryption service (such as KMS) to encrypt the target video file and generate encrypted video file slices (such as TS files). Then the m3u8 index file can be generated according to the encrypted video file slices. The m3u8 index file includes the URL and encryption information of the encrypted video file slices, and the encryption information includes an encryption algorithm and a key URL. The decryption key can be safely stored in the key service.

[0092] Before the user terminal requests video playback, it can request the video playback platform to obtain the playback URL of the target video file. After receiving the request, the video playback platform can obtain the classification information of the target video file. Based on the classification information of the target video, it can be determined that the target security policy includes a first security policy and a second security policy. Then, the cos storage information of the target video can be obtained, and a pre-signed URL is generated according to the cos storage information. A parameter is appended to the end of the key URL in the m3u8 index file, and the parameter value carried by the user is determined based on the user request to generate a token parameter. The pre-signed URL and token parameters are spliced ​​with the URL of the target video file to obtain the target playback URL, and returned to the user terminal. Accordingly, the video playback platform can store the information of the pre-signed URL and token for verification of the pre-signed URL and token.

[0093] Then, the user terminal can send a video playback request to the video playback platform, and the request carries the target playback URL. After the video playback platform receives the request, it can determine that the security policy corresponding to the request is the first security policy and the second security policy according to the classification information of the target video file, and call the verification rules of the first security policy and the second security policy to verify the pre-signed URL and token in the target playback URL. When both the pre-signed URL and the token are verified, the video playback platform can return the m3u8 index file to the user terminal. Correspondingly, after the first user terminal receives the m3u8 index file, the m3u8 index file can be parsed to obtain the encryption algorithm and the key URL. Subsequently, the corresponding address can be accessed according to the key URL to request a decryption key from the key service. Then, the encrypted video file slices can be obtained based on the URL of the video file slices according to the video file slice sequence specified in the m3u8 index file. The video file slices are decrypted according to the key and the encryption algorithm to play the target video file through the video player of the user terminal.

[0094] Throughout the entire process, the video playback platform can ensure that only authorized users can access video content through identity verification, permission verification and other measures. For example, when a client requests an m3u8 index file or a decryption key, the server will verify the client's identity and permissions, and will only provide services after the verification is passed. In this way, the security of video content during transmission and storage can be improved.

[0095] In one embodiment, the information processing method provided in the above embodiment can be implemented based on the internal modules of the video playback platform. Exemplarily, the internal modules may include a video classification module, a cos data access security module, an HLS encryption and decryption module, and a security logic control module.

[0096] The video classification module can provide the function of video classification, and specifically can include a video classification information setting unit and a video classification information query unit. The video classification information setting unit can support setting the video format information and the video storage information. The video classification information query unit can support querying the classification information of the video.

[0097] The cos data access security module can provide the functions of COS pre-signed URL and signature verification. You need to first set cos to private read and write. The cos data access security module can include a pre-signed URL generation unit and a pre-signed URL verification unit. The pre-signed URL generation unit can integrate the SDK of the cos platform, and can generate a signature carrying identity information based on the bucket, cos file URL, etc., and splice it behind the object URL for temporary access by users. The generated URL is time-limited, and the playback link will become invalid after expiration. The timeliness is configurable. The function of the pre-signed URL verification unit is actually implemented by the cos platform, which can support the verification of the correctness of the URL signature.

[0098] The HLS encryption and decryption module can provide the function of encrypting and decrypting video content under the HLS protocol. The video content under the HLS protocol can be composed of an m3u8 index file and a TS slice, and the #EXT-X-KEY tag of the m3u8 index file can add encryption information. The HLS encryption and decryption module may include a token generation and verification unit, an m3u8 file rewriting unit, and a key encryption and decryption processing unit. The token generation and verification unit can generate a token through a timestamp, a private key, and an AES encryption algorithm; it can also support verification of the legitimacy of the token. The m3u8 file rewriting unit can support dynamic rewriting of the #EXT-X-KEY tag of the m3u8 index file to obtain the key for decrypting the TS slice. The key encryption and decryption processing unit can use the RSA algorithm to encrypt and decrypt the key used to decrypt the TS slice.

[0099] The security logic control module can provide the logic control function of the video security mechanism, which may include a security policy selection unit and a security check judgment unit. The security policy selection unit can query the classification information of the video from the video classification information query unit to determine the corresponding security policy. And instruct the corresponding security policy module (cos data access security and / or HLS encryption and decryption module) to generate a playback link and verification logic. The security check judgment unit can determine whether to release the user's access request based on the verification result of the security policy module.

[0100] As an example, based on the information processing method of the embodiment of the present application, the process of a user uploading and playing a video using a video playback platform may include the following steps S210 to S260.

[0101] S210, the video upload user sets the classification information of the video file and uploads the video file to the video playback platform.

[0102] S220, the video playback platform completes the processes of transcoding and storing the video file.

[0103] S230, when the video playback platform receives the link acquisition request from the on-demand user terminal, it generates a playback link carrying authentication information according to the security policy corresponding to the video classification information and returns it to the on-demand user terminal.

[0104] S240: The video-on-demand user terminal sends a playback link carrying authentication information to the video playback platform to initiate a playback request.

[0105] S250, the video playback platform selects a corresponding security policy module to verify the authentication information according to the security policy corresponding to the video classification information.

[0106] S260: The video playback platform decides to approve or reject the playback request of the on-demand user terminal according to the verification result.

[0107] Based on the information processing method provided in the above embodiments, the present application also provides a specific implementation of the information processing device. Please refer to the following embodiments.

[0108] See first Figure 2 The information processing device 200 provided in the embodiment of the present application includes a first acquisition module 201, a first determination module 202, a verification module 203 and a first return module 204.

[0109] The first acquisition module 201 is used to obtain a first request sent by a first user terminal, the first request is used to request access to a target video file, the first request includes a target playback uniform resource location system URL, the target playback URL includes target authentication information and the URL of the target video file, and the target playback URL is pre-acquired by the first user terminal from a video playback platform.

[0110] The first acquisition module 201 is further used to acquire target classification information, where the target classification information includes storage information and format information of the target video file.

[0111] The first determination module 202 is used to determine the target security policy corresponding to the target classification information according to the preset correspondence between the classification information and the security policy.

[0112] The verification module 203 is used to verify the target authentication information according to the verification rules corresponding to the target security policy.

[0113] The first returning module 204 is used to return the resource corresponding to the target video file to the first user terminal when the target authentication information is verified.

[0114] The information processing device of the embodiment of the present application can obtain a first request sent by a first user terminal. The first request is used to request access to a target video file. The first request includes a target playback URL obtained in advance from a video playback platform by the first user terminal. The target playback URL includes target authentication information and the URL of the target video file. Then, the target classification information is obtained. The target classification information includes storage information and format information of the target video file. Then, according to the correspondence between the preset classification information and the security policy, the target security policy corresponding to the target classification information is determined. According to the verification rules corresponding to the target security policy, the target authentication information is verified. When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal. In this way, different authentication schemes can be adopted according to the classification information of the video file, so as to adapt to the needs of different scenarios and improve the security of video access. In addition, the embodiment of the present application associates the classification information of the video with the security policy, adopts different security policies for video files of different classifications, and is also conducive to the dynamic expansion of the security policy and improves the flexibility of the security policy configuration.

[0115] In one embodiment, the apparatus may further include:

[0116] The second acquisition module is used to acquire target classification information in response to a second request from the first user terminal before acquiring the first request sent by the first user terminal, where the second request is used to acquire a playback URL of a target video file.

[0117] The second determination module is further used to determine the target security policy corresponding to the target classification information according to the preset correspondence between the classification information and the security policy.

[0118] The generation module is used to generate target authentication information corresponding to the target security policy.

[0119] The combination module combines the target authentication information with the URL of the target video file to obtain the target playback URL.

[0120] The second returning module is used to return the target playback URL to the first user terminal, so that the first user terminal can access the target video file through the target playback URL.

[0121] In one embodiment, the target security policy may include a first security policy, and the first security policy may be a security policy corresponding to a case where the storage information of the target video file includes cos storage.

[0122] The generation module can be specifically used for: when the target security policy includes the first security policy, generating the first target authentication information according to the cos storage information of the target video file, the first target authentication information includes the pre-signed URL, and the pre-signed URL includes the preset URL expiration information.

[0123] In one embodiment, the target security policy may include a second security policy, where the second security policy is a security policy that may correspond when the format information of the target video file includes an m3u8 format.

[0124] The generation module can be specifically used to: generate second target authentication information when the target security policy includes the second security policy, and the second target authentication information includes a token corresponding to the second request.

[0125] In one embodiment, the second security policy may include: performing dynamic bitrate adaptive technology HLS encryption on the target video file to obtain encrypted video file slices and m3u8 index files corresponding to the encrypted video file slices, the m3u8 index file including the URL of the encrypted video file slices and encryption information, the encryption information including the encryption algorithm and the key URL.

[0126] The first return module can be specifically used to return the m3u8 index file to the first user terminal when the token verification passes.

[0127] In one embodiment, the device may further include:

[0128] The third acquisition module is used to acquire the target video file uploaded by the second user terminal and the target classification information corresponding to the target video file before acquiring the target classification information in response to the second request of the first user terminal.

[0129] The storage module is used to store target video files and target classification information.

[0130] Each module of the information processing device provided in the embodiment of the present application can realize Figure 1 The functions of each step of the information processing method are provided, and the corresponding technical effects can be achieved. For the sake of concise description, they will not be repeated here.

[0131] Figure 3 A schematic diagram of the hardware structure of an information processing device provided in an embodiment of the present application is shown.

[0132] The information processing device may include a processor 301 and a memory 302 storing computer program instructions.

[0133] Specifically, the processor 301 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0134] The memory 302 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 302 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 302 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 302 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 302 is a non-volatile solid-state memory.

[0135] The memory may include read-only memory (ROM), random access memory (RAM), magnetic disk storage media devices, optical storage media devices, flash memory devices, electrical, optical or other physical / tangible memory storage devices. Thus, typically, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to an aspect of the present disclosure.

[0136] The processor 301 implements any one of the information processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 302 .

[0137] In one example, the information processing device may further include a communication interface 303 and a bus 310. Figure 3 As shown, the processor 301, the memory 302, and the communication interface 303 are connected via a bus 310 and communicate with each other.

[0138] The communication interface 303 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0139] Bus 310 includes hardware, software or both, and the parts of online data flow billing equipment are coupled to each other. For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industrial standard architecture (EISA) bus, front-end bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 310 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the present application considers any suitable bus or interconnection.

[0140] The information processing device can execute the information processing method in the embodiment of the present application, thereby realizing the combination Figure 1 and Figure 2 The information processing method and device described herein. The information processing method in the above embodiments can be implemented by providing a computer storage medium in the present application embodiment. The computer storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the information processing methods in the above embodiments is implemented.

[0141] An embodiment of the present application also provides a computer program product, including a computer program, which implements any one of the information processing methods in the above embodiments when the computer program is processed and executed.

[0142] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0143] The functional blocks shown in the above-described block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present application are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0144] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0145] Aspects of the present disclosure are described above with reference to the flowchart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0146] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. An information processing method, characterized in that: include: Obtaining a first request sent by a first user terminal, the first request being used to request access to a target video file, the first request including a target playback uniform resource location system URL, the target playback URL including target authentication information and the URL of the target video file, the target playback URL being obtained in advance by the first user terminal from a video playback platform; Acquire target classification information, wherein the target classification information includes storage information and format information of the target video file; Determine the target security policy corresponding to the target classification information according to the preset correspondence between the classification information and the security policy; Verifying the target authentication information according to the verification rules corresponding to the target security policy; When the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal.

2. The information processing method according to claim 1, characterized in that: Before obtaining the first request sent by the first user terminal, the method further includes: In response to a second request from the first user terminal, obtaining the target classification information, wherein the second request is used to obtain the target playback URL; Determine the target security policy corresponding to the target classification information according to the preset correspondence between the classification information and the security policy; Generate target authentication information corresponding to the target security policy; Combine the target authentication information with the URL of the target video file to obtain the target playback URL; The target playback URL is returned to the first user terminal.

3. The information processing method according to claim 2, characterized in that: The target security policy includes a first security policy, which is a security policy corresponding to a case where the storage information of the target video file includes object cos storage; The generating target authentication information corresponding to the target security policy includes: In the case where the target security policy includes the first security policy, first target authentication information is generated according to the cos storage information of the target video file, the first target authentication information includes a pre-signed URL, and the pre-signed URL includes preset URL expiration information.

4. The information processing method according to claim 2, characterized in that: The target security policy includes a second security policy, where the second security policy is a security policy corresponding to a case where the format information of the target video file includes an m3u8 format; The generating target authentication information corresponding to the target security policy includes: In a case where the target security policy includes the second security policy, second target authentication information is generated, where the second target authentication information includes a token corresponding to the second request.

5. The information processing method according to claim 4, characterized in that: The second security strategy includes: performing HLS encryption of the target video file with dynamic bit rate adaptation technology to obtain encrypted video file slices and m3u8 index files corresponding to the encrypted video file slices, wherein the m3u8 index file includes the URL of the encrypted video file slices and encryption information, and the encryption information includes an encryption algorithm and a key URL; When the target authentication information is verified, returning the resource corresponding to the target video file to the first user terminal includes: When the token verification passes, the m3u8 index file is returned to the first client.

6. The information processing method according to any one of claims 2 to 5, characterized in that: Before obtaining the target classification information in response to the second request of the first user terminal, the method further includes: Acquire a target video file uploaded by a second user terminal and target classification information corresponding to the target video file; The target video file and the target classification information are stored.

7. An information processing device, characterized in that: include: An acquisition module, used to acquire a first request sent by a first user terminal, the first request being used to request access to a target video file, the first request including a target playback uniform resource location system URL, the target playback URL including target authentication information and the URL of the target video file, the target playback URL being acquired in advance by the first user terminal from a video playback platform; The acquisition module is further used to acquire target classification information, wherein the target classification information includes storage information and format information of the target video file; A determination module, used to determine the target security policy corresponding to the target classification information according to the preset correspondence between the classification information and the security policy; A verification module, used to verify the target authentication information according to the verification rules corresponding to the target security policy; The return module is used to return the resource corresponding to the target video file to the first user terminal when the target authentication information is verified.

8. An information processing device, characterized in that: The device comprises: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the information processing method according to any one of claims 1 to 6 is implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the information processing method according to any one of claims 1 to 6 is implemented.

10. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the information processing method as described in any one of claims 1 to 6.

Images