Information processing method, apparatus, device, storage medium, and program product

Abstract

The application discloses an information processing method, device and equipment, a storage medium and a program product, and belongs to the technical field of safe access. The method comprises the following steps: acquiring a first request sent by a first user end, wherein the first request comprises a target playing URL, the target playing URL comprises target authentication information and the URL of a target video file; acquiring target classification information, wherein the target classification information comprises storage information and format information of the target video file; determining a target security policy corresponding to the target classification information according to a preset corresponding relationship between the classification information and the security policy; checking the target authentication information according to a check rule corresponding to the target security policy; and returning resources corresponding to the target video file to the first user end in the case that the target authentication information passes the check. The embodiments of the application can adapt to various video on demand scenes, and improve the security and flexibility of video access.

Description

Technical Field

[0001] This application belongs to the field of secure access technology, and in particular relates to an information processing method, apparatus, device, storage medium and program product. Background Technology

[0002] With the development of mobile internet technology, video-on-demand (VOD) systems are being used more and more widely. Compared with traditional streaming media, VOD systems offer a better user experience, but they also bring certain security issues.

[0003] In video-on-demand (VOD) scenarios, it is necessary to protect video copyrights and prevent unauthorized access, downloading, and distribution. Current VOD security solutions are typically designed for single-user VOD scenarios. However, as VOD applications become increasingly complex, existing security solutions are no longer sufficient to meet the demands of VOD. Summary of the Invention

[0004] This application provides an information processing method, apparatus, device, and computer storage medium that can adapt to various video-on-demand scenarios and improve the security and flexibility of video access.

[0005] In a first aspect, embodiments of this application provide an information processing method, including:

[0006] The system obtains a first request sent by the first user client. The first request is used to request access to the target video file. The first request includes the target playback uniform resource locator (URL). The target playback URL includes the target authentication information and the URL of the target video file. The target playback URL is obtained by the first user client from the video playback platform in advance.

[0007] Obtain target classification information, which includes the storage and format information of the target video file;

[0008] Based on the pre-defined correspondence between classification information and security policies, determine the target security policy corresponding to the target classification information;

[0009] Verify the target authentication information according to the verification rules corresponding to the target security policy;

[0010] If the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal.

[0011] In one alternative implementation, before obtaining the first request sent by the first user terminal, the method further includes:

[0012] In response to the second request from the first user, the target classification information is obtained. The second request is used to obtain the playback URL of the target video file.

[0013] Based on the pre-defined correspondence between classification information and security policies, determine the target security policy corresponding to the target classification information;

[0014] Generate target authentication information corresponding to the target security policy;

[0015] The target authentication information is combined with the URL of the target video file to obtain the target playback URL;

[0016] Return the target playback URL to the first user terminal so that the first user terminal can access the target video file through the target playback URL.

[0017] In one optional implementation, the target security policy includes a first security policy, which is the security policy corresponding to the case where the storage information of the target video file includes object (cloud object storage, cos) storage.

[0018] Generate target authentication information corresponding to the target security policy, including:

[0019] When the target security policy includes a first security policy, first target authentication information is generated based on the COS storage information of the target video file. The first target authentication information includes a pre-signed URL, which includes preset URL expiration information.

[0020] In one optional implementation, the target security policy includes a second security policy, which is the security policy corresponding to the case where the format information of the target video file includes the m3u8 format.

[0021] Generate target authentication information corresponding to the target security policy, including:

[0022] If the target security policy includes a second security policy, second target authentication information is generated, which includes the token corresponding to the second request.

[0023] In one optional implementation, the second security strategy includes: performing dynamic bitrate adaptive technology (HTTP Live Streaming, HLS) encryption on the target video file to obtain an encrypted video file slice and an m3u8 index file corresponding to the encrypted video file slice. The m3u8 index file includes the URL of the encrypted video file slice and encryption information, which includes the encryption algorithm and the key URL.

[0024] If the target authentication information passes verification, the resources corresponding to the target video file are returned to the first user client, including:

[0025] If the token verification is successful, an m3u8 index file is returned to the first client.

[0026] In one alternative implementation, before obtaining the target classification information in response to a second request from the first user terminal, the method further includes:

[0027] Obtain the target video file uploaded by the second user client and the target category information corresponding to the target video file;

[0028] Store the target video file and target classification information.

[0029] Secondly, embodiments of this application provide an information processing apparatus, including:

[0030] The acquisition module is used to acquire the first request sent by the first user terminal. The first request is used to request access to the target video file. The first request includes the target playback unified resource positioning system URL. The target playback URL includes the target authentication information and the URL of the target video file. The target playback URL is obtained by the first user terminal from the video playback platform in advance.

[0031] The acquisition module is also used to acquire target classification information, which includes the storage information and format information of the target video file;

[0032] The determination module is used to determine the target security policy corresponding to the target classification information according to the preset correspondence between classification information and security policies.

[0033] The verification module is used to verify the target authentication information according to the verification rules corresponding to the target security policy.

[0034] The return module is used to return the resources corresponding to the target video file to the first user terminal if the target authentication information is verified successfully.

[0035] Thirdly, embodiments of this application provide an information processing device, the device comprising:

[0036] A processor and a memory storing computer program instructions; an information processing method that implements any of the above when the processor executes the computer program instructions.

[0037] Fourthly, embodiments of this application provide a computer storage medium on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the information processing method described above is implemented.

[0038] Fifthly, embodiments of this application provide a computer program product in which instructions, when executed by a processor of an electronic device, enable the electronic device to perform any of the above-described information processing methods.

[0039] The information processing method, apparatus, device, and computer storage medium of this application embodiment can obtain a first request sent by a first user terminal. This first request requests access to a target video file. The first request includes a target playback URL pre-obtained by the first user terminal from a video playback platform. The target playback URL includes target authentication information and the URL of the target video file. Then, target classification information is obtained. This target classification information includes the storage information and format information of the target video file. Next, according to a preset correspondence between classification information and security policies, a target security policy corresponding to the target classification information is determined. The target authentication information is verified according to the verification rules corresponding to the target security policy. If the target authentication information passes verification, the resource corresponding to the target video file is returned to the first user terminal. In this way, different authentication schemes can be adopted according to the classification information of the video file, thereby adapting to the needs of different scenarios and improving the security of video access. Furthermore, this application embodiment associates video classification information with security policies, adopting different security policies for different categories of video files, which also facilitates the dynamic expansion of security policies and improves the flexibility of security policy configuration. Attached Figure Description

[0040] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments of this application will be briefly introduced below. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0041] Figure 1 This is a flowchart illustrating an information processing method provided in one embodiment of this application;

[0042] Figure 2 This is a schematic diagram of the structure of an information processing apparatus provided in another embodiment of this application;

[0043] Figure 3 This is a schematic diagram of the structure of an information processing device provided in another embodiment of this application. Detailed Implementation

[0044] The features and exemplary embodiments of various aspects of this application will be described in detail below. To make the objectives, technical solutions, and advantages of this application clearer, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain this application and not to limit it. For those skilled in the art, this application can be implemented without some of these specific details. The following description of the embodiments is merely to provide a better understanding of this application by illustrating examples.

[0045] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes said element.

[0046] It should be noted that the acquisition, storage, use, and processing of data in this application embodiment all comply with the relevant provisions of national laws and regulations.

[0047] It should be noted that in the embodiments of this application, certain software, components, models and other existing solutions in the industry may be mentioned. These should be regarded as exemplary and are only intended to illustrate the feasibility of implementing the technical solution of this application. However, it does not mean that the applicant has used or necessarily used the solution.

[0048] In video-on-demand scenarios, it is necessary to protect video copyrights and prevent videos from being illegally obtained, downloaded, and distributed. Current video-on-demand security solutions are typically designed for single-demand scenarios.

[0049] However, with the development of video-on-demand (VOD), its application scenarios have become increasingly complex. For example, VOD can be played on both intranet and internet networks; it can include scenarios with and without a Content Delivery Network (CDN). Different videos may also have different security requirements; for example, some videos are completely public, while others are partially public. Therefore, security solutions designed for a single VOD scenario are insufficient to meet the current needs of VOD.

[0050] To address the problems in the prior art, embodiments of this application provide an information processing method, apparatus, device, and computer storage medium.

[0051] The information processing method provided in the embodiments of this application will be described below with reference to the accompanying drawings.

[0052] Figure 1 A flowchart illustrating an embodiment of the information processing method provided in this application is shown. Figure 1 As shown, the method may include the following steps S110 to S150.

[0053] S110, Obtain the first request sent by the first user terminal. The first request is used to request access to the target video file. The first request includes the target playback URL. The target playback URL includes the target authentication information and the URL of the target video file. The target playback URL is obtained by the first user terminal from the video playback platform in advance.

[0054] For example, if a first user needs to access a target video file, it can first obtain the target playback URL from the video playback platform. Before returning the target playback URL to the first user, the video playback platform can also verify the identity of the first user. If the verification is successful, the platform will then return the target playback URL to the first user.

[0055] S120, Obtain target classification information, which includes the storage information and format information of the target video file.

[0056] S130, determine the target security policy corresponding to the target classification information according to the preset correspondence between classification information and security policy.

[0057] S140, verify the target authentication information according to the verification rules corresponding to the target security policy.

[0058] S150: If the target authentication information is verified, return the resource corresponding to the target video file to the first user terminal.

[0059] The information processing method of this application embodiment can obtain a first request sent by a first user terminal. This first request requests access to a target video file. The first request includes a target playback URL obtained by the first user terminal from a video playback platform beforehand. The target playback URL includes target authentication information and the URL of the target video file. Then, target classification information is obtained. This target classification information includes the storage information and format information of the target video file. Next, according to a preset correspondence between classification information and security policies, a target security policy corresponding to the target classification information is determined. The target authentication information is verified according to the verification rules corresponding to the target security policy. If the target authentication information passes verification, the resource corresponding to the target video file is returned to the first user terminal. In this way, different authentication schemes can be adopted according to the classification information of the video file, thereby adapting to the needs of different scenarios and improving the security of video access. Furthermore, this application embodiment associates video classification information with security policies, adopting different security policies for different categories of video files, which also facilitates the dynamic expansion of security policies and improves the flexibility of security policy configuration.

[0060] In one embodiment, before obtaining the first request sent by the first user client, the method may further include:

[0061] In response to the second request from the first user, the target category information is obtained. The second request is used to obtain the target playback URL.

[0062] Based on the pre-defined correspondence between classification information and security policies, determine the target security policy corresponding to the target classification information.

[0063] Generate target authentication information corresponding to the target security policy.

[0064] The target authentication information is combined with the URL of the target video file to obtain the target playback URL.

[0065] Return the target playback URL to the first user client.

[0066] According to the above implementation method, the target security policy corresponding to the target classification information can be determined according to the preset correspondence between classification information and security policies, thereby generating corresponding target authentication information and returning it to the first user terminal. In this way, when the first user terminal needs to access the target video file, its permissions can be authenticated by using the target authentication information. Thus, different security policies can be adopted for different video-on-demand scenarios based on different classification information, which helps to improve the security and flexibility of video access.

[0067] In one embodiment, the target security policy may include a first security policy, which may be the security policy corresponding to the case where the storage information of the target video file includes COS storage.

[0068] Generate target authentication information corresponding to the target security policy, which may specifically include:

[0069] When the target security policy includes a first security policy, first target authentication information is generated based on the COS storage information of the target video file. The first target authentication information includes a pre-signed URL, which includes preset URL expiration information.

[0070] Accordingly, the target authentication information is verified according to the verification rules corresponding to the target security policy. This verification may include verifying the correctness of the pre-signed URL. This verification process can be implemented by the COS platform. Specifically, the pre-signed URL can be sent to the COS platform for verification.

[0071] In the above embodiments, the storage information of the target video file includes COS storage, which indicates that the target video file is stored in a COS bucket. COS storage information may include the bucket, COS file URL, account credentials, etc. The first target authentication information can be generated using the COS platform software development kit (SDK) integrated into the video playback platform. The URL expiration information can be adjusted as needed, and this expiration is usually short. By appending the first target authentication information to the URL of the target video file, the target playback URL is obtained. This enables private read / write access to COS. The pre-signed URL in the first target authentication information includes preset URL expiration information, and the generated target playback URL also has a corresponding expiration time. Once the pre-signed URL expires, the target playback URL also becomes invalid. In some examples, when the target video file is stored in a COS bucket, the access log recording function of the COS bucket can be enabled to monitor the access status of the target video file. After the video playback platform returns the resource corresponding to the target video file to the first user client, a corresponding access log can be generated. In some examples, the information processing method may also include: auditing the access log at a preset time. By regularly auditing access logs, it is possible to check for abnormal access behavior, promptly identify and address potential security risks, thereby further improving the security of video access.

[0072] According to the above implementation method, when the storage information of the target video file includes COS storage, access requests for the target video can be verified through a pre-signed URL. This pre-signed URL has a time limit, which is beneficial for achieving temporary and rapid video resource sharing.

[0073] In one embodiment, the target security policy may include a second security policy, which may be the security policy corresponding to the case where the format information of the target video file includes the m3u8 format.

[0074] Generate target authentication information corresponding to the target security policy, which may specifically include:

[0075] If the target security policy includes a second security policy, second target authentication information is generated, which includes the token corresponding to the second request.

[0076] Accordingly, verifying the target authentication information according to the verification rules corresponding to the target security policy may include: verifying the validity of the token. For example, after the token corresponding to the second request, the video playback platform may also record the token's expiration date. Verifying the target authentication information may include: verifying the validity of the token.

[0077] In the above embodiments, the token can be generated using methods known in the art. For example, the token can be generated using a timestamp, a private key, and the Advanced Encryption Standard (AES) algorithm. In one example, token authentication information can be embedded in an m3u8 index file. Specifically, a parameter can be appended to the end of the key URL in the m3u8 index file, the value of which is carried by the user request. For example, the parameter name is a default name. When a first request is received from the first user, the target playback URL in the first request can be obtained, the token parameter corresponding to the default name can be extracted from the target playback URL, and the validity of the token can be verified using preset verification logic (e.g., Key Management Service (KMS), checking the token signature, etc.).

[0078] The m3u8 format is an extended version of the M3U (Moving Picture Experts Group Audio Layer 3 Uniform Resource Locator) file, adding support for UTF-8 character encoding and allowing its application in HLS technology. HLS is a streaming media transmission protocol based on the Hypertext Transfer Protocol (HTTP). It transmits media content by segmenting it into smaller fragments and indexes and manages them using m3u8 files. The m3u8 format is suitable for adaptive bitrate playback and offers advantages such as cross-platform support and real-time performance. Based on the above implementation method, appropriate security policies can be configured for m3u8 format video files to implement a token-based video access scheme, thereby improving the security of video access.

[0079] In one embodiment, the second security strategy may include: performing HLS encryption on the target video file to obtain an encrypted video file slice and an m3u8 index file corresponding to the encrypted video file slice. The m3u8 index file includes the URL of the encrypted video file slice and encryption information, including the encryption algorithm and the key URL.

[0080] If the target authentication information is verified successfully, the resource corresponding to the target video file is returned to the first user terminal, which may specifically include:

[0081] If the token verification is successful, an m3u8 index file is returned to the first client.

[0082] In the above embodiments, the video file slice can be a TS (Transport Stream) slice, which can represent multiple small segments cut from the audio and video stream according to the MPEG2-TS format.

[0083] In one example, after the video playback platform performs HLS encryption on the target video file, it can download the original m3u8 file from the origin server and cache it. Then, the #EXT-X-KEY tag of the original m3u8 file can be rewritten to add the aforementioned encryption information, resulting in an m3u8 index file. The encryption information may include the encryption algorithm and key URL. For example, the encryption information may also include authentication parameters. If the token verification passes, the m3u8 index file can be returned to the first user client. Accordingly, after receiving the m3u8 index file, the first user client can parse it to obtain the encryption algorithm and key URL; subsequently, it can access the corresponding address based on the key URL to obtain the key; then, it can obtain the encrypted video file slice based on the URL of the video file slice; and finally, it can decrypt the video file slice according to the key and encryption algorithm to play the target video file.

[0084] According to the above implementation method, video file segments can be encrypted and stored separately from the encryption information. In this way, even if a user illegally obtains a video file segment, they will not be able to decrypt and play it, which helps protect the copyright of the video content and further enhances the security of video access.

[0085] It is understood that when the storage information of the target video file includes COS storage and the format information of the target video file includes m3u8 format, the target authentication information may include the aforementioned first target authentication information and the second target authentication information. According to embodiments of this application, corresponding security policies can also be configured for other classification information of the video file. Therefore, the security policies described in embodiments of this application are not limited to the first and second security policies mentioned above.

[0086] In one embodiment, before obtaining the target classification information in response to a second request from the first user, the method may further include:

[0087] Obtain the target video file uploaded by the second user client and the target category information corresponding to the target video file.

[0088] Store the target video file and target classification information.

[0089] According to the above implementation method, when uploading video files, the second user client can set the category information of the video files themselves. This allows for flexible configuration of video access security policies based on the security needs of the video file uploader, improving the flexibility of video access.

[0090] For ease of understanding, the following description, based on the various embodiments described above, takes a video access scheme where the target video file's storage information includes COS storage and the target video file's format information includes m3u8 format as an example to illustrate the information processing method of this application embodiment. It should be understood that this example is merely for explaining the embodiments of this application and does not constitute a limitation on the embodiments of this application.

[0091] For example, when uploading a target video file, a user can configure the upload to a COS storage bucket. During or after the upload, the user can configure an encryption service (such as KMS) to encrypt the target video file, generating encrypted video file slices (such as TS files). An m3u8 index file can then be generated based on the encrypted video file slices. The m3u8 index file includes the URL of the encrypted video file slice and encryption information, including the encryption algorithm and key URL. The decryption key can be securely stored in a key service.

[0092] Before a user requests video playback, they can request the playback URL of the target video file from the video playback platform. Upon receiving this request, the video playback platform can obtain the classification information of the target video file. Based on the classification information, it can determine that the target security policy includes a first security policy and a second security policy. Next, it can obtain the target video's COS storage information, generate a pre-signed URL based on the COS storage information, append a parameter to the end of the key URL in the m3u8 index file, determine the parameter value carried by the user based on the user request, and generate a token parameter. The pre-signed URL and token parameter are concatenated with the URL of the target video file to obtain the target playback URL, which is then returned to the user. Correspondingly, the video playback platform can store the pre-signed URL and token information for verification purposes.

[0093] Next, the user client can send a video playback request to the video playback platform, carrying the target playback URL. Upon receiving the request, the video playback platform can determine the corresponding security policy (first security policy or second security policy) based on the target video file's classification information, and then apply the verification rules of the first and second security policies to verify the pre-signed URL and token in the target playback URL. If both the pre-signed URL and token pass verification, the video playback platform can return an m3u8 index file to the user client. Accordingly, after receiving the m3u8 index file, the first user client can parse it to obtain the encryption algorithm and key URL. Then, it can access the corresponding address based on the key URL to request the decryption key from the key service. Next, it can obtain the encrypted video file slices based on the video file slice URLs, according to the video file slice order specified in the m3u8 index file. Finally, it decrypts the video file slices using the key and encryption algorithm to play the target video file through the user client's video player.

[0094] Throughout the process, the video playback platform can ensure that only authorized users can access the video content through measures such as identity verification and permission checks. For example, when a client requests an m3u8 index file or decryption key, the server verifies the client's identity and permissions, and only provides service after successful verification. This enhances the security of video content during transmission and storage.

[0095] In one embodiment, the information processing method provided in the above embodiments can be implemented based on the internal modules of a video playback platform. For example, the internal modules may include a video classification module, a COS data access security module, an HLS encryption / decryption module, and a security logic control module.

[0096] The video classification module provides video classification functionality, specifically including a video classification information setting unit and a video classification information query unit. The video classification information setting unit allows users to set video format and storage information. The video classification information query unit allows users to query video classification information.

[0097] The COS data access security module provides COS pre-signed URLs and signature verification functionality, requiring COS to be configured as a private read / write environment first. The COS data access security module can include a pre-signed URL generation unit and a pre-signed URL verification unit. The pre-signed URL generation unit can integrate the COS platform's SDK, generating a signature carrying identity information based on buckets, COS file URLs, etc., and appending it to the object URL for temporary user access. The generated URL has an expiration date; the playback link becomes invalid after expiration, and this expiration date is configurable. The pre-signed URL verification unit's functionality is actually implemented by the COS platform and supports verifying the correctness of the URL signature.

[0098] The HLS encryption / decryption module provides encryption and decryption capabilities for video content under the HLS protocol. HLS video content can consist of an m3u8 index file and TS segments. The #EXT-X-KEY tag in the m3u8 index file can add encrypted information. The HLS encryption / decryption module may include a token generation and verification unit, an m3u8 file rewriting unit, and a key encryption / decryption processing unit. The token generation and verification unit can generate a token using a timestamp, private key, and AES encryption algorithm; it can also verify the token's validity. The m3u8 file rewriting unit can dynamically rewrite the #EXT-X-KEY tag in the m3u8 index file to obtain the key for decrypting TS segments. The key encryption / decryption processing unit can use the RSA algorithm to encrypt and decrypt the key used to decrypt TS segments.

[0099] The security logic control module provides logical control functions for the video security mechanism, and may include a security policy selection unit and a security check and judgment unit. The security policy selection unit can query the video classification information from the video classification information query unit to determine the corresponding security policy. It then instructs the corresponding security policy module (COS data access security and / or HLS encryption / decryption module) to generate the playback link and verification logic. The security check and judgment unit can determine whether to allow the user's access request based on the verification results from the security policy module.

[0100] As an example, based on the information processing method of this application embodiment, the process of a user uploading and playing videos using a video playback platform may include the following steps S210 to S260.

[0101] S210, the video uploader sets the category information for the video file and uploads the video file to the video playback platform.

[0102] S220, the video playback platform completes the transcoding and storage processes of video files.

[0103] S230: Upon receiving a link retrieval request from a user on demand, the video playback platform generates a playback link carrying authentication information and returns it to the user on demand, based on the security policy corresponding to the video category information.

[0104] S240, the on-demand user sends a playback link carrying authentication information to the video playback platform to initiate a playback request.

[0105] S250: The video playback platform selects the corresponding security policy module to verify the authentication information based on the security policy corresponding to the video classification information.

[0106] S260, the video playback platform decides whether to allow or reject the playback request from the user's client based on the verification result.

[0107] Based on the information processing method provided in the above embodiments, this application also provides specific implementations of the information processing apparatus. Please refer to the following embodiments.

[0108] First see Figure 2 The information processing device 200 provided in this application embodiment includes a first acquisition module 201, a first determination module 202, a verification module 203 and a first return module 204.

[0109] The first acquisition module 201 is used to acquire a first request sent by the first user terminal. The first request is used to request access to the target video file. The first request includes the target playback unified resource positioning system URL. The target playback URL includes target authentication information and the URL of the target video file. The target playback URL is obtained by the first user terminal from the video playback platform in advance.

[0110] The first acquisition module 201 is also used to acquire target classification information, which includes the storage information and format information of the target video file.

[0111] The first determining module 202 is used to determine the target security policy corresponding to the target classification information according to the preset correspondence between classification information and security policy.

[0112] The verification module 203 is used to verify the target authentication information according to the verification rules corresponding to the target security policy.

[0113] The first return module 204 is used to return the resources corresponding to the target video file to the first user terminal if the target authentication information is verified.

[0114] The information processing apparatus of this application embodiment can acquire a first request sent by a first user terminal. This first request requests access to a target video file. The first request includes a target playback URL pre-obtained by the first user terminal from a video playback platform. The target playback URL includes target authentication information and the URL of the target video file. Then, target classification information is acquired. This target classification information includes the storage information and format information of the target video file. Next, according to a preset correspondence between classification information and security policies, a target security policy corresponding to the target classification information is determined. The target authentication information is verified according to the verification rules corresponding to the target security policy. If the target authentication information passes verification, the resource corresponding to the target video file is returned to the first user terminal. In this way, different authentication schemes can be adopted according to the classification information of the video file, thereby adapting to the needs of different scenarios and improving the security of video access. Furthermore, this application embodiment associates video classification information with security policies, adopting different security policies for different categories of video files, which also facilitates the dynamic expansion of security policies and improves the flexibility of security policy configuration.

[0115] In one embodiment, the apparatus may further include:

[0116] The second acquisition module is used to respond to the second request from the first user terminal before acquiring the first request sent by the first user terminal, and to acquire the target classification information. The second request is used to acquire the playback URL of the target video file.

[0117] The second determining module is also used to determine the target security policy corresponding to the target classification information according to the preset correspondence between classification information and security policy.

[0118] The generation module is used to generate target authentication information corresponding to the target security policy.

[0119] The combination module combines the target authentication information with the URL of the target video file to obtain the target playback URL.

[0120] The second return module is used to return the target playback URL to the first user terminal so that the first user terminal can access the target video file through the target playback URL.

[0121] In one embodiment, the target security policy may include a first security policy, which may be the security policy corresponding to the case where the storage information of the target video file includes COS storage.

[0122] Specifically, the generation module can be used to: generate first target authentication information based on the COS storage information of the target video file when the target security policy includes a first security policy. The first target authentication information includes a pre-signed URL, and the pre-signed URL includes preset URL expiration information.

[0123] In one embodiment, the target security policy may include a second security policy, which is a security policy that can be implemented if the target video file's format information includes the m3u8 format.

[0124] Specifically, the generation module can be used to: generate second target authentication information when the target security policy includes a second security policy, wherein the second target authentication information includes a token corresponding to the second request.

[0125] In one embodiment, the second security strategy may include: performing HLS encryption on the target video file to obtain encrypted video file slices and m3u8 index files corresponding to the encrypted video file slices. The m3u8 index files include the URL of the encrypted video file slices and encryption information, including the encryption algorithm and the key URL.

[0126] Specifically, the first return module can be used to return an m3u8 index file to the first client if the token verification is successful.

[0127] In one embodiment, the apparatus may further include:

[0128] The third acquisition module is used to acquire the target video file uploaded by the second user terminal and the target classification information corresponding to the target video file before acquiring the target classification information in response to the second request from the first user terminal.

[0129] The storage module is used to store the target video files and target classification information.

[0130] The various modules of the information processing device provided in the embodiments of this application can realize Figure 1 It provides the functions for each step of the information processing method and can achieve its corresponding technical effects. For the sake of brevity, it will not be described in detail here.

[0131] Figure 3 A schematic diagram of the hardware structure of the information processing device provided in an embodiment of this application is shown.

[0132] The information processing device may include a processor 301 and a memory 302 storing computer program instructions.

[0133] Specifically, the processor 301 may include a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits that can be configured to implement the embodiments of this application.

[0134] Memory 302 may include mass storage for data or instructions. For example, and not limitingly, memory 302 may include a hard disk drive (HDD), floppy disk drive, flash memory, optical disk, magneto-optical disk, magnetic tape, or Universal Serial Bus (USB) drive, or a combination of two or more of these. Where appropriate, memory 302 may include removable or non-removable (or fixed) media. Where appropriate, memory 302 may be internal or external to the integrated gateway disaster recovery device. In a particular embodiment, memory 302 is non-volatile solid-state memory.

[0135] Memory may include read-only memory (ROM), random access memory (RAM), disk storage media devices, optical storage media devices, flash memory devices, and electrical, optical, or other physical / tangible memory storage devices. Therefore, typically, memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the methods according to one aspect of this disclosure.

[0136] The processor 301 implements any of the information processing methods described in the above embodiments by reading and executing computer program instructions stored in the memory 302.

[0137] In one example, the information processing device may further include a communication interface 303 and a bus 310. Wherein, for example... Figure 3 As shown, the processor 301, memory 302, and communication interface 303 are connected through bus 310 and complete communication with each other.

[0138] The communication interface 303 is mainly used to realize communication between various modules, devices, units and / or equipment in the embodiments of this application.

[0139] Bus 310 includes hardware, software, or both, that couples components of an online data traffic metering device together. For example, and not limitingly, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), HyperTransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an Infinite Bandwidth Interconnect, a Low Pin Count (LPC) bus, a memory bus, a Microchannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VLB) bus, or other suitable buses, or combinations of two or more of these. Where appropriate, bus 310 may include one or more buses. Although specific buses are described and illustrated in embodiments of this application, any suitable bus or interconnect is contemplated herein.

[0140] The information processing device can execute the information processing method in the embodiments of this application, thereby achieving the combination Figure 1 and Figure 2 The information processing methods and apparatus described herein. The information processing methods in the above embodiments can be implemented using a computer storage medium. This computer storage medium stores computer program instructions; when these computer program instructions are executed by a processor, they implement any of the information processing methods described above.

[0141] This application also provides a computer program product, including a computer program, which, when executed, implements any of the information processing methods described in the above embodiments.

[0142] It should be clarified that this application is not limited to the specific configurations and processes described above and shown in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of this application is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications, and additions, or change the order of steps, after understanding the spirit of this application.

[0143] The functional blocks shown in the above-described structural diagram can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application-specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, etc. When implemented in software, the elements of this application are programs or code segments used to perform the required tasks. Programs or code segments can be stored on a machine-readable medium or transmitted over a transmission medium or communication link via data signals carried on a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, radio frequency (RF) links, etc. Code segments can be downloaded via computer networks such as the Internet, intranets, etc.

[0144] It should also be noted that the exemplary embodiments mentioned in this application describe methods or systems based on a series of steps or apparatus. However, this application is not limited to the order of the above steps; that is, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.

[0145] The aspects of this disclosure have been described above with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this disclosure. It should be understood that each block in the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that these instructions, executable via the processor of the computer or other programmable data processing apparatus, enable the implementation of the functions / actions specified in one or more blocks of the flowchart illustrations and / or block diagrams. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field-programmable logic circuit. It is also understood that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can also be implemented by special-purpose hardware performing the specified functions or actions, or can be implemented by a combination of special-purpose hardware and computer instructions.

[0146] The above are merely specific embodiments of this application. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. It should be understood that the protection scope of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the protection scope of this application.

Claims

1. An information processing method, characterized in that, include: A first request sent by a first user terminal is obtained. The first request is used to request access to a target video file. The first request includes a target playback unified resource positioning system URL. The target playback URL includes target authentication information and the URL of the target video file. The playback URL is obtained by the first user terminal from the video playback platform in advance. Obtain target classification information, which includes the storage information and format information of the target video file; According to the preset correspondence between classification information and security policies, the target security policy corresponding to the target classification information is determined; wherein, the target security policy includes a first security policy corresponding to the storage information and / or a second security policy corresponding to the format information; The target authentication information is verified according to the verification rules corresponding to the target security policy. The verification rules include a first verification rule corresponding to the first security policy and a second verification rule corresponding to the second security policy. When the first security policy and the second security policy exist at the same time, the verification rules require that both the first verification rule and the second verification rule be satisfied. If the target authentication information is verified, the resource corresponding to the target video file is returned to the first user terminal; Before obtaining the first request sent by the first user terminal, the method further includes: In response to a second request from the first user, the classification information of the target video file is obtained, wherein the second request is used to obtain the target playback URL; Based on the preset correspondence between classification information and security policies, determine the target security policy corresponding to the classification information of the target video file; Generate target authentication information corresponding to the target security policy and the classification information of the target video file; The target authentication information is combined with the URL of the target video file to obtain the target playback URL; Return the target playback URL to the first user terminal.

2. The information processing method according to claim 1, characterized in that, The target security policy includes a first security policy, which is the security policy corresponding to the case where the storage information of the target video file includes object cos storage. The generation of target authentication information corresponding to the target security policy includes: When the target security policy includes the first security policy, first target authentication information is generated based on the COS storage information of the target video file. The first target authentication information includes a pre-signed URL, and the pre-signed URL includes preset URL expiration information.

3. The information processing method according to claim 1, characterized in that, The target security policy includes a second security policy, which is the security policy corresponding to the case where the format information of the target video file includes the m3u8 format. The generation of target authentication information corresponding to the target security policy includes: If the target security policy includes the second security policy, second target authentication information is generated, which includes the token corresponding to the second request.

4. The information processing method according to claim 3, characterized in that, The second security strategy includes: performing HLS encryption on the target video file to obtain an encrypted video file slice and an m3u8 index file corresponding to the encrypted video file slice. The m3u8 index file includes the URL of the encrypted video file slice and encryption information, and the encryption information includes an encryption algorithm and a key URL. The step of returning the resource corresponding to the target video file to the first user terminal when the target authentication information passes verification includes: If the token verification passes, the m3u8 index file is returned to the first client.

5. The information processing method according to any one of claims 1-4, characterized in that, Before obtaining the target classification information in response to the second request from the first user terminal, the method further includes: Obtain the target video file uploaded by the second user terminal and the target classification information corresponding to the target video file; The target video file and the target classification information are stored.

6. An information processing device, characterized in that, include: The first acquisition module is used to acquire a first request sent by a first user terminal. The first request is used to request access to a target video file. The first request includes a target playback unified resource positioning system URL. The target playback URL includes target authentication information and the URL of the target video file. The target playback URL is obtained by the first user terminal from the video playback platform in advance. The first acquisition module is further configured to acquire target classification information, the target classification information including storage information and format information of the target video file; The first determining module is used to determine the target security policy corresponding to the target classification information according to a preset correspondence between classification information and security policies; wherein, the target security policy includes a first security policy corresponding to the storage information and / or a second security policy corresponding to the format information; The verification module is used to verify the target authentication information according to the verification rules corresponding to the target security policy; the verification rules include a first verification rule corresponding to the first security policy and a second verification rule corresponding to the second security policy, and when the first security policy and the second security policy exist at the same time, the verification rules require that the first verification rule and the second verification rule be satisfied simultaneously. The return module is used to return the resources corresponding to the target video file to the first user terminal when the target authentication information is verified as passed. The second acquisition module is used to acquire the classification information of the target video file in response to a second request from the first user terminal before acquiring the first request sent by the first user terminal. The second request is used to acquire the target playback URL. The second determining module is used to determine the target security policy corresponding to the classification information of the target video file according to the preset correspondence between classification information and security policy. The generation module is used to generate target authentication information corresponding to the target security policy corresponding to the classification information of the target video file; The combination module is used to combine the target authentication information with the URL of the target video file to obtain the target playback URL; The second return module is used to return the target playback URL to the first user terminal.

7. An information processing device, characterized in that, The device includes: a processor and a memory storing computer program instructions; the processor, when executing the computer program instructions, implements the information processing method as described in any one of claims 1-5.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer program instructions, which, when executed by a processor, implement the information processing method as described in any one of claims 1-5.

9. A computer program product, characterized in that, When the instructions in the computer program product are executed by the processor of the electronic device, the electronic device is able to perform the information processing method as described in any one of claims 1-5.

Images