SRTP-based power transmission line video data secure transmission method and device

Abstract

The invention discloses a secure transmission method and device for video data of a power transmission line based on SRTP, and relates to the technical field of power transmission line monitoring or other related fields, the method comprises the following steps: obtaining target video data and a target dynamic secret key, the target video data being monitoring video data of a target power transmission line, and the target dynamic secret key being video data of the target power transmission line; the target dynamic key is periodically updated based on the network environment and the data sensitivity, and the target dynamic key at least comprises a receiving end public key; encrypting the target video data by using the receiving end public key to obtain encrypted video data, and generating a message authentication code, a hash check value and a digital signature of the hash check value of the encrypted video data; and performing SRTP packaging on the encrypted video data, the message authentication code, the Hash verification value and the digital signature to obtain an SRTP data packet, and transmitting the SRTP data packet to a receiving end. According to the invention, the technical problem that the real-time performance and the security cannot be considered at the same time in the video data transmission method in the related technology is solved.

Description

Technical Field

[0001] The present invention relates to the technical field of power transmission line monitoring, and in particular to a method and device for securely transmitting power transmission line video data based on SRTP. Background Art

[0002] With the continuous growth of electricity demand and the continuous expansion of the scale of power grid, the security monitoring of transmission lines is particularly important. The transmission line monitoring system is mainly used to monitor the operating status of the transmission line in real time, detect and handle possible faults in time, and ensure the stable transmission of electricity. Traditional transmission line monitoring systems mainly rely on wired communication or wireless communication technology to collect operating data and video information of transmission lines through sensors and cameras. However, with the development of technology, the existing monitoring system has many shortcomings in data transmission security, especially in complex environments and areas with poor network conditions, which are vulnerable to threats such as data tampering, theft and attacks.

[0003] The existing power transmission line monitoring system mainly uses traditional encryption technologies such as HTTPS and VPN to ensure the security of data transmission, but these technologies have some problems in practical applications. First, HTTPS and VPN are prone to delays and bandwidth bottlenecks when facing large-scale video data transmission, affecting the real-time nature of the data; second, traditional encryption technologies are insufficient in key management and update, and are prone to data security degradation due to key leakage; in addition, the existing encryption technology lacks adaptability when dealing with dynamically changing network environments, and it is difficult to optimize and adjust according to the actual network conditions, resulting in the security and reliability of data transmission cannot be guaranteed when the network conditions are poor. These problems are particularly prominent in the power transmission line monitoring system, because power transmission lines are usually distributed in areas with complex geographical environments and poor communication conditions, and these areas require higher data transmission security.

[0004] In the current power transmission line video monitoring system, video data is stored locally in the monitoring system and not transmitted to the monitoring center to reduce transmission delay. However, in actual applications, since the monitoring system is far away from the monitoring center, the delay of long-distance transmission of video signals is unavoidable. Therefore, the delay in video data transmission is a key factor affecting the monitoring quality. In addition, the video data transmission process is easily affected by the network environment, bandwidth, and data sensitivity. The video data transmission method in the prior art has the problems of poor real-time performance and low security, and the two cannot be taken into account at the same time.

[0005] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0006] The embodiment of the present invention provides a method and device for secure transmission of video data of a power transmission line based on SRTP, so as to at least solve the technical problem that the video data transmission method in the related art cannot take into account both real-time performance and security.

[0007] According to one aspect of an embodiment of the present invention, a method for secure transmission of transmission line video data based on SRTP is provided, comprising: obtaining target video data and a target dynamic key, wherein the target video data is monitoring video data of a target transmission line, and the target dynamic key is periodically updated based on a network environment and data sensitivity; encrypting the target video data using the target dynamic key to obtain encrypted video data, and generating a message authentication code, a hash check value, and a digital signature of the hash check value for the encrypted video data based on the target dynamic key; performing SRTP encapsulation on the encrypted video data, the message authentication code, the hash check value, and the digital signature to obtain an SRTP data packet, and transmitting the SRTP data packet to a receiving end.

[0008] Furthermore, the step of using the target dynamic key to encrypt the target video data to obtain encrypted video data includes: identifying the data type of each video frame in the target video data, wherein the data type includes: base layer data and enhancement layer data; for each base layer data, encrypting the base layer data based on an asymmetric encryption algorithm and a receiving end public key to obtain a first type of encrypted video data, wherein the receiving end public key is pre-transmitted by the receiving end and stored at the sending end; for each enhancement layer data, generating a random session key, and dynamically adjusting the random session key based on a preset frequency to obtain the target dynamic key; encrypting the enhancement layer data based on a symmetric encryption algorithm and the target dynamic key, and encrypting the target dynamic key based on an asymmetric encryption algorithm and the receiving end public key; generating a second type of encrypted video data based on the encrypted enhancement layer data and the target dynamic key random session key.

[0009] Furthermore, the step of generating a message authentication code, a hash check value and a digital signature of the hash check value of the encrypted video data based on the target dynamic key includes: inputting the target dynamic key into a hash function and outputting a hash message authentication code of the target dynamic key; obtaining an SRTP data packet header and generating the message authentication code based on the SRTP data packet header, the hash message authentication code and the encrypted video data; inputting the encrypted video data into a hash function and outputting the hash check value; and signing the hash check value using a sender private key to obtain the digital signature.

[0010] Furthermore, the step of dynamically adjusting the random session key based on a preset frequency to obtain the target dynamic key includes: acquiring network environment parameters according to the preset frequency, wherein the network environment parameters include: delay parameters and bandwidth parameters; evaluating the data sensitivity of the target video data based on the network environment parameters to obtain data sensitivity parameters; and dynamically updating the random session key based on the network environment parameters, the data sensitivity parameters and the preset frequency to obtain the target dynamic key.

[0011] Furthermore, the step of evaluating the data sensitivity of the target video data based on the network environment parameters to obtain the data sensitivity parameters includes: for each video frame in the target video data, obtaining statistical characteristic parameters of the video frame, wherein the statistical characteristic parameters include at least: the entropy of the video frame, the fuzzy entropy of the video frame, and the mutual information between the video frame and adjacent frames; substituting the delay parameter, the bandwidth parameter and the statistical characteristic parameters of all the video frames into a preset sensitivity evaluation formula to calculate the data sensitivity parameters.

[0012] Furthermore, based on the network environment parameters, the data sensitivity parameters and the preset frequency, the random session key is dynamically updated to obtain the target dynamic key, including: within the target period specified by the preset frequency, determining the target key update frequency based on the delay parameter and the data sensitivity parameter; determining the target key length based on the data sensitivity parameter; dynamically updating the random session key according to the target key update frequency and the target key length to obtain the target dynamic key.

[0013] Furthermore, after transmitting the SRTP data packet to the receiving end, the method also includes: extracting the digital signature in the SRTP data packet by the receiving end, and verifying the digital signature using the sending end public key to obtain a verification result, wherein the sending end public key is pre-transmitted by the sending end and stored at the receiving end; when the verification result is false, determining that the digital signature is invalid, and discarding the SRTP data packet; or, when the verification result is true, extracting the encrypted video data, the hash check value and the message authentication code in the SRTP data packet; determining whether the encrypted video data is complete based on the hash check value, and determining whether the encrypted video data is authentic based on the message authentication code; when it is determined that the encrypted video data is complete and authentic, using the receiving end private key to decrypt the encrypted video data to obtain the target video data, otherwise, discarding the SRTP data packet.

[0014] According to another aspect of an embodiment of the present invention, a secure transmission device for transmission line video data based on SRTP is also provided, including: an acquisition unit, used to acquire target video data and a target dynamic key, wherein the target video data is monitoring video data of the target transmission line, and the target dynamic key is periodically updated based on the network environment and data sensitivity; an encryption unit, used to encrypt the target video data using the target dynamic key to obtain encrypted video data, and generate a message authentication code, a hash check value and a digital signature of the hash check value of the encrypted video data based on the target dynamic key; an encapsulation transmission unit, used to perform SRTP encapsulation on the encrypted video data, the message authentication code, the hash check value and the digital signature to obtain an SRTP data packet, and transmit the SRTP data packet to a receiving end.

[0015] Furthermore, the encryption unit includes: an identification module, used to identify the data type of each video frame in the target video data, wherein the data type includes: base layer data and enhancement layer data; a first encryption module, used to encrypt the base layer data for each base layer data based on an asymmetric encryption algorithm and a public key of the receiving end to obtain a first type of encrypted video data, wherein the public key of the receiving end is pre-transmitted by the receiving end and stored at the sending end; a first generation module, used to generate a random session key for each enhancement layer data, and dynamically adjust the random session key based on a preset frequency to obtain the target dynamic key; a second encryption module, used to encrypt the enhancement layer data based on a symmetric encryption algorithm and the random session key, and encrypt the random session key based on an asymmetric encryption algorithm and the public key of the receiving end; a second generation module, used to generate a second type of encrypted video data based on the symmetrically encrypted enhancement layer data and the asymmetrically encrypted random session key.

[0016] Furthermore, the encryption unit also includes: a first output module, used to input the target dynamic key into a hash function and output a hash message authentication code of the target dynamic key; a third generation module, used to obtain an SRTP data packet header, and generate the message authentication code based on the SRTP data packet header, the hash message authentication code and the encrypted video data; a second output module, used to input the encrypted video data into a hash function and output the hash check value; a signature module, used to sign the hash check value using the sender private key to obtain the digital signature.

[0017] Furthermore, the encryption unit also includes: an acquisition module, used to acquire network environment parameters according to the preset frequency, wherein the network environment parameters include: delay parameters and bandwidth parameters; an evaluation module, used to evaluate the data sensitivity of the target video data based on the network environment parameters to obtain data sensitivity parameters; an update module, used to dynamically update the random session key based on the network environment parameters, the data sensitivity parameters and the preset frequency to obtain the target dynamic key.

[0018] Furthermore, the evaluation module includes: an acquisition submodule, used to obtain statistical characteristic parameters of the video frame for each video frame in the target video data, wherein the statistical characteristic parameters at least include: entropy of the video frame, fuzzy entropy of the video frame, and mutual information between the video frame and adjacent frames; a calculation submodule, used to substitute the delay parameter, the bandwidth parameter and the statistical characteristic parameters of all the video frames into a preset sensitivity evaluation formula to calculate the data sensitivity parameter.

[0019] Furthermore, the update module includes: a first determination submodule, used to determine the target key update frequency based on the delay parameter and the data sensitivity parameter within the target period specified by the preset frequency; a second determination submodule, used to determine the target key length based on the data sensitivity parameter; an update submodule, used to dynamically update the random session key according to the target key update frequency and the target key length to obtain the target dynamic key.

[0020] Furthermore, the secure transmission device for power transmission line video data based on SRTP also includes: a verification module, which is used for the receiving end to extract the digital signature in the SRTP data packet, and use the sending end public key to verify the digital signature to obtain a verification result, wherein the sending end public key is pre-transmitted by the sending end and stored in the receiving end; a determination module, which is used to determine that the digital signature is invalid and discard the SRTP data packet when the verification result is false; an extraction module, which is used to extract the encrypted video data, the hash check value and the message authentication code in the SRTP data packet when the verification result is true; a determination module, which is used to determine whether the encrypted video data is complete based on the hash check value, and determine whether the encrypted video data is authentic based on the message authentication code; a decryption module, which is used to decrypt the encrypted video data using the receiving end private key to obtain the target video data when it is determined that the encrypted video data is complete and authentic, otherwise, the SRTP data packet is discarded.

[0021] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is also provided, wherein the computer-readable storage medium includes a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the above-mentioned SRTP-based transmission line video data secure transmission methods.

[0022] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement any one of the above-mentioned methods for secure transmission of transmission line video data based on SRTP.

[0023] The present invention proposes a secure transmission method for power transmission line video data based on SRTP. The method first obtains target video data and a target dynamic key, wherein the target video data is the monitoring video data of the target power transmission line, and the target dynamic key is regularly updated based on the network environment and data sensitivity. The target video data is then encrypted using the target dynamic key to obtain encrypted video data, and a message authentication code, a hash check value, and a digital signature of the hash check value of the encrypted video data are generated based on the target dynamic key. Finally, the encrypted video data, the message authentication code, the hash check value, and the digital signature are SRTP-encapsulated to obtain an SRTP data packet, and the SRTP data packet is transmitted to a receiving end.

[0024] In the present invention, the timeliness of the transmitted data is ensured by acquiring the monitoring video data of the target transmission line in real time, meeting the demand of the electric power monitoring system for real-time data, and introducing a dynamic key mechanism. The session key is regularly updated based on the network environment and data sensitivity, which can overcome the problems of vulnerability to attack and low efficiency of traditional fixed keys. In particular, the key update frequency and length can be flexibly adjusted when the network environment is unstable or the data sensitivity changes, which reduces the additional delay caused by key exchange while ensuring data security, thereby improving the overall transmission efficiency.

[0025] In the present invention, the encrypted video data obtained by encrypting the target video data using the dynamically updated session key only supports decryption of the data by the receiving end holding the matching key, which can strictly ensure the confidentiality of key data and effectively prevent illegal interception during data transmission. At the same time, a message authentication code, hash check value and digital signature of the hash check value corresponding to the encrypted video data are generated, so that abnormal behavior attempting to tamper with the data can be detected and rejected in time before the receiving end decrypts and uses the video data, thereby ensuring the reliability of the data source and verifying the integrity and authenticity of the data.

[0026] In the present invention, the SRTP protocol is also used to provide an additional encryption layer for transmission and a mechanism for authenticating and checking the integrity of data packets. The encrypted video data, message authentication code, hash check value and digital signature are encapsulated by SRTP to obtain an SRTP data packet, which supports efficient streaming data processing and can start decryption and verification without waiting for the entire data packet to arrive. This greatly shortens the total data transmission time, ensures data security transmission and reduces data transmission delays.

[0027] The above steps provide reliable technical support for real-time monitoring of transmission lines by introducing dynamic key management, message authentication code, hash check and digital signature, as well as SRTP protocol encapsulation transmission, and solve the technical problem that the video data transmission method in related technologies cannot take into account both real-time and security. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0029] Figure 1 is a flow chart of an optional SRTP-based secure transmission method for power transmission line video data according to an embodiment of the present invention;

[0030] Figure 2 is a flowchart of an optional method for secure transmission of power line video data based on SRTP and dynamic key exchange according to an embodiment of the present invention;

[0031] Figure 3 is a schematic diagram of an optional SRTP-based secure transmission device for power transmission line video data according to an embodiment of the present invention;

[0032] Figure 4 The present invention is a hardware structure block diagram of an electronic device (or mobile device) for a secure transmission method of power transmission line video data based on SRTP according to an embodiment of the present invention. DETAILED DESCRIPTION

[0033] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0034] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0035] To facilitate those skilled in the art to understand the present invention, some terms or nouns involved in the embodiments of the present invention are explained below:

[0036] SRTP, Secure Real-time Transport Protocol, is a security protocol based on RTP (Real-time Transport Protocol) that is designed to provide encryption and authentication for real-time transmission of audio, video and other data. By adding additional security headers to RTP data packets, SRTP can provide protection for data packets to prevent data tampering, replay attacks and unauthorized access.

[0037] The following embodiments of the present invention can be applied to various systems / applications / devices that require code testing for encryption and secure transmission of power transmission line video data, and can implement a secure encryption transmission process based on the SRTP protocol and a dynamic key exchange mechanism. The present invention effectively solves the problem of balancing real-time and security in video data transmission by introducing dynamic key management, asymmetric encryption, message authentication code, hash checksum and digital signature, and SRTP protocol encapsulation transmission, and provides a reliable technical guarantee for real-time monitoring of power transmission lines.

[0038] The present invention is described in detail below in conjunction with various embodiments.

[0039] Embodiment 1

[0040] According to an embodiment of the present invention, an embodiment of a method for securely transmitting video data of a transmission line based on SRTP is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0041] The implementing subject of the embodiment of the present invention can be an intelligent monitoring system or an intelligent inspection system of a transmission line, which combines the SRTP protocol and the dynamic key exchange mechanism to perform data encryption transmission. The SRTP protocol can provide efficient real-time data encryption to ensure the confidentiality and integrity of video data during transmission. At the same time, the dynamic key exchange mechanism can dynamically adjust the key update frequency and length according to the network environment and data sensitivity, ensuring that the best security protection can be provided under different network conditions, further improving the security and reliability of data exchange.

[0042] The embodiment of the present invention is described in detail below in combination with the above steps.

[0043] Figure 1 FIG. 1 is a flow chart of an optional method for securely transmitting video data over a power transmission line based on SRTP according to an embodiment of the present invention. Figure 1 As shown, the method comprises the following steps:

[0044] Step S101, obtaining target video data and a target dynamic key, wherein the target video data is monitoring video data of a target power transmission line, and the target dynamic key is regularly updated based on a network environment and data sensitivity.

[0045] Specifically, the target video data is collected in real time from the transmission line monitoring system, and may include operating status images, operating environment images and / or monitoring video data of the target transmission line captured at regular intervals. In an embodiment of the present invention, the camera equipment of the transmission line monitoring system may capture in real time, including but not limited to images of equipment such as wires, insulators, and towers.

[0046] Optionally, after acquiring the target video data, the method further includes: preprocessing the target video data, including at least one of the following: image enhancement, noise removal and frame rate adjustment.

[0047] It should be noted that image enhancement processing can improve the quality of video images, making details clearer and easier to identify. For power transmission line monitoring systems, image enhancement can improve the accuracy and efficiency of fault detection and reduce the probability of missed detection and false detection.

[0048] Noise removal processing can significantly improve the signal-to-noise ratio of video images, making the image clearer and reducing false alarms and missed alarms caused by noise, which plays an important role in ensuring the reliability and accuracy of the monitoring system.

[0049] The frame rate adjustment process supports dynamic adjustment of the video frame rate according to actual needs, balancing image quality and bandwidth consumption. For transmission environments with limited bandwidth, the frame rate can be appropriately reduced to reduce bandwidth pressure. In scenarios that require high-precision monitoring, the frame rate can be increased to obtain more image details.

[0050] Another thing that needs to be explained is that the acquisition of the target dynamic key is closely related to the dynamic key exchange mechanism to ensure secure and efficient key distribution.

[0051] During the system initialization phase, each communication entity (such as the sender or receiver) generates a pair of asymmetric keys, namely a public key and a private key. The private key will be kept secret locally by each communication entity, while the public key needs to be released through a secure channel, such as being stored on a trusted certificate authority (CA) or key server so that other entities can obtain it securely.

[0052] In an embodiment of the present invention, before data transmission begins, different communication entities can use a key negotiation protocol (such as the Diffie-Hellman protocol) to dynamically generate session keys for encrypting and decrypting data. The session keys with appropriate confidentiality levels can also be dynamically adjusted based on the network environment and data sensitivity during data transmission to take into account the impact of data sensitivity and network quality.

[0053] Step S102, using the target dynamic key to encrypt the target video data to obtain encrypted video data, and generating a message authentication code, a hash check value, and a digital signature of the hash check value of the encrypted video data based on the target dynamic key.

[0054] In video data transmission, especially for application scenarios with high sensitivity and strong real-time requirements, such as power line monitoring and cable safety monitoring, the security and integrity of data are of vital importance. Although traditional encryption methods (such as symmetric encryption using fixed keys) have high computational efficiency, they are deficient in key management and security and are easily cracked by attackers. Although asymmetric encryption has high security, it is not suitable for real-time encrypted transmission of large amounts of data due to its high computational complexity. Therefore, the embodiments of the present invention combine the advantages of both and adopt a multi-level encryption strategy with dynamic keys to effectively improve the security and efficiency of data transmission.

[0055] Optionally, the step of using the target dynamic key to encrypt the target video data in step S102 to obtain encrypted video data includes: identifying the data type of each video frame in the target video data, wherein the data type includes: base layer data and enhancement layer data; for each base layer data, encrypting the base layer data based on an asymmetric encryption algorithm and a public key of the receiving end to obtain a first type of encrypted video data, wherein the public key of the receiving end is pre-transmitted by the receiving end and stored at the sending end; for each enhancement layer data, generating a random session key, and dynamically adjusting the random session key based on a preset frequency to obtain a target dynamic key; encrypting the enhancement layer data based on a symmetric encryption algorithm and the target dynamic key, and encrypting the target dynamic key based on an asymmetric encryption algorithm and the public key of the receiving end; generating a second type of encrypted video data based on the encrypted enhancement layer data and the target dynamic key random session key.

[0056] Specifically, the video stream of the target video data is usually encoded into a series of frames, including key frames (I frames), predicted frames (P frames) and bidirectional predicted frames (B frames), among which the key frames do not rely on other frames for decoding and are the starting point of video decoding, while the predicted frames and bidirectional predicted frames rely on the previous and next frames for decoding, and the data volume is huge and needs to be transmitted frequently.

[0057] Based on the above characteristics, in an embodiment of the present invention, key frames can be divided into basic layer data, and asymmetric encryption strategies (such as RSA, ECC, etc.) can be used in combination with the public key of the receiving end to implement strong protection, while predicted frames and bidirectional predicted frames can be divided into enhanced layer data and encrypted using symmetric encryption strategies to save network expenses. At the same time, the symmetric keys can be asymmetrically encrypted for transmission to improve data security.

[0058] It should be noted that the public key of the receiving end is transmitted to the sending end through a secure channel in advance and stored in the key management module of the sending end to ensure that only the receiving end can use its private key for decryption.

[0059] A random session key is generated for each enhancement layer data, and this key is used to symmetric encrypt the enhancement layer data (such as AES, 3DES, etc.). The update frequency of the random session key is dynamically adjusted according to the network conditions and the sensitivity of the video data. For example, when the network conditions are good (low latency, high bandwidth), the key update frequency can be set higher to increase security; when the network conditions are poor (high latency, low bandwidth), the update frequency can be appropriately reduced to reduce encryption and transmission overhead. The updated random session key is encrypted using an asymmetric encryption algorithm and sent to the receiving end together with the encrypted enhancement layer data to ensure the secure transmission of the key.

[0060] Optionally, the step of dynamically adjusting the random session key based on a preset frequency to obtain a target dynamic key includes: obtaining network environment parameters according to the preset frequency, wherein the network environment parameters include: delay parameters and bandwidth parameters; evaluating the data sensitivity of the target video data based on the network environment parameters to obtain data sensitivity parameters; and dynamically updating the random session key based on the network environment parameters, the data sensitivity parameters and the preset frequency to obtain the target dynamic key.

[0061] Specifically, in a real-time network environment, network delay and bandwidth information is regularly collected through network performance monitoring tools (such as ping test, network traffic analysis, etc.).

[0062] For each video frame in the target video data, the entropy, fuzzy entropy and mutual information between adjacent frames of the video frame are calculated, wherein the entropy of the video frame represents the randomness and uncertainty of the video frame information; the fuzzy entropy reflects the fuzziness and complexity of the video frame; and the mutual information measures the correlation between the video frame and its adjacent frames. By combining these statistical feature parameters with the network environment parameters, the data sensitivity parameters can be evaluated. The embodiment of the present invention exemplarily provides a calculation formula for the data sensitivity parameters:

[0063] Where S represents the calculated value of the video data sensitivity parameter, Q i represents the quality score of the i-th video frame, H(X i ) represents the entropy of the i-th frame, I(X i ; Y i ) represents the mutual information between the i-th frame and the adjacent frames, H f (X i ) represents the fuzzy entropy of the i-th frame, RTT represents the network delay (delay parameter), BW represents the bandwidth (bandwidth parameter), α represents the preset weight coefficient of the quality score, β represents the preset weight coefficient of the mutual information, γ represents the preset weight coefficient of the fuzzy entropy, δ represents the preset network condition adjustment parameter, and N represents the total number of video frames contained in the target video data.

[0064] Furthermore, the calculation formulas for the entropy of the video frame, the fuzzy entropy and the mutual information between adjacent frames are:

[0065]

[0066] Among them, p(x ij ) represents the jth pixel value x in the i-th frame ij The probability of occurrence, n represents the total number of pixels in the i-th frame, X i represents the i-th frame, Y irepresents the frame adjacent to the i-th frame, p(x,y) represents the probability of pixel values ​​x and y appearing at the same time, p(x) represents the edge probability of pixel value x in the i-th frame, p(y) represents the edge probability of pixel value y in the adjacent frame, and p f (x ij ) represents the jth pixel value x in the i-th frame ij The fuzzy probability.

[0067] Based on the above exemplary formula, an embodiment of the present invention provides an optional embodiment, which evaluates the data sensitivity of the target video data based on the network environment parameters to obtain the data sensitivity parameters, including: for each video frame in the target video data, obtaining statistical feature parameters of the video frame, wherein the statistical feature parameters include at least: entropy of the video frame, fuzzy entropy of the video frame, and mutual information between the video frame and adjacent frames; substituting the delay parameters, bandwidth parameters and statistical feature parameters of all video frames into a preset sensitivity evaluation formula to calculate the data sensitivity parameters.

[0068] Optionally, based on network environment parameters, data sensitivity parameters and preset frequency, the step of dynamically updating the random session key to obtain the target dynamic key includes: determining the target key update frequency based on the delay parameter and the data sensitivity parameter within the target period specified by the preset frequency; determining the target key length based on the data sensitivity parameter; and dynamically updating the random session key according to the target key update frequency and the target key length to obtain the target dynamic key.

[0069] In an embodiment of the present invention, the data sensitivity of the target video data can be first determined based on the data sensitivity parameter (for example, divided into high sensitivity, medium sensitivity and low sensitivity). In an exemplary manner, the sensitivity determination thresholds θ1 and θ2 can be set first, and θ2>θ1. The determination step includes: when the video data sensitivity parameter S is greater than θ2, determining that the target video data is of high sensitivity; when the video data sensitivity parameter S is less than or equal to θ2 and greater than θ1, determining that the target video data is of medium sensitivity; when the video data sensitivity parameter S is less than or equal to θ1, determining that the target video data is of low sensitivity.

[0070] The target key length can then be set based on the judgment result of the data sensitivity. For example, when the data sensitivity is high, the target key length is set to 256 bits; when the data sensitivity is medium, it is set to 192 bits; and when the data sensitivity is low, it is set to 128 bits.

[0071] Furthermore, a network delay threshold is set, such as 50ms and 200ms, and the target key update frequency is determined in combination with the data sensitivity judgment result, including: when the delay parameter is less than 50 milliseconds and the data sensitivity is high, the target key update frequency is set to update once every 10 minutes, when the data sensitivity is medium, it is set to update once every 15 minutes, and when the data sensitivity is low, it is set to update once every 20 minutes; when the delay parameter is between 50 milliseconds and 200 milliseconds and the data sensitivity is high, the target key update frequency is set to update once every 20 minutes, when the data sensitivity is medium, it is set to update once every 30 minutes, and when the data sensitivity is low, it is set to update once every 40 minutes; when the delay parameter is higher than 200 milliseconds and the data sensitivity is high, the target key update frequency is set to update once every 40 minutes, when the data sensitivity is medium, it is set to update once every 50 minutes, and when the data sensitivity is low, it is set to update once every 60 minutes.

[0072] Optionally, the step of generating a message authentication code, a hash check value and a digital signature of the hash check value for encrypted video data based on the target dynamic key in step S102 includes: inputting the target dynamic key into a hash function, and outputting a hash message authentication code of the target dynamic key; obtaining an SRTP data packet header, and generating a message authentication code based on the SRTP data packet header, the hash message authentication code and the encrypted video data; inputting the encrypted video data into a hash function, and outputting a hash check value; and signing the hash check value using the sender's private key to obtain a digital signature.

[0073] Specifically, the hash message authentication code (HMAC) is used to verify the integrity of the target dynamic key (i.e., the session key), the SRTP data packet header contains necessary control information, such as the encryption algorithm, key identifier, serial number, etc., the hash check value is used to verify the integrity of the encrypted data (encrypted video data in the embodiment of the present invention), and the numerical signature is used to verify the authenticity of the encrypted data and the hash check value.

[0074] An exemplary method of calculating the message authentication code is: M = HMAC key (E(d)∥header), where M is the message authentication code, HMAC key represents the hash message authentication code of the target dynamic key, E(d) represents the encrypted video data, ∥ represents the connection operation, and header represents the SRTP data packet header;

[0075] The calculation method of the hash check value is: h = H (E (d)), where h is the hash check value and H represents the hash function; the calculation method of the digital signature is: S = Sign private (h), where S is the digital signature, Sign private Represents the process of signing the hash check value using the sender's private key.

[0076] The embodiments of the present invention effectively improve the security and efficiency of data transmission by introducing a hash message authentication code of a target dynamic key, a message authentication code generated based on an SRTP data packet header, a hash check value, and a digital signature. Specifically, dynamic key update and key-based HMAC ensure the integrity and authenticity of the data, and can quickly detect and respond even in the event of a network attack or data tampering. By using a hash function and signature algorithm suitable for large-scale data transmission, the calculation time of verification and signature can be reduced while ensuring security, thereby reducing transmission delays and improving transmission efficiency. The ability to dynamically adjust the key length and update frequency enables the system to automatically optimize security policies according to changes in the network environment, thereby providing optimal security performance under any network conditions.

[0077] Step S103, SRTP encapsulates the encrypted video data, the message authentication code, the hash check value and the digital signature to obtain an SRTP data packet, and transmits the SRTP data packet to the receiving end.

[0078] It should be noted that in video data transmission, it is crucial to ensure the confidentiality, integrity and authenticity of the data. At the sending end, the encrypted video data segment, message authentication code, hash value and digital signature are combined into an SRTP data packet through SRTP encapsulation. The structure of the SRTP data packet includes the RTP header, the encrypted security header, the encrypted video data, and the HMA. The encrypted security header contains information such as the session key and sequence number, which is used to decrypt the video data and verify the HMAC.

[0079] Optionally, after the SRTP data packet is transmitted to the receiving end, the method also includes: the receiving end extracts the digital signature in the SRTP data packet, and uses the sending end public key to verify the digital signature to obtain a verification result, wherein the sending end public key is pre-transmitted by the sending end and stored at the receiving end; when the verification result is false, the digital signature is determined to be invalid, and the SRTP data packet is discarded; or, when the verification result is true, the encrypted video data, hash check value and message authentication code in the SRTP data packet are extracted; based on the hash check value, it is determined whether the encrypted video data is complete, and based on the message authentication code, it is determined whether the encrypted video data is authentic; when it is determined that the encrypted video data is complete and authentic, the encrypted video data is decrypted using the receiving end private key to obtain the target video data, otherwise, the SRTP data packet is discarded.

[0080] Specifically, the receiving end extracts the digital signature in the SRTP data packet and verifies the digital signature using the public key of the sending end to obtain the verification result, including: the receiving end decrypts the digital signature using the public key of the sending end, and the decryption result includes a first verification hash value; the first verification hash value in the decryption result is compared and verified with the hash check value in the SRTP data packet to obtain the verification result.

[0081] Among them, if the first verification hash value is consistent with the hash check value, the verification result is set to true, and the digital signature is determined to be valid and the data packet has not been tampered with; if the first verification hash value is inconsistent with the hash check value, the verification result is set to false, and the digital signature is determined to be invalid, and the data packet has been tampered with or forged. At this time, the receiving end is ordered to discard the data packet and record and alarm.

[0082] In addition, the steps of determining whether the encrypted video data is complete based on the hash check value and determining whether the encrypted video data is authentic based on the message authentication code include: recalculating the hash value based on the encrypted video data and the same hash function to obtain a second verification hash value; comparing the second verification hash value with the hash check value, and when the second verification hash value and the hash check value are consistent, determining that the data packet is complete, otherwise determining that the data packet is incomplete; recalculating the message authentication code based on the encrypted video data and the target dynamic key synchronously transmitted in the SRTP data packet, and comparing the recalculated message authentication code with the message authentication code in the SRTP data packet, if the comparison is consistent, determining that the data packet is authentic, otherwise determining that the data packet is not authentic, and at this time instructing the receiving end to discard the data packet and record and alarm.

[0083] When all verifications are passed, the receiving end uses the receiving end private key and the target dynamic key synchronously transmitted in the SRTP data packet to decrypt the encrypted video data, obtain the original target video data, and complete the secure transmission of the transmission line video data.

[0084] Through the above steps S101 to S103, the target video data and the target dynamic key can be first obtained, wherein the target video data is the monitoring video data of the target transmission line, and the target dynamic key is regularly updated based on the network environment and data sensitivity. The target video data is then encrypted using the target dynamic key to obtain encrypted video data, and a message authentication code, a hash check value, and a digital signature of the hash check value of the encrypted video data are generated based on the target dynamic key. Finally, the encrypted video data, the message authentication code, the hash check value, and the digital signature are SRTP encapsulated to obtain an SRTP data packet, and the SRTP data packet is transmitted to the receiving end.

[0085] In the embodiment of the present invention, the timeliness of the transmitted data is ensured by acquiring the monitoring video data of the target transmission line in real time, and the demand for real-time data of the electric power monitoring system is met. The dynamic key mechanism is introduced, and the session key is regularly updated based on the network environment and data sensitivity. The problems of vulnerability to attack and low efficiency of traditional fixed keys can be overcome, and in particular, the key update frequency and length can be flexibly adjusted when the network environment is unstable or the data sensitivity changes, which reduces the additional delay caused by key exchange while ensuring data security, thereby improving the overall transmission efficiency.

[0086] In an embodiment of the present invention, the encrypted video data obtained by encrypting the target video data using a dynamically updated session key only supports decryption of the data by the receiving end holding a matching key, which can strictly ensure the confidentiality of key data and effectively prevent illegal interception during data transmission. At the same time, a message authentication code, hash check value and digital signature of the hash check value corresponding to the encrypted video data are generated, so that abnormal behavior attempting to tamper with the data can be detected and rejected in time before the receiving end decrypts and uses the video data, thereby ensuring the reliability of the data source and verifying the integrity and authenticity of the data.

[0087] In an embodiment of the present invention, the SRTP protocol is also used to provide an additional encryption layer for transmission and a mechanism for authenticating and checking the integrity of data packets. The encrypted video data, message authentication code, hash check value and digital signature are encapsulated by SRTP to obtain an SRTP data packet, supporting efficient streaming data processing. Decryption and verification can be started without waiting for the entire data packet to arrive, which greatly shortens the total data transmission time, ensures data security transmission and reduces data transmission delays.

[0088] The above steps provide reliable technical support for real-time monitoring of transmission lines by introducing dynamic key management, message authentication code, hash check and digital signature, as well as SRTP protocol encapsulation transmission, and solve the technical problem that the video data transmission method in related technologies cannot take into account both real-time and security.

[0089] The present invention is described below in conjunction with another specific implementation manner.

[0090] The implementation mode of the present invention proposes a method for secure transmission of transmission line video data based on SRTP and dynamic key exchange. Compared with the traditional technology, the SRTP protocol is used for data encryption and transmission and a dynamic key exchange mechanism is introduced, which effectively solves the problems of the prior art in data transmission delay, key management and network adaptability.

[0091] Among them, the SRTP protocol can provide efficient real-time data encryption to ensure the confidentiality and integrity of video data during transmission. At the same time, the dynamic key exchange mechanism can dynamically adjust the key update frequency and length according to the network environment and data sensitivity, ensuring the best security protection under different network conditions. In addition, it can also monitor the traffic characteristics during video data transmission in real time, and use machine learning algorithms for anomaly detection and security threat response to further improve the security and reliability of transmission.

[0092] Figure 2 is a flowchart of an optional method for secure transmission of power line video data based on SRTP and dynamic key exchange according to an embodiment of the present invention, such as Figure 2 As shown, the method comprises the following steps:

[0093] S1, in the power transmission line monitoring system, real-time video data is collected and pre-processed.

[0094] The real-time video data collection includes images and videos of the operating status of the transmission line, that is, the target video data in Example 1, which uses a camera device or sensor to continuously obtain images and videos of the operating status of the transmission line, and captures the current working status of the transmission line, including images of equipment such as wires, insulators, and towers.

[0095] Preprocessing of video data includes: image enhancement, noise removal and frame rate adjustment.

[0096] It should be noted that image enhancement technology can improve the quality of video images, making details clearer and easier to identify. For power transmission line monitoring systems, it can improve the accuracy and efficiency of fault detection and reduce the probability of missed detection and false detection. Noise removal technology can significantly improve the signal-to-noise ratio of video images, making images clearer and reducing false alarms and missed alarms caused by noise. This plays an important role in ensuring the reliability and accuracy of monitoring systems. Frame rate adjustment can dynamically adjust the frame rate of the video according to actual needs, balancing image quality and bandwidth consumption. For transmission environments with limited bandwidth, appropriately reducing the frame rate can reduce bandwidth pressure, and when high-precision monitoring is required, the frame rate can be increased to obtain more image details.

[0097] S2, uses multi-level encryption technology to encrypt the pre-processed video data.

[0098] The preprocessed video data is parsed to identify the type of each video frame, wherein the types of video frames include key frames, predicted frames and bidirectional predicted frames; the identified key frames are divided into base layer data; all identified predicted frames and bidirectional predicted frames are divided into enhanced layer data; the base layer data is encrypted using an asymmetric encryption algorithm, a unique public key and private key pair is generated for each data packet, the base layer data is encrypted using the public key of the receiving end, and the encrypted data packet is sent to the receiving end; the enhanced layer data is encrypted using a symmetric encryption algorithm, a random symmetric key is generated for each data packet, the enhanced layer data is encrypted using the symmetric key, the symmetric key is encrypted using the asymmetric encryption algorithm, and then sent to the receiving end together with the encrypted data.

[0099] Furthermore, by identifying the type of video frame, different encryption strategies can be used for different types of data frames to optimize encryption efficiency and security. As independently decoded frames, key frames are of high importance and require stronger encryption protection; predicted frames and bidirectional predicted frames rely on other frames for decoding, so a more efficient encryption method can be used. By dividing key frames into base layer data, the core content of the video is ensured to receive the strongest encryption protection. Using an asymmetric encryption algorithm to encrypt base layer data can prevent data from being stolen or tampered with during transmission, ensuring the confidentiality and integrity of the data.

[0100] Furthermore, by dividing the prediction frame and the bidirectional prediction frame into enhancement layer data, the efficiency of encryption and decryption is improved by using a symmetric encryption algorithm for encryption. The symmetric encryption algorithm has the characteristics of fast calculation speed and high efficiency, and is suitable for fast encryption processing of large amounts of data.

[0101] Asymmetric encryption of base layer data means generating a unique public and private key pair for each data packet, and using the public key of the receiving end to encrypt the base layer data, ensuring that only the receiving end with the private key can decrypt the data, providing a high degree of security to prevent data from being intercepted and decrypted during transmission.

[0102] Symmetric encryption of enhanced layer data means generating a random symmetric key for each data packet, using the symmetric key to encrypt the enhanced layer data, and then encrypting the symmetric key through an asymmetric encryption algorithm and sending it to the receiving end together with the encrypted data. This can ensure data transmission efficiency while using the security of asymmetric encryption to protect the symmetric key.

[0103] S3 dynamically adjusts the key update frequency and key length according to the network environment and the sensitivity of the transmitted data.

[0104] The network environment is monitored in real time to obtain network delay (i.e., the delay parameter in Example 1) and bandwidth parameters; for example, when the network delay is less than 50 milliseconds, the current network condition is determined to be good; when the network delay is higher than 200 milliseconds, the current network condition is determined to be poor; when the bandwidth exceeds 10Mbps, the current network bandwidth is determined to be sufficient; when the bandwidth is lower than 2Mbps, the current network bandwidth is determined to be insufficient.

[0105] The sensitivity evaluation of video data is performed using the formula:

[0106]

[0107] Among them, S represents the video data sensitivity evaluation value, Q i represents the quality score of the i-th frame, H(X i ) represents the entropy of the i-th frame, I(X i ; Y i ) represents the mutual information between the i-th frame and the adjacent frames, H f (X i ) represents the fuzzy entropy of the i-th frame, RTT represents the network delay, BW represents the bandwidth, α represents the weight coefficient of the quality score, β represents the weight coefficient of the mutual information, γ represents the weight coefficient of the fuzzy entropy, δ represents the network condition adjustment parameter, and N represents the total number of video frames.

[0108]

[0109] Among them, p(x ij ) represents the jth pixel value x in the i-th frame ij The probability of occurrence, n represents the total number of pixels in the i-th frame, X i represents the i-th frame, Y i represents the frame adjacent to the i-th frame, p(x,y) represents the probability of pixel values ​​x and y appearing at the same time, p(x) represents the edge probability of pixel value x in the i-th frame, p(y) represents the edge probability of pixel value y in the adjacent frame, and p f (x ij ) represents the jth pixel value x in the i-th frame ij The fuzzy probability.

[0110] Set sensitivity evaluation thresholds θ1 and θ2, θ2>θ1. When the video data sensitivity evaluation value S is greater than θ2, the current video data is judged to be of high sensitivity. When the video data sensitivity evaluation value S is less than or equal to θ2 but greater than θ1, the current video data is judged to be of medium sensitivity. When the video data sensitivity evaluation value S is less than or equal to θ1, the current video data is judged to be of low sensitivity.

[0111] When the network delay is less than 50 milliseconds and the data sensitivity is high, the target key update frequency is set to every 10 minutes, when the data sensitivity is medium, it is set to every 15 minutes, and when the data sensitivity is low, it is set to every 20 minutes; when the network delay is between 50 milliseconds and 200 milliseconds and the data sensitivity is high, the target key update frequency is set to every 20 minutes, when the data sensitivity is medium, it is set to every 30 minutes, and when the data sensitivity is low, it is set to every 40 minutes; when the network delay is higher than 200 milliseconds and the data sensitivity is high, the target key update frequency is set to every 40 minutes, when the data sensitivity is medium, it is set to every 50 minutes, and when the data sensitivity is low, it is set to every 60 minutes.

[0112] When the data sensitivity is high, the target key length is set to 256 bits; when the data sensitivity is medium, it is set to 192 bits; when the data sensitivity is low, it is set to 128 bits.

[0113] It should be noted that by real-time monitoring of network latency and bandwidth, the current network status can be dynamically obtained, providing a basis for subsequent key updates and length adjustments. A low-latency and high-bandwidth network environment can support higher-frequency and longer-length key updates, thereby improving the security of data transmission. This method is suitable for dynamically changing network environments and can adjust security policies according to actual network conditions to ensure the reliability and security of data transmission.

[0114] By comprehensively evaluating the sensitivity of video data through quality score, entropy, mutual information and fuzzy entropy, the importance and security requirements of video data can be accurately reflected. Highly sensitive data requires stricter security protection, and relatively loose security policies can be adopted for medium and low sensitivity data to optimize system performance and be applicable to various video data transmission scenarios, ensuring that highly sensitive data is fully protected while improving the flexibility and efficiency of the system.

[0115] S4, uses SRTP to transmit the encrypted video data, and generates a hash value and digital signature for each segment of video data during the transmission process.

[0116] Before transmission, the sender and receiver negotiate keys through a key exchange protocol to generate a session key, which is used to encrypt the payload of the data packet and generate a message authentication code.

[0117] The sender performs SRTP encapsulation on the encrypted video data segment, encrypts each video data segment using the session key, and generates an encrypted video data segment E(d). The calculation method of the message authentication code M of the encrypted video data segment is: M = HMAC key (E(d)∥header), where HMAC keyRepresents a key-based hash message authentication code, ∥ represents a connection operation, and header represents an SRTP data packet header.

[0118] Generating a hash value and a digital signature includes generating a hash value for each encrypted video data segment, and using a hash function H to calculate a hash value h, expressed as: h=H(E(d)), where h represents the generated hash value.

[0119] Use the private key of the sender to digitally sign the generated hash value h to generate a digital signature S. The specific steps are as follows: S = Sign private (h), where Sign private Indicates the process of signing using the sender's private key.

[0120] The encrypted video data segment E(d), message authentication code M, hash value h and digital signature S are encapsulated together into an SRTP data packet P for transmission.

[0121] It should be noted that by using the SRTP protocol to transmit encrypted video data and generating hash values ​​and digital signatures during the transmission process, the confidentiality, integrity and authenticity of the data can be effectively ensured. The specific steps include key exchange and session key generation, SRTP encapsulation and encryption, message authentication code generation, hash value generation, digital signature generation, and data packet encapsulation and transmission. These steps can improve data transmission efficiency and reliability while ensuring data transmission security.

[0122] S5, decrypt the transmitted video data at the receiving end, and verify the integrity of the detection data through hash checksum and signature.

[0123] After receiving the SRTP data packet P, the receiver extracts the encrypted video data segment E(d), the message authentication code M, the hash value h and the digital signature S.

[0124] The digital signature S is verified using the sender's public key. If the verification result is true, the current digital signature is considered valid and the data packet has not been tampered with. If the verification result is false, the current digital signature is considered invalid and the data packet has been tampered with or forged. At this time, the receiving end discards the data packet and records and warns.

[0125] Recalculate the hash value h of the received data segment E(d) ′ , and compare it with the extracted hash value h to verify the integrity of the data: h′=H(E(d)); Verification: h ′ = = h;

[0126] Use the session key and message authentication code M to verify and ensure the authenticity of the data:

[0127] M′=HMACkey (E(d)∥header); Verification: M ′ = =M;

[0128] If the message authentication codes match, it means that the data packet is authentic and has not been forged; if the message authentication codes do not match, it means that the data packet has been forged or tampered with. At this time, the receiving end discards the data packet and records and warns.

[0129] When all verifications are passed, the receiving end decrypts the encrypted video data segment E(d) and restores the original video data d.

[0130] It should be noted that through the above verification and decryption steps, the receiving end can ensure that the transmitted data is decrypted and restored without being tampered with or forged. The decryption steps include: extracting data segments and security information, digital signature verification, hash value verification, message authentication code verification, and decryption and data recovery. Through the above steps, the reliability and integrity of data can be improved while ensuring the security of data transmission.

[0131] Correspondingly, an embodiment of the present invention further provides a system for secure transmission of video data over a power transmission line based on SRTP, comprising the following implementation modules:

[0132] The video acquisition and preprocessing module is used to acquire video data in real time and preprocess the video data in the power transmission line monitoring system.

[0133] The encryption module is used to encrypt the pre-processed video data using a multi-level encryption technology.

[0134] The adaptive key management module is used to dynamically adjust the key update frequency and key length according to the network environment and the sensitivity of the transmitted data.

[0135] The data transmission module is used to transmit the encrypted video data using SRTP and generate a hash value and a digital signature for each segment of video data during the transmission process.

[0136] The receiving and verification module is used to decrypt the transmitted video data at the receiving end and verify the integrity of the detection data through hash check and signature verification.

[0137] The embodiments of the present invention can achieve the following technical effects: by adopting the SRTP protocol and the dynamic key exchange mechanism, the security and reliability of the transmission line video data transmission are effectively improved; the SRTP protocol ensures the confidentiality and integrity of the video data, and prevents the data from being intercepted or tampered with during the transmission process; the dynamic key exchange mechanism dynamically adjusts the key update frequency and length according to the network environment and data sensitivity, and enhances the adaptability and flexibility of the system; the real-time monitoring and anomaly detection functions further improve the security protection capability of the system, and can timely identify and respond to potential security threats, ensuring the stable operation of the transmission line monitoring system in complex environments.

[0138] The present invention is described below in conjunction with another optional embodiment.

[0139] Embodiment 2

[0140] The secure transmission device for power transmission line video data based on SRTP provided in this embodiment includes multiple implementation units, each of which corresponds to each implementation step in the above-mentioned embodiment 1.

[0141] Figure 3 is a schematic diagram of an optional SRTP-based secure transmission device for power transmission line video data according to an embodiment of the present invention, such as Figure 3 As shown, the device may include: an acquisition unit 31, an encryption unit 32, and an encapsulation transmission unit 33.

[0142] Among them, the acquisition unit 31 is used to obtain target video data and target dynamic key, wherein the target video data is the monitoring video data of the target transmission line, and the target dynamic key is regularly updated based on the network environment and data sensitivity, and the target dynamic key at least includes: the receiving end public key.

[0143] The encryption unit 32 is used to encrypt the target video data using the receiving end public key to obtain the encrypted video data, and generate a message authentication code, a hash check value and a digital signature of the hash check value of the encrypted video data.

[0144] The encapsulation transmission unit 33 is used to perform SRTP encapsulation on the encrypted video data, the message authentication code, the hash check value and the digital signature to obtain an SRTP data packet, and transmit the SRTP data packet to the receiving end.

[0145] The above-mentioned secure transmission device for transmission line video data based on SRTP can first obtain the target video data and the target dynamic key through the acquisition unit 31, the encryption unit 32, and the encapsulation transmission unit 33, wherein the target video data is the monitoring video data of the target transmission line, and the target dynamic key is regularly updated based on the network environment and data sensitivity, and then the target video data is encrypted using the target dynamic key to obtain encrypted video data, and a message authentication code, hash check value and digital signature of the encrypted video data are generated based on the target dynamic key, and finally the encrypted video data, message authentication code, hash check value and digital signature are SRTP encapsulated to obtain an SRTP data packet, and the SRTP data packet is transmitted to the receiving end.

[0146] In an embodiment of the present invention, the timeliness of the transmitted data is ensured by acquiring the monitoring video data of the target transmission line in real time, meeting the demand of the power monitoring system for real-time data, and introducing a dynamic key mechanism. The session key is regularly updated based on the network environment and data sensitivity. This can overcome the problems of vulnerability to attack and low efficiency of traditional fixed keys. In particular, it can flexibly adjust the key update frequency and length when the network environment is unstable or the data sensitivity changes, thereby reducing the additional delay caused by key exchange while ensuring data security, thereby improving the overall transmission efficiency.

[0147] In an embodiment of the present invention, the encrypted video data obtained by encrypting the target video data using a dynamically updated session key only supports decryption of the data by the receiving end holding a matching key, which can strictly ensure the confidentiality of key data and effectively prevent illegal interception during data transmission. At the same time, a message authentication code, hash check value and digital signature of the hash check value corresponding to the encrypted video data are generated, so that abnormal behavior attempting to tamper with the data can be detected and rejected in time before the receiving end decrypts and uses the video data, thereby ensuring the reliability of the data source and verifying the integrity and authenticity of the data.

[0148] In an embodiment of the present invention, the SRTP protocol is also used to provide an additional encryption layer for transmission and a mechanism for authenticating and checking the integrity of data packets. The encrypted video data, message authentication code, hash check value and digital signature are encapsulated by SRTP to obtain an SRTP data packet, supporting efficient streaming data processing. Decryption and verification can be started without waiting for the entire data packet to arrive, which greatly shortens the total data transmission time, ensures data security transmission and reduces data transmission delays.

[0149] The above steps provide reliable technical support for real-time monitoring of transmission lines by introducing dynamic key management, message authentication code, hash check and digital signature, as well as SRTP protocol encapsulation transmission, and solve the technical problem that the video data transmission method in related technologies cannot take into account both real-time and security.

[0150] Optionally, the encryption unit includes: an identification module, used to identify the data type of each video frame in the target video data, wherein the data types include: base layer data and enhancement layer data; a first encryption module, used to encrypt the base layer data for each base layer data based on an asymmetric encryption algorithm and a public key of the receiving end to obtain a first type of encrypted video data, wherein the public key of the receiving end is pre-transmitted by the receiving end and stored at the sending end; a first generation module, used to generate a random session key for each enhancement layer data, and dynamically adjust the random session key based on a preset frequency to obtain a target dynamic key; a second encryption module, used to encrypt the enhancement layer data based on a symmetric encryption algorithm and the random session key, and encrypt the random session key based on an asymmetric encryption algorithm and the public key of the receiving end; a second generation module, used to generate a second type of encrypted video data based on the symmetrically encrypted enhancement layer data and the asymmetrically encrypted random session key.

[0151] Optionally, the encryption unit also includes: a first output module, used to input the target dynamic key into a hash function and output a hash message authentication code of the target dynamic key; a third generation module, used to obtain an SRTP data packet header and generate a message authentication code based on the SRTP data packet header, the hash message authentication code and the encrypted video data; a second output module, used to input the encrypted video data into a hash function and output a hash check value; a signature module, used to sign the hash check value using the sender's private key to obtain a digital signature.

[0152] Optionally, the encryption unit also includes: an acquisition module, used to obtain network environment parameters at a preset frequency, wherein the network environment parameters include: delay parameters and bandwidth parameters; an evaluation module, used to evaluate the data sensitivity of the target video data based on the network environment parameters to obtain data sensitivity parameters; an update module, used to dynamically update the random session key based on the network environment parameters, the data sensitivity parameters and the preset frequency to obtain the target dynamic key.

[0153] Optionally, the evaluation module includes: an acquisition submodule, used to obtain statistical feature parameters of the video frame for each video frame in the target video data, wherein the statistical feature parameters include at least: entropy of the video frame, fuzzy entropy of the video frame, and mutual information between the video frame and adjacent frames; a calculation submodule, used to substitute delay parameters, bandwidth parameters and statistical feature parameters of all video frames into a preset sensitivity evaluation formula to calculate the data sensitivity parameters.

[0154] Optionally, the update module includes: a first determination submodule, used to determine the target key update frequency based on the delay parameter and the data sensitivity parameter within the target period specified by the preset frequency; a second determination submodule, used to determine the target key length based on the data sensitivity parameter; and an update submodule, used to dynamically update the random session key according to the target key update frequency and the target key length to obtain the target dynamic key.

[0155] Optionally, the secure transmission device for power transmission line video data based on SRTP also includes: a verification module, which is used for the receiving end to extract the digital signature in the SRTP data packet, and use the sending end public key to verify the digital signature to obtain a verification result, wherein the sending end public key is pre-transmitted by the sending end and stored at the receiving end; a determination module, which is used to determine that the digital signature is invalid and discard the SRTP data packet when the verification result is false; an extraction module, which is used to extract the encrypted video data, hash check value and message authentication code in the SRTP data packet when the verification result is true; a determination module, which is used to determine whether the encrypted video data is complete based on the hash check value, and determine whether the encrypted video data is authentic based on the message authentication code; a decryption module, which is used to decrypt the encrypted video data using the receiving end private key to obtain the target video data when it is determined that the encrypted video data is complete and authentic, otherwise, the SRTP data packet is discarded.

[0156] The above-mentioned SRTP-based secure transmission device for power transmission line video data may also include a processor and a memory. The above-mentioned acquisition unit 31, encryption unit 32, encapsulation transmission unit 33, etc. are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize corresponding functions.

[0157] The processor includes a kernel, which retrieves the corresponding program unit from the memory. One or more kernels can be set to generate a message authentication code, a hash check value, and a digital signature of the hash check value for encrypted video data based on a target dynamic key by adjusting kernel parameters; the encrypted video data, the message authentication code, the hash check value, and the digital signature are SRTP encapsulated to obtain an SRTP data packet, and the SRTP data packet is transmitted to a receiving end.

[0158] The above-mentioned memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one storage chip.

[0159] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing an initialization program having the following method steps: obtaining target video data and a target dynamic key, wherein the target video data is monitoring video data of a target transmission line, and the target dynamic key is updated periodically based on the network environment and data sensitivity; encrypting the target video data using the target dynamic key to obtain encrypted video data, and generating a message authentication code, a hash check value, and a digital signature of the hash check value for the encrypted video data based on the target dynamic key; performing SRTP encapsulation on the encrypted video data, the message authentication code, the hash check value, and the digital signature to obtain an SRTP data packet, and transmitting the SRTP data packet to a receiving end.

[0160] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is also provided, the computer-readable storage medium including a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the SRTP-based secure transmission methods for transmission line video data in the above-mentioned embodiment 1.

[0161] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors implement the secure transmission method for transmission line video data based on SRTP of any one of the above-mentioned embodiments one.

[0162] Figure 4 1 is a hardware structure block diagram of an electronic device (or mobile device) for a secure transmission method of video data over a power transmission line based on SRTP according to an embodiment of the present invention. Figure 4 As shown, the electronic device may include one or more ( Figure 4 The processor 402a, processor 402b, ..., processor 402n are used to illustrate) a processor (the processor may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), and a memory 404 for storing data. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the I / O interface), a network interface, a keyboard, a power supply and / or a camera. A person of ordinary skill in the art can understand that Figure 4 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 4 More or fewer components as shown, or with Figure 4 Different configurations are shown.

[0163] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0164] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0165] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0166] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0167] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0168] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

[0169] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A secure transmission method for power transmission line video data based on SRTP, characterized in that: include: Acquire target video data and a target dynamic key, wherein the target video data is monitoring video data of a target power transmission line, and the target dynamic key is regularly updated based on a network environment and data sensitivity; Encrypt the target video data using the target dynamic key to obtain encrypted video data, and generate a message authentication code, a hash check value, and a digital signature of the hash check value for the encrypted video data based on the target dynamic key; The encrypted video data, the message authentication code, the hash check value and the digital signature are encapsulated by SRTP to obtain an SRTP data packet, and the SRTP data packet is transmitted to a receiving end.

2. The secure transmission method according to claim 1, characterized in that: The step of encrypting the target video data using the target dynamic key to obtain the encrypted video data comprises: Identify the data type of each video frame in the target video data, wherein the data type includes: Base layer data and enhancement layer data; For each of the base layer data, encrypt the base layer data based on an asymmetric encryption algorithm and a receiving end public key to obtain first type encrypted video data, wherein the receiving end public key is pre-transmitted by the receiving end and stored in the sending end; For each enhancement layer data, a random session key is generated, and the random session key is dynamically adjusted based on a preset frequency to obtain the target dynamic key; Encrypting the enhancement layer data based on a symmetric encryption algorithm and the target dynamic key, and encrypting the target dynamic key based on an asymmetric encryption algorithm and the receiving end public key; The second type of encrypted video data is generated based on the encrypted enhancement layer data and the target dynamic key.

3. The secure transmission method according to claim 1, characterized in that: The step of generating a message authentication code, a hash check value, and a digital signature of the hash check value of the encrypted video data based on the target dynamic key comprises: Input the target dynamic key into a hash function, and output a hash message authentication code of the target dynamic key; Obtaining an SRTP data packet header, and generating the message authentication code based on the SRTP data packet header, the hash message authentication code and the encrypted video data; Inputting the encrypted video data into a hash function and outputting the hash check value; The hash check value is signed using the private key of the sender to obtain the digital signature.

4. The secure transmission method according to claim 2, characterized in that: The step of dynamically adjusting the random session key based on a preset frequency to obtain the target dynamic key comprises: Acquiring network environment parameters according to the preset frequency, wherein the network environment parameters include: delay parameters and bandwidth parameters; Evaluating the data sensitivity of the target video data based on the network environment parameter to obtain a data sensitivity parameter; Based on the network environment parameter, the data sensitivity parameter and the preset frequency, the random session key is dynamically updated to obtain the target dynamic key.

5. The secure transmission method according to claim 4, characterized in that: The step of evaluating the data sensitivity of the target video data based on the network environment parameter to obtain the data sensitivity parameter comprises: For each video frame in the target video data, obtaining statistical feature parameters of the video frame, wherein the statistical feature parameters at least include: entropy of the video frame, fuzzy entropy of the video frame, and mutual information between the video frame and adjacent frames; The delay parameter, the bandwidth parameter and the statistical characteristic parameters of all the video frames are substituted into a preset sensitivity evaluation formula to calculate the data sensitivity parameter.

6. The secure transmission method according to claim 4, characterized in that: The step of dynamically updating the random session key based on the network environment parameter, the data sensitivity parameter and the preset frequency to obtain the target dynamic key comprises: Determining a target key update frequency within a target period specified by the preset frequency based on the latency parameter and the data sensitivity parameter; determining a target key length based on the data sensitivity parameter; The random session key is dynamically updated according to the target key update frequency and the target key length to obtain the target dynamic key.

7. The secure transmission method according to claim 1, characterized in that: After transmitting the SRTP data packet to the receiving end, the method further includes: The receiving end extracts the digital signature in the SRTP data packet and verifies the digital signature using the sending end public key to obtain a verification result, wherein the sending end public key is pre-transmitted by the sending end and stored in the receiving end; If the verification result is false, the digital signature is determined to be invalid and the SRTP data packet is discarded; or, If the verification result is true, extracting the encrypted video data, the hash check value and the message authentication code in the SRTP data packet; Determine whether the encrypted video data is complete based on the hash check value, and determine whether the encrypted video data is authentic based on the message authentication code; When it is determined that the encrypted video data is complete and authentic, the encrypted video data is decrypted using the receiving end private key to obtain the target video data, otherwise, the SRTP data packet is discarded.

8. A secure transmission device for power transmission line video data based on SRTP, characterized in that: include: An acquisition unit, configured to acquire target video data and a target dynamic key, wherein the target video data is monitoring video data of a target power transmission line, and the target dynamic key is regularly updated based on a network environment and data sensitivity; an encryption unit, configured to encrypt the target video data using the target dynamic key to obtain encrypted video data, and generate a message authentication code, a hash check value, and a digital signature of the hash check value of the encrypted video data based on the target dynamic key; The encapsulation transmission unit is used to perform SRTP encapsulation on the encrypted video data, the message authentication code, the hash check value and the digital signature to obtain an SRTP data packet, and transmit the SRTP data packet to a receiving end.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored computer program, wherein when the computer program is executed, the device where the computer-readable storage medium is located is controlled to execute the secure transmission method for power transmission line video data based on SRTP as described in any one of claims 1 to 7.

10. An electronic device, characterized in that: It includes one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the secure transmission method for power transmission line video data based on SRTP as described in any one of claims 1 to 7.

Images