Secure video stream sharing and authority management system

Abstract

The invention belongs to the technical field of video stream sharing management, and particularly relates to a secure video stream sharing and authority management system. And analyzing the establishment of the sharing relationship between the sharing initiator and the sharing receiver and the correlation between the specified video stream and the service scene of the sharing receiver to judge whether the specified video stream sharing channel is allowed to be opened or not, and if so, before the specified video stream sharing operation, sending the specified video stream to the sharing receiver. Predicting the network transmission condition of a network path configured by a specified video stream sharing channel, dynamically regulating and controlling the playing parameters of the specified video stream, monitoring the access behavior of a sharing receiver to the specified video stream in real time and dynamically regulating and controlling the access authority of the sharing receiver to the specified video stream in a specified video stream sharing operation process, and if the judgment is not granted, sending the video stream playing parameter to the specified video stream playing parameter; and if yes, executing a sharing request rejecting operation, thereby realizing high guarantee of security, high efficiency and controllability of enterprise video stream sharing management.

Description

Technical Field

[0001] The invention belongs to the technical field of video stream sharing management, and in particular relates to a safe video stream sharing and authority management system. Background Art

[0002] With the acceleration of digital transformation of enterprises, the role of video streaming in enterprise operations has become increasingly critical. The amount of video data and application scenarios in scenarios such as remote office, employee training and security monitoring have expanded significantly, but at the same time, they are also facing many severe challenges. On the one hand, the internal video streams of the enterprise platform frequently involve sensitive information such as strategic planning, core technology, and customer information, and comprehensive and effective security protection management measures need to be implemented to prevent information leakage and illegal use. On the other hand, given the complex organizational structure and diversified business needs of the enterprise, it is necessary to build a flexible and rigorous video stream permission management system. Therefore, how to build a dedicated enterprise-specific secure video stream sharing and permission management system is crucial.

[0003] In the prior art, there are related solutions that can be applied to enterprise video stream sharing and rights management, for example, the video sharing method and device with Chinese patent publication number CN105847988A, which obtains a request from a first user to invite a second user to watch a video, the first user is a user with the right to watch the video, in response to obtaining the request, obtains a password for watching the video and a link associated with the play page of the video, sends the password and the link to the second user, in response to the second user clicking the link, displays the play page to the second user, and in response to obtaining the password input by the second user, plays the video to the second user in the play page. This enables users to invite other users to watch videos together without sharing their account passwords with other users.

[0004] Another Chinese patent publication number is CN105100750A, which is a video stream sharing method and system. It first sends the first video stream to the video stream distribution module through the video stream input device, and then the video stream distribution module receives the first video stream and sends the first video stream to the display switching module and the video stream interaction module respectively. Then the video stream interaction module receives the first video stream and sends the second video stream to the display switching module according to the mapping relationship between the first video stream and the second video stream. Then the display switching module receives the switching instruction and displays the corresponding video stream on the display device corresponding to the video stream input device. The interactive process of video stream sharing is greatly simplified, making the interaction of video streams on different devices efficient and fast.

[0005] Although the above scheme proposes some relevant solutions that can be applied to enterprise video stream sharing and permission management, the existing technology still has limitations relative to enterprise video stream sharing and permission management. Specifically: 1. Whether the video stream is open for sharing depends on the access rights of the sharing initiator. It ignores the detection of the establishability of the relationship between the sharing initiator and the sharing receiver, as well as the adaptability detection of the sharing receiver and the business scenarios involving the video stream content, which affects the security and reliability of enterprise video stream sharing.

[0006] 2. The existing technology often uses an adaptive control mechanism for playback parameters in the process of video stream sharing, which dynamically controls the resolution, frame rate and other related playback parameters of the video stream through the real-time network transmission status. It lacks forward-looking video stream network adaptation planning and the control method is relatively passive, which can easily cause adverse phenomena such as video playback freezes, sudden changes in image quality, and even playback interruptions.

[0007] 3. Existing technologies lack the ability to dynamically regulate the access rights of shared recipients during video stream sharing, which not only reduces management efficiency but also increases operational risks, hindering the security, efficiency and controllability of enterprise video stream sharing. Summary of the invention

[0008] In order to overcome the shortcomings of the background technology, the embodiments of the present invention provide a secure video stream sharing and rights management system, which can effectively solve the problems involved in the above background technology.

[0009] The purpose of the present invention can be achieved through the following technical solutions: A secure video stream sharing and permission management system, including: a sharing request receiving module, a sharing channel opening judgment module, a playback parameter dynamic control module, an access permission dynamic control module, and a sharing request rejection module.

[0010] The sharing request receiving module is connected to the sharing channel opening judgment module, the sharing channel opening judgment module is respectively connected to the playback parameter dynamic control module and the sharing request rejection module, and the playback parameter dynamic control module is connected to the access permission dynamic control module.

[0011] The sharing request receiving module is used to receive the designated video stream sharing request of the target enterprise platform, and extract the basic information of the sharing initiator and the sharing receiver, wherein the basic information includes the identity ID and the device IP with the network access point identifier.

[0012] The shared channel opening judgment module is used to analyze the feasibility of establishing a sharing relationship between the sharing initiator and the sharing receiver, the relevance of the specified video stream to the business scenario of the sharing receiver, and determine whether to allow the opening of the specified video stream sharing channel. If it is allowed, the playback parameter dynamic control module is executed; if it is not allowed, the sharing request rejection module is executed.

[0013] The playback parameter dynamic control module is used to predict the network transmission status of the network path configured for the specified video stream sharing channel before the specified video stream sharing operation, and dynamically control the specified video stream playback parameters.

[0014] The access rights dynamic control module is used to monitor the access behavior of the shared receiver to the specified video stream in real time during the specified video stream sharing operation, and dynamically control the access rights of the shared receiver to the specified video stream.

[0015] The sharing request rejection module is used to feed back a specified video stream sharing request rejection notification window to the sharing initiator.

[0016] Compared with the prior art, the embodiments of the present invention have at least the following advantages or beneficial effects: (1) The present invention analyzes the feasibility of establishing a sharing relationship between a sharing initiator and a sharing receiver, and the relevance between a specified video stream and a business scenario of the sharing receiver, and uses this as a basis for judging whether to allow the opening of a specified video stream sharing channel, thereby ensuring the accuracy and effectiveness of the decision on opening the specified video stream sharing channel, thereby reducing sharing risks.

[0017] (2) The present invention predicts in advance the network transmission status of the network path configured for the specified video stream sharing channel during the specified video stream transmission period, and dynamically adjusts the specified video stream playback parameters, effectively avoiding the drawbacks of the existing technology that only passively adjusts according to the real-time network status, and realizes forward-looking video stream network adaptation planning, greatly improving the stability and smoothness of video stream playback.

[0018] (3) The present invention dynamically adjusts the access rights of the shared receivers to the specified video streams according to the monitored access behaviors of the shared receivers to the specified video streams during the specified video stream sharing operation, and promptly prevents the shared receivers from making illegal operations or abnormal behaviors, thereby reducing operational risks and ensuring the continuous and stable operation of the video stream sharing service of the target enterprise platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The present invention is further described using the accompanying drawings, but the embodiments in the accompanying drawings do not constitute any limitation to the present invention. A person skilled in the art can obtain other drawings based on the following drawings without creative work.

[0020] Figure 1 It is a schematic diagram of module connection of the present invention.

[0021] Figure 2 The figure is a logical diagram of the present invention for judging whether to allow the opening of a designated video stream sharing channel.

[0022] Figure 3A logical schematic diagram of a network transmission status of a network path configured for a specified video stream sharing channel for the present invention. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] Reference Figure 1 As shown, the present invention provides a secure video stream sharing and permission management system, including: a sharing request receiving module, a sharing channel opening judgment module, a playback parameter dynamic control module, an access permission dynamic control module, and a sharing request rejection module.

[0025] The sharing request receiving module is connected to the sharing channel opening judgment module, the sharing channel opening judgment module is respectively connected to the playback parameter dynamic control module and the sharing request rejection module, and the playback parameter dynamic control module is connected to the access permission dynamic control module.

[0026] The sharing request receiving module is used to receive a designated video stream sharing request from a target enterprise platform, and extract basic information of the sharing initiator and the sharing receiver, wherein the basic information includes an identity ID and a device IP with a network access point identifier.

[0027] Reference Figure 2 As shown, the shared channel opening judgment module is used to analyze the feasibility of establishing a sharing relationship between a sharing initiator and a sharing receiver, the relevance of a specified video stream to a business scenario of a sharing receiver, and determine whether to allow the opening of a specified video stream sharing channel. If it is allowed, the playback parameter dynamic control module is executed; if it is not allowed, the sharing request rejection module is executed.

[0028] Specifically, the analysis of the feasibility of establishing a sharing relationship between a sharing initiator and a sharing receiver includes: inputting the identity IDs of the sharing initiator and the sharing receiver, retrieving whether the sharing initiator and the sharing receiver are authorized identity personnel of the target enterprise platform, whether the historical sharing credit scores of the sharing initiator and the sharing receiver relative to the target enterprise platform reach a preset sharing credit score threshold, and whether the designated video stream belongs to the sharing initiator's permission scope to access the video stream, thereby outputting reasonable indicators of the sharing identity between the sharing initiator and the sharing receiver.

[0029] It should be noted that, when the above retrieval finds that both the sharing initiator and the sharing receiver are authorized personnel of the target enterprise platform, the historical sharing credit scores of the sharing initiator and the sharing receiver relative to the target enterprise platform reach the preset sharing credit score threshold, and the designated video streams are within the scope of the sharing initiator's access permission to the video stream, the output sharing identity rationality index between the sharing initiator and the sharing receiver is 1, otherwise the output sharing identity rationality index between the sharing initiator and the sharing receiver is 0.

[0030] Input the device IP of the sharing initiator and the sharing receiver with the network access location identifier, check whether the device IP of the sharing initiator and the sharing receiver has established an authorization relationship with the target enterprise platform, and whether the network access point of the sharing initiator and the sharing receiver is safe, so as to output the reasonable indicators of the shared devices between the sharing initiator and the sharing receiver.

[0031] It should be noted that, when the device IPs of the sharing initiator and the sharing receiver have established an authorization relationship with the target enterprise platform and the network access points of the sharing initiator and the sharing receiver are secure, the reasonable index of the shared device between the sharing initiator and the sharing receiver is 1, otherwise the reasonable index of the shared device between the sharing initiator and the sharing receiver is 0.

[0032] It should also be noted that the input operations of the identity IDs of the above-mentioned sharing initiator and sharing recipient, as well as the device IP with the attached network access location identifier, are all executed at the specific query function entrance provided by the system of the present invention. The query function entrance has the dual characteristics of integrating the authorized access to the target enterprise platform video stream sharing data and the authorized access to the target enterprise's internal data, thereby directly feeding back the results that meet the above-mentioned search conditions.

[0033] The sharing identity rationality index is multiplied by the sharing device rationality index to obtain the establishment feedback index of the sharing relationship between the sharing initiator and the sharing receiver.

[0034] Specifically, the analysis of the relevance between the business scenario of the specified video stream and the shared recipient includes: obtaining the participating role of the shared recipient in the target enterprise retrieved by the identity ID of the input shared recipient, presetting the knowledge graph of the business scenarios that may be involved in each participating role according to the target enterprise, extracting each keyword in the knowledge graph of the participating role corresponding to the shared recipient, comparing them with each keyword extracted from the text content of the specified video stream, retrieving each semantically similar keyword group therein, counting the number of semantically similar keyword groups and comparing them with the total number of keywords extracted from the knowledge graph of the participating role corresponding to the shared recipient as a feedback indicator for the relevance of the business scenario between the specified video stream and the shared recipient.

[0035] It should be noted that the above-mentioned shared recipients present two different types of participating roles in the target enterprise. First, when the shared recipient is an internal employee of the target enterprise, his or her participating role focuses on the departmental position role. The knowledge graph constructed by the target enterprise that is related to internal personnel and can involve business scenarios, the core content mainly revolves around the department structure to which the internal personnel belong, the job functions they undertake, and the derived workflows, business scope, etc. For example, the marketing specialist of the marketing department, his or her knowledge graph covers business knowledge nodes closely related to marketing positions, such as marketing strategy formulation, marketing promotion activity execution, and customer demand research.

[0036] Second, if the shared recipient is an external business customer of the target enterprise, its participating role is mainly reflected in the role of business customer. The target enterprise builds a knowledge graph involving business scenarios for external business customers, focusing on the business cooperation type between customers and enterprises, cooperation project content, customer demand content, and historical business transactions.

[0037] It should be noted that the knowledge graph is an information organization and management tool specifically used for structured representation of internal enterprise knowledge and external related knowledge. It depicts the complex relationships between various entities inside and outside the enterprise and the attributes of each entity in a graphical form. Entities include but are not limited to key elements such as employees, departments, products, customers, projects, suppliers, business processes, etc., which are regularly formulated, maintained, updated and uploaded to the cloud database of the system of the present invention by the target enterprise managers.

[0038] It should also be noted that the specific retrieval process of the above-mentioned semantically similar keyword groups is as follows: each keyword in the knowledge graph of the participating role corresponding to the shared recipient and each keyword extracted from the text content of the specified video stream are imported into the pre-trained word vector model and converted into word vectors, and the semantic similarity of each keyword in the knowledge graph of the participating role corresponding to the shared recipient and each keyword extracted from the text content of the specified video stream is analyzed one by one through the cosine similarity calculation formula. If the semantic similarity of a keyword in the knowledge graph of the participating role corresponding to the shared recipient and a keyword extracted from the text content of the specified video stream is greater than or equal to the preset semantic similarity threshold, the two keywords can be constituted into a semantically similar keyword group, thereby retrieving each semantically similar keyword group.

[0039] The above-mentioned pre-trained word vector models are relatively mature word vector models in the prior art, such as Word2Vec, GloVe and BERT.

[0040] Specifically, the judgment condition for allowing the opening of the specified video stream sharing channel is that the sharing relationship establishability feedback index between the sharing initiator and the sharing receiver is equal to 1 and the business scenario relevance feedback index between the specified video stream and the sharing receiver is greater than the preset business scenario relevance reasonable feedback index threshold.

[0041] The embodiment of the present invention analyzes the feasibility of establishing a sharing relationship between a sharing initiator and a sharing receiver, and the relevance between a specified video stream and a business scenario of the sharing receiver, and uses this as a basis for judging whether to allow the opening of a specified video stream sharing channel, thereby ensuring the accuracy and effectiveness of the decision on opening the specified video stream sharing channel, thereby reducing sharing risks.

[0042] The playback parameter dynamic control module is used to predict the network transmission status of the network path configured for the specified video stream sharing channel before the specified video stream sharing operation, and dynamically control the specified video stream playback parameters.

[0043] Reference Figure 3 As shown, specifically, the predicting of the network transmission status of the network path configured by the specified video stream sharing channel includes: planning the transmission period of the network path configured by the specified video stream sharing channel for the specified video stream and recording it as the specified period.

[0044] Extract the actual network bandwidth of each unit time point in the specified time period of each day in the historical preset period of the network path configured by the specified video stream sharing channel, divide the historical preset period into a training period and a verification period in chronological order, and fit the network bandwidth prediction linear equation of the specified time period of the network path configured by the specified video stream sharing channel by the minimum multiplication method according to the actual network bandwidth of each unit time point in the specified time period of each day in the training period of the network path configured by the specified video stream sharing channel, and substitute the time variable of each unit time point in the specified time period of each day in the verification period into the time variable of each unit time point in the specified time period of each day in the verification period to obtain the predicted network bandwidth of each unit time point in the specified time period of each day in the verification period of the network path configured by the specified video stream sharing channel.

[0045] Configure the network path of the specified video stream sharing channel to verify the actual network bandwidth of each unit time point in the specified time period on each day of the cycle and predict network bandwidth ,in is the number of each day in the verification cycle, , is the number of each unit time point in the specified period. , substitute into the formula ,in Configure the network path verification cycle for the specified video stream sharing channel. Within the specified time period of the day The predicted network bandwidth at each unit time point is calculated based on the principle of minimum deviation between the predicted network bandwidth and the actual network bandwidth. The corresponding smoothing coefficient of each unit time point in the specified time period of each day in the network path verification cycle is calculated for the specified video stream sharing channel configuration. , the optimal smoothing coefficient is determined by mean calculation To construct an exponential smoothing formula.

[0046] Substitute the network bandwidth of each unit time point within the specified time period of the day before the network path with the specified video stream sharing channel configuration is entered into the exponential smoothing formula, and combined with the correction factor corresponding to the evaluation of the network bandwidth prediction deviation at the current time point, obtain the predicted network bandwidth of each unit time point within the specified time period of the day on the network path with the specified video stream sharing channel configuration, so as to realize the network transmission status prediction of the network path with the specified video stream sharing channel configuration.

[0047] It should be noted that the specific process of obtaining the correction factor of the corresponding evaluation of the network bandwidth prediction deviation at the current time point is as follows: the absolute value of the predicted network bandwidth at the current time point and the actual network bandwidth are subtracted. If the absolute difference is less than or equal to the preset reasonable deviation threshold, the correction factor of the corresponding evaluation of the network bandwidth prediction deviation at the current time point is set to 1. If the absolute difference is greater than the preset reasonable deviation threshold, the actual network bandwidth is used as the numerator and the predicted network bandwidth is used as the denominator for ratio analysis to obtain the correction factor of the corresponding evaluation of the network bandwidth prediction deviation at the current time point.

[0048] Specifically, the planning of configuring a network path for a shared channel for a specified video stream for a transmission period of a specified video stream includes: obtaining a frame rate in an initial playback parameter of each video frame of the specified video stream, performing an inverted operation on the frame rate of each video frame of the specified video stream to obtain a shared transmission duration of each video frame of the specified video stream, and adding the shared transmission duration to the current time point to plan the transmission period of the network path for a shared channel for a specified video stream.

[0049] Specifically, the exponential smoothing formula is: ,in is the time variable, They are the predicted network bandwidth for the current day and the day before the current day, It is the actual network bandwidth of the day before today.

[0050] Specifically, the dynamic control of the specified video stream playback parameters includes: analyzing the network bandwidth required for each video frame in the specified video stream according to the initial playback parameters of each video frame in the specified video stream, including resolution, frame rate, color depth and encoding method, and planning each continuous video frame segment in the specified video stream and confirming its corresponding transmission time zone and required network bandwidth accordingly. , is the number of each consecutive video frame segment in the specified video stream. .

[0051] It should be noted that the specific process of planning the continuous video frame segments in the specified video stream and confirming their corresponding transmission time zones and required network bandwidth is as follows: traverse each video frame in the specified video stream one by one in the order of the video frame timestamps, plan the continuous video frame segments with the first video frame as the starting point, include each video frame in the continuous video frame segment with the first video frame in sequence, calculate the variance of the network bandwidth required for the first video frame within the continuous video frame segment for each included video frame, until the variance of the network bandwidth required for the first video frame within the continuous video frame segment is greater than the preset permitted variance threshold, stop dividing the continuous video frame segment with the first video frame, obtain the continuous video frame segment with the first video frame and use the maximum network bandwidth corresponding to the video frames therein as the required network bandwidth for the continuous video frame segment, accumulate the shared transmission time of each video frame in the continuous video frame segment, and add it to the current time point to obtain the transmission time zone corresponding to the continuous video frame segment, and plan the continuous video frame segments in the specified video stream in this way.

[0052] According to the specified video stream sharing channel configuration network path, the predicted network bandwidth of each unit time point in the specified time period on the day, obtains the predicted network bandwidth of each continuous video frame segment in the specified video stream in the specified time period on the day of the specified video stream sharing channel configuration network path. .

[0053] Will comply with The continuous video frame segments of the conditions are recorded as adjusted video frame segments. The initial playback parameters of the adjusted video frame segments are gradually lowered in the order of resolution, color depth, and encoding method until the required network bandwidth after the step-by-step lowering is less than or equal to the predicted network bandwidth, and the step-by-step lowering operation is stopped.

[0054] It should be noted that the above-mentioned step-by-step downward adjustment operation follows the corresponding levels of resolution, color depth, and encoding method. Specifically, the resolution is divided into three levels: high, medium, and low, which are 1080p, 720p, and 480p respectively; the color depth is divided into three levels: high, medium, and low, which are 24 bits, 16 bits, and 8 bits respectively; the encoding method corresponding to each level depends on the compression efficiency of the encoding method. Generally, the higher the level of the encoding method, the smaller the preset compression ratio value corresponds to.

[0055] Exemplarily, if the initial playback parameters of a certain adjusted video frame segment are 1080p resolution, 24-bit color depth, and H.264 encoding, and the predicted network bandwidth of the corresponding transmission time zone is 3Mbps and the required network bandwidth is 5Mbps, then the resolution is first reduced from 1080p to 720p, and the bandwidth requirement required after the first step-by-step reduction is calculated. If it is still greater than 3Mbps, the resolution is further reduced to 480p, and the bandwidth requirement required after the second step-by-step reduction is calculated. If it is still greater than 3Mbps, the color depth is reduced from 24 bits to 16 bits, and the bandwidth requirement required after the third step-by-step reduction is calculated. If it is still greater than 33Mbps, the color depth is further reduced from 16 bits to 8 bits. If it is still greater than 3Mbps, other compression methods are selected, and their corresponding preset compression ratios are greater than the preset encoding methods corresponding to the H.264 encoding method.

[0056] The embodiments of the present invention predict in advance the network transmission status of the network path configured for the specified video stream sharing channel during the specified video stream transmission period, and dynamically adjust the specified video stream playback parameters, thereby effectively avoiding the drawbacks of the prior art that only passively adjusts according to the real-time network status, realizing forward-looking video stream network adaptation planning, and greatly improving the stability and smoothness of video stream playback.

[0057] The access rights dynamic control module is used to monitor the access behavior of the shared receiver to the specified video stream in real time during the specified video stream sharing operation, and dynamically control the access rights of the shared receiver to the specified video stream.

[0058] Specifically, the analysis of the network bandwidth required for each video frame in the specified video stream includes: determining the compression ratio corresponding to the encoding method of each video frame in the specified video stream according to the preset compression ratio corresponding to each encoding method of the video frame, multiplying the resolution, frame rate, color depth and the compression ratio corresponding to the encoding method of each video frame in the specified video stream to obtain the bit rate of each video frame in the specified video stream, and adding the bit rate to the preset network bandwidth margin to obtain the network bandwidth required for each video frame in the specified video stream.

[0059] Specifically, the dynamic regulation of the shared recipient's access rights to the specified video stream includes: if the shared recipient's playback frequency for the specified video stream reaches a preset playback frequency warning threshold, the shared recipient's playback rights for the specified video stream are suspended for a preset period of time, and a warning pops up to the shared recipient's device to prompt it to operate in a standardized manner.

[0060] If the IP address of the monitored shared receiver device is outside the preset security authorization area of ​​the target enterprise platform video stream or the device IP address change frequency reaches the preset address change frequency warning threshold, the shared receiver's download permission for the specified video stream will be suspended.

[0061] If the monitored sharing recipient attempts to take screenshots or record the specified video stream for a preset number of warning times, the sharing recipient is prohibited from accessing the specified video stream and the target enterprise platform video stream sharing administrator is reported.

[0062] The embodiments of the present invention dynamically adjust the access rights of the shared receiver to the specified video stream according to the monitored access behavior of the shared receiver to the specified video stream during the specified video stream sharing operation, and promptly prevent the shared receiver from making illegal operations or abnormal behaviors, thereby reducing operational risks and ensuring the continuous and stable operation of the video stream sharing service of the target enterprise platform.

[0063] The sharing request rejection module is used to feed back a designated video stream sharing request rejection notification window to the sharing initiator.

[0064] It should be noted that all preset parameters in the present invention are data stored in the cloud database, among which, except for the knowledge graph of business scenarios involving each participating role preset by the target enterprise, the data source of the other preset parameters is obtained by open implantation of the system.

[0065] The above contents are merely examples and explanations of the structure of the present invention. The technicians in this technical field may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the structure of the invention or exceed the scope defined by the present invention, they should all fall within the protection scope of the present invention.

Claims

1. A secure video stream sharing and rights management system, characterized in that: include: A sharing request receiving module, used to receive a designated video stream sharing request from a target enterprise platform, and extract basic information of the sharing initiator and the sharing receiver, including an identity ID and a device IP with a network access point identifier; A sharing channel opening judgment module is used to analyze the establishment of a sharing relationship between a sharing initiator and a sharing receiver, the relevance of a specified video stream to a business scenario of a sharing receiver, and judge whether to allow the opening of a specified video stream sharing channel. If it is allowed, the playback parameter dynamic control module is executed; if it is not allowed, the sharing request rejection module is executed; The playback parameter dynamic control module is used to predict the network transmission status of the network path configured for the specified video stream sharing channel before the specified video stream sharing operation, and dynamically control the specified video stream playback parameters; The access rights dynamic control module is used to monitor the access behavior of the shared receiver to the specified video stream in real time during the specified video stream sharing operation, and dynamically control the access rights of the shared receiver to the specified video stream; The sharing request rejection module is used to feed back a specified video stream sharing request rejection notification window to the sharing initiator.

2. A secure video stream sharing and rights management system according to claim 1, characterized in that: The analysis of the feasibility of establishing a sharing relationship between a sharing initiator and a sharing receiver includes: inputting the identity IDs of the sharing initiator and the sharing receiver, searching whether the sharing initiator and the sharing receiver are authorized identity personnel of the target enterprise platform, whether the historical sharing reputation scores of the sharing initiator and the sharing receiver relative to the target enterprise platform have reached a preset sharing reputation score reaching threshold, and whether the designated video stream belongs to the sharing initiator's permission scope to access the video stream, thereby outputting reasonable indicators of the sharing identity between the sharing initiator and the sharing receiver; Input the device IP of the sharing initiator and the sharing receiver with the network access location identifier, check whether the device IP of the sharing initiator and the sharing receiver has established an authorization relationship with the target enterprise platform, and whether the network access point of the sharing initiator and the sharing receiver is safe, so as to output the reasonable indicators of the sharing device between the sharing initiator and the sharing receiver; The sharing identity rationality index is multiplied by the sharing device rationality index to obtain the establishment feedback index of the sharing relationship between the sharing initiator and the sharing receiver.

3. A secure video stream sharing and rights management system according to claim 2, characterized in that: The analysis of the relevance between the business scenario of the specified video stream and the shared recipient includes: obtaining the participating role of the shared recipient in the target enterprise retrieved by inputting the identity ID of the shared recipient, presetting the knowledge graph of the business scenarios that each participating role may involve according to the target enterprise, extracting each keyword in the knowledge graph of the participating role corresponding to the shared recipient, comparing it with each keyword extracted from the text content of the specified video stream, retrieving each semantically similar keyword group therein, counting the number of semantically similar keyword groups and calculating the ratio of the ratio to the total number of keywords extracted from the knowledge graph of the participating role corresponding to the shared recipient as a feedback indicator of the relevance between the business scenario of the specified video stream and the shared recipient.

4. A secure video stream sharing and rights management system according to claim 3, characterized in that: The judgment condition for allowing the opening of the specified video stream sharing channel is that the sharing relationship establishability feedback index between the sharing initiator and the sharing receiver is equal to 1 and the business scenario relevance feedback index between the specified video stream and the sharing receiver is greater than the preset business scenario relevance reasonable feedback index threshold.

5. A secure video stream sharing and rights management system according to claim 1, characterized in that: The predicting of the network transmission status of the network path configured by the specified video stream sharing channel includes: planning the transmission period of the network path configured by the specified video stream sharing channel for the specified video stream and recording it as the specified period; Extract the actual network bandwidth of each unit time point in the specified time period of each day in the historical preset period of the network path for the specified video stream sharing channel configuration, divide the historical preset period into a training period and a verification period in chronological order, and fit the network bandwidth prediction linear equation of the specified time period of the network path for the specified video stream sharing channel configuration by the minimum multiplication method according to the actual network bandwidth of each unit time point in the specified time period of each day in the training period of the network path for the specified video stream sharing channel configuration, and substitute the time variable of each unit time point in the specified time period of each day in the verification period to obtain the predicted network bandwidth of each unit time point in the specified time period of each day in the verification period of the network path for the specified video stream sharing channel configuration; According to the specified video stream sharing channel configuration network path verification cycle, the actual network bandwidth and predicted network bandwidth at each unit time point in the specified time period on each day are determined to determine the optimal smoothing coefficient To construct an exponential smoothing formula; Substitute the network bandwidth of each unit time point within the specified time period of the day before the network path with the specified video stream sharing channel configuration is entered into the exponential smoothing formula, and combined with the correction factor corresponding to the evaluation of the network bandwidth prediction deviation at the current time point, obtain the predicted network bandwidth of each unit time point within the specified time period of the day on the network path with the specified video stream sharing channel configuration, so as to realize the network transmission status prediction of the network path with the specified video stream sharing channel configuration.

6. A secure video stream sharing and rights management system according to claim 5, characterized in that: The planning of the specified video stream shared channel configuration network path for the transmission period of the specified video stream includes: obtaining the frame rate in the initial playback parameters of each video frame of the specified video stream, performing an inverted operation on the frame rate of each video frame of the specified video stream to obtain the shared transmission duration of each video frame of the specified video stream, and adding the shared transmission duration to the current time point to plan the specified video stream shared channel configuration network path for the transmission period of the specified video stream.

7. A secure video stream sharing and rights management system according to claim 5, characterized in that: The exponential smoothing formula is ,in is the time variable, They are the predicted network bandwidth for the current day and the day before the current day, It is the actual network bandwidth of the day before today.

8. A secure video stream sharing and rights management system according to claim 5, characterized in that: The dynamic control of the specified video stream playback parameters includes: analyzing the network bandwidth required for each video frame in the specified video stream according to the initial playback parameters of each video frame in the specified video stream, including resolution, frame rate, color depth and encoding method, and planning each continuous video frame segment in the specified video stream and confirming its corresponding transmission time zone and required network bandwidth accordingly. , is the number of each consecutive video frame segment in the specified video stream. ; According to the specified video stream sharing channel configuration network path, the predicted network bandwidth of each unit time point in the specified time period on the day, obtains the predicted network bandwidth of each continuous video frame segment in the specified video stream in the specified time period on the day of the specified video stream sharing channel configuration network path. ; Will comply with The continuous video frame segments of the conditions are recorded as adjusted video frame segments. The initial playback parameters of the adjusted video frame segments are gradually lowered in the order of resolution, color depth, and encoding method until the required network bandwidth after the step-by-step lowering is less than or equal to the predicted network bandwidth, and the step-by-step lowering operation is stopped.

9. A secure video stream sharing and rights management system according to claim 8, characterized in that: The analysis of the network bandwidth required for each video frame in the specified video stream includes: determining the compression ratio corresponding to the encoding method of each video frame in the specified video stream according to the preset compression ratio corresponding to each encoding method of the video frame, multiplying the resolution, frame rate, color depth and the compression ratio corresponding to the encoding method of each video frame in the specified video stream to obtain the bit rate of each video frame in the specified video stream, and adding the bit rate to the preset network bandwidth margin to obtain the network bandwidth required for each video frame in the specified video stream.

10. A secure video stream sharing and rights management system according to claim 1, characterized in that: The dynamically regulating the access rights of the shared receiver to the specified video stream includes: if the playback frequency of the shared receiver to the specified video stream reaches a preset playback frequency warning threshold, suspending the playback rights of the shared receiver to the specified video stream for a preset time period, and popping up a warning to the shared receiver device to prompt it to operate in a standardized manner; If the IP address of the monitored shared receiver device is outside the preset security authorization area of ​​the target enterprise platform video stream or the device IP address change frequency reaches the preset address change frequency warning threshold, the shared receiver's download permission for the specified video stream will be suspended; If the monitored sharing recipient attempts to take screenshots or record the specified video stream for a preset number of warning times, the sharing recipient is prohibited from accessing the specified video stream and the target enterprise platform video stream sharing administrator is reported.

Images