Audio and video recording method and device based on quantum key

Abstract

The embodiment of the invention provides an audio and video recording method and device based on a quantum key, and the method is applied to a first client, and the method comprises the steps: obtaining a key parameter from a signaling server in response to a trigger event of a current audio and video call, obtaining the quantum key through the key parameter, and synchronizing the quantum key to a key data center, an audio and video call request is initiated to a signaling server to establish a current audio and video call, meanwhile, the signaling server sends a key parameter to a recording server after receiving the audio and video call request, and in the process of the current audio and video call, real-time audio and video data are encrypted by adopting a quantum key and are sent to the recording server; and the recording server obtains the quantum key for the current audio and video call from the key data center according to the key parameter, and decrypts the real-time audio and video data by using the quantum key to obtain a playable audio and video file, thereby improving the security of audio and video recording in the audio and video call process.

Description

Technical Field

[0001] The present invention relates to the field of audio and video calls and conferences, and in particular to an audio and video recording method and device based on quantum keys. Background Art

[0002] In the existing DTLS (Datagram Transport Layer Security) / SRTP (Secure Real-time Transport Protocol) encryption scheme, the DTLS channel is responsible for the exchange of SRTP keys between the client and the server, and SRTP uses the exchanged keys to encrypt RTP (Real-time Transport Protocol). Although this scheme is relatively mature, there is still a risk of key brute force cracking, and the media service in this scheme can decrypt the encrypted audio and video data, which still does not meet the encryption scenarios with high requirements.

[0003] Furthermore, the end-to-end encryption solution can well solve the problem of DTLS / SRTP encryption and decryption solutions. The end-to-end encrypted audio and video functions are defined by the audio and video client, the audio and video call server, and the quantum key distribution system. Both audio and video clients use quantum keys to encrypt the call content (including audio and video streams) end-to-end. This means that after the data is encrypted by the sender, only the receiver can decrypt it, and any data that is attempted to be intercepted along the way is meaningless garbled.

[0004] However, a new problem arises: if the client needs cloud recording, or some regulatory measures require recording audio and video, this cannot be achieved under the end-to-end encryption solution. Therefore, how to achieve cloud recording of audio and video while ensuring security becomes a difficult problem. Summary of the invention

[0005] In view of the above problems, a method and device for audio and video recording based on quantum key is proposed to overcome the above problems or at least partially solve the above problems, including:

[0006] A method for recording audio and video based on quantum keys, applied to a first client, the method comprising:

[0007] In response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server;

[0008] Obtaining the quantum key for the current audio and video call from the quantum key management service platform through the key parameters, and synchronizing the quantum key to the key data center;

[0009] Initiating an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is used to send the key parameter to the recording server after receiving the audio and video call request;

[0010] During the current audio and video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio and video data is sent to a recording server; wherein the recording server is used to obtain the quantum key used for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0011] Optionally, in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server includes:

[0012] The first client sends a communication request to the signaling server;

[0013] Accept the communication start response message returned by the signaling server to obtain the key parameter from the communication start response message.

[0014] Optionally, synchronizing the quantum key to a key data center includes:

[0015] Synchronizing the quantum key to the quantum key distribution system through the quantum key management service platform;

[0016] The quantum key is distributed to the key data center through the quantum key distribution system.

[0017] Optionally, the key data center and the recording server are set in an intranet, and the recording server is set as a whitelist in the key data center.

[0018] Optionally, the using the quantum key to encrypt the real-time audio and video data, and sending the encrypted real-time audio and video data to a recording server includes:

[0019] Acquire and encode the real-time audio and video data;

[0020] Encrypting the audio and video frames of the encoded real-time audio and video data using the quantum key;

[0021] The encrypted audio and video frames are forwarded to the recording server via the media server.

[0022] Optionally, during the current audio and video call, the real-time audio and video data is encrypted using the quantum key, and before the encrypted real-time audio and video data is sent to the recording server, the method further includes:

[0023] Using the session description protocol to negotiate with the media server and establish a first audio and video transmission channel;

[0024] The recording server is notified through the media server to record the audio and video call; wherein the media service negotiates with the recording server based on the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establishes a second audio and video transmission channel.

[0025] Optionally, the first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

[0026] A quantum key-based audio and video recording device, applied to a first client, comprising:

[0027] A key parameter acquisition module, configured to acquire key parameters from a signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client;

[0028] A key parameter synchronization module, which obtains the quantum key used for the current audio and video call from the quantum key management service platform through the key parameters, and synchronizes the quantum key to the key data center;

[0029] An audio and video call module, configured to initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request;

[0030] An audio and video data encryption and sending module is used to use the quantum key to encrypt real-time audio and video data during the current audio and video call, and send the encrypted real-time audio and video data to a recording server; wherein the recording server is used to obtain the quantum key used for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0031] An electronic device comprises a processor, a memory and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the audio and video recording method based on quantum key as described above is implemented.

[0032] A readable storage medium stores a computer program, and when the computer program is executed by a processor, the audio and video recording method based on quantum key as described above is implemented.

[0033] The embodiments of the present invention have the following advantages:

[0034] In an embodiment of the present invention, in response to a triggering event in which the first client requests to conduct a current audio and video call with the second client, a key parameter is obtained from a signaling server, and through the key parameter, a quantum key for the current audio and video call is obtained from a quantum key management service platform, and the quantum key is synchronized to a key data center, and an audio and video call request is initiated to the signaling server to establish the current audio and video call with the second client. The signaling server is used to send the key parameter to a recording server after receiving the audio and video call request. During the current audio and video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio and video data is sent to the recording server. The recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameter, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file, thereby reducing the risk of audio and video data being cracked during the audio and video call and improving the security of audio and video recording during the audio and video call. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solution of the present invention, the accompanying drawings required for use in the description of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0036] Figure 1 It is a flowchart of a method for recording audio and video based on quantum keys provided by one embodiment of the present invention;

[0037] Figure 2 It is a flowchart of steps for recording audio and video calls based on quantum keys provided by one embodiment of the present invention;

[0038] Figure 3 It is a structural block diagram of an audio and video recording device based on quantum key provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0039] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0040] Reference Figure 1 , shows a flowchart of the steps of an audio and video method provided by an embodiment of the present invention, the method can be applied to a first client, and specifically may include the following steps:

[0041] Step 101, in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtain a key parameter from a signaling server.

[0042] In actual applications, the client can be an app with integrated audio and video SDK (Software Development Kit) or a hardware device with audio and video capabilities such as a walkie-talkie, video equipment, etc. The signaling server can be responsible for processing the client's communication request and forwarding it to the other client, and generating key parameters.

[0043] In specific operations, when a user wants to use his own client (first client) to make an audio or video call with another user's client (second client), the key parameters can be obtained from the signaling server in response to the user's triggering operation on the first client.

[0044] In some embodiments of the present invention, in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server includes:

[0045] Sub-step 11: the first client sends a communication request to the signaling server.

[0046] In a specific implementation, the first client may send a communication request to the signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client.

[0047] Sub-step 12: accepting the communication start response message returned by the signaling server to obtain the key parameters from the communication start response message.

[0048] After receiving the communication request, the signaling server may return a communication start response message to the first client, and the communication start response message may include a key parameter. After receiving the communication start response message, the first client may obtain the key parameter from the communication start response message.

[0049] Step 102: Obtain the quantum key used for the current audio and video call from the quantum key management service platform through the key parameters, and synchronize the quantum key to the key data center.

[0050] In practical applications, the first client may obtain the quantum key in a key parameter, which may be a parameter called roomId. The quantum key management service platform may be a QMS (Quantum key Management Service platform), which is used to complete encryption terminal authentication, business and security, key distribution and key management functions of encrypted communication services. The key data center may be a KDC (Key Data Center) module, which is used to synchronize key-related information of the first client. In the subsequent description, English abbreviations are used for relevant descriptions.

[0051] Specifically, the first client uses roomId (key parameter) to obtain the quantum key, can access QMS through HTTPS, and send roomId to QMS (quantum key management service platform). QMS generates a quantum key, returns the quantum key to the first client, and synchronizes it to the KDC module (key data center).

[0052] Among them, the quantum key obtained by the first client from the QMS this time may be an encrypted quantum key. After obtaining the encrypted quantum key, the first client can use the injected key to decrypt the encrypted quantum key to obtain the plaintext quantum key, and the quantum key is only used for the current audio and video call.

[0053] In some embodiments of the present invention, synchronizing the quantum key to a key data center includes:

[0054] Sub-step 21, synchronizing the quantum key to the quantum key distribution system through the quantum key management service platform.

[0055] In practical applications, the quantum key distribution system may be QKD (Quantum Key Distribution), which is responsible for distributing quantum keys to entities with secure media or secure networks. In the subsequent description, English abbreviations are used for relevant descriptions.

[0056] Specifically, after the QMS generates the quantum key, in addition to sending the quantum key to the first client, the quantum key can also be synchronized to the QKD (quantum key distribution system).

[0057] Sub-step 22: distributing the quantum key to the key data center through the quantum key distribution system.

[0058] After receiving the quantum key synchronized by QMS, QKD can distribute the quantum key to the KDC module.

[0059] Step 103, initiating an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is used to send the key parameters to the recording server after receiving the audio and video call request.

[0060] After the first client receives the quantum key returned from the QMS, it can formally initiate a call request to the signaling server to conduct an audio or video call with the second client. The signaling server can confirm the call request for the audio or video call, thereby establishing the current audio or video call between the first client and the second client, and can send the roomid to the recording server.

[0061] Step 104: During the current audio and video call, the real-time audio and video data is encrypted using the quantum key, and the encrypted real-time audio and video data is sent to a recording server; wherein the recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0062] In practical applications, the key data center, namely the KDC module, can also be used to provide synchronization services and query services based on the functions described above. The recording server can be responsible for receiving encrypted real-time audio and video data and generating playable recording files.

[0063] Specifically, during the current audio and video call between the first client and the second client, the first client can use the quantum key obtained from the QMS to encrypt the real-time audio and video data, and can send the encrypted real-time audio and video data to the recording server.

[0064] Among them, before receiving the encrypted real-time audio and video data, the recording server can use the roomId sent by the signaling server in step 103 to access the KDC module through HTTP or HTTPS, and then query the corresponding quantum key in the KDC module through the roomId. The KDC module can return the corresponding quantum key to the recording server, and the recording server can write the quantum key to a local file.

[0065] After receiving the encrypted real-time audio and video data, the recording server can read the quantum key obtained from the KDC module query from the local file, and then use the quantum key to decrypt the encrypted real-time audio and video data, thereby obtaining a playable audio and video file.

[0066] In some embodiments of the present invention, the using of the quantum key to encrypt the real-time audio and video data, and sending the encrypted real-time audio and video data to a recording server, comprises:

[0067] Sub-step 31, obtaining and encoding the real-time audio and video data.

[0068] In actual applications, the first client can collect real-time audio and video data of the current audio and video call through the SDK, and then use OPUS (Opus Interactive Audio Codec, an open source audio codec) and H.264 (a widely used video compression standard) to encode the real-time audio and video data. The encoded audio and video data stream can be called a frame of data.

[0069] Sub-step 32, using the quantum key to encrypt the audio and video frames of the encoded real-time audio and video data.

[0070] After the real-time audio and video data is encoded, the audio and video frames of the encoded real-time audio and video data can be encrypted using the quantum key obtained from the QMS, and the encoded and encrypted audio and video frames can be packaged and written into the RTP packet.

[0071] Sub-step 33, forwarding the encrypted audio and video frames to the recording server via the media server.

[0072] In actual applications, the media server can be responsible for forwarding audio and video data packets after the client accesses, and can be responsible for the audio and video packet loss recovery function.

[0073] Specifically, the first client may send a packaged RTP packet to the media server, where the RTP packet includes the encoded and encrypted audio and video frames. Then, the media server may forward the RTP packet to the recording server.

[0074] In one example, the recording server can first store each audio and video frame data in a local file, and record the timestamp of the audio and video frame, and the quantum key obtained from the KDC module query is also stored in the local file. After the recording server receives the RTP packet forwarded by the media server, it can obtain the quantum key and the encrypted audio and video frame data from the local file, and use the quantum key to decrypt each audio and video frame data, so as to obtain playable audio and video data according to the recorded timestamp, and write the playable audio and video data into a playable file, such as mp4, flv, etc., to obtain a playable recording file.

[0075] In some embodiments of the present invention, during the current audio and video call, the real-time audio and video data is encrypted using the quantum key, and before the encrypted real-time audio and video data is sent to the recording server, the method further includes:

[0076] Sub-step 41, using the session description protocol to negotiate with the media server and establish a first audio and video transmission channel.

[0077] In actual applications, the session description protocol can be SDP (Session Description Protocol), which can be used to describe the media capabilities of each communication end (PC, Mac, Android, iOS, etc.), including audio codec capabilities, codec setting parameters, transmission protocols used, and audio and video media types, etc.

[0078] Specifically, during the current audio and video call, the quantum key is used to encrypt the real-time audio and video data. Before sending the encrypted real-time audio and video data to the recording server, the first client can use SDP (Session Description Protocol) to negotiate with the media server, and can recommend the audio and video transmission channel to the media server, that is, the first audio and video transmission channel.

[0079] Sub-step 42, notifying the recording server through the media server to record the current audio and video call; wherein, the media service negotiates with the recording server based on the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establishes a second audio and video transmission channel.

[0080] After the first client completes the SDP negotiation and the establishment of the first audio and video transmission channel with the media server, the recording server can be notified through the media server to record the current audio and video call.

[0081] The first client may perform SDP negotiation with the media server to send the codec parameters of the audio and video data of the current audio and video call, such as codec, SSRC (Synchronization Source Identifier), etc., to the media server.

[0082] The media server can negotiate with the recording server about the SDP sent by the first client and establish an audio and video transmission channel, namely the second audio and video transmission channel. During this process, the recording server can obtain the encoding and decoding parameters of the audio and video data of the current audio and video call of the first client through the media server.

[0083] As an example, after the recording server completes decryption of the audio and video data, it can decode the real-time audio and video data according to the acquired encoding and decoding parameters to obtain playable audio and video data.

[0084] In some embodiments of the present invention, the first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

[0085] The first audio and video transmission channel established between the first client and the media server, and the second audio and video transmission channel established between the media server and the recording server, can both be UDP channels.

[0086] In one example, the first client can send the packaged RTP packet to the media server, and can send it to the media server through the UDP port. Correspondingly, the media server can forward the RTP packet sent from the first client to the recording server through the UDP port.

[0087] In some embodiments of the present invention, the key data center and the recording server are arranged in an intranet, and the recording server is arranged as a whitelist in the key data center.

[0088] In actual applications, audio and video services, recording services, and KDC modules are deployed in the same network segment, and the recording server is set as a whitelist inside KDC. Real-time audio and video data is transmitted from the media server to the recording server deployed in the intranet, which is both secure and not limited by bandwidth. KDC provides a service for recording servers to obtain quantum keys. Deploying it in the intranet allows the KDC service to not open external network ports and protect it from possible attacks. If other companies want to use the KDC service, they need to deploy the KDC service in the external network. They can use the standardized HTTPS protocol and the access end IP whitelist to protect the KDC service.

[0089] In an embodiment of the present invention, in response to a triggering event in which the first client requests to conduct a current audio and video call with the second client, a key parameter is obtained from a signaling server, and a quantum key for the current audio and video call is obtained from a quantum key management service platform through the key parameter, and the quantum key is synchronized to a key data center, and an audio and video call request is initiated to the signaling server to establish the current audio and video call with the second client. The signaling server is used to send the key parameter to a recording server after receiving the audio and video call request. During the current audio and video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio and video data is sent to the recording server. The recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameter, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file, thereby reducing the risk of audio and video data being cracked during the audio and video call and improving the security of audio and video recording during the audio and video call.

[0090] See attached Figure 2 , is a flowchart of a step of recording an audio or video call based on a quantum key according to an embodiment of the present invention. In order to enable those skilled in the art to better understand the above steps, the following is a flowchart of a step of recording an audio or video call based on a quantum key according to an embodiment of the present invention. Figure 2 The embodiments of the present invention are described exemplarily, but it should be understood that the embodiments of the present invention are not limited thereto.

[0091] 1. The client (first client) initiates a communication request to the signaling server, and the signaling server returns a communication start response message, which contains roomId (i.e., key parameter);

[0092] 2. The client uses roomId to obtain the quantum key from QMS (i.e., quantum key management service platform), and QMS generates the quantum key;

[0093] 3. QMS returns the quantum key to the client and synchronizes it to QKD (i.e. quantum key distribution system). QKD distributes the quantum key to the KDC module (i.e. key data center);

[0094] 4. The client initiates a call through the signaling server. The signaling server confirms the call, thereby establishing an audio and video call between the two clients and sending the roomId to the recording server.

[0095] 5. The client negotiates SDP with the media server and establishes an audio and video transmission channel (a first audio and video transmission channel) for audio and video data transmission;

[0096] 6. The media server notifies the recording server and negotiates the SDP sent by the client with the recording server to obtain relevant codec parameters and establish another audio and video transmission channel (i.e., the second audio and video transmission channel);

[0097] 7. The recording server uses roomId to query the corresponding quantum key in the KDC module;

[0098] 8. KDC sends the corresponding quantum key to the recording server, and the recording server writes the quantum key to a local file;

[0099] 9. The client obtains the real-time audio and video data of the current audio and video call, and encodes it to obtain audio and video frame data;

[0100] 10. The client encrypts the audio and video frames using the quantum key and packages them into RTP packets;

[0101] 11. The client sends the RTP packet to the media server, and the media server forwards the RTP packet to the recording server;

[0102] 12. The recording server writes each frame of data received into a local file;

[0103] 13. After receiving the data, the recording server reads the encrypted audio and video frame data and quantum key from the local file;

[0104] 14. The recording server uses quantum keys to decrypt the encrypted audio and video frame data to obtain playable audio and video data;

[0105] 15. The recording server writes the playable audio and video data into the audio and video file to obtain a playable audio and video file, thereby completing the secure recording of the audio and video call.

[0106] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0107] Reference Figure 3 , shows a schematic diagram of the structure of an audio and video recording device based on quantum key provided by an embodiment of the present invention, the device can be applied to a first client, and specifically may include the following modules:

[0108] The key parameter acquisition module 301 is used to obtain the key parameter from the signaling server in response to the triggering event that the first client requests to conduct a current audio or video call with the second client;

[0109] The key parameter synchronization module 302 obtains the quantum key for the current audio and video call from the quantum key management service platform through the key parameter, and synchronizes the quantum key to the key data center;

[0110] The audio and video call module 303 is used to initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is used to send the key parameter to the recording server after receiving the audio and video call request;

[0111] The audio and video data encryption and sending module 304 is used to use the quantum key to encrypt real-time audio and video data during the current audio and video call, and send the encrypted real-time audio and video data to the recording server; wherein the recording server is used to obtain the quantum key used for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0112] In one embodiment of the present invention, the key parameter acquisition module 301 includes:

[0113] A communication request submodule, configured for the first client to send a communication request to the signaling server;

[0114] The key parameter acquisition submodule is used to receive the communication start response message returned by the signaling server to obtain the key parameter from the communication start response message.

[0115] In one embodiment of the present invention, the key parameter synchronization module 302 includes:

[0116] A key parameter synchronization submodule, used to synchronize the quantum key to the quantum key distribution system through the quantum key management service platform;

[0117] A key parameter distribution submodule is used to distribute the quantum key to the key data center through the quantum key distribution system.

[0118] In one embodiment of the present invention, the audio and video data encryption and transmission module 304 includes:

[0119] The encoding submodule obtains and encodes the real-time audio and video data;

[0120] An encryption submodule, using the quantum key to encrypt the audio and video frames of the encoded real-time audio and video data;

[0121] The sending submodule forwards the encrypted audio and video frames to the recording server through the media server.

[0122] In one embodiment of the present invention, the device further comprises:

[0123] An audio and video transmission channel establishment module, used to negotiate with the media server using a session description protocol and establish a first audio and video transmission channel;

[0124] An audio and video recording notification module is used to notify the recording server through the media server to record the audio and video call; wherein, the media service negotiates with the recording server based on the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establish a second audio and video transmission channel.

[0125] In one embodiment of the present invention, the first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

[0126] In one embodiment of the present invention, the key data center and the recording server are arranged in an intranet, and the recording server is arranged as a whitelist in the key data center.

[0127] In an embodiment of the present invention, in response to a triggering event in which the first client requests to conduct a current audio and video call with the second client, a key parameter is obtained from a signaling server, and a quantum key for the current audio and video call is obtained from a quantum key management service platform through the key parameter, and the quantum key is synchronized to a key data center, and an audio and video call request is initiated to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is used to send the key parameter to a recording server after receiving the audio and video call request, and during the current audio and video call, the real-time audio and video data is encrypted using the quantum key, and the encrypted real-time audio and video data is sent to the recording server, wherein the recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameter, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file, thereby reducing the risk of audio and video data being cracked during the audio and video call and improving the security of audio and video recording during the audio and video call.

[0128] An embodiment of the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the quantum key-based audio and video recording method as described above is implemented.

[0129] An embodiment of the present invention further provides a readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the audio and video recording method based on quantum key as described above is implemented.

[0130] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0131] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0132] Those skilled in the art will appreciate that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0133] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0134] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0135] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0136] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0137] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0138] The above is a detailed introduction to the provided audio and video recording method and device based on quantum key. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for recording audio and video based on quantum key, characterized in that: Applied to a first client, the method includes: In response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server; Obtaining the quantum key for the current audio and video call from the quantum key management service platform through the key parameters, and synchronizing the quantum key to the key data center; Initiating an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is used to send the key parameter to the recording server after receiving the audio and video call request; During the current audio and video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio and video data is sent to a recording server; wherein the recording server is used to obtain the quantum key used for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

2. The method according to claim 1, characterized in that The step of obtaining a key parameter from a signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client includes: The first client sends a communication request to the signaling server; Accept the communication start response message returned by the signaling server to obtain the key parameter from the communication start response message.

3. The method according to claim 1, characterized in that The step of synchronizing the quantum key to a key data center includes: Synchronizing the quantum key to the quantum key distribution system through the quantum key management service platform; The quantum key is distributed to the key data center through the quantum key distribution system.

4. The method according to claim 1, characterized in that The method of encrypting the real-time audio and video data by using the quantum key and sending the encrypted real-time audio and video data to the recording server includes: Acquire and encode the real-time audio and video data; Encrypting the audio and video frames of the encoded real-time audio and video data using the quantum key; The encrypted audio and video frames are forwarded to the recording server via the media server.

5. The method according to claim 4, characterized in that In the process of the current audio and video call, the real-time audio and video data is encrypted by using the quantum key, and before the encrypted real-time audio and video data is sent to the recording server, the method further includes: Using the session description protocol to negotiate with the media server and establish a first audio and video transmission channel; The recording server is notified through the media server to record the audio and video call; wherein the media service negotiates with the recording server based on the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establishes a second audio and video transmission channel.

6. The method according to claim 5, characterized in that The first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

7. The method according to any one of claims 1 to 4, characterized in that: The key data center and the recording server are arranged in an intranet, and the recording server is arranged as a whitelist in the key data center.

8. An audio and video recording device based on quantum key, characterized in that: Applied to a first client, the device comprises: A key parameter acquisition module, configured to acquire key parameters from a signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client; A key parameter synchronization module, which obtains the quantum key used for the current audio and video call from the quantum key management service platform through the key parameters, and synchronizes the quantum key to the key data center; An audio and video call module, configured to initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request; An audio and video data encryption and sending module is used to use the quantum key to encrypt real-time audio and video data during the current audio and video call, and send the encrypted real-time audio and video data to a recording server; wherein the recording server is used to obtain the quantum key used for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

9. An electronic device, characterized in that: The invention comprises a processor, a memory and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the audio and video recording method based on quantum key as described in any one of claims 1 to 7 is implemented.

10. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the audio and video recording method based on quantum keys as described in any one of claims 1 to 7 is implemented.

Images