A quantum key-based audio and video recording method and device

Abstract

The embodiment of the application provides a kind of audio and video recording method and device based on quantum key, it is applied to first client, the method comprises: in response to the trigger event of current audio and video call, obtain key parameter from signaling server, obtain quantum key by key parameter, and give key data center simultaneously, initiates audio and video call request to signaling server to establish current audio and video call, simultaneously, signaling server sends key parameter to recording server after receiving audio and video call request, in the process of current audio and video call, real-time audio and video data are encrypted using quantum key, and are sent to recording server;Recording server obtains quantum key for current audio and video call from key data center according to key parameter, and real-time audio and video data are decrypted using quantum key, obtain playable audio and video file, to improve the security of audio and video recording in the process of audio and video call.

Description

Technical Field

[0001] The present invention relates to the field of audio and video calls and conferences, and in particular to a method and device for recording audio and video based on quantum keys. Background Art

[0002] In the existing DTLS (Datagram Transport Layer Security) / SRTP (Secure Real-time Transport Protocol) encryption scheme, the DTLS channel is responsible for exchanging SRTP keys between the client and server. SRTP uses the exchanged keys to encrypt RTP (Real-time Transport Protocol). Although this solution is relatively mature, it still faces the risk of key brute force cracking. Furthermore, media services can decrypt encrypted audio and video data in this solution, which still does not meet the requirements of high-demand encryption scenarios.

[0003] Furthermore, end-to-end encryption effectively addresses the encryption and decryption issues inherent in DTLS / SRTP. End-to-end encrypted audio and video functionality is defined by the audio and video client, the audio and video call server, and the quantum key distribution system. Both the audio and video client and the call content (including audio and video streams) use quantum keys to perform end-to-end encryption. This means that once the data is encrypted by the sender, only the receiver can decrypt it, rendering any attempt to intercept the data in transit as meaningless garbled data.

[0004] However, a new problem arises: if the client requires cloud recording, or if some regulatory measures require audio and video recording, this cannot be achieved under the end-to-end encryption solution. Therefore, how to achieve cloud recording of audio and video while ensuring security becomes a difficult problem. Summary of the Invention

[0005] In view of the above problems, a method and apparatus for audio and video recording based on quantum key is proposed to overcome or at least partially solve the above problems, including:

[0006] A quantum key-based audio and video recording method, applied to a first client, comprising:

[0007] In response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server;

[0008] Obtaining the quantum key for the current audio and video call from the quantum key management service platform using the key parameters, and synchronizing the quantum key to the key data center;

[0009] Initiating an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request;

[0010] During the current audio and video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio and video data is sent to a recording server; wherein, the recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0011] Optionally, in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server includes:

[0012] The first client sends a communication request to the signaling server;

[0013] Accept the communication start response message returned by the signaling server to obtain the key parameter from the communication start response message.

[0014] Optionally, synchronizing the quantum key to a key data center includes:

[0015] Synchronizing the quantum key to the quantum key distribution system through the quantum key management service platform;

[0016] The quantum key is distributed to the key data center through the quantum key distribution system.

[0017] Optionally, the key data center and the recording server are set in an intranet, and the recording server is set as a whitelist in the key data center.

[0018] Optionally, encrypting the real-time audio and video data using the quantum key and sending the encrypted real-time audio and video data to a recording server includes:

[0019] Acquire and encode the real-time audio and video data;

[0020] Encrypting the encoded audio and video frames of the real-time audio and video data using the quantum key;

[0021] The encrypted audio and video frames are forwarded to the recording server via the media server.

[0022] Optionally, during the current audio and video call, encrypting the real-time audio and video data using the quantum key, and before sending the encrypted real-time audio and video data to the recording server, further comprising:

[0023] Using the Session Description Protocol to negotiate with the media server and establish a first audio and video transmission channel;

[0024] The recording server is notified through the media server to record the audio and video call; wherein, the media service will negotiate with the recording server based on the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establish a second audio and video transmission channel.

[0025] Optionally, the first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

[0026] A quantum key-based audio and video recording device, applied to a first client, comprising:

[0027] a key parameter acquisition module, configured to obtain a key parameter from a signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client;

[0028] a key parameter synchronization module, which obtains the quantum key for the current audio and video call from the quantum key management service platform using the key parameters, and synchronizes the quantum key to the key data center;

[0029] an audio and video call module, configured to initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request;

[0030] An audio and video data encryption and sending module is used to encrypt real-time audio and video data using the quantum key during the current audio and video call, and send the encrypted real-time audio and video data to a recording server; wherein the recording server is used to obtain the quantum key for the current audio and video call from the key data center based on the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0031] An electronic device includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the quantum key-based audio and video recording method as described above is implemented.

[0032] A readable storage medium stores a computer program, which, when executed by a processor, implements the above-mentioned quantum key-based audio and video recording method.

[0033] The embodiments of the present invention have the following advantages:

[0034] In an embodiment of the present invention, in response to a triggering event in which the first client requests a current audio or video call with the second client, key parameters are obtained from a signaling server. Using the key parameters, a quantum key for the current audio or video call is obtained from a quantum key management service platform, and the quantum key is synchronized to a key data center. An audio or video call request is initiated to the signaling server to establish the current audio or video call with the second client. After receiving the audio or video call request, the signaling server is configured to send the key parameters to a recording server. During the current audio or video call, real-time audio or video data is encrypted using the quantum key, and the encrypted real-time audio or video data is sent to the recording server. The recording server is configured to obtain the quantum key for the current audio or video call from the key data center based on the key parameters, and decrypt the real-time audio or video data using the quantum key to obtain a playable audio or video file. This reduces the risk of audio or video data being compromised during the audio or video call and improves the security of audio or video recording during the audio or video call. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solution of the present invention, the following briefly introduces the drawings required for use in the description of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0036] Figure 1 This is a flowchart of a method for recording audio and video based on quantum keys according to an embodiment of the present invention;

[0037] Figure 2 This is a flowchart of the steps for recording an audio or video call based on quantum keys provided by one embodiment of the present invention;

[0038] Figure 3 This is a structural block diagram of a quantum key-based audio and video recording device provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0039] To make the above-mentioned objects, features, and advantages of the present invention more clearly understood, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the embodiments described are only a portion of the embodiments of the present invention, not all of them. All other embodiments derived by persons of ordinary skill in the art based on the embodiments of the present invention without inventive effort are also within the scope of protection of the present invention.

[0040] Reference Figure 1 , shows a flowchart of an audio and video method provided by an embodiment of the present invention. The method can be applied to a first client and may specifically include the following steps:

[0041] Step 101: In response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtain a key parameter from a signaling server.

[0042] In actual applications, the client can be an app with an integrated audio and video SDK (Software Development Kit) or a hardware device with audio and video capabilities, such as a walkie-talkie or video equipment. The signaling server can be responsible for processing the client's communication request and forwarding it to the other client, and generating key parameters.

[0043] In specific operations, when a user wants to use his own client (first client) to make an audio or video call with another user's client (second client), the key parameters can be obtained from the signaling server in response to the user's triggering operation on the first client.

[0044] In some embodiments of the present invention, in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server includes:

[0045] Sub-step 11: the first client sends a communication request to the signaling server.

[0046] In a specific implementation, the first client may send a communication request to the signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client.

[0047] Sub-step 12: accepting the communication start response message returned by the signaling server to obtain key parameters from the communication start response message.

[0048] After receiving the communication request, the signaling server may return a communication start response message to the first client. The communication start response message may include a key parameter. After receiving the communication start response message, the first client may obtain the key parameter from the communication start response message.

[0049] Step 102: Obtain the quantum key for the current audio and video call from the quantum key management service platform using the key parameters, and synchronize the quantum key to the key data center.

[0050] In practical applications, the first client can obtain the quantum key using a key parameter, which can be a parameter called roomId. The quantum key management service platform can be a QMS (Quantum Key Management Service Platform), which is used to perform encryption terminal authentication, service and security, key distribution, and key management functions for encrypted communication services. The key data center can be a KDC (Key Data Center) module, which is used to synchronize key-related information with the first client. In the following descriptions, English abbreviations are used for relevant descriptions.

[0051] Specifically, the first client uses roomId (key parameter) to obtain the quantum key, can access QMS through HTTPS, and send roomId to QMS (quantum key management service platform). QMS generates the quantum key, returns the quantum key to the first client, and synchronizes it to the KDC module (key data center).

[0052] Among them, the quantum key obtained by the first client from the QMS this time may be an encrypted quantum key. After obtaining the encrypted quantum key, the first client can use the injected key to decrypt the encrypted quantum key to obtain the plaintext quantum key, and the quantum key is only used for the current audio and video call.

[0053] In some embodiments of the present invention, synchronizing the quantum key to a key data center includes:

[0054] Sub-step 21: synchronizing the quantum key to the quantum key distribution system through the quantum key management service platform.

[0055] In practical applications, the quantum key distribution system can be QKD (Quantum Key Distribution), which is responsible for distributing quantum keys to entities with secure media or secure networks. In the subsequent description, the English abbreviations are used for relevant descriptions.

[0056] Specifically, after the QMS generates the quantum key, in addition to sending the quantum key to the first client, the quantum key can also be synchronized to the QKD (quantum key distribution system).

[0057] Sub-step 22: distributing the quantum key to the key data center through the quantum key distribution system.

[0058] After receiving the quantum key synchronized by QMS, QKD can distribute the quantum key to the KDC module.

[0059] Step 103: Initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is used to send the key parameter to the recording server after receiving the audio and video call request.

[0060] After the first client receives the quantum key returned from the QMS, it can formally initiate a call request to the signaling server for an audio or video call with the second client. The signaling server can confirm the call request for the audio or video call, thereby establishing the current audio or video call between the first client and the second client, and can send the roomId to the recording server.

[0061] Step 104: During the current audio and video call, the real-time audio and video data is encrypted using the quantum key, and the encrypted real-time audio and video data is sent to a recording server; wherein the recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0062] In practical applications, the key data center (KDC) module can provide synchronization and query services in addition to the functions described above. The recording server can be responsible for receiving encrypted real-time audio and video data and generating playable recording files.

[0063] Specifically, during the current audio and video call between the first client and the second client, the first client can use the quantum key obtained from the QMS to encrypt the real-time audio and video data, and can send the encrypted real-time audio and video data to the recording server.

[0064] Before receiving the encrypted real-time audio and video data, the recording server can use the roomId sent by the signaling server in step 103 to access the KDC module through HTTP or HTTPS, and then query the corresponding quantum key in the KDC module through the roomId. The KDC module can return the corresponding quantum key to the recording server, and the recording server can write the quantum key to a local file.

[0065] After receiving the encrypted real-time audio and video data, the recording server can read the quantum key obtained from the KDC module query from the local file, and then use the quantum key to decrypt the encrypted real-time audio and video data, thereby obtaining a playable audio and video file.

[0066] In some embodiments of the present invention, encrypting the real-time audio and video data using the quantum key and sending the encrypted real-time audio and video data to a recording server includes:

[0067] Sub-step 31: obtaining and encoding the real-time audio and video data.

[0068] In actual applications, the first client can collect real-time audio and video data of the current audio and video call through the SDK, and then use OPUS (Opus Interactive Audio Codec, an open source audio codec) and H.264 (a widely used video compression standard) to encode the real-time audio and video data. The encoded audio and video data stream can be called a frame of data.

[0069] Sub-step 32: using the quantum key to encrypt the audio and video frames of the encoded real-time audio and video data.

[0070] After the real-time audio and video data is encoded, the quantum key obtained from the QMS can be used to encrypt the audio and video frames of the encoded real-time audio and video data, and the encoded and encrypted audio and video frames can be packaged and written into the RTP packet.

[0071] Sub-step 33: forwarding the encrypted audio and video frames to the recording server via the media server.

[0072] In actual applications, the media server can be responsible for forwarding audio and video data packets after the client accesses the server, and can also be responsible for the audio and video packet loss recovery function.

[0073] Specifically, the first client may send the packaged RTP packet to the media server. The RTP packet includes the encoded and encrypted audio and video frames. Then, the media server may forward the RTP packet to the recording server.

[0074] In one example, the recording server can first store each audio and video frame in a local file and record the timestamp of the audio and video frame. The quantum key retrieved from the KDC module is also stored in the local file. After receiving the RTP packet forwarded by the media server, the recording server can retrieve the quantum key and encrypted audio and video frame data from the local file and use it to decrypt each audio and video frame. Based on the recorded timestamp, the playable audio and video data is then written to a playable file, such as an MP4 or FLV file, to produce a playable recording file.

[0075] In some embodiments of the present invention, during the current audio and video call, encrypting the real-time audio and video data using the quantum key, and before sending the encrypted real-time audio and video data to the recording server, further includes:

[0076] Sub-step 41: negotiate with the media server using the session description protocol and establish a first audio and video transmission channel.

[0077] In actual applications, the session description protocol can be SDP (Session Description Protocol), which can be used to describe the media capabilities of each communication end (PC, Mac, Android, iOS, etc.), including audio codec capabilities, codec setting parameters, used transmission protocols, and audio and video media types, etc.

[0078] Specifically, during the current audio and video call, the quantum key is used to encrypt the real-time audio and video data. Before sending the encrypted real-time audio and video data to the recording server, the first client can use SDP (Session Description Protocol) to negotiate with the media server and can recommend the audio and video transmission channel to the media server, that is, the first audio and video transmission channel.

[0079] In sub-step 42, the media server notifies the recording server to record the current audio and video call; wherein, the media service negotiates with the recording server using the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establishes a second audio and video transmission channel.

[0080] After the first client completes the SDP negotiation and the establishment of the first audio and video transmission channel with the media server, the recording server can be notified through the media server to record the current audio and video call.

[0081] The first client may perform SDP negotiation with the media server to send the codec parameters of the audio and video data of the current audio and video call, such as codec, SSRC (Synchronization Source Identifier), etc., to the media server.

[0082] The media server can negotiate with the recording server about the SDP sent by the first client and establish an audio and video transmission channel, namely the second audio and video transmission channel. During this process, the recording server can obtain the encoding and decoding parameters of the audio and video data of the current audio and video call of the first client through the media server.

[0083] As an example, after the recording server completes decryption of the audio and video data, it can decode the real-time audio and video data according to the acquired codec parameters to obtain playable audio and video data.

[0084] In some embodiments of the present invention, the first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

[0085] The first audio and video transmission channel established between the first client and the media server, and the second audio and video transmission channel established between the media server and the recording server, can both be UDP channels.

[0086] In one example, the first client can send the packaged RTP packet to the media server, and can send it to the media server through the UDP port. Correspondingly, the media server can forward the RTP packet sent from the first client to the recording server through the UDP port.

[0087] In some embodiments of the present invention, the key data center and the recording server are set in an intranet, and the recording server is set as a whitelist in the key data center.

[0088] In practice, the audio and video service, recording service, and KDC module are deployed on the same network segment, and the recording server is whitelisted within the KDC. Real-time audio and video data is transmitted from the media server to the recording server on the intranet, ensuring security and unrestricted bandwidth. The KDC provides the recording server with a quantum key acquisition service. Deploying it within the intranet allows the KDC service to remain private, protecting it from potential attacks. If other companies wish to use the KDC service, they must deploy it externally. This can be protected using the standardized HTTPS protocol and a whitelist of access point IP addresses.

[0089] In an embodiment of the present invention, in response to a triggering event in which a first client requests a current audio or video call with a second client, key parameters are obtained from a signaling server. Using the key parameters, a quantum key for the current audio or video call is obtained from a quantum key management service platform. The quantum key is synchronized to a key data center, and an audio or video call request is initiated to the signaling server to establish the current audio or video call with the second client. After receiving the audio or video call request, the signaling server is configured to send the key parameters to a recording server. During the current audio or video call, real-time audio or video data is encrypted using the quantum key, and the encrypted real-time audio or video data is sent to the recording server. The recording server is configured to obtain the quantum key for the current audio or video call from the key data center based on the key parameters, and decrypt the real-time audio or video data using the quantum key to obtain a playable audio or video file. This reduces the risk of audio or video data being compromised during the audio or video call and improves the security of audio or video recording during the audio or video call.

[0090] See attached Figure 2 , is a flowchart of a step of recording an audio or video call based on a quantum key according to an embodiment of the present invention. In order to enable those skilled in the art to better understand the above steps, the following is combined with the attached Figure 2 The embodiments of the present invention are described as examples, but it should be understood that the embodiments of the present invention are not limited thereto.

[0091] 1. The client (first client) initiates a communication request to the signaling server, and the signaling server returns a communication start response message, which contains the roomId (i.e., the key parameter);

[0092] 2. The client uses roomId to obtain the quantum key from QMS (i.e., quantum key management service platform), and QMS generates the quantum key;

[0093] 3. QMS returns the quantum key to the client and synchronizes it to QKD (i.e., quantum key distribution system). QKD distributes the quantum key to the KDC module (i.e., key data center);

[0094] 4. The client initiates a call through the signaling server. The signaling server confirms the call, thus establishing an audio and video call between the two clients and sending the roomId to the recording server.

[0095] 5. The client negotiates SDP with the media server and establishes an audio and video transmission channel (a first audio and video transmission channel) for audio and video data transmission;

[0096] 6. The media server notifies the recording server and negotiates the SDP sent by the client with the recording server to obtain relevant codec parameters and establish another audio and video transmission channel (i.e., the second audio and video transmission channel);

[0097] 7. The recording server uses roomId to query the corresponding quantum key in the KDC module;

[0098] 8. The KDC sends the corresponding quantum key to the recording server, and the recording server writes the quantum key to a local file;

[0099] 9. The client obtains the real-time audio and video data of the current audio and video call and encodes it to obtain audio and video frame data;

[0100] 10. The client encrypts the audio and video frames using the quantum key and packages them into RTP packets;

[0101] 11. The client sends the RTP packet to the media server, and the media server forwards the RTP packet to the recording server;

[0102] 12. The recording server writes each frame of data received into a local file;

[0103] 13. After receiving the data, the recording server reads the encrypted audio and video frame data and quantum key from the local file;

[0104] 14. The recording server uses quantum keys to decrypt the encrypted audio and video frame data to obtain playable audio and video data;

[0105] 15. The recording server writes the playable audio and video data into the audio and video file to obtain a playable audio and video file, thereby completing the secure recording of the audio and video call.

[0106] It should be noted that for the sake of simplicity, the method embodiments are described as a series of actions. However, those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in this specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0107] Reference Figure 3 , which shows a schematic structural diagram of an audio and video recording device based on quantum key according to an embodiment of the present invention. The device can be applied to a first client and specifically includes the following modules:

[0108] The key parameter acquisition module 301 is configured to obtain the key parameter from the signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client;

[0109] A key parameter synchronization module 302 obtains the quantum key for the current audio and video call from the quantum key management service platform using the key parameters, and synchronizes the quantum key to the key data center;

[0110] The audio and video call module 303 is configured to initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request;

[0111] The audio and video data encryption and sending module 304 is used to use the quantum key to encrypt real-time audio and video data during the current audio and video call, and send the encrypted real-time audio and video data to the recording server; wherein, the recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

[0112] In one embodiment of the present invention, the key parameter acquisition module 301 includes:

[0113] A communication request submodule, configured for the first client to send a communication request to the signaling server;

[0114] The key parameter acquisition submodule is used to receive the communication start response message returned by the signaling server to obtain the key parameter from the communication start response message.

[0115] In one embodiment of the present invention, the key parameter synchronization module 302 includes:

[0116] A key parameter synchronization submodule, configured to synchronize the quantum key to a quantum key distribution system via the quantum key management service platform;

[0117] A key parameter distribution submodule is used to distribute the quantum key to the key data center through the quantum key distribution system.

[0118] In one embodiment of the present invention, the audio and video data encryption and transmission module 304 includes:

[0119] The encoding submodule obtains and encodes the real-time audio and video data;

[0120] An encryption submodule, which uses the quantum key to encrypt the audio and video frames of the encoded real-time audio and video data;

[0121] The sending submodule forwards the encrypted audio and video frames to the recording server through the media server.

[0122] In one embodiment of the present invention, the apparatus further comprises:

[0123] An audio and video transmission channel establishing module, configured to negotiate with the media server using a session description protocol and establish a first audio and video transmission channel;

[0124] An audio and video recording notification module is used to notify the recording server through the media server to record the audio and video call; wherein, the media service negotiates with the recording server using the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establish a second audio and video transmission channel.

[0125] In one embodiment of the present invention, the first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

[0126] In one embodiment of the present invention, the key data center and the recording server are set in an intranet, and the recording server is set as a whitelist in the key data center.

[0127] In an embodiment of the present invention, in response to a triggering event in which a first client requests a current audio or video call with a second client, key parameters are obtained from a signaling server. A quantum key for the current audio or video call is obtained from a quantum key management service platform using the key parameters. The quantum key is synchronized to a key data center, and an audio or video call request is initiated to the signaling server to establish the current audio or video call with the second client. Upon receiving the audio or video call request, the signaling server is configured to send the key parameters to a recording server. During the current audio or video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio or video data is sent to the recording server. The recording server is configured to obtain the quantum key for the current audio or video call from the key data center based on the key parameters, and decrypt the real-time audio or video data using the quantum key to obtain a playable audio or video file. This reduces the risk of audio or video data being compromised during the audio or video call and improves the security of audio or video recording during the audio or video call.

[0128] An embodiment of the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the quantum key-based audio and video recording method as described above is implemented.

[0129] An embodiment of the present invention further provides a readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the audio and video recording method based on quantum key as described above is implemented.

[0130] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0131] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0132] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, apparatus, or computer program products. Thus, embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0133] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the process in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0134] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0135] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0136] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the basic creative concepts. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0137] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0138] The above is a detailed introduction to the provided method and device for audio and video recording based on quantum key. Specific examples are used herein to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core ideas. At the same time, for those skilled in the art, according to the ideas of the present invention, there may be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A method for recording audio and video based on quantum key, characterized in that: Applied to a first client, the method includes: In response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, obtaining a key parameter from a signaling server; Obtaining the quantum key for the current audio and video call from the quantum key management service platform using the key parameters, and synchronizing the quantum key to the key data center; Initiating an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request; During the current audio and video call, the quantum key is used to encrypt real-time audio and video data, and the encrypted real-time audio and video data is sent to a recording server; wherein, the recording server is used to obtain the quantum key for the current audio and video call from the key data center according to the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

2. The method according to claim 1, characterized in that The obtaining, in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client, a key parameter from a signaling server includes: The first client sends a communication request to the signaling server; Accept the communication start response message returned by the signaling server to obtain the key parameter from the communication start response message.

3. The method according to claim 1, characterized in that Synchronizing the quantum key to a key data center includes: Synchronizing the quantum key to the quantum key distribution system through the quantum key management service platform; The quantum key is distributed to the key data center through the quantum key distribution system.

4. The method according to claim 1, wherein The method of encrypting the real-time audio and video data by using the quantum key and sending the encrypted real-time audio and video data to the recording server includes: Acquire and encode the real-time audio and video data; Encrypting the encoded audio and video frames of the real-time audio and video data using the quantum key; The encrypted audio and video frames are forwarded to the recording server via the media server.

5. The method according to claim 4, characterized in that During the current audio and video call, the real-time audio and video data is encrypted using the quantum key, and before the encrypted real-time audio and video data is sent to the recording server, the method further includes: Negotiate with the media server using the Session Description Protocol and establish a first audio and video transmission channel; The recording server is notified through the media server to record the audio and video call; wherein, the media service will negotiate with the recording server based on the session description protocol received from the first client to send the encoding and decoding parameters of the real-time audio and video data sent by the first client to the recording server through the session description protocol, and establish a second audio and video transmission channel.

6. The method according to claim 5, characterized in that The first audio and video transmission channel and the second audio and video transmission channel are UDP channels.

7. The method according to any one of claims 1 to 4, characterized in that The key data center and the recording server are set in an intranet, and the recording server is set as a whitelist in the key data center.

8. An audio and video recording device based on quantum key, characterized in that: Applied to a first client, the device includes: a key parameter acquisition module, configured to obtain a key parameter from a signaling server in response to a triggering event in which the first client requests to conduct a current audio or video call with the second client; a key parameter synchronization module, which obtains the quantum key for the current audio and video call from the quantum key management service platform using the key parameters, and synchronizes the quantum key to the key data center; an audio and video call module, configured to initiate an audio and video call request to the signaling server to establish the current audio and video call with the second client; wherein the signaling server is configured to send the key parameter to the recording server after receiving the audio and video call request; An audio and video data encryption and sending module is used to encrypt real-time audio and video data using the quantum key during the current audio and video call, and send the encrypted real-time audio and video data to a recording server; wherein the recording server is used to obtain the quantum key for the current audio and video call from the key data center based on the key parameters, and use the quantum key to decrypt the real-time audio and video data to obtain a playable audio and video file.

9. An electronic device, characterized in that: The invention comprises a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the method for audio and video recording based on quantum key according to any one of claims 1 to 7 is implemented.

10. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by the processor, it implements the quantum key-based audio and video recording method according to any one of claims 1 to 7.

Images