Video signature method and device

Abstract

The invention discloses a video signature method and a video signature device, which are used for solving the problem of relatively low reliability of an obtained signature video in a related video signature technology. The method comprises the following steps: receiving a signature request for a video sent by a client, and analyzing the video according to a frame number M corresponding to the video under the condition that a user corresponding to the client is issued with a first digital certificate to obtain M pieces of first video frame data; m first sub-seals are generated based on the first digital certificate, and M first random quantum identification bits are obtained through negotiation with an encryption machine; determining a first Hash signature of the M pieces of first video frame data based on a private key of a first asymmetric encryption algorithm of a user stored in the encryption machine and the M pieces of first random quantum identification bits through the encryption machine; and according to the M first hash signatures and the M first sub-seals, performing first signature processing on the M first video frame data to obtain target signature video data corresponding to the video.

Description

Technical Field

[0001] The present application belongs to the field of data security technology, and specifically relates to a video signing method and device. Background Art

[0002] In recent years, artificial intelligence (AI) technology has become more and more mature, and it has become easier to use AI technology to tamper with videos. In addition, in some cases, video tampering may lead to serious consequences.

[0003] In order to ensure the reliability of the video, in the related technology, a summary is generated for the key frames of the video, and then the summary is encrypted using the private key of the asymmetric encryption SM2 algorithm to generate a signature, and the key frames are signed according to the signature. However, some content of the signed video generated using this video signing technology is still easily tampered with.

[0004] That is to say, the related video signing technology has the problem that the reliability of the signed video is low. Summary of the invention

[0005] The embodiments of the present application provide a video signing method and device, which can solve the problem of low reliability of the signed video in related video signing technologies.

[0006] In a first aspect, an embodiment of the present application provides a video signing method, which is applied to a signing platform, and the method includes: receiving a signing request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, parsing the video according to the number of frames M corresponding to the video to obtain M first video frame data; generating M first sub-seals based on the first digital certificate, and obtaining M first random quantum identification bits through negotiation with an encryption machine; determining, through the encryption machine, a first hash signature of the M first video frame data based on a private key of a first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits; performing a first signing process on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain target signed video data corresponding to the video.

[0007] In a second aspect, an embodiment of the present application provides a video signing method, which is applied to a client, and the method includes: sending a signing request for a video to a signing platform, so that the signing platform, based on the signing request, performs a first signing process on M first video frame data according to M first hash signatures and M first sub-seals when the user has been issued a first digital certificate, so as to obtain the target signed video data corresponding to the video; wherein, the first hash signature is determined by the signing platform through an encryption machine based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and M first random quantum identification bits; the first random quantum identification bit is obtained by the signing platform through negotiation with the encryption machine; the first sub-seal is generated by the signing platform based on the first digital certificate; the first video frame data is obtained by the signing platform by parsing the video according to the number of frames M corresponding to the video.

[0008] In a third aspect, an embodiment of the present application provides a video signing device, which is applied to a signing platform, and the device includes: a parsing module, which is used to receive a signing request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, the video is parsed according to the number of frames M corresponding to the video to obtain M first video frame data; a negotiation module, which is used to generate M first sub-seals based on the first digital certificate, and obtain M first random quantum identification bits through negotiation with an encryption machine; a determination module, which is used to determine, through the encryption machine, a first hash signature of the M first video frame data based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits; a first execution module, which is used to perform a first signature processing on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain the target signed video data corresponding to the video.

[0009] In a fourth aspect, an embodiment of the present application provides a video signing device, which is applied to a client, and the device includes: a first sending module, which is used to send a signing request for a video to a signing platform, so that the signing platform, based on the signing request, performs a first signing process on M first video frame data according to M first hash signatures and M first sub-seals when the user has been issued a first digital certificate, so as to obtain the target signed video data corresponding to the video; wherein, the first hash signature is determined by the signing platform through an encryption machine based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and M first random quantum identification bits; the first random quantum identification bit is obtained by the signing platform through negotiation with the encryption machine; the first sub-seal is generated by the signing platform based on the first digital certificate; the first video frame data is obtained by the signing platform by parsing the video according to the number of frames M corresponding to the video.

[0010] In a fifth aspect, an embodiment of the present application provides a video signing device, comprising: a processor; and a memory arranged to store computer executable instructions, wherein the executable instructions are configured to be executed by the processor, and the executable instructions include instructions for executing the video signing method as described in the first aspect, or executing the video signing method as described in the second aspect.

[0011] In a sixth aspect, an embodiment of the present application provides a storage medium, wherein the storage medium is used to store computer-executable instructions, wherein the computer-executable instructions enable a computer to execute the video signing method as described in the first aspect, or execute the video signing method as described in the second aspect.

[0012] In the seventh aspect, an embodiment of the present application provides a chip, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the video signing method as described in the first aspect, or to execute the video signing method as described in the second aspect.

[0013] In an eighth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the video signing method as described in the first aspect, or executes the video signing method as described in the second aspect.

[0014] In an embodiment of the present application, by receiving a signature request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, the video is parsed according to the number of frames M corresponding to the video to obtain M first video frame data; then, M first sub-seals are generated based on the first digital certificate, and M first random quantum identification bits are obtained through negotiation with the encryption machine; thereafter, through the encryption machine, according to the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits, the first hash signature of the M first video frame data is determined; finally, according to the M first hash signatures and the M first sub-seals, the first signature processing is performed on the M first video frame data to obtain the target signed video data corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 It is a flowchart of a video signing method applied to a signing platform provided in an embodiment of the present application; Figure 2 It is a schematic swim lane diagram of collaboratively generating a public key provided in an embodiment of the present application; Figure 3 It is a schematic swim lane diagram of performing collaborative signature to generate a second hash signature provided by an embodiment of the present application; Figure 4 It is a schematic swimlane diagram of a first verification process for target signature video data provided by an embodiment of the present application; Figure 5 It is a schematic swimlane diagram of another video signing method applied to a signing platform provided in an embodiment of the present application; Figure 6 It is a flowchart of another video signing method applied to a signing platform provided in an embodiment of the present application; Figure 7 It is a flowchart of a video signing method applied to a client provided in an embodiment of the present application; Figure 8 It is a structural diagram of a video signing device applied to a signing platform provided in an embodiment of the present application; Fig. 9 It is a structural diagram of a video signature device applied to a client provided in an embodiment of the present application; Fig.10 It is a structural diagram of a video signing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0016] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0017] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0018] The video signing method provided in the embodiment of the present application can be executed by an electronic device or by software installed in the electronic device. Specifically, the electronic device can be a terminal device or a server device. The terminal device can include a smart phone, a laptop computer, a smart wearable device, a vehicle terminal, etc. The server device can include an independent physical server, a server cluster composed of multiple servers, or a cloud server capable of cloud computing.

[0019] The video signing method and device provided by the embodiment of the present application are described in detail below through specific embodiments and their application scenarios in conjunction with the accompanying drawings.

[0020] Figure 1 A video signing method provided by an embodiment of the present invention is shown. The method is applied to a signing platform and includes the following steps: S102: receiving a signature request for a video sent by a client, and if a user corresponding to the client has been issued a first digital certificate, parsing the video according to the number of frames M corresponding to the video to obtain M first video frame data.

[0021] In actual applications, in response to a user's signing operation on a video, the client may send a signing request for the video to the signing platform, wherein the video may be a video that the user considers to be credible.

[0022] The first digital certificate and the second digital certificate mentioned below may both be files digitally signed by a certificate authority (CA) and containing at least public key owner information and a public key.

[0023] Specifically, the video may be parsed according to the number of frames corresponding to the video, and parsed into the total number of frames of first video frame data. Optionally, the first video frame data and the second video frame data described below may be single-frame picture data, audio data corresponding to a single-frame picture, or video data of a single frame.

[0024] S104: Generate M first sub-seals based on the first digital certificate, and obtain M first random quantum identification bits through negotiation with the encryption machine.

[0025] Specifically, a first seal may be generated based on the first digital certificate, and then the first seal may be split based on the number M corresponding to the first video frame data to obtain M first sub-seals. That is, the number of first sub-seals is the same as the number corresponding to the first video frame data.

[0026] Specifically, the number of the first random quantum identification bits is the same as the number of frames M corresponding to the video. The M first random quantum identification bits can be stored in the form of a list, for example, List(R0, R1...R M) The first random quantum identification bit and the second random quantum identification bit described below are randomly determined quantum bits (qubits). A qubit is a two-state quantum system that can represent not only two states, 0 or 1, but also a superposition state of 0 and 1 at the same time.

[0027] S106: Determine, by means of an encryption machine, a first hash signature of the M first video frame data according to a private key of a first asymmetric encryption algorithm of the user and M first random quantum identification bits stored in the encryption machine.

[0028] S108: Perform first signature processing on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain target signed video data corresponding to the video.

[0029] Exemplarily, the first asymmetric encryption algorithm may be an elliptic curve public key cryptography SM2 algorithm and an asymmetric encryption RSA algorithm. It should be noted that the first asymmetric encryption algorithm includes but is not limited to the SM2 algorithm and the RSA algorithm.

[0030] The above-mentioned first digital certificate is applied to the CA organization based on the public key of the first asymmetric encryption algorithm, and the public key corresponds to the private key of the above-mentioned first asymmetric encryption algorithm.

[0031] Specifically, the first random quantum identification bit corresponding to each first video frame data can be determined in the order of the above list or the preset order; then, the first hash signature of each first video frame data can be determined according to the first random quantum identification bit corresponding to each first video frame data and the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine; the first sub-seal corresponding to each first video frame data can also be determined in the preset order; then, for each first video frame data, according to its corresponding first hash signature and first sub-seal, the first signature process is performed to obtain M signed first video frame data, and then the M signed first video frame data are merged to obtain the target signed video data corresponding to the video. Since the first hash signature and / or the first sub-seal sign the video frame by frame in order, it is possible to check whether the target signed video data has been spliced ​​and tampered with in the verification process stage, thereby enhancing the reliability and credibility of the target signed video data.

[0032] The video signing method provided by the embodiment of the present invention receives a signing request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, parses the video according to the number of frames M corresponding to the video to obtain M first video frame data; then generates M first sub-seals based on the first digital certificate, and obtains M first random quantum identification bits through negotiation with an encryption machine; then, through the encryption machine, according to the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits, determines the first hash signature of the M first video frame data; finally, according to the M first hash signatures and the M first sub-seals, performs the first signing process on the M first video frame data to obtain the target signed video data corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data.

[0033] The above provides a signature solution, but when executing, there are situations where the signature process fails due to various reasons. This application also designs a second signature process when the above signature process (i.e., the first signature process) fails to execute, so as to obtain the target signature video data corresponding to the video. In one implementation, the following steps A1 to A2 can be performed to obtain the target signature video data corresponding to the video: Step A1: When the first signature processing fails, a request for negotiating a second random quantum identifier is received from a client, and M second random quantum identifiers are obtained through negotiation with the client.

[0034] Specifically, the second random quantum identifier may be the same as or different from the first random quantum identifier. The number of the second random quantum identifiers is the same as the number of frames M corresponding to the video. The M second random quantum identifiers may be stored in the form of a list.

[0035] In the case where the first signature processing fails, this signature scheme is executed (step A1 to step A2). In actual applications, the client can also determine whether the SIM card of its terminal device is a super SIM card to determine the corresponding execution signature scheme (the signature schemes of S102 to S108 and this signature scheme). Specifically, before receiving the signature request for the video sent by the client (i.e. S102), the following steps can be performed: the client determines whether the subscriber identity module (SIM) card of its terminal device is a super SIM card; if so, the signature schemes of S102 to S108 are executed; if not, the signature scheme is executed, and step A1 corresponds to: the client sends a request for negotiation of the second random quantum identifier, the signature platform receives the request, and obtains M of the second random quantum identifiers through negotiation with the client. Thereby, the executability of the signature scheme and the security of the execution of the signature scheme are guaranteed.

[0036] Step A2, based on the user's second digital certificate, M second sub-seals are generated, so that the client performs a second signature process on the second video frame data based on the second hash signature and the second sub-seal to obtain target signed video data corresponding to the video.

[0037] Among them, the second hash signature is generated by the client in collaboration with the signing platform based on M second random quantum identification bits; the second video frame data is obtained by the client parsing the video according to the number of frames M corresponding to the video.

[0038] Specifically, a second seal may be generated based on the second digital certificate, and then the second seal may be split into M second sub-seals based on the number M corresponding to the second video frame data.

[0039] The second digital certificate is applied for from the CA organization based on the public key of the second asymmetric encryption algorithm (the public key of the second asymmetric encryption algorithm is described below for details), and is different from the above-mentioned first digital certificate.

[0040] In practical applications, the client can also perform hash calculation on the second video frame data to obtain M second hash values, and then based on the M second random quantum identification bits and the M second hash values, perform collaborative signing with the signature platform to generate the second hash signature. That is, the second hash signature can also be generated by the client based on the M second random quantum identification bits and the M second hash values, and the second hash value is obtained by the client performing hash calculation on the second video frame data.

[0041] In this embodiment, an execution plan is designed when the first signature processing fails to execute, so as to avoid the situation where, after the first signature processing fails to execute, the first signature processing is repeatedly attempted or the processing is stopped when the factors causing the failure are not handled, resulting in a waste of user time and a reduced user experience.

[0042] In one implementation, after receiving the signature request for the video sent by the client (ie, S102), the following steps B1 to B3 may be performed to obtain the first digital certificate of the user: Step B1, determining whether the user has been issued a first digital certificate.

[0043] Step B2: If the user has not been issued the first digital certificate, a request for applying for a public-private key pair of a first asymmetric encryption algorithm is sent to the encryption machine, so that the encryption machine generates the private key and public key of the first asymmetric encryption algorithm through a root key.

[0044] Step B3, receiving the public key of the first asymmetric encryption algorithm sent by the encryption machine, and applying for a first digital certificate from a certificate authority CA based on the public key of the first asymmetric encryption algorithm to obtain the user's first digital certificate.

[0045] Specifically, the first digital certificate is applied to the CA organization based on the public key of the first asymmetric encryption algorithm, and the public key of the first asymmetric encryption algorithm is generated by the encryption machine through root key dispersion.

[0046] In this embodiment, the private key and public key of the first asymmetric encryption algorithm are generated by the encryption machine through the root key, which increases the difficulty of cracking the signature, thereby improving the security of the signature and further ensuring the credibility and reliability of the target signed video data.

[0047] In one implementation, before receiving a request for negotiating a second random quantum identifier sent by a client (i.e., step A1), the following steps C1 to C2 may be performed to obtain a second digital certificate of the user: Step C1: receiving a request from a client for applying for a second digital certificate of the user, and cooperating with the client to generate a public key of a second asymmetric encryption algorithm.

[0048] The second asymmetric encryption algorithm includes but is not limited to the SM2 algorithm and the RSA algorithm.

[0049] In practical applications, the public key of the second asymmetric encryption algorithm is generated based on the first private key component determined by the client and the second private key component determined by the signing platform; the second hash signature of the second video frame data is synthesized based on the first signature value and the second signature value, the first signature value is generated based on the second signature value and the first private key component, the second signature value is generated based on the message digest and the second private key component, and the message digest is determined by the client based on the second random quantum identification bit and the second hash value.

[0050] Specifically, Figure 2 As shown, the public key of the second asymmetric encryption algorithm is generated in collaboration with the client, including: the client generates a random number d1 as the first private key component, obtains the elliptic curve point P1 based on the first private key component, and sends P1 to the signing platform; the signing platform generates a random number d2 as the second private key component, and generates a public key P based on the second private key component d2 and P1. Correspondingly, as Figure 3 As shown, the above-mentioned method of generating the second hash signature by cooperating with the signing platform based on M second random quantum identification bits and M second hash values ​​includes: the client performs signature preprocessing on the second random quantum identification bit and the second hash value (i.e., the message M to be signed) of the second video frame data to generate a message digest e, generate a random number k1, generate a third signature value Q1 based on k1, and then send the message digest e and the third signature value Q1 to the signing platform; the signing platform generates random numbers k2 and k3, generates second signature values ​​r, s2 and s3 based on k2, k3, the message digest e and the third signature value Q1 and the second private key component d2, and then sends r, s2 and s3 to the client, and the client generates a first signature value s based on r, s2, s3 and the first private key component d1 to obtain a second hash signature (r, s); wherein the signature preprocessing includes: the client uses a cryptographic hash function to calculate the hash value Z of the client, then concatenates Z and M into M1, and then uses a hash function on M1 to obtain the message digest e. For details, please refer to the provisions of the digital signature algorithm part in the SM2 elliptic curve public key cryptography algorithm.

[0051] Step C2: Apply for a second digital certificate from the CA organization based on the public key of the second asymmetric encryption algorithm to obtain the user's second digital certificate.

[0052] Specifically, the second digital certificate is applied to the CA organization based on the public key of the second asymmetric encryption algorithm, and the public key of the second asymmetric encryption algorithm is jointly generated by the signing platform and the client.

[0053] In this embodiment, the private key and public key of the second asymmetric encryption algorithm are generated by the collaborative signature algorithm, and any intruder cannot obtain the complete private key to forge the signature, which fully guarantees the security of the SM2 algorithm private key. When used in a software cryptographic module that does not rely on cryptographic hardware, sufficient security can also be guaranteed. The difficulty of cracking the signature is increased, thereby improving the security of the signature, and further ensuring the credibility and reliability of the target signed video data.

[0054] For the target signature video data generated in the embodiments of S102 to S108, in one implementation, the following step D1 may be performed to verify the target signature video data: Step D1, receiving a verification request for target signature video data sent by the client, parsing the target signature video data according to the frame number corresponding to the target signature video data, obtaining M third video frame data, and performing a first verification process on the target signature video data based on the M third video frame data.

[0055] For the combination of the embodiments of S102 to S108 and the embodiments of steps A1 to A2, the generated target signature video data may be subjected to the following steps D2 to D4 to perform verification processing on the target signature video data: Step D2, receiving a verification request for the target signed video data sent by the client, parsing the target signed video data according to the frame number corresponding to the target signed video data to obtain M third video frame data; and determining the identifier in the target signed video data.

[0056] The identifier in the target signature video data is used to indicate whether the target signature video data is the signature video data that has been subjected to the first signature process or the signature video data that has been subjected to the second signature process.

[0057] Step D3, if the identifier in the target signature video data is the first identifier, then based on the M third video frame data, the target signature video data is subjected to a first verification process; the first identifier is used to indicate that the target signature video data is the signature video data subjected to the first signature process; Step D4, if the identifier in the target signed video data is the second identifier, then based on the M third video frame data, the target signed video data is subjected to a second verification process; the second identifier is used to indicate that the target signed video data is the signed video data subjected to the second signature process.

[0058] In this embodiment, an identifier is introduced into the target signed video data so as to perform different verification processes on the signed video data that has been subjected to the second signature process and on different signed video data that have been subjected to the second signature process.

[0059] In one implementation, generating M first sub-seals based on the first digital certificate (ie, S104) may be specifically performed as follows: Step E1: Generate a first seal based on the first digital certificate, and split the first seal into M first sub-seals based on the number M corresponding to the first video frame data.

[0060] Accordingly, based on the M third video frame data, the first verification process (ie, step D1 or step D2) is performed on the target signature video data, which can be specifically performed as follows: step d1.1 to step d1.3: Step d1.1, performing a first preset verification on the M third video frame data through the encryption machine and the CA organization.

[0061] The first preset verification includes one or more of the following: Verifying the validity period of the digital certificate corresponding to the third video frame data; Verifying the root certificate signature in the digital certificate corresponding to the third video frame data; Verifying the validity period of an Online Certificate Status Protocol (OCSP) address verification certificate in a digital certificate corresponding to the third video frame data; Verify whether the quantum identification bit corresponding to the third video frame data is the first random quantum identification bit.

[0062] Specifically, when executing step F1 and step F2 below, correspondingly, Figure 4 As shown, it is verified whether the quantum identification bit corresponding to the third video frame data is the first random quantum identification bit and whether the hash value corresponding to the third video frame data is the first hash value.

[0063] Step d1.2, when the first preset verification is passed, synthesize the third seal based on the M third sub-seals corresponding to the M third video frame data, and obtain the digital certificate corresponding to the third seal.

[0064] Step d1.3, based on the third seal and the digital certificate corresponding to the third seal, verify whether the target signature video data meets the first preset condition; Among them, the first preset condition is one or more of the following: the third seal is the same as the first seal, and the digital certificate corresponding to the third seal is the same as the first digital certificate.

[0065] In this embodiment, by introducing a seal and / or a digital certificate to perform a first verification process of splitting and then synthesizing the target signed video data and then verifying it, the credibility and reliability of the target signed video data can be guaranteed.

[0066] In one implementation, based on the second digital certificate and the number M of second video frame data corresponding to each other, M second sub-seals are generated (ie, step A2), which can be specifically performed as follows: step a1: Step a1: Generate a second seal based on the second digital certificate, and split the second seal into M second sub-seals based on the number M corresponding to the second video frame data.

[0067] Correspondingly, based on the M third video frame data, the target signature video data is subjected to a second verification process (ie, step D4), which can be specifically performed as follows: steps d4.1 to d4.3: Step d4.1, performing a second preset verification on M third video frame data. The second preset verification includes one or more of the following: Verifying the validity period of the digital certificate corresponding to the third video frame data; Verifying the root certificate signature in the digital certificate corresponding to the third video frame data; Verify the validity period of the OCSP address verification certificate in the digital certificate corresponding to the third video frame data; Verify whether the quantum identification bit corresponding to the third video frame data is the second random quantum identification bit.

[0068] Specifically, when the following steps are executed, it is verified whether the quantum identification bit corresponding to the third video frame data is the first random quantum identification bit and whether the hash value corresponding to the third video frame data is the second hash value: the client performs hash calculation on the second video frame data to obtain M second hash values, and then based on the M second random quantum identification bits and the M second hash values, collaborates with the signing platform to generate the second hash signature.

[0069] Step d4.2, when the second preset verification is passed, synthesize the third seal based on the M third sub-seals corresponding to the M third video frame data, and obtain the digital certificate corresponding to the third seal.

[0070] Step d4.3, based on the third seal and the digital certificate corresponding to the third seal, verify whether the target signature video data meets the second preset condition; Among them, the second preset condition is one or more of the following: the third seal is the same as the second seal, and the digital certificate corresponding to the third seal is the same as the second digital certificate.

[0071] In this embodiment, by introducing a seal and / or a digital certificate to perform a second verification process of splitting and then synthesizing the target signed video data and then verifying it, the credibility and reliability of the target signed video data can be guaranteed.

[0072] In one implementation, the following step F1 may be performed to obtain a first hash value: Step F1, performing hash calculation on M first video frame data to obtain M first hash values.

[0073] Correspondingly, by means of the encryption machine, based on the private key of the first asymmetric encryption algorithm of the user and the M first random quantum identification bits stored in the encryption machine, determining the first hash signature of the M first video frame data (i.e., S106) can be specifically performed as the following step F2: Step F2, determining the first hash signatures of the M first video frame data through an encryption machine according to the M first hash values, the private key of the first asymmetric encryption algorithm and the M first random quantum identification bits.

[0074] Specifically, according to the first hash value corresponding to each first video frame data, the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine, and the first random quantum identification bit, the first hash signature of the first video frame data (the nth first video frame data) is determined, and the formula may be: HashSign n =sm2 / RSA(Hash n +R n ) In this embodiment, by introducing the first hash value, determining the first hash signature, and then signing the first video frame data, the difficulty of cracking the signature is increased, thereby improving the security of the signature and further increasing the credibility and reliability of the target signed video data.

[0075] Figure 5 FIG. 1 is a schematic swim lane diagram of another video signature method provided in an embodiment of the present application. Figure 5 As shown, the video signing method may include the following S5.1-S5.18: S5.1, the client sends a signature request for the video to the signature platform.

[0076] S5.2, the signing platform receives the signing request for the video sent by the client, and determines whether the user has been issued the first digital certificate.

[0077] S5.3, if the user has not been issued the first digital certificate, the signing platform sends a request to the encryption machine for applying for a public-private key pair of the first asymmetric encryption algorithm.

[0078] S5.4, the encryption machine generates the private key and the public key of the first asymmetric encryption algorithm through the root key.

[0079] S5.5, the encryption machine returns the public key of the first asymmetric encryption algorithm to the signing platform.

[0080] S5.6, the signing platform receives the public key of the first asymmetric encryption algorithm sent by the encryption machine, and generates a request for applying for a first digital certificate based on the public key of the first asymmetric encryption algorithm.

[0081] S5.7, the signing platform sends a request to the CA organization for applying for the first digital certificate.

[0082] S5.8, the CA organization verifies the personal identity information in the request for applying for the first digital certificate.

[0083] S5.9, after the verification is passed, the first digital certificate issued to the user is returned to the signing platform.

[0084] S5.10, when the user has been issued the first digital certificate, the signature platform parses the video according to the number of frames M corresponding to the video to obtain M first video frame data.

[0085] S5.11, the signing platform generates M first sub-seals based on the first digital certificate.

[0086] S5.12, the signing platform and the encryption machine negotiate to obtain M first random quantum identification bits.

[0087] S5.13, the signature platform performs hash calculation on the M first video frame data to obtain M first hash values.

[0088] S5.14, the signing platform sends a request for generating a first hash signature to the encryption machine.

[0089] S5.15, the encryption machine determines the first hash signatures of the M first video frame data according to the M first hash values, the stored private key of the first asymmetric encryption algorithm and the M first random quantum identification bits.

[0090] S5.16, the encryption machine returns the first hash signature.

[0091] S5.17, the signing platform performs the first signing process on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain M signed first video frame data, and integrates the M signed first video frame data to obtain the target signed video data corresponding to the video.

[0092] S5.18, the signature platform returns the target signature video data to the client.

[0093] It should be noted that the process of the video signing method in S5.1-S5.18 above can refer to the specific implementation process of the above embodiment, which will not be repeated here.

[0094] In this embodiment, by receiving a signature request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, the video is parsed according to the number of frames M corresponding to the video to obtain M first video frame data; then M first sub-seals are generated based on the first digital certificate, and M first random quantum identification bits are obtained through negotiation with the encryption machine; then, through the encryption machine, according to the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits, the first hash signature of the M first video frame data is determined; finally, according to the M first hash signatures and the M first sub-seals, the first signature processing is performed on the M first video frame data to obtain the target signed video data corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data.

[0095] Figure 6 Another video signing method provided by an embodiment of the present invention is shown, and the method includes the following steps 602 to 614: Step 602: receiving a signature request for a video sent by a client, and if the user corresponding to the client has been issued a first digital certificate, parsing the video according to the number of frames M corresponding to the video to obtain M first video frame data.

[0096] Step 604: Generate M first sub-seals based on the first digital certificate, and obtain M first random quantum identification bits through negotiation with the encryption machine.

[0097] Step 606: Perform hash calculation on the M first video frame data to obtain M first hash values.

[0098] Step 608: Determine, through the encryption machine, the first hash signatures of the M first video frame data based on the M first hash values, the private key of the user's first asymmetric encryption algorithm stored in the encryption machine, and the M first random quantum identification bits.

[0099] Step 610: Perform first signature processing on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain target signed video data corresponding to the video.

[0100] Step 612: When the first signature processing fails, a request for negotiation of a second random quantum identifier is received from the client, and M second random quantum identifiers are obtained through negotiation with the client.

[0101] Step 614, based on the user's second digital certificate, M second sub-seals are generated, so that the client performs a second signature process on the second video frame data based on the second hash signature and the second sub-seal to obtain target signed video data corresponding to the video.

[0102] Among them, the second hash signature is generated by the client in collaboration with the signing platform based on M second random quantum identification bits; the second video frame data is obtained by the client parsing the video according to the number of frames M corresponding to the video.

[0103] It should be noted that the process of the video signing method from step 602 to step 614 can refer to the specific implementation process of the above embodiment, which will not be repeated here.

[0104] Corresponding to the above Figures 1 to 6 The video signing method applied to the signing platform described above is based on the same technical concept. The embodiment of the present application also provides a video signing method applied to the client. Figure 7 A schematic diagram of a video signature method provided in an embodiment of the present application, the method is applied to a client, and the method includes the following steps: S702: Send a signature request for the video to the signature platform, so that the signature platform, based on the signature request, performs a first signature process on the M first video frame data according to the M first hash signatures and the M first sub-seals, in the case that the user has been issued a first digital certificate, to obtain the target signed video data corresponding to the video.

[0105] Among them, the first hash signature is determined by the signing platform through an encryption machine based on the private key of the user's first asymmetric encryption algorithm and M first random quantum identification bits stored in the encryption machine; the first random quantum identification bit is obtained by the signing platform through negotiation with the encryption machine; the first sub-seal is generated by the signing platform based on the first digital certificate; the first video frame data is obtained by the signing platform by parsing the video according to the number of frames M corresponding to the video.

[0106] Specifically, the first digital certificate is applied to the CA organization based on the public key of the first asymmetric encryption algorithm, and the public key of the first asymmetric encryption algorithm is generated by the encryption machine through root key dispersion.

[0107] Specifically, the signature platform can also perform hash calculation on the M first video frame data to obtain M first hash values. Correspondingly, the first hash signature of the M first video frame data can be determined by the encryption machine according to the M first hash values, the private key of the first asymmetric encryption algorithm and the M first random quantum identification bits. That is, the first hash signature can also be determined by the signature platform through the encryption machine based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine, the M first hash values ​​and the M first random quantum identification bits, and the first hash value is obtained by the signature platform performing hash calculation on the M first video frame data.

[0108] It should be noted that the process of the video signing method in S702 can refer to the specific implementation process of the above embodiment, which will not be repeated here.

[0109] The video signing method provided in the embodiment of the present application sends a signing request for a video to a signing platform, so that the signing platform, based on the signing request, performs a first signing process on M first video frame data according to M first hash signatures and M first sub-seals when the user has been issued a first digital certificate, so as to obtain target signed video data corresponding to the video; wherein the first hash signature is determined by the signing platform through an encryption machine based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and M first random quantum identification bits; the first random quantum identification bit is obtained by the signing platform through negotiation with the encryption machine; the first sub-seal is generated by the signing platform based on the first digital certificate; and the first video frame data is obtained by the signing platform by parsing the video according to the number of frames M corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data.

[0110] The above provides a signature solution for one scenario, but when executing, there are situations where the signature process fails due to various reasons. This application also designs a second signature process when the above signature process (i.e., the first signature process) fails to execute, so as to obtain the target signature video data corresponding to the video. In one implementation, the following steps G1 to G4 can be executed to obtain the target signature video data corresponding to the video: Step G1, obtaining a signature request for a video from a user, and if the user has been issued a second digital certificate, parsing the video according to the number of frames M corresponding to the video to obtain M second video frame data.

[0111] Step G2, sending a request for negotiating the second random quantum identifier to the signing platform, and obtaining M second random quantum identifiers through negotiation with the signing platform according to the number M corresponding to the second video frame data.

[0112] The M second random quantum identification bits may be stored in the form of a list.

[0113] Step G3, based on the M second random quantum identification bits, generate the second hash signatures of the M second video frame data by co-signing with the signing platform.

[0114] Step G4, performing a second signature process on the second video frame data based on the second hash signature and the M second sub-seals to obtain target signed video data corresponding to the video.

[0115] Among them, the second sub-seal is generated by the signature platform based on the user's second digital certificate.

[0116] Specifically, the second random quantum identification bit corresponding to each second video frame data can be determined in the order of the above list or the preset order; then, according to the second random quantum identification bit corresponding to each second video frame data, the second hash signature of each second video frame data is generated by co-signing with the signature platform; the second sub-seal corresponding to each second video frame data can also be determined in the M second sub-seals generated by the signature platform in the preset order; then, for each second video frame data, according to its corresponding second hash signature and second sub-seal, the second signature process is performed to obtain M signed second video frame data, and then the M signed second video frame data are merged to obtain the target signed video data corresponding to the video. Since the second hash signature and / or the second sub-seal sign the video frame by frame in order, it is possible to check whether the target signed video data has been spliced ​​and tampered with in the verification process stage, thereby enhancing the reliability and credibility of the target signed video data.

[0117] In one implementation, after obtaining the user's signature request for the video (ie, step G1), the following steps H1 to H2 may be performed to obtain the user's second digital certificate: Step H1, determining whether the user has been issued a second digital certificate; Step H2, if the user has not been issued a second digital certificate, collaborate with the signing platform to generate a public key of the second asymmetric encryption algorithm, so that the signing platform applies for a second digital certificate from the CA agency based on the public key of the second asymmetric encryption algorithm to obtain the user's second digital certificate.

[0118] In one implementation, the following step J1 may be performed to verify the target signed video data.

[0119] Step J1, sending a verification request for the target signature video data to the signature platform, so that the signature platform performs verification processing based on the verification request.

[0120] Specifically, the signature platform receives a verification request for target signature video data sent by the client, parses the target signature video data according to the number of frames corresponding to the target signature video data, obtains M third video frame data, and performs a first verification process on the target signature video data based on the M third video frame data; or, receives a verification request for target signature video data sent by the client, parses the target signature video data according to the number of frames corresponding to the target signature video data, obtains M third video frame data; and determines an identifier in the target signature video data; if the identifier in the target signature video data is a first identifier, then the target signature video data is subjected to a first verification process based on the M third video frame data; the first identifier is used to characterize that the target signature video data is signature video data that has been subjected to a first signature process; if the identifier in the target signature video data is a second identifier, then the target signature video data is subjected to a second verification process based on the M third video frame data; the second identifier is used to characterize that the target signature video data is signature video data that has been subjected to a second signature process.

[0121] It should be noted that the process of performing the first verification process and the second verification process may refer to the implementation process of the above embodiment, which will not be described in detail here.

[0122] In one implementation, the following step K1 may be performed to obtain M second hash values: Step K1, performing hash calculation on the M second video frame data to obtain M second hash values.

[0123] Correspondingly, based on the M second random quantum identification bits, by co-signing with the signature platform, the second hash signatures of the M second video frame data are generated (i.e., step G3), which can be executed as the following step K2: Step K2, based on the M second random quantum identification bits and the M second hash values, generate the M second hash signatures of the second video frame data by co-signing with the signing platform.

[0124] The process of the above-mentioned video signing method applied to the client can refer to the specific implementation process of the above-mentioned video signing method embodiment applied to the signing platform, which will not be repeated here.

[0125] Corresponding to the video signature method provided in the above embodiment, based on the same technical concept, the embodiment of the present invention also provides a video signature device. Figure 8 is a schematic diagram of the structure of a video signature device according to an embodiment of the present invention, wherein the video signature device is used to execute Figures 1 to 6 The video signing method described, such as Figure 8 As shown, the video signing apparatus includes: a first parsing module 810 , a negotiation module 820 , a determination module 830 and a first execution module 840 .

[0126] The first parsing module 810 is used to receive a signature request for a video sent by a client, and if the user corresponding to the client has been issued a first digital certificate, parse the video according to the number of frames M corresponding to the video to obtain M first video frame data; A negotiation module 820 is used to generate M first sub-seals based on the first digital certificate, and obtain M first random quantum identification bits by negotiating with the encryption machine; A determination module 830 is used to determine, through an encryption machine, a first hash signature of M first video frame data based on a private key of a first asymmetric encryption algorithm of a user and M first random quantum identification bits stored in the encryption machine; The first execution module 840 is used to perform a first signature process on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain target signed video data corresponding to the video.

[0127] In one implementation, the video signature apparatus further includes a second execution module 850. The second execution module 850 includes: The negotiation unit 8501 is configured to receive a request for negotiation of a second random quantum identifier sent by a client when the first signature processing fails, and obtain M second random quantum identifiers through negotiation with the client; The execution unit 8502 is used to generate M second sub-seals based on the second digital certificate of the user, so that the client performs a second signature process on the second video frame data based on the second hash signature and the second sub-seal to obtain target signed video data corresponding to the video; Among them, the second hash signature is generated by the client in collaboration with the signing platform based on M second random quantum identification bits; the second video frame data is obtained by the client parsing the video according to the number of frames M corresponding to the video.

[0128] In one implementation, the video signature apparatus further includes a first judgment module 860. The first judgment module 860 is specifically configured to: determining whether the user has been issued a first digital certificate; If the user has not been issued the first digital certificate, sending a request for applying for a public-private key pair of a first asymmetric encryption algorithm to the encryption machine, so that the encryption machine generates a private key and a public key of the first asymmetric encryption algorithm through a root key dispersion; Receive the public key of the first asymmetric encryption algorithm sent by the encryption machine, and apply for a first digital certificate from a certificate authority CA based on the public key of the first asymmetric encryption algorithm to obtain the user's first digital certificate.

[0129] In one implementation, the video signature apparatus further includes a second judgment module 870. The second judgment module 870 is specifically configured to: Receiving a request for applying for a second digital certificate of the user from a client, and cooperating with the client to generate a public key of a second asymmetric encryption algorithm; Based on the public key of the second asymmetric encryption algorithm, apply for a second digital certificate from the CA organization to obtain the user's second digital certificate.

[0130] In one implementation, the video signing apparatus further includes a verification module 880. The verification module 880 includes: The parsing unit 8801 is used to receive a verification request for the target signature video data sent by the client, parse the target signature video data according to the frame number corresponding to the target signature video data, obtain M third video frame data; and determine the identifier in the target signature video data; The first verification processing unit 8802 is used to perform a first verification process on the target signed video data based on the M third video frame data if the identifier in the target signed video data is a first identifier; the first identifier is used to indicate that the target signed video data is signed video data that has been subjected to a first signature process; The second verification processing unit 8803 is used to perform a second verification process on the target signed video data based on M third video frame data if the identifier in the target signed video data is a second identifier; the second identifier is used to indicate that the target signed video data is signed video data that has been subjected to a second signature process.

[0131] In one implementation, the negotiation module 820 is specifically configured to: Based on the first digital certificate, a first seal is generated, and based on the number M corresponding to the first video frame data, the first seal is split into M first sub-seals.

[0132] Accordingly, the first verification processing unit 8802 is specifically used for: Performing a first preset verification on the M third video frame data through the encryption machine and the CA mechanism; In the case where the first preset verification is passed, synthesizing a third seal based on the M third sub-seals corresponding to the M third video frame data, and obtaining a digital certificate corresponding to the third seal; Based on the third seal and the digital certificate corresponding to the third seal, verify whether the target signature video data meets the first preset condition; The first preset condition is one or more of the following: the third seal is the same as the first seal, and the digital certificate corresponding to the third seal is the same as the first digital certificate; the first preset verification includes one or more of the following: Verifying the validity period of the digital certificate corresponding to the third video frame data; Verifying the root certificate signature in the digital certificate corresponding to the third video frame data; Verify the validity period of the online certificate status protocol (OCSP) address verification certificate in the digital certificate corresponding to the third video frame data; Verify whether the quantum identification bit corresponding to the third video frame data is the first random quantum identification bit.

[0133] In one implementation, the execution unit 8502 is specifically configured to: Based on the second digital certificate, a second seal is generated, and based on the number M corresponding to the second video frame data, the second seal is split into M second sub-seals.

[0134] Accordingly, the second verification processing unit 8803 is specifically used for: Performing a second preset verification on the M third video frame data; In the case where the second preset verification is passed, synthesizing a third seal based on the M third sub-seals corresponding to the M third video frame data, and obtaining a digital certificate corresponding to the third seal; Based on the third seal and the digital certificate corresponding to the third seal, verify whether the target signature video data meets the second preset condition; The second preset condition is one or more of the following: the third seal is the same as the second seal, and the digital certificate corresponding to the third seal is the same as the second digital certificate; The second preset verification includes one or more of the following: Verifying the validity period of the digital certificate corresponding to the third video frame data; Verifying the root certificate signature in the digital certificate corresponding to the third video frame data; Verify the validity period of the OCSP address verification certificate in the digital certificate corresponding to the third video frame data; Verify whether the quantum identification bit corresponding to the third video frame data is the second random quantum identification bit.

[0135] In one implementation, the video signing apparatus further includes a hash module 880. The hash module 880 is used to: Based on the second digital certificate, a second seal is generated, and based on the number M corresponding to the second video frame data, the second seal is split into M second sub-seals.

[0136] Accordingly, the first execution module 840 is specifically used for: Through the encryption machine, the first hash signatures of the M first video frame data are determined according to the M first hash values, the private key of the first asymmetric encryption algorithm and the M first random quantum identification bits.

[0137] In this embodiment, by receiving a signature request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, the video is parsed according to the number of frames M corresponding to the video to obtain M first video frame data; then M first sub-seals are generated based on the first digital certificate, and M first random quantum identification bits are obtained through negotiation with the encryption machine; then, through the encryption machine, according to the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits, the first hash signature of the M first video frame data is determined; finally, according to the M first hash signatures and the M first sub-seals, the first signature processing is performed on the M first video frame data to obtain the target signed video data corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data.

[0138] Those skilled in the art should understand that the above-mentioned video signing device can be used to implement the video signing method applied to the signing platform mentioned above, and the detailed description thereof should be similar to the description of the method part mentioned above, and will not be repeated here to avoid repetition.

[0139] Corresponding to the video signature method provided in the above embodiment, based on the same technical concept, the embodiment of the present invention also provides a video signature device. Fig. 9 is a schematic diagram of the structure of a video signature device according to an embodiment of the present invention, the video signature device is used to execute Figure 7 The video signing method described, such as Fig. 9 As shown, the video signing apparatus includes: a first sending module 910 .

[0140] The first sending module 910 is used to send a signature request for the video to the signature platform, so that the signature platform, based on the signature request and when the user has been issued a first digital certificate, performs a first signature process on the M first video frame data according to M first hash signatures and M first sub-seals to obtain the target signed video data corresponding to the video.

[0141] Among them, the first hash signature is determined by the signing platform through an encryption machine based on the private key of the user's first asymmetric encryption algorithm and M first random quantum identification bits stored in the encryption machine; the first random quantum identification bit is obtained by the signing platform through negotiation with the encryption machine; the first sub-seal is generated by the signing platform based on the first digital certificate; the first video frame data is obtained by the signing platform by parsing the video according to the number of frames M corresponding to the video.

[0142] In one implementation, the video signing apparatus further includes a second parsing module 920 , a second negotiation module 930 , a collaborative signature module 940 and a signing module 950 .

[0143] The second parsing module 920 is used to obtain the user's signature request for the video, and if the user has been issued a second digital certificate, parse the video according to the number of frames M corresponding to the video to obtain M second video frame data; The second negotiation module 930 is used to send a request for negotiation of the second random quantum identifier to the signature platform, and obtain M second random quantum identifiers through negotiation with the signature platform according to the number M corresponding to the second video frame data; A collaborative signature module 940 is used to generate a second hash signature of M second video frame data based on the M second random quantum identification bits by collaboratively signing with the signature platform; The signature module 950 is used to perform a second signature process on the second video frame data based on the second hash signature and M second sub-seals to obtain the target signed video data corresponding to the video; wherein the second sub-seal is generated by the signature platform based on the user's second digital certificate.

[0144] In one implementation, the video signing apparatus further includes a second determination module 960, configured to: determining whether the user has been issued a second digital certificate; If the user has not been issued a second digital certificate, the public key of the second asymmetric encryption algorithm is generated in collaboration with the signing platform, so that the signing platform applies for a second digital certificate from the CA agency based on the public key of the second asymmetric encryption algorithm to obtain the user's second digital certificate.

[0145] In one implementation, the video signing apparatus further includes a second sending module 970, configured to: A verification request for the target signature video data is sent to the signature platform, so that the signature platform performs verification processing based on the verification request.

[0146] In one implementation, the video signing apparatus further includes a hash calculation module 980, which is used to: Perform hash calculation on the M second video frame data to obtain M second hash values.

[0147] Accordingly, the collaborative signature module 940 is specifically used for: Based on the M second random quantum identification bits and the M second hash values, a second hash signature of the M second video frame data is generated by collaborative signing with the signing platform.

[0148] Those skilled in the art should understand that the above-mentioned video signing device can be used to implement the above-mentioned video signing method for the client, and the detailed description thereof should be similar to the above-mentioned method description, and will not be repeated here to avoid repetition.

[0149] In this embodiment, a signature request for a video is sent to a signature platform, so that the signature platform, based on the signature request, performs a first signature process on M first video frame data according to M first hash signatures and M first sub-seals, in the case that the user has been issued a first digital certificate, so as to obtain target signed video data corresponding to the video; wherein the first hash signature is determined by the signature platform through an encryption machine based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and M first random quantum identification bits; the first random quantum identification bit is obtained by the signature platform through negotiation with the encryption machine; the first sub-seal is generated by the signature platform based on the first digital certificate; and the first video frame data is obtained by the signature platform by parsing the video according to the number of frames M corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data.

[0150] Based on the same technical concept, the embodiment of the present application also provides a video signing device, which is used to execute the above-mentioned video signing method. Fig.10 A schematic diagram of the structure of a video signature device for implementing various embodiments of the present application. The video signature device may have relatively large differences due to different configurations or performances, and may include a processor (processor) 1010, a communication interface (Communications Interface) 1020, a memory (memory) 1030 and a communication bus 1040, wherein the processor 1010, the communication interface 1020, and the memory 1030 communicate with each other through the communication bus 1040. The processor 1010 may call a computer program stored in the memory 1030 and run on the processor 1010 to perform the following steps: A signature request for a video sent by a client is received, and when a user corresponding to the client has been issued a first digital certificate, the video is parsed according to the number of frames M corresponding to the video to obtain M first video frame data; M first sub-seals are generated based on the first digital certificate, and M first random quantum identification bits are obtained through negotiation with an encryption machine; through the encryption machine, a first hash signature of the M first video frame data is determined based on a private key of a first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits; a first signature process is performed on the M first video frame data according to the M first hash signatures and the M first sub-seals to obtain target signed video data corresponding to the video.

[0151] In this embodiment, by receiving a signature request for a video sent by a client, and when the user corresponding to the client has been issued a first digital certificate, the video is parsed according to the number of frames M corresponding to the video to obtain M first video frame data; then M first sub-seals are generated based on the first digital certificate, and M first random quantum identification bits are obtained through negotiation with the encryption machine; then, through the encryption machine, according to the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits, the first hash signature of the M first video frame data is determined; finally, according to the M first hash signatures and the M first sub-seals, the first signature processing is performed on the M first video frame data to obtain the target signed video data corresponding to the video. This solution implements signing of the first video frame data based on the user's first digital certificate, thereby improving the credibility of the target signed video data. At the same time, the M first sub-seals generated based on the user's first digital certificate are combined with the first hash signature determined based on the M first random quantum identification bits to perform the first signing process on the M first video frame data, so that each frame of the target signed video data corresponding to the video is signed, that is, a frame-by-frame signing method is also adopted, and each frame of the video frame data is signed in combination with the first random quantum identification bit, thereby achieving multiple high-intensity security guarantees, thereby avoiding the situation where part of the video content is tampered with and cannot be discovered, solving the problem that the relevant video signing technology can only reduce the possibility of part of the video content being tampered with, and the reliability of the obtained signed video is low, thereby ensuring the credibility and reliability of the target signed video data.

[0152] The specific execution steps can refer to the above-mentioned video signing method embodiment applied to the signing platform, or the various steps of the above-mentioned video signing method embodiment applied to the client, and can achieve the same technical effect. To avoid repetition, they will not be repeated here.

[0153] It should be noted that the electronic devices in the embodiments of the present application include: servers, terminals, or other devices except terminals.

[0154] The above electronic device structure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently. For example, the input unit may include a graphics processing unit (GPU) and a microphone, and the display unit may be configured with a display panel in the form of a liquid crystal display, an organic light-emitting diode, etc. The user input unit includes a touch panel and at least one of other input devices. The touch panel is also called a touch screen. Other input devices may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0155] The memory can be used to store software programs and various data. The memory may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory may include a volatile memory or a non-volatile memory, or the memory may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DRRAM).

[0156] The processor may include one or more processing units; optionally, the processor integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to the operating system, user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor.

[0157] An embodiment of the present application also provides a storage medium having computer executable instructions stored thereon. When the computer executable instructions are executed by a processor, the above-mentioned video signing method embodiment applied to the signing platform, or the various processes of the above-mentioned video signing method embodiment applied to the client, can achieve the same technical effect. To avoid repetition, they will not be repeated here.

[0158] The processor is the processor in the electronic device described in the above embodiment. The storage medium includes a computer-readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0159] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the above-mentioned video signing method embodiment applied to the signing platform, or the various processes of the above-mentioned video signing method embodiment applied to the client, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0160] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0161] The embodiment of the present application also provides a computer program product, including a computer program. When the computer program is executed by a processor, it implements the above-mentioned video signing method embodiment applied to the signing platform, or the various processes of the above-mentioned video signing method embodiment applied to the client, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0162] It should be noted that, in this article, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises one..." does not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be noted that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include multitasking and parallel processing according to the functions involved, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0163] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0164] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A video signing method, characterized in that: Applied to the signature platform, the method includes: Receive a signature request for a video sent by a client, and if a user corresponding to the client has been issued a first digital certificate, parse the video according to the number of frames M corresponding to the video to obtain M first video frame data; Generate M first sub-seals based on the first digital certificate, and obtain M first random quantum identification bits through negotiation with the encryption machine; Determine, by the encryption machine, the first hash signatures of the M first video frame data based on the private key of the first asymmetric encryption algorithm of the user and the M first random quantum identification bits stored in the encryption machine; According to the M first hash signatures and the M first sub-seals, a first signature process is performed on the M first video frame data to obtain target signed video data corresponding to the video.

2. The method according to claim 1, characterized in that The method further comprises: In the case where the first signature processing fails, receiving a request for negotiating a second random quantum identifier sent by the client, and obtaining M second random quantum identifiers through negotiation with the client; Based on the user's second digital certificate, M second sub-seals are generated, so that the client performs a second signature process on the second video frame data based on the second hash signature and the second sub-seal to obtain the target signed video data corresponding to the video; wherein the second hash signature is generated by the client based on the M second random quantum identification bits and collaboratively signed with the signature platform; the second video frame data is obtained by the client parsing the video according to the number of frames M corresponding to the video.

3. The method according to claim 1, characterized in that After receiving the signature request for the video sent by the client, the method further includes: Determining whether the user has been issued the first digital certificate; If the user has not been issued the first digital certificate, sending a request for applying for a public-private key pair of the first asymmetric encryption algorithm to the encryption machine, so that the encryption machine generates the private key and the public key of the first asymmetric encryption algorithm through a root key distribution; Receive the public key of the first asymmetric encryption algorithm sent by the encryption machine, and apply for the first digital certificate from a certificate authority CA organization based on the public key of the first asymmetric encryption algorithm to obtain the first digital certificate of the user.

4. The method according to claim 2, characterized in that: Before receiving the request sent by the client for negotiating the second random quantum identifier, the method further includes: receiving a request for applying for the second digital certificate of the user sent by the client, and cooperating with the client to generate a public key of a second asymmetric encryption algorithm; Based on the public key of the second asymmetric encryption algorithm, apply for the second digital certificate from the CA organization to obtain the second digital certificate of the user.

5. The method according to claim 2, characterized in that: The method further comprises: Receiving a verification request for the target signed video data sent by the client, parsing the target signed video data according to the number of frames corresponding to the target signed video data to obtain M third video frame data; and determining an identifier in the target signed video data; If the identifier in the target signature video data is the first identifier, the target signature video data is subjected to a first verification process based on the M third video frame data; the first identifier is used to indicate that the target signature video data is the signature video data subjected to the first signature process; If the identifier in the target signed video data is the second identifier, the target signed video data is subjected to a second verification process based on the M third video frame data; the second identifier is used to indicate that the target signed video data is the signed video data subjected to the second signature process.

6. The method according to claim 5, characterized in that The generating M first sub-seals based on the first digital certificate comprises: Generate a first seal based on the first digital certificate, and split the first seal into M first sub-seals based on the number M corresponding to the first video frame data; The first verification process is performed on the target signature video data based on the M third video frame data, including: Performing a first preset verification on the M third video frame data through the encryption machine and the CA mechanism; In the case where the first preset verification is passed, synthesizing a third seal based on the M third sub-seals corresponding to the M third video frame data, and obtaining a digital certificate corresponding to the third seal; Based on the third seal and the digital certificate corresponding to the third seal, verify whether the target signature video data meets a first preset condition; The first preset condition is one or more of the following: the third seal is the same as the first seal, and the digital certificate corresponding to the third seal is the same as the first digital certificate; the first preset verification includes one or more of the following: Verifying the validity period of the digital certificate corresponding to the third video frame data; Verifying the root certificate signature in the digital certificate corresponding to the third video frame data; Verify the validity period of the Online Certificate Status Protocol (OCSP) address verification certificate in the digital certificate corresponding to the third video frame data; Verify whether the quantum identification bit corresponding to the third video frame data is the first random quantum identification bit.

7. The method according to claim 5, characterized in that The generating M second sub-seals based on the number M corresponding to the second digital certificate and the second video frame data includes: Generate a second seal based on the second digital certificate, and split the second seal into M second sub-seals based on the number M corresponding to the second video frame data; The performing a second verification process on the target signature video data based on the M third video frame data includes: Performing a second preset verification on the M third video frame data; If the second preset verification is passed, synthesizing a third seal based on the M third sub-seals corresponding to the M third video frame data, and obtaining a digital certificate corresponding to the third seal; Based on the third seal and the digital certificate corresponding to the third seal, verify whether the target signature video data meets a second preset condition; The second preset condition is one or more of the following: the third seal is the same as the second seal, and the digital certificate corresponding to the third seal is the same as the second digital certificate; The second preset verification includes one or more of the following: Verifying the validity period of the digital certificate corresponding to the third video frame data; Verifying the root certificate signature in the digital certificate corresponding to the third video frame data; Verifying the validity period of the OCSP address verification certificate in the digital certificate corresponding to the third video frame data; Verify whether the quantum identification bit corresponding to the third video frame data is the second random quantum identification bit.

8. The method according to claim 1, characterized in that The method further comprises: Perform hash calculation on the M first video frame data to obtain M first hash values; The determining, by the encryption machine, the first hash signatures of the M first video frame data based on the private key of the first asymmetric encryption algorithm of the user stored in the encryption machine and the M first random quantum identification bits, includes: The encryption machine determines, according to the M first hash values, the private key of the first asymmetric encryption algorithm and the M first random quantum identification bits, the first hash signatures of the M first video frame data.

9. A video signing method, characterized in that: Applied to a client, the method comprises: Sending a signature request for the video to a signature platform, so that the signature platform performs a first signature process on the M first video frame data based on the signature request and in a case where the user has been issued a first digital certificate according to the M first hash signatures and the M first sub-seals, so as to obtain target signed video data corresponding to the video; Among them, the first hash signature is determined by the signing platform through an encryption machine based on the private key of the first asymmetric encryption algorithm of the user and M first random quantum identification bits stored in the encryption machine; the first random quantum identification bit is obtained by the signing platform through negotiation with the encryption machine; the first sub-seal is generated by the signing platform based on the first digital certificate; the first video frame data is obtained by the signing platform by parsing the video according to the number of frames M corresponding to the video.

10. The method according to claim 9, characterized in that The method further comprises: Obtaining a signature request for a video from a user, and if the user has been issued a second digital certificate, parsing the video according to the number of frames M corresponding to the video to obtain M second video frame data; Sending a request for negotiating a second random quantum identifier to the signature platform, and obtaining M second random quantum identifiers through negotiation with the signature platform according to the number M corresponding to the second video frame data; Based on the M second random quantum identification bits, generate M second hash signatures of the second video frame data by co-signing with the signature platform; Based on the second hash signature and M second sub-seals, a second signature process is performed on the second video frame data to obtain the target signed video data corresponding to the video; wherein the second sub-seal is generated by the signature platform based on the second digital certificate of the user.

Images