A video conversation credibility assessment method and device

Abstract

A method and device for evaluating the credibility of a video session, which perform the following operations on each video session sent to a video management platform via a video network: for each signaling message of the video session obtained, perform deep packet parsing to obtain session information, protocol information, signaling content, and signature information, and obtain the signaling credibility of the signaling message based on the parsing result y and signature credibility s , and obtain the signaling credibility of the video session based on the signaling credibility of all signaling messages y Y i , and obtain the signature credibility of the video session based on the signature credibility of all signaling messages s S i , obtain the video stream of the video session, and obtain the video stream security of the video session based on the key frames in the video stream L i , according to Y i 、 S i and L i obtain the credibility of the video session K i , realize credibility evaluation based on signaling messages and video streams. The video session credibility includes information in three dimensions: signaling credibility, signature credibility, and video stream security, with stronger reliability.​​

Description

Technical Field

[0001] The present invention relates to the field of network security, and more particularly to a method and device for evaluating the credibility of a video session. Background Art

[0002] At present, in order to strengthen security control, the video management platform realizes video surveillance by receiving video sessions sent by social cameras or other video devices. However, directly receiving video sessions poses a certain threat to the security of the video management platform. In the face of these threats, the security of the video management platform needs to be maintained. At present, when social network cameras send video sessions, they are mainly connected to the video management platform through SIP, GB28181 and GB35114 at the application layer. For SIP and GB28181, a baseline is established based on signaling, and the behavior of the network camera is detected through the baseline threshold. This method has the problems of high cost, low efficiency, complex calculation, and high configuration requirements for security protection equipment. For GB35114, the security level of the video session is also determined based on the signaling message. Based only on the signaling message, the security coverage is insufficient and the reliability is poor. When the signaling message is not encrypted and signed, it is difficult to judge the security level. Summary of the invention

[0003] The embodiments of the present application provide a method and device for evaluating the credibility of a video session, which implements the evaluation of the credibility of a video session based on the signaling message and video stream included in the video session itself. The credibility of a video session includes three dimensions: signaling credibility, signature credibility, and video stream security, and has higher reliability.

[0004] On the one hand, an embodiment of the present application provides a method for evaluating the credibility of a video session, and performs the following operations on each video session sent to a video management platform via a video network, including:

[0005] Each time a signaling message of the video session is obtained, the signaling message is deep package parsed to obtain session information, protocol information, signaling content and signature information; based on the session information and the signaling content, the signaling credibility of the signaling message is obtained. y ; Based on the protocol information, or based on the protocol information and the signature information, obtain the signature credibility of the signaling message s ;

[0006] The signaling credibility based on all signaling messages of the video session y , get the signaling credibility of the video session Y i ; The signature credibility of all signaling messages based on the video session s , get the signature credibility of the video session S i ;

[0007] Get the video stream of the video session, and get the video stream security of the video session based on the key frames in the video stream L i ;

[0008] According to the signaling credibility Y i , the signature credibility S i and the video stream security L i Get the credibility of this video session K i ;

[0009] in, i Indicates that this video session is i Video sessions.

[0010] On the other hand, the embodiment of the present application further provides a video session credibility assessment device, including a memory and a processor.

[0011] The memory is used to store the video session credibility assessment program;

[0012] The processor is used to read the video session credibility assessment program and perform the video session credibility assessment method as described in the above embodiment.

[0013] Compared with the related art, a method and device for evaluating the credibility of a video session in an embodiment of the present application realizes the evaluation of the credibility of a video session based on the signaling message and video stream included in the video session itself, that is, the evaluation is performed based on all the data included in the video session, and the signaling credibility and signature credibility are calculated based on the parsing result of the signaling message. The calculation is simple and the evaluation efficiency is high. No additional hardware configuration is required. The security level of the video stream can be efficiently obtained according to the key frames in the video stream. The video session credibility includes information in three dimensions: signaling credibility, signature credibility and video stream security. The obtained video session credibility is more reliable and the coverage of the evaluation data is stronger.

[0014] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or be understood by implementing the present application. Other advantages of the present application can be realized and obtained by the schemes described in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings are used to provide an understanding of the technical solution of the present application and constitute a part of the specification. Together with the embodiments of the present application, they are used to explain the technical solution of the present application and do not constitute a limitation on the technical solution of the present application.

[0016] Figure 1 A flow chart of a method for evaluating the credibility of a video conversation according to an embodiment of the present application;

[0017] Figure 2 Schematic diagram of a program stream with a coding type of svac in an embodiment of the present application Figure 1 ;

[0018] Figure 3 Schematic diagram of a program stream with a coding type of svac in an embodiment of the present application Figure 2 ;

[0019] Figure 4 A schematic diagram of a video conversation credibility assessment device according to an embodiment of the present application. DETAILED DESCRIPTION

[0020] The present application describes multiple embodiments, but the description is exemplary rather than restrictive, and it is obvious to those skilled in the art that there may be more embodiments and implementations within the scope of the embodiments described in the present application. Although many possible feature combinations are shown in the drawings and discussed in the specific embodiments, many other combinations of the disclosed features are also possible. Unless specifically limited, any feature or element of any embodiment may be used in combination with any other feature or element in any other embodiment, or may replace any other feature or element in any other embodiment.

[0021] The present application includes and contemplates combinations of features and elements known to those of ordinary skill in the art. The embodiments, features and elements disclosed in the present application may also be combined with any conventional features or elements to form a unique invention scheme. Any features or elements of any embodiment may also be combined with features or elements from other invention schemes to form another unique invention scheme. Therefore, it should be understood that any feature shown and / or discussed in the present application may be implemented individually or in any appropriate combination. Therefore, except for the limitations made according to the attached claims and their equivalents, the embodiments are not subject to other restrictions. In addition, various modifications and changes may be made within the scope of protection of the attached claims.

[0022] In addition, when describing representative embodiments, the specification may have presented the method and / or process as a specific sequence of steps. However, to the extent that the method or process does not rely on the specific order of the steps described herein, the method or process should not be limited to the steps of the specific order described. As will be understood by those of ordinary skill in the art, other sequences of steps are also possible. Therefore, the specific sequence of the steps set forth in the specification should not be interpreted as a limitation to the claims. In addition, the claims for the method and / or process should not be limited to the steps of performing them in the order written, and those skilled in the art can easily understand that these sequences can be changed and still remain within the spirit and scope of the embodiments of the present application.

[0023] The embodiment of the present application provides a method for evaluating the credibility of a video session, and performs steps S100-S400 on each video session sent to a video management platform via a video network, such as Figure 1 As shown:

[0024] S100: After obtaining a signaling message of the video session, perform deep packet analysis on the signaling message to obtain session information, protocol information, signaling content and signature information; obtain the signaling credibility of the signaling message based on the session information and the signaling content y ; Based on the protocol information, or based on the protocol information and the signature information, obtain the signature credibility of the signaling message s ;

[0025] S200: The signaling credibility of all signaling messages based on the video session y , get the signaling credibility of the video session Y i ; The signature credibility of all signaling messages based on the video session s , get the signature credibility of the video session S i ;

[0026] S300: Obtain the video stream of the video session, and obtain the security level of the video stream of the video session based on the key frames in the video stream. L i ;

[0027] S400: Based on the signaling credibility Y i , the signature credibility S i and the video stream security L i Get the credibility of this video session K i .

[0028] In this embodiment, a camera or a terminal storing a video session sends the video to the video management platform via the video network. n video sessions, each of which includes multiple signaling messages and a video stream. i Representative i Video sessions, i =1, 2, ... n, the video session is transmitted at the application layer using a transmission protocol among SIP (full name Session Initiation Protocol), GB28181, and GB35114.

[0029] In this embodiment, for each video session, before the video management platform receives the video session, the signaling credibility, signature credibility, video stream security and credibility of the video session are determined by executing steps S100-S400, wherein steps S100 and S200 are real-time operations respectively performed on each signaling message, and step S300 is a real-time operation performed on the video stream. The video stream can be transmitted in the form of an RTP message (real-time transport protocol message, RTP full name Real-Time Transport Protocol), wherein the video stream includes multiple video frames, and the video frames are encoded to form an elementary stream (ES for short, full name Elementary Stream), and the elementary stream is encapsulated to form a program stream (PS for short, full name Program Stream) for transmission. When executing step S300, only the program stream including the key frames is analyzed to obtain the video stream security. L i The program stream including the key frame starts with 000001ba (hexadecimal) and can be parsed into PSM (full name Program Stream Map).

[0030] In this embodiment, the video management platform can be a public security system video management platform, a home security video management platform, an education system video management platform, a medical health video management platform, a retail business video management platform, an industrial production video management platform, etc. The above video management platforms are all exemplary descriptions and are not limitations of this application, and will not be described one by one.

[0031] In this embodiment, each time a signaling message is received in real time, step S100 may include S110-S130:

[0032] S110: Perform deep packet analysis on the signaling message to obtain session information, protocol information, signaling content and signature information;

[0033] S120: Acquire the signaling credibility of the signaling message based on the session information and the signaling contenty ;

[0034] S130: Acquire the signature credibility of the signaling message based on the protocol information, or based on the protocol information and the signature information s ;

[0035] In this embodiment, in step S110, deep packet analysis (DPI, full name deep packet inspection) of the signaling message can obtain session information, protocol information, signaling content and signature information of the signaling message; wherein the session information includes a five-tuple: source IP address, destination IP address, source port number, destination port number, transport layer protocol, and the transport layer protocol may include TCP protocol, UDP protocol, etc.; the protocol information is an application layer protocol: one of SIP, GB28181, and GB35114; the signaling content includes but is not limited to REGISTER, Keepalive, INVITE, pan-tilt control, video playback and other signaling; the signature information includes whether there is a signature, and the signature when there is a signature.

[0036] The video session credibility evaluation method in this embodiment implements the credibility evaluation of the video session based on the signaling message and video stream included in the video session itself, that is, the evaluation is performed based on all the data included in the video session, and the signaling credibility and signature credibility are calculated based on the parsing result of the signaling message. The calculation is simple and the evaluation efficiency is high. No additional hardware configuration is required. The security level of the video stream can be efficiently obtained according to the key frames in the video stream. The video session credibility includes information in three dimensions: signaling credibility, signature credibility and video stream security. The obtained video session credibility is more reliable and the coverage of the evaluation data is stronger.

[0037] In an exemplary embodiment, step S120 may include steps S121-S122:

[0038] S121: Establishing a session state according to the session information and the signaling content;

[0039] S122: Obtain the trusted signaling set and abnormal signaling set corresponding to the session state. If the signaling content is in the trusted signaling set, the signaling credibility corresponding to the signaling message is y Set to a preset credibility value; if the signaling content is an abnormal signaling in the abnormal signaling set, the signaling credibility corresponding to the signaling message is set to y Set to the score corresponding to the abnormal signaling.

[0040] In this embodiment, the abnormal signaling set includes one abnormal signaling or a plurality of different abnormal signalings, each abnormal signaling corresponds to a score, and the score is less than the preset credibility value.

[0041] In this embodiment, the correspondence between the session state and the trusted signaling set, and the correspondence between the session state and the abnormal signaling set are pre-saved; for a session state, its trusted signaling set includes one or more trusted signalings, and the abnormal signaling set includes one or more abnormal signalings; when a session state is established, the trusted signaling set and the abnormal signaling set of the session state can be obtained in real time. When the signaling content parsed in step S110 is a trusted signaling, the signaling credibility of the signaling message can be y Set to a preset credibility value, such as a preset credibility value of 100; when the signaling content obtained by parsing in step S110 is abnormal signaling, the signaling credibility of the signaling message can be y Set to the score corresponding to the abnormal signaling. The corresponding relationship between the session state and the abnormal signaling set is shown in Table 1. Taking the session state registration (REGISTER) as an example, its abnormal signaling set includes two abnormal signalings: repeated registration and sending other requests before completing registration.

[0042] Table 1 Correspondence between session status and abnormal signaling set

[0043]

[0044] In this embodiment, when the next signaling message is obtained, steps S121-S122 are still executed for it. After the session state is established according to the session information and signaling content obtained by parsing, for this session state, the trusted signaling set and the abnormal signaling set need to be re-acquired, and the signaling credibility corresponding to the next signaling message is calculated. y to set it up.

[0045] In an exemplary embodiment, step S130 may include steps S131-S133:

[0046] S131: When the protocol information indicates that the application layer protocol is GB35114, set the signature credibility of the signaling message s is the first preset signature value;

[0047] S132: When the protocol information indicates that the application layer protocol is SIP or GB28181 and the signature information indicates that there is no signature, set the signature credibility of the signaling message s is a second preset signature value;

[0048] S133: When the protocol information indicates that the application layer protocol is SIP or GB28181 and the signature information indicates that there is a signature, perform a signature verification operation and set the signature credibility of the signaling message according to the signature verification result. s .

[0049] In this embodiment, the first preset signature value may be 100, and the second preset signature value may be 60.

[0050] In an exemplary embodiment, before executing step S110, step S000 may be executed:

[0051] S000: When the protocol of the video session is SIP or GB28181, encryption and signing operations are performed on the signaling message, including steps S010-S030:

[0052] S010: adding a Data field to the signaling message to obtain a first signaling, wherein the Data field represents a timestamp;

[0053] S020: using the hash algorithm HMACSHA256 to perform a keyed encryption operation on the first signaling, performing Base64 encoding on the encryption result, and using the obtained encoding result A as a signature;

[0054] S030: Add the signature to the first signaling to obtain a second signaling with enhanced credibility, and use the second signaling to replace the signaling message.

[0055] In this embodiment, before performing deep packet parsing on the signaling message, the application layer protocol of the traffic can be preliminarily identified through keywords, ports and other information; since the video session transmitted using GB35114 already has signature content to prevent forgery, tampering and playback, there is no need to perform step S000 on the video session; for the video session transmitted using SIP or GB28181, its signaling message is plain text signaling, and step S000 can be used to encrypt and sign the plain text signaling, which can be achieved through steps S010-S030.

[0056] In this embodiment, by executing step S010, a timestamp Data can be added to the signaling message to form a first signaling with a structure of {METHOD, FROM, TO, CALL-ID, information body, Data}, wherein {METHOD, FROM, TO, CALL-ID, information body} is the information message before Data is added, wherein METHOD represents the signaling method; FROM represents the terminal that sends the video session, such as a camera or a terminal that saves the video session; TO represents the video management platform that receives the video session; and CALL-ID represents the number of the video session.

[0057] In this embodiment, {METHOD, FROM, TO, CALL-ID, information body, Data} can be first encrypted using the hash algorithm HMACSHA256, and the key used for encryption is generated by the video session credibility evaluation device; after encryption, the encryption result is encoded using the Base64 encoding algorithm, and the encoding result A is added to the first signaling to generate a second signaling, and the structure of the second signaling is {METHOD, FROM, TO, CALL-ID, information body, Data, A}; in the video session, the second signaling is used to replace the information message {METHOD, FROM, TO, CALL-ID, information body} to generate an information message with enhanced credibility, and when executing step S110, deep packet analysis is performed on the information message with enhanced credibility.

[0058] In this embodiment, by encrypting and signing the plain text signaling of SIP or GB28181, the credibility of the signaling message is strengthened, and the plain text signaling is prevented from being tampered with and replayed.

[0059] In an exemplary embodiment, step S133 may include steps S1331-S1333:

[0060] S1331: Obtain the time difference between the current moment and the timestamp;

[0061] S1332: If the time difference is less than or equal to the preset validity period, the first signaling is encrypted with a key using the hash algorithm HMACSHA256, and the encryption result is encoded by Base64 to obtain the encoding result A'. If A'=A, the signature is correct, and the signature credibility of the signaling message is s Set to the first preset signature value; if A'≠A, the signature is wrong, and the signature credibility of the signaling message is s Set to a third preset signature value;

[0062] S1333: If the time difference is greater than the preset validity period, the signature credibility of the signaling message is increased. s Set to the second preset signature value;

[0063] In this embodiment, the first preset signature value>the second preset signature value>the third preset signature value.

[0064] In this embodiment, when the application layer protocol is SIP or GB28181 and the signature information indicates that there is a signature, a signature verification operation is performed and the signature credibility is set according to the signature verification result. Steps S331-S333 can be executed to perform signature verification and the signature credibility is set according to the signature verification result, wherein the first preset signature value can be 100, the second preset signature value can be 60, and the third preset signature value can be 10.

[0065] In this embodiment, combined with steps S131, S132, S1331-S1333, signature credibility s The setting table is shown in Table 2.

[0066] Table 2 Signature credibility s Setting table

[0067]

[0068] In an exemplary embodiment, step S200 may include steps S210-S220:

[0069] S210: min{ y} as the signaling credibility of the video session Y i , where min{ y} is the signaling credibility corresponding to all signaling messages of the video session y The minimum value in ;

[0070] S220: min{ s} as the signature credibility of the video session S i , where min{ s} is the signature credibility corresponding to all signaling messages of the video session s The minimum value in .

[0071] In one implementation of this embodiment, when executing step S210, the signaling credibility of all signaling messages of the video session can be obtained. y , and then take the minimum value as the signaling credibility of the video session Y i For example, the video session corresponds to 20 signaling messages. y One-to-one correspondence with the signaling message, 20 signaling credibility is obtained y , at 20 signaling credibility y The minimum value is taken as the signaling credibility of the video session Y i When executing step S220, the signature credibility of all signaling messages of the video session can be obtained s, and then take the minimum value as the signature credibility of the video session S i For example, this video session corresponds to 20 signaling messages. s One-to-one correspondence with the signaling message, 20 signature credibility levels are obtained s , at 20 signature credibility s The minimum value is taken as the signature credibility of the video session S i .

[0072] In another implementation of this embodiment, when executing step S210, for the video session, the signaling credibility corresponding to the first two signaling messages is obtained. y 1 and y 2 After that, y 1 and y 2 The smaller value is temporarily set as the signaling credibility of the video session Y i , after obtaining the signaling credibility corresponding to the third signaling message y 3 After that, y 3 and Y i The smaller value is temporarily set as the signaling credibility of the video session Y i , and so on, until the signaling credibility of the video session is obtained Y i When executing step S220, for the video session, the signature credibility corresponding to the first two signaling messages is obtained s 1 and s 2 After that, s 1 and s 2 The smaller value is temporarily set as the signature credibility of the video session S i , after obtaining the signature credibility corresponding to the third signaling message s 3 After that, s 3 and S i The smaller value is temporarily set as the signature credibility of the video session S i , and so on, until the signature credibility of the video session is obtained Si .

[0073] In an exemplary embodiment, step S300 may include steps S310-S320, wherein step S320 may include steps S321-S325:

[0074] S310: When the application layer protocol of the video session is SIP or GB28181, the video stream security level of the video session is L i Set to the fourth preset safety value;

[0075] S320: When the application layer protocol of the video session is GB35114, each time a program stream containing a key frame in the video stream is obtained, steps S321-S324 are executed:

[0076] S321: locate the PSM position in the program stream and obtain the encoding type field of the PSM;

[0077] S322: If the encoding type field indicates that the encoding type is h264 or mpeg4, determine that the security level of the program stream is level A, and set the security level of the program stream to a first preset security value;

[0078] S323: If the encoding type field indicates that the encoding type is svac, locate the NALU position of the program stream, obtain the NALU_TYPE field in the NALU header, if the decimal value of the NALU_TYPE field is 9, the byte immediately after the NALU header is a security parameter set, and obtain the security parameter set; if the decimal value of the NALU_TYPE field is not 9, determine that the security level of the program stream is A, and set the security level of the program stream to the first preset security value;

[0079] S324: converting the security parameter set into binary data, wherein the first bit in the binary data is encryption_flag, and the second bit is authentication_flag; if only authentication_flag is 1 among encryption_flag and authentication_flag, determining that the security level of the program stream is level B and setting the security level of the program stream to a second preset security value; if both encryption_flag and authentication_flag are 1, determining that the security level of the program stream is level C and setting the security level of the program stream to a third preset security value;

[0080] S325: Among the security levels corresponding to all program streams containing key frames, take the minimum value as the video stream security level of the video session. L i .

[0081] In this embodiment, the fourth preset safety value < the first preset safety value < the second preset safety value < the third preset safety value, the fourth preset safety value may be 60, the first preset safety value may be 70, the second preset safety value may be 80, and the third preset safety value may be 100.

[0082] In this embodiment, when the application layer protocol of the video session is SIP or GB28181, step S310 is executed to increase the security level of the video stream of the video session. L i Directly set it to the fourth preset safety value, such as 60.

[0083] In this embodiment, when the application layer protocol of the video session is GB35114, its video stream may correspond to multiple program streams PS, wherein the program stream PS including the key frame is as follows: Figure 2 As shown, Figure 2 The program stream PS in the program is expressed in hexadecimal. The program stream PS including the key frame starts with a fixed format 000001ba and can be parsed into PSM. Figure 2 The encoding type of the displayed program stream is svac.

[0084] In this embodiment, the fixed format 000001ba representing the beginning of the program stream PS is followed by the PS header, sysem header, PSM, PES and NALU, wherein PES is the elementary stream packet (full name Packetized Elementary Stream), and NALU is the network abstraction layer unit (full name Network Abstraction Layer Unit); in PSM, after the PSM start code, length code, info len and map len is the encoding type field, when the encoding type field is 1b, it indicates that the encoding type is h264, when the encoding type field is 10, it indicates that the encoding type is mpeg4, and when the encoding type field is 80, it indicates that the encoding type is svac, such as Figure 3 As shown, Figure 3 and Figure 2 For the same program stream PS; when the encoding type is h264 or mpeg4, the security level of the program stream can be set to 70.

[0085] In this embodiment, if the encoding type is svac, after PSM and PES, the NALU position is located by the NALU start code 00000001, and after the NALU start code 00000001 is the NALU header, such as Figure 3 The e4 shown in the figure includes the NALU_TYPE field in the NALU header. For example, convert e4 to the binary number 11100100, where 1001 is the NALU_TYPE field, and the decimal number corresponding to 1001 is 9. The security parameter set is after the NALU header, such as Figure 3 In the figure, c7 after e4 is converted into binary data 11000111, where the first and second digits are both 1, then Figure 2 and 3 The security level of the program stream shown is set to 100; when the NALU_TYPE field is not 9 when converted to decimal, the security level of the program stream can be set to 70; if the NALU_TYPE field is 9 when converted to decimal, and after the security parameter set is converted to binary, only the second authentication_flag of the first two digits is 1, the security level of the program stream can be set to 80.

[0086] In this embodiment, the security level is determined by using a program stream including key frames. The reason is that: using a program stream including key frames can determine three security levels: A, B and C. When the program stream including key frames is both encrypted and signed, the security level is C. When the program stream including key frames is only signed, the security level is B. When the program stream including key frames is neither encrypted nor signed, the security level is A. However, for a program stream not including key frames, it can only be determined whether the program stream is C. When the program stream is encrypted, the security level is C. When the program stream is not encrypted, the security level is not C, as shown in Table 3 for the key frame and non-key frame areas.

[0087] Table 3 Differences between program streams with and without key frames

[0088]

[0089] In this embodiment, in combination with step S310 and steps 321-S324, the security setting table of the program stream is shown in Table 4:

[0090] Table 4 Program stream security setting table

[0091]

[0092] In this embodiment, in the existing technology, in a video session whose application layer protocol is GB35114, the three levels A, B, and C are generally judged based on the signed and encrypted signaling messages. However, some signaling messages of GB35114 do not indicate whether they are encrypted and signed. In this case, the three levels A, B, and C cannot be judged. This embodiment determines the security of the video stream of the video session whose application layer protocol is GB35114 by the program stream containing key frames, and divides the security levels into three levels A, B, and C. That is, the judgment of the three levels A, B, and C no longer depends on the signaling messages. Among them, the security of level C is the highest, the security of level B is in the middle, and the security of level A is the lowest.

[0093] In one implementation of this embodiment, the program stream of the video session may include multiple program streams including key frames. When executing step S325, after obtaining the security level corresponding to each program stream including the key frame, l Then, the minimum value is taken as the video stream security of the video session. L i For example, the video stream of the video session corresponds to 20 program streams including key frames, and the security level is l One-to-one correspondence with the program stream including key frames, a total of 20 safety levels are obtained l , at 20 degrees of safety l The minimum value is taken as the video stream security of the video session L i .

[0094] In another implementation of this embodiment, in the program stream of the video session, there may be multiple program streams including key frames. When executing step S325, the security level of the first two program streams including key frames is obtained. l 1 and l 2 Afterwards, l 1 and l 2 The smaller value is temporarily set as the video stream security level of the video session L i , after obtaining the security level corresponding to the third program stream including the key frame l 3 Afterwards, in l 3 and L i Continue to select a smaller value in the video stream security level to temporarily set it as the video stream security level for this video session. L i , and so on, until the video stream security of the video session is obtained. L i .

[0095] In an exemplary embodiment, step S400 may include step S410:

[0096] S410: According to the formula K i = W Y Y i + W S S i + W L L i Get the credibility of this video session K i ,in, W Y , W S , W L They are Y i , S i and L i The weight of .

[0097] In this embodiment, after executing step S410, step S420 may also be executed:

[0098] S420: If the video session Y i ≥Preset signaling credibility, S i ≥Preset signature credibility, L i ≥Preset video stream security, or, K i ≥Preset credibility and send the video session to the video management platform.

[0099] In this embodiment, for a certain video session, the signaling credibility corresponding to the video session can be Y i , Signature credibility S i , Video Stream Security L i , Credibility K i One of the following determines whether to send the video session to the video management platform; for example, the video management platform only receives the credibility K iIf the video session is greater than or equal to the preset credibility, the condition " K i ≥ preset credibility” is sent to the video management platform.

[0100] In an exemplary embodiment, after executing steps S100-S400 for each video session, the credibility of each video session sent to the video management platform via the video network is obtained. K i After that, the method may further include steps S510-S520:

[0101] S510: Based on the credibility of all video conversations K i Calculate the average value and use the average value as the overall credibility of the video network K ;

[0102] S520: If the overall credibility K ≥Preset overall credibility, then all video conversations are sent to the video management platform through the video network.

[0103] In this embodiment, the formula calculate n Overall credibility of video conversations K , overall credibility K for n The average credibility of the video conversations can be used to K As a basis for evaluating whether the video network is credible, if K ≥ The preset overall credibility can indicate that the video network is credible and all video sessions in the video network can be sent to the video management platform.

[0104] The present application also provides a video session credibility assessment device, including a memory and a processor. Figure 4 As shown:

[0105] The memory is used to store the video session credibility assessment program;

[0106] The processor is used to read the video session credibility assessment program and perform the video session credibility assessment method as described in the above embodiment.

[0107] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all components may be implemented as software executed by a processor, such as a digital signal processor or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or transient medium). As is known to those skilled in the art, the term "computer storage medium" includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

Claims

1. A method for evaluating the credibility of a video conversation, characterized in that: Perform the following operations on each video session sent through the video network to the video management platform, including: Each time a signaling message of the video session is obtained, the signaling message is deep package parsed to obtain session information, protocol information, signaling content and signature information; based on the session information and the signaling content, the signaling credibility of the signaling message is obtained. y ; Based on the protocol information, or based on the protocol information and the signature information, obtain the signature credibility of the signaling message s ; The signaling credibility of all signaling messages based on the video session y , get the signaling credibility of the video session Y i ; The signature credibility of all signaling messages based on the video session s , get the signature credibility of the video session S i ; Get the video stream of the video session, and get the video stream security of the video session based on the key frames in the video stream L i ; According to the signaling credibility Y i , the signature credibility S i and the video stream security L i Get the credibility of this video session K i ; in, i Indicates that this video session is i video sessions; The video stream of the video session is obtained, and the security level of the video stream of the video session is obtained based on the key frames in the video stream. L i ,include: When the application layer protocol of the video session is SIP or GB28181, the video stream security level of the video session is L i Set to the fourth preset safety value; When the application layer protocol of the video session is GB35114, each time a program stream containing a key frame in the video stream is obtained, the following operations are performed: Locate the PSM position in the program stream and obtain the encoding type field of the PSM; If the encoding type field indicates that the encoding type is h264 or mpeg4, the security level of the program stream is determined to be level A, and the security level of the program stream is set to a first preset security value; If the encoding type field indicates that the encoding type is svac, locate the NALU position of the program stream, obtain the NALU_TYPE field in the NALUheader, and if the decimal value of the NALU_TYPE field is 9, the byte immediately after the NALU header is a security parameter set, and the security parameter set is obtained; if the decimal value of the NALU_TYPE field is not 9, determine that the security level of the program stream is A, and set the security level of the program stream to the first preset security value; Convert the security parameter set into binary data, wherein the first bit in the binary data is encryption_flag, and the second bit is authentication_flag; if only authentication_flag is 1, the security level of the program stream is determined to be B-level and the security level of the program stream is set to a second preset security value; if both encryption_flag and authentication_flag are 1, the security level of the program stream is determined to be C-level and the security level of the program stream is set to a third preset security value; Among the security levels corresponding to all program streams containing key frames, the minimum value is taken as the video stream security level of the video session. L i ; Among them, the fourth preset safety value < the first preset safety value < the second preset safety value < the third preset safety value.

2. The method for evaluating the credibility of a video conversation according to claim 1, wherein: The signaling credibility of the signaling message is obtained based on the session information and the signaling content. y ,include: Establishing a session state according to the session information and the signaling content; Obtain the trusted signaling set and abnormal signaling set corresponding to the session state. If the signaling content is in the trusted signaling set, the signaling credibility corresponding to the signaling message is y Set to a preset credibility value; if the signaling content is an abnormal signaling in the abnormal signaling set, the signaling credibility corresponding to the signaling message is set to y Set to the score corresponding to the abnormal signaling; The abnormal signaling set includes one abnormal signaling or a plurality of different abnormal signalings, each abnormal signaling corresponds to a score, and the score is less than the preset credible value.

3. The method for evaluating the credibility of a video conversation according to claim 1, wherein: The method of obtaining the signature credibility of the signaling message based on the protocol information or based on the protocol information and the signature information s ,include: When the protocol information indicates that the application layer protocol is GB35114, set the signature credibility of the signaling message s is the first preset signature value; When the protocol information indicates that the application layer protocol is SIP or GB28181 and the signature information indicates that there is no signature, set the signature credibility of the signaling message s is a second preset signature value; When the protocol information indicates that the application layer protocol is SIP or GB28181 and the signature information indicates that there is a signature, a signature verification operation is performed, and the signature credibility of the signaling message is set according to the signature verification result. s .

4. The method for evaluating the credibility of a video conversation according to claim 3, wherein: Before performing deep packet parsing on the signaling message, the following steps are included: When the application layer protocol of the video session is SIP or GB28181, the following encryption and signing operations are performed on the signaling message: Adding a Data field to the signaling message to obtain a first signaling, wherein the Data field represents a timestamp; The first signaling is encrypted with a key using the hash algorithm HMACSHA256, and the encryption result is Base64-encoded, and the obtained encoding result A is used as a signature; The signature is added to the first signaling to obtain a second signaling with enhanced credibility, and the second signaling is used to replace the signaling message.

5. The method for evaluating the credibility of a video conversation according to claim 4, wherein: The signature verification operation is performed, and the signature credibility of the signaling message is set according to the signature verification result. s ,include: Get the time difference between the current time and the timestamp; If the time difference is less than or equal to the preset validity period, the first signaling is encrypted with a key using the hash algorithm HMACSHA256, and the encryption result is encoded by Base64 to obtain the encoding result A'. If A'=A, the signature is correct, and the signature credibility of the signaling message is s Set to the first preset signature value; if A'≠A, the signature is wrong, and the signature credibility of the signaling message is s Set to a third preset signature value; If the time difference is greater than the preset validity period, the signature credibility of the signaling message is s Set to the second preset signature value; Among them, the first preset signature value>the second preset signature value>the third preset signature value.

6. The method for evaluating the credibility of a video conversation according to claim 1, wherein: The signaling credibility of all signaling messages based on the video session y , get the signaling credibility of the video session Y i ; The credibility of the signature of all signaling messages based on the video session s , get the signature credibility of the video session S i ,include: min{ y } as the signaling credibility of the video session Y i , where min{ y } is the signaling credibility corresponding to all signaling messages of the video session y The minimum value in ; min{ s } as the signature credibility of the video session S i , where min{ s } is the signature credibility corresponding to all signaling messages of the video session s The minimum value in .

7. The method for evaluating the credibility of a video conversation according to claim 1, wherein: The signaling credibility Y i , the signature credibility S i and the video stream security L i Get the credibility of this video session K i , include: According to the formula K i = W Y Y i + W S S i + W L L i Get the credibility of this video session K i ,in, W Y , W S , W L They are Y i , S i and L i The weight of .

8. The method for evaluating the credibility of a video conversation according to claim 1, wherein: Obtaining the credibility of each video session sent to the video management platform via the video network K i After that, it also includes: Based on the credibility of all video conversations K i Calculate the average value and use the average value as the overall credibility of the video network K ; If the overall credibility K ≥Preset overall credibility, then all video conversations are sent to the video management platform through the video network.

9. A video conversation credibility assessment device, comprising a memory and a processor, characterized in that: The memory is used to store the video session credibility assessment program; The processor is used to read the video session credibility assessment program and perform the video session credibility assessment method as described in any one of claims 1-8.

Images