Transmission verification method and system for master slice in repeatable shooting system

Abstract

The invention discloses a master slice transmission verification method and system in a repeatable shooting system. According to the transmission verification method for the master slice in the repeatable shooting system, the integrity verification is carried out on the video data by using the specific Hash digest algorithm, and the data integrity in the video transmission process is guaranteed. Meanwhile, the invention also provides a master slice user identity authentication and verification system for master slice transmission in a repeatable shooting system in combination with a cloud service platform, the identity of the user can be reliably authenticated, and the user is ensured to have the use permission of the master slice. According to the technical scheme, the problems existing in a traditional method can be effectively solved, high safety is achieved, and a new thought and method are provided for development of the fields of video transmission and identity authentication.

Description

Technical Field

[0001] The present invention relates to the field of video transmission and identity authentication, and provides a method for verifying the integrity of a master slice using a specific digest algorithm, and performs user identity verification in combination with an existing independently developed cloud service platform. Background Art

[0002] With the rapid development of the Internet, video transmission and identity authentication have become two important aspects of today's Internet field. In practical applications, the data integrity and identity authentication accuracy in the video transmission process still face some challenges, such as data tampering, loss and identity forgery, lack of authority and other issues.

[0003] Data integrity verification is one of the important means to ensure that data is not tampered with during transmission. Traditional data integrity verification methods mainly include CRC verification and hash algorithms, which verify the integrity of data by calculating the checksum value of the data. However, traditional methods may have problems such as low performance and low security. In this context, the digest algorithm has attracted widespread attention as a more efficient and secure verification method. The digest algorithm generates a fixed-length summary information by performing a hash operation on the data. It has the characteristics of irreversibility and uniqueness, and can effectively protect the integrity of the data.

[0004] In order to authenticate the identity and authority of the master slice user, it is particularly important to combine the existing self-developed cloud service platform for identity verification. This identity verification method can effectively verify the identity and authority of the user based on the user's identity information and the key owned by the user, ensuring that the master slice is not stolen by users who do not obtain the corresponding authority. Summary of the invention

[0005] The object of the present invention is to solve the problems existing in the prior art and to provide a master film user identity authentication and verification system for master film transmission in a repeatable shooting system.

[0006] The specific technical solutions adopted by the present invention are as follows:

[0007] In a first aspect, the present invention provides a transmission verification method for a master in a repeatable shooting system, comprising:

[0008] S1. The sender generates a first hash value for the master data to be transmitted by a hash digest algorithm that takes into account the characteristics of the master, and then encrypts the first hash value with a private key to obtain a digital signature, and finally sends the master and the digital signature to the receiver;

[0009] S2. After receiving the master data and the digital signature, the receiver generates a second hash value for the master data by a hash digest algorithm that takes into account the characteristics of the master, and decrypts the digital signature by using a public key that matches the private key, thereby obtaining a third hash value; the second hash value is compared with the third hash value, and if they are the same, it is determined that the transmitted master data is complete and has not been modified by the attack; if they are different, it is determined that the transmitted master data is incomplete or has been modified by the attack, thereby completing the verification.

[0010] As a preferred embodiment of the first aspect, the specific process of the hash digest algorithm considering the characteristics of the master slice is as follows:

[0011] A1. Obtain a master video and 512 bits of enhancement information obtained by a repeatable shooting system, splice the master video after the enhancement information as master data to be transmitted, and pad the master data to obtain a binary data stream whose length modulo 512 is 448; wherein when padding is performed, the number of bits to be padded is at least 1 bit and at most 512 bits, the first bit padded value is 1, and the remaining bits padded values ​​are all 0;

[0012] A2. Convert the length value of the master data into 64-bit binary information, and then splice it after the binary data stream to form complete stream data;

[0013] A3. The complete stream data is divided into blocks of 512 bits in length, each 512-bit data block constitutes a group, wherein the first group is all enhanced information; four custom calculation functions F(x, y, z), G(x, y, z), H(x, y, z), I(x, y, z) and four standard values ​​A, B, C, D are pre-built;

[0014] A4. For each of the remaining groups except the first group, four rounds of standard value update operations are performed using the four custom calculation functions and the four standard values. Each round of operations obtains four new standard values ​​based on the original four standard values. The four standard values ​​obtained by the four rounds of operations are added together and then the four added values ​​are spliced ​​to generate an intermediate hash value corresponding to each group. For the first group, the 512-bit data therein is divided into 8 subgroups according to the 64-bit length, and each 64-bit subgroup is further divided into 4 data blocks. Four 16-bit data blocks are added to a preset hash initial value to obtain a 16-bit hash value. The 16-bit hash values ​​of the 8 subgroups are spliced ​​in sequence to obtain the intermediate hash value corresponding to the first group. The intermediate hash values ​​corresponding to all the groups are spliced ​​in sequence to obtain the hash value that is the final output of the hash summary algorithm that considers the characteristics of the master slice.

[0015] As a preferred embodiment of the first aspect, for any group except the first group, the specific process of performing four rounds of standard value update operations using the four custom calculation functions and the four standard values ​​is as follows:

[0016] The 512-bit binary data in the current group is divided into 8 subgroups, and then the 8 subgroups are used to execute a round of hash function operation consisting of one of the custom calculation functions, four standard values, one subgroup data, one bit in the 32-bit constant table and a circular shift operation. The result value of the hash function operation is used to update one of the standard values. After each round of execution, the four standard values ​​are updated twice, and the final standard value is used as the new four standard values ​​obtained by this round of standard value update operation; after a total of four rounds of updates, the new four standard values ​​corresponding to each round of standard value update operation are obtained.

[0017] As a preferred embodiment of the above-mentioned first aspect, when comparing the second hash value with the third hash value, the last 256 bits of hash data and the hash data of other bits can be compared separately, the last 256 bits of hash data are used to verify the enhanced information, and the remaining bits of hash data are used to verify the master video.

[0018] As a preferred embodiment of the first aspect, the sender needs to encrypt the master and the digital signature and send them to the receiver in ciphertext form, and the receiver then decrypts the ciphertext to restore the master and the digital signature.

[0019] As a preferred embodiment of the first aspect, the sender encrypts the master slice and the digital signature by RSA asymmetric encryption and sends the encrypted data to the receiver.

[0020] In a second aspect, the present invention provides a master user identity authentication and verification system for master transmission in a repeatable shooting system, comprising:

[0021] The first local client is used for the master slice owner to generate a first hash value from the master slice data to be transmitted by using a hash digest algorithm that takes into account the master slice characteristics, and then encrypt the first hash value with a local private key to obtain a digital signature, and finally send the master slice data and the digital signature stored locally to the cloud service platform;

[0022] Cloud service platform, including key storage module, registration module, encryption module and transmission module;

[0023] The key storage module is used to store the cloud service public key and cloud service private key used for encryption and decryption by the cloud platform itself;

[0024] The registration module is used for the master slice owner and the authorized user of the master slice to register as a user on the cloud platform, and to log in to use the cloud platform functions after identity authentication; and for the master slice owner to register the local public key used in pair with the local private key on the cloud platform in advance;

[0025] The encryption module is used to receive the master data and the digital signature sent by the first local client, and use the cloud service private key to encrypt the received master data, the digital signature, the local public key and the user information of the master owner to generate a digital certificate;

[0026] The transmission module is used to formulate instructions according to the authority of the master slice owner to send the digital certificate and the cloud service public key to the designated authorized user of the master slice;

[0027] The second local client is used for the master slice to authorize the master slice to download the digital certificate and the cloud service public key sent by the cloud service platform to the local client, and use the cloud service public key to decrypt the digital certificate to obtain the master slice data, the digital signature, the local public key and the user information of the master slice owner, and finally generate a second hash value for the master slice data by a hash digest algorithm considering the master slice characteristics, and decrypt the digital signature by using the local public key to obtain a third hash value, and compare the second hash value with the third hash value. If they are the same, it is judged that the transmitted master slice data is complete and has not been modified by the attack; if they are different, it is judged that the transmitted master slice data is incomplete or has been modified by the attack, thereby completing the verification.

[0028] In a third aspect, the present invention provides a computer program product, including a computer program / instruction, which, when executed by a processor, can implement the transmission verification method of a master film in a repeatable shooting system as described in any one of the first aspects above.

[0029] In a fourth aspect, the present invention provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the method for transmitting and verifying a master film in a repeatable shooting system as described in any one of the first aspects above can be implemented.

[0030] In a fifth aspect, the present invention provides a computer electronic device comprising a memory and a processor;

[0031] The memory is used to store computer programs;

[0032] The processor is configured to implement the method for verifying the transmission of a master film in a repeatable shooting system as described in any one of the first aspects above when executing the computer program.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] The present invention proposes a transmission verification method for a master in a repeatable shooting system, which performs integrity verification on video data using a specific hash summary algorithm to ensure the integrity of data during video transmission. At the same time, the present invention can also provide a master user identity authentication and verification system for master transmission in a repeatable shooting system in combination with a cloud service platform, which can reliably authenticate the user's identity and ensure that the user has the right to use the master. This technical solution can not only effectively solve the problems existing in traditional methods, but also has high security, and provides new ideas and methods for the development of video transmission and identity authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 A schematic diagram of the steps of a transmission verification method for a master film in a repeatable shooting system;

[0036] Figure 2 is a verification flow chart in an embodiment of the present invention;

[0037] Figure 3 A schematic diagram of the module composition of a master film user identity authentication and verification system for master film transmission in a repeatable shooting system;

[0038] Figure 4 This is a schematic diagram of the module composition in the cloud service platform;

[0039] Figure 5 The flowchart is for the master slice owner to authorize a user to use the master slice through the cloud service platform. DETAILED DESCRIPTION

[0040] In order to make the above-mentioned purpose, features and advantages of the present invention more obvious and easy to understand, the specific implementation mode of the present invention is described in detail below in conjunction with the accompanying drawings. In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention can be implemented in many other ways different from those described herein, and those skilled in the art can make similar improvements without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below. The technical features in each embodiment of the present invention can be combined accordingly without conflicting with each other.

[0041] In the description of the present invention, it is to be understood that when an element is considered to be "connected" to another element, it may be directly connected to the other element or indirectly connected, that is, there are intermediate elements. On the contrary, when an element is said to be "directly" connected to another element, there are no intermediate elements.

[0042] In the description of the present invention, it should be understood that the terms "first" and "second" are only used for the purpose of distinguishing descriptions, and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features.

[0043] In response to the needs in the field of video transmission and identity authentication, the present invention proposes a transmission verification method for a master film in a repeatable shooting system. The method uses a specific hash summary algorithm to perform integrity verification on video data to ensure the integrity of data during video transmission. At the same time, the present invention can also be combined with a cloud service platform to reliably authenticate the identity of the user to ensure that the user has the right to use the master film. This technical solution can not only effectively solve the problems existing in traditional methods, but also has high security, providing new ideas and methods for the development of the field of video transmission and identity authentication.

[0044] It should be noted in advance that the repeatable shooting system in the present invention is a system that can restore the sub-film video based on the master film scene. The system belongs to the prior art. For details, please refer to CN117395352A, a system and method for restoring the sub-film video based on the master film scene. The system includes a video decoding module, a master film data processing module, a control data module of the sub-film video restoration camera, and a robot at the sub-film video restoration site. The video decoding module is used to obtain data enhancement information of the control hardware in the master film shooting; the master film data processing module extracts the control data of the original camera in the master film shooting according to the data enhancement information; the control data module of the sub-film video restoration camera adjusts the control data of the sub-film video shooting robot according to the scaling relationship between the master film shooting site and the sub-film restoration site; the robot at the sub-film video restoration site receives the output instruction of the control data module of the sub-film video restoration camera in real time to complete the adjustment of the sub-film video restoration camera. The master data obtained based on the system actually includes the master video and enhanced information. The enhanced information records the spatial position information of the camera, the degree of freedom information of the camera itself (position and posture information), the focal length of the camera, the aperture information, the lighting information and other data during the video shooting process of the virtual production. Therefore, when the present invention executes the hash digest algorithm on such master data with enhanced information, it is necessary to consider its data characteristics and improve the hash digest algorithm in a targeted manner.

[0045] The specific implementation of the present invention is described in detail below.

[0046] like Figure 1 As shown, in a preferred embodiment of the present invention, a transmission verification method for a master in a repeatable shooting system is provided, and the specific steps are as follows:

[0047] S1. The sender generates a first hash value for the master data to be transmitted by a hash digest algorithm that takes into account the characteristics of the master, and then encrypts the first hash value with a private key to obtain a digital signature, and finally sends the master and the digital signature to the receiver.

[0048] S2. After receiving the master data and the digital signature, the receiver generates a second hash value for the master data by a hash digest algorithm that takes into account the characteristics of the master, and decrypts the digital signature by using a public key that matches the private key, thereby obtaining a third hash value; the second hash value is compared with the third hash value, and if they are the same, it is determined that the transmitted master data is complete and has not been modified by the attack; if they are different, it is determined that the transmitted master data is incomplete or has been modified by the attack, thereby completing the verification.

[0049] In the above transmission verification method of the present invention, in order to ensure that the content transmitted by the master slice will not be lost or tampered with during the transmission process, it is necessary to calculate a specific first hash value as a "verification code" when transmitting the content, and then transmit the first hash value together with the master slice data to the receiver. After receiving the data, the receiver will use the same method to calculate another second hash value as a "verification code" for the master slice data, and decrypt a third hash value from the digital signature. If the master slice has not been tampered with or lost, then the third hash value should be exactly the first hash value, and the first hash value and the second hash value are generated based on the same hash digest algorithm, and should be consistent in theory. Therefore, if the second hash value is the same as the third hash value, then it can be regarded that the master slice data is complete and has not been modified by the attack, otherwise there is a possibility that the master slice data is incomplete or has been modified by the attack. This calculation and comparison process of the hash value verification code can ensure the integrity of the transmitted content, because even if the content is tampered with, the verification code will change, so that the receiver can promptly discover the tampering of the content and take corresponding measures. This method can not only improve the security of the transmission process, but also enhance the trust of both parties in the transmission content, thereby ensuring the smooth transmission of the master slice.

[0050] By comparing the consistency of the two hash value verification codes, it can be preliminarily ensured that the data will not be lost or tampered with in the process of giving the master to the user. The present invention will use a specific digest algorithm to perform hash operations on the master, so that the hash value generated is unique, and no one can deduce its original content through the obtained hash value. This requires that the digest algorithm used can only perform one-way deduction, and the information of each bit of the master content will affect the final hash value. However, in the above process, if the hash digest algorithm is directly used to generate the hash value verification code and then compare it, there will still be certain problems. Although the hash algorithm can ensure the integrity of the transmitted content, it cannot completely solve the problem of man-in-the-middle attacks. Even if the hash value of the content is generated by the hash algorithm and transmitted to the recipient together with the content, it may still be interfered by the middleman during the transmission process. This is because the hash value can only prove that the content has not been tampered with during the transmission process, but it cannot prove whether the message received by the recipient is indeed from the sender. The lack of verification of the source of the message allows the middleman to hijack the transmitted content, tamper with its hash value, and then send the modified content and the new hash value to the recipient. In this case, the recipient will not be able to detect the tampering of the content because the hash value and the content still match, but the middleman has successfully made malicious changes to the content.

[0051] Therefore, the present invention adds a key for encryption on the basis of the original process, so as to prevent the master content from being maliciously hijacked by others. In the present invention, non-encryption will be adopted, that is, private key encryption and public key decryption will be adopted. The private key cannot be disclosed, and only the sender knows his private key, so only the sender can use the private key to encrypt the message. The public key is public, and anyone can use the public key to decrypt the message encrypted with the private key. Therefore, if the recipient can successfully decrypt the message using the public key, it can be determined that the master content comes from the sender who holds the private key. The verification flow chart shown in the above S1~S2 after adding the key is as follows. Figure 2 shown.

[0052] The specific process of the hash digest algorithm considering the characteristics of the master slice proposed in the present invention is described in detail below. The specific process is as follows:

[0053] A1. A master video shot by a repeatable shooting system and 512 bits of enhancement information are obtained, the master video is spliced ​​after the enhancement information as master data to be transmitted, and the master data is padded to obtain a binary data stream whose length modulo 512 is equal to 448; when padding is performed, the number of padded bits is at least 1 bit and at most 512 bits, the first bit padded value is 1, and the remaining bits padded values ​​are all 0.

[0054] In an embodiment of the present invention, the specific composition of the 512-bit enhancement information is shown in Table 1 below:

[0055] Table 1

[0056]

[0057] In the embodiment of the present invention, in step A1, assuming that the length of the original information composed of the master video and the 512-bit enhanced information is b bits, a 1 can be first filled at the b+1 bit of the original information, and then 0s can be filled at the remaining bits until the length of the information modulo 512 is equal to 448. Note that even if the length of the original information modulo 512 is exactly equal to 448, padding is still required. In this case, the number of bits to be padded is 512, until the length of the information modulo 512 is again equal to 448. Therefore, the number of padded bits is at least 1 and at most 512.

[0058] A2. Convert the length value of the master data into 64-bit binary information, and then splice it after the binary data stream to form complete stream data.

[0059] In the embodiment of the present invention, in step A2, the length of the original information needs to be converted into the number of bits (in bits). Then, 64 bits of data are padded after the data operated in step A1 to indicate the length of the original information. After the filling in step A1, the result of the information length modulo 512 is 448. After the 64-bit length information is filled in step A2, the length of the entire complete stream data is just divisible by 512. When performing subsequent group calculations, the complete stream data can be divided into several 512-bit groups for processing.

[0060] A3. The complete stream data is divided into blocks of 512 bits in length, and each 512-bit data block constitutes a group, wherein the first group is all enhanced information; four custom calculation functions F(x, y, z), G(x, y, z), H(x, y, z), I(x, y, z) and four standard values ​​A, B, C, D are pre-built.

[0061] It should be noted that the specific forms of the four custom calculation functions F(x, y, z), G(x, y, z), H(x, y, z), I(x, y, z) and the four standard values ​​A, B, C, and D in the present invention can be reasonably adjusted according to actual algorithm requirements, but the reliability of the final summary algorithm should be guaranteed.

[0062] In an embodiment of the present invention, after padding, the length of the complete stream data will be guaranteed to be an integer multiple of 512 bits. Therefore, in step A3, first, the padded information can be divided into 512-bit blocks, each of which is called a group. Then, each 512-bit group is further subdivided into 8 subgroups, each of which is 64 bits long. Among them, the 512 bits in the first group are all enhanced information, which is a separate group and is also divided into 8 subgroups. Next, four calculation functions are defined in this embodiment, as follows:

[0063] F(x,y,z)=(x&(~y))|(x&z)

[0064] G(x,y,z)=((~x)&z)|(y&(~z))

[0065] H(x,y,z)=x^(~y)^z

[0066] I(x,y,z)=y^((~x)|z)

[0067] In this embodiment, four standard values ​​are defined as follows:

[0068] A=13 57 02 46

[0069] B=89ae db cb

[0070] C=bc ef cd 91

[0071] D=76 65 34 11

[0072] Assume that the complete stream data after data filling is divided into N groups in total; preset T is a constant table, T[i]=4294967296*abs(sin(i)) is rounded, where i=1,2,...32; M[j] is the jth group after the complete stream data is grouped, where j=1,2,...N; X[k] is the kth subgroup after a group M[j] is further subdivided, where k=0,1,2,...7.

[0073] After completing the above grouping and information setting, the subsequent standard value update calculation process can be carried out.

[0074] A4. For each of the remaining groups except the first group, four rounds of standard value update operations are performed using the four custom calculation functions and the four standard values. In each round of operation, four new standard values are obtained based on the original four standard values. After adding the four standard values of the same type obtained from the four rounds of operations and then concatenating the four sums, an intermediate hash value corresponding to each group is generated; for the first group, the 512-bit data therein is divided into 8 subgroups according to a length of 64 bits. Each 64-bit subgroup is further divided into 4 data blocks. After adding the four 16-bit data blocks to a preset initial hash value, a 16-bit hash value is obtained. The 16-bit hash values of the 8 subgroups are concatenated in order to obtain the intermediate hash value corresponding to the first group; the intermediate hash values corresponding to all groups are concatenated in order to obtain the hash value that is the final output of the hash digest algorithm considering the characteristics of the master wafer.

[0075] In an embodiment of the present invention, in the above A4 step, for each of the remaining groups except the first group, the specific process of performing four rounds of standard value update operations using the four custom calculation functions and the four standard values is as follows:

[0076] The 512-bit binary data in the current group is divided into 8 subgroups, and then each of the 8 subgroups is used to perform a round of hash function operation composed of one of the custom calculation functions, four standard values, one subgroup of data, one bit in the 32-bit constant table, and a circular shift operation. The result value of the hash function operation is used to update one of the standard values. After each round of execution, the four standard values are updated twice, and the finally obtained standard values are used as the new four standard values obtained from this round of standard value update operation; after a total of four rounds of updates, new four standard values corresponding to each round of standard value update operation are obtained.

[0077] In this embodiment, the specific processes of all four rounds of updates are as follows:

[0078] The first round of standard value update operation:

[0079] Suppose [abcd k s i] represents an operation composed of 7 variables a, b, c, d, k, s, and i, and its operation formula is: a = b + ((a + F(b, c, d) + X[k] + T[i]) <<< s), where <<< represents a circular shift. Therefore, by performing one [abcd k s i], the a variable can be updated once. In the first round of standard value update operation, the following 8 operations need to be performed on the current group, and the operation order is from left to right:

[0080] [ABCD 0 7 1][DABC 1 12 2][CDAB 2 17 3][BCDA 3 22 4]

[0081] [ABCD 4 7 5][DABC 5 12 6][CDAB 6 17 7][BCDA 7 22 8]

[0082] In the above 8 operation processes of the first round, A, B, C, and D will each be iteratively updated twice, and the finally updated values are the outputs. Thus, new four standard values can be obtained based on the original four standard values.

[0083] Second-round standard value update operation:

[0084] Assume that [abcd k s i] represents that the executed operation is a = b + ((a + G(b, c, d) + X[k] + T[i]) <<< s), where <<< represents circular shift. The following 8 operations are performed on the group, and the operation order is from left to right:

[0085] [ABCD 1 5 9][DABC 6 9 10][CDAB 7 14 11][BCDA 0 20 12]

[0086] [ABCD 5 5 13][DABC 3 9 14][CDAB 2 14 15][BCDA 4 20 16]

[0087] Similarly, in the above 8 operation processes of the second round, A, B, C, and D will each be iteratively updated twice, and the finally updated values are the outputs. Thus, new four standard values can be obtained based on the original four standard values. However, for the 8 operations in the second round, the initial values of A, B, C, and D are the four standard values A, B, C, and D predefined at the beginning, rather than the values iteratively updated in the previous round. The same applies to the subsequent third and fourth rounds.

[0088] Third-round standard value update operation:

[0089] Assume that [abcd k s i] represents that the executed operation is a = b + ((a + H(b, c, d) + X[k] + T[i]) <<< s), where <<< represents circular shift. The following 8 operations are performed on the group, and the operation order is from left to right:

[0090] [ABCD 5 4 17][DABC 2 11 18][CDAB 3 16 19][BCDA 0 23 20]

[0091] [ABCD 1 4 21][DABC 4 11 22][CDAB 7 16 23][BCDA 6 23 24]

[0092] Similarly, in the above 8 operations of the third round, A, B, C, and D will each be iteratively updated twice, and the finally updated values are the outputs. Thus, new four standard values can be obtained based on the original four standard values.

[0093] Fourth-round standard value update operation:

[0094] Suppose [abcd k s i] represents that the operation performed is a = b + ((a + I(b, c, d) + X[k] + T[i]) <<< s), where <<< represents circular shift. Perform the following operations on the group, and the operation order is from left to right:

[0095] [ABCD 0 6 25][DABC 7 10 26][CDAB 6 15 27][BCDA5 21 28]

[0096] [ABCD 2 6 29][DABC 3 10 30][CDAB 4 15 31][BCDA1 21 32]

[0097] Similarly, in the above 8 operations of the fourth round, A, B, C, and D will each be iteratively updated twice, and the finally updated values are the outputs. Thus, new four standard values can be obtained based on the original four standard values.

[0098] After each group undergoes the above four rounds of operation updates, it is necessary to accumulate the data of A, B, C, and D finally output in each round. When accumulating, the four standard values of the same type need to be added together, that is, the four As are added together, the four Bs are added together, the four Cs are added together, and the four Ds are added together. For the convenience of implementation, four variables result[0], result[1], result[2], and result[3] can be set to record the A, B, C, and D output in each round. Then, the following accumulations need to be done in each round:

[0099] result[0] = result[0] + a

[0100] result[1] = result[1] + b

[0101] result[2] = result[2] + c

[0102] result[3] = result[3] + d

[0103] Finally, the generated hash value is the concatenation of the above four results in sequence, that is:

[0104] Hash1 = result[0] ~ result[1] ~ result[2] ~ result[3]

[0105] Among them, “~” means splicing.

[0106] For the first group, i.e. the enhanced information group, the following hash value generation operation is required:

[0107] A hash initial value is preset as Hash0=0xABCD1234 (hexadecimal), each subgroup is 64 bits, and the 64 bits are divided into 4 blocks. Then block[i] is the i-th block after the subgroup is divided into blocks, where i=1...4, data is 64-bit data, and >> represents a right shift of the data bit.

[0108] The four blocks perform the following operations respectively:

[0109] Block[1]=(data>>48)&0xFFFF

[0110] Block[2]=(data>>32)&0xFFFF

[0111] Block[3]=(data>>16)&0xFFFF

[0112] Block[4]=data&0xFFFF

[0113] Finally, add the initial hash value to the four block values, namely:

[0114] Hash2=0xABCD1234+block[1]+block[2]+block[3]+block[4]

[0115] After each subgroup is completed, a 32-bit hash value will be generated, and a total of 8 hash values ​​will be generated. These hash values ​​are concatenated in order to obtain the hash value Hash2 (a total of 256 bits) of the enhanced information. This hash value will fully retain the semantics of the enhanced information and quickly verify the integrity of the enhanced information.

[0116] Finally, the hash value Hash2 of the enhanced information is concatenated with the hash value Hash1 of all groups to obtain the hash value Hash that is finally output by the hash summary algorithm that takes into account the characteristics of the master slice.

[0117] In the transmission verification method of the master in the above-mentioned repeatable shooting system of the present invention, an important advantage of the specific digest algorithm is that it can independently verify the enhanced information, which allows the scene information and the camera information (i.e., enhanced information) to be separately verified during the video transmission process. This independence significantly improves the efficiency and accuracy of data integrity verification. When the master encounters data loss or tampering during the transmission process, the independent verification mechanism can quickly locate the specific source of the problem, helping the user to take measures to repair it more quickly. Specifically, the user can independently verify the last 256 (32*8) bits of the hash value to determine whether the hash of the enhanced information is correct. The independent verification capability of the enhanced information allows the user to flexibly select the information content that needs to be paid attention to, avoiding the complexity and unnecessary trouble caused by the overall verification that may occur in the traditional method. In addition, the digital signature of the enhanced information effectively retains the semantics of the original data. When calculating the hash value of the enhanced information, a clever data segmentation method is used to set the data bit number to half of the result bit number (i.e., 16 bits / 32 bits, a block is 16 bits, the cumulative sum result should be 16 bits, but the initial hash is 32 bits) to ensure that all enhanced information is completely retained. The rationality of this design lies in that by subdividing the original data into smaller blocks, each block can fully contain the characteristic information, thus effectively avoiding the loss of information. In addition, in the process of finally calculating the enhanced information hash value, the cumulative sum will never exceed the number of digits of the initial hash value, which can prevent the problem of carry data loss caused by excessive data. At the same time, the introduction of the initial hash value significantly increases the difficulty of reverse decryption of the algorithm, making the whole process safer and more reliable.

[0118] It can be seen that this processing method not only improves the integrity and credibility of the data, but also enables the characteristics and content of the enhanced information to be more accurately reflected during the hash calculation, thus providing a more reliable basis for the subsequent verification process. Through this design, the effectiveness and security of the enhanced information have been significantly improved, laying a solid foundation for the security of data transmission.

[0119] Therefore, in an embodiment of the present invention, when comparing the second hash value with the third hash value, the last 256 bits of hash data and the other bits of hash data can be compared separately, the last 256 bits of hash data are used to verify the enhanced information, and the remaining bits of hash data are used to verify the master video.

[0120] In addition, the present invention can also consider verifying the legitimacy of the key used by the master chip user through cloud services. The significance of this approach is to avoid a special situation, that is, assuming that user A is the owner of the master chip, he authorizes B to have the right to use the master chip. Under normal circumstances, only B can use the key to open the master chip and obtain the correct master chip data; however, if C steals B's key, then C will also be able to open the master chip normally, which is an undesirable situation during the transmission process. Therefore, the present invention intends to set up: the sender needs to encrypt the master chip and the digital signature and send them to the receiver in ciphertext form, and the receiver then decrypts the ciphertext to restore the master chip and the digital signature. The encryption process is preferably set up as follows: the sender uses RSA asymmetric encryption to encrypt the master chip and the digital signature and sends them to the receiver.

[0121] Based on the above concept, in another embodiment of the present invention, a master user identity authentication and verification system for master transmission in a repeatable shooting system is also provided. In the system of the present invention, the user needs to authenticate his identity in the cloud before using the key, so that the master content can be correctly decrypted, thereby effectively preventing the occurrence of the above problems and ensuring the correctness of identity and authority. Figure 3 As shown, the components of the system specifically include:

[0122] The first local client is used for the master slice owner to generate a first hash value for the master slice data to be transmitted by using a hash digest algorithm that takes into account the master slice characteristics, and then encrypt the first hash value with a local private key to obtain a digital signature, and finally send the master slice data and the digital signature stored locally to the cloud service platform.

[0123] The cloud service platform includes a key storage module, a registration module, an encryption module, and a transmission module, such as Figure 4 shown.

[0124] The key storage module is used to store the cloud service public key and cloud service private key used by the cloud platform itself for encryption and decryption.

[0125] The registration module is used for the master slice owner and the authorized user of the master slice to register as a user on the cloud platform, and to log in to use the cloud platform functions after identity authentication; at the same time, the master slice owner is used to pre-register the local public key paired with the local private key on the cloud platform.

[0126] The encryption module is used to receive the master data and the digital signature sent by the first local client, and use the cloud service private key to encrypt the received master data, the digital signature, the local public key and the user information of the master owner to generate a digital certificate.

[0127] The transmission module is used to formulate instructions according to the authority of the master slice owner, and send the digital certificate and the cloud service public key to the designated authorized user of the master slice.

[0128] The second local client is used for the master slice to authorize the master slice to download the digital certificate and the cloud service public key sent by the cloud service platform to the local client, and use the cloud service public key to decrypt the digital certificate to obtain the master slice data, the digital signature, the local public key and the user information of the master slice owner, and finally generate a second hash value for the master slice data by a hash digest algorithm considering the master slice characteristics, and decrypt the digital signature by using the local public key to obtain a third hash value, and compare the second hash value with the third hash value. If they are the same, it is judged that the transmitted master slice data is complete and has not been modified by the attack; if they are different, it is judged that the transmitted master slice data is incomplete or has been modified by the attack, thereby completing the verification.

[0129] like Figure 5 As shown, based on the above system, the process of the master slice owner authorizing a user to use the master slice through the cloud service platform is as follows:

[0130] Step 1: Register the local public key required to decrypt the master

[0131] The master slice owner and the authorized user of the master slice need to register and log in on the cloud service (CS) platform before they can use the corresponding functions. The master slice owner generates a set of local public keys and local private keys, and needs to register the local public key for decryption on the cloud service platform. The master slice owner generates a first hash value through a hash digest algorithm that takes into account the characteristics of the master slice for the master slice data to be transmitted through the first local client, and then encrypts the first hash value with the local private key to obtain a digital signature, and finally sends the master slice data and the digital signature stored locally to the cloud service platform.

[0132] Step 2: Cloud service encryption

[0133] The cloud service (CS) platform receives the master data and the digital signature sent by the first local client, and uses the cloud service private key to encrypt the received master data, the digital signature, the pre-registered local public key and the user information of the master owner to generate a digital certificate.

[0134] CS will send its public key to all master permissions owners, which is used to decrypt the master public key.

[0135] Step 3: CS sends digital certificate to the user

[0136] CS formulates instructions according to the authority of the master slice owner and sends the digital certificate and cloud service public key generated by the cloud service to the designated authorized user of the master slice. The specific content of the digital certificate includes the encrypted master slice data, digital signature, personal information of the master slice owner, and local public key.

[0137] Step 3: The user uses the cs public key to decrypt the master public key

[0138] The owner of the master permission can obtain the correct master public key and thus obtain the correct master data. The thief cannot obtain the master public key and cannot proceed with the following steps.

[0139] Step 4: Use the correct master public key to decrypt the digital signature

[0140] The user receives and downloads the digital certificate and the cloud service public key sent by the cloud service platform through the second local client, and uses the cloud service public key to decrypt the digital certificate to obtain the master data, digital signature, local public key required for decryption, and user information of the master owner. Finally, the master data is used to generate a second hash value through a hash digest algorithm that considers the characteristics of the master, and the digital signature is decrypted using the local public key to obtain a third hash value. The second hash value is compared with the third hash value. If they are the same, it is determined that the transmitted master data is complete and has not been modified by the attack. If they are different, it is determined that the transmitted master data is incomplete or has been modified by the attack, thereby completing the verification.

[0141] It should be noted that the encryption process of generating a digital certificate in the first local client can refer to S1 in the aforementioned embodiment, and the decryption and verification process in the second local client can refer to S2 in the aforementioned embodiment, which will not be repeated here.

[0142] Through the implementation of the above technology, the present invention can establish a safer and more reliable environment and create a better resource ecology for reproducible master films. Such an environment can not only effectively protect the legitimate rights and interests of master film producers, but also effectively prevent the content from being stolen by others. The implementation of this invention not only helps to improve the development and stability of the master film content ecosystem, but also provides more reliable resources and services for the majority of users, thereby promoting the healthy development of the entire industry.

[0143] It should be noted that the above method steps S1 to S2 can essentially be implemented in the form of a computer program.

[0144] Similarly, based on the same inventive concept, the present invention also provides a computer electronic device corresponding to the transmission verification method of a master film in a repeatable shooting system provided in the above embodiment, which includes a memory and a processor;

[0145] The memory is used to store computer programs;

[0146] The processor is used to implement the transmission verification method of the master in the repeatable shooting system as described above when executing the computer program;

[0147] In addition, the logic instructions in the above-mentioned memory can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention.

[0148] Therefore, based on the same inventive concept, the present invention provides a computer-readable storage medium corresponding to the transmission verification method of the master piece in a repeatable shooting system, and the storage medium stores a computer program. When the computer program is executed by a processor, the transmission verification method of the master piece in the repeatable shooting system as described above can be implemented.

[0149] Therefore, based on the same inventive concept, the present invention provides a computer program product, including a computer program / instruction, which, when executed by a processor, can implement the transmission verification method of a master film in a repeatable shooting system as described above.

[0150] Specifically, in the computer-readable storage medium of the above three embodiments, the stored computer program is executed by the processor to perform the above steps S1 to S2.

[0151] However, it should be noted that the above-mentioned programs of S1 and S2 may be stored and executed by different computer devices.

[0152] It is understandable that the above storage medium may include random access memory (RAM) or non-volatile memory (NVM), such as at least one disk storage. The storage medium may also be a U disk, a mobile hard disk, a magnetic disk or an optical disk, etc., which can store program codes.

[0153] It can be understood that the above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0154] It should also be noted that those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process of the system described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here. In the various embodiments provided in this application, the division of steps or modules in the system and method is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules or steps can be combined or integrated together, and a module or step can also be split.

[0155] The above-described embodiment is only a preferred solution of the present invention, but it is not intended to limit the present invention. A person skilled in the relevant technical field may make various changes and modifications without departing from the spirit and scope of the present invention. Therefore, any technical solution obtained by equivalent replacement or equivalent transformation falls within the protection scope of the present invention.

Claims

1. A transmission verification method for a master film in a repeatable shooting system, characterized in that: include: S1. The sender generates a first hash value for the master data to be transmitted by a hash digest algorithm that takes into account the characteristics of the master, and then encrypts the first hash value with a private key to obtain a digital signature, and finally sends the master and the digital signature to the receiver; S2. After receiving the master data and the digital signature, the receiver generates a second hash value for the master data by a hash digest algorithm that takes into account the characteristics of the master, and decrypts the digital signature by using a public key that matches the private key, thereby obtaining a third hash value; the second hash value is compared with the third hash value, and if they are the same, it is determined that the transmitted master data is complete and has not been modified by the attack; if they are different, it is determined that the transmitted master data is incomplete or has been modified by the attack, thereby completing the verification.

2. The transmission verification method of the master in the repeatable shooting system according to claim 1, characterized in that: The specific process of the hash digest algorithm considering the characteristics of the master slice is as follows: A1. Obtain a master video and 512 bits of enhancement information obtained by a repeatable shooting system, splice the master video after the enhancement information as master data to be transmitted, and pad the master data to obtain a binary data stream whose length modulo 512 is 448; wherein when padding is performed, the number of bits to be padded is at least 1 bit and at most 512 bits, the first bit padded value is 1, and the remaining bits padded values ​​are all 0; A2. Convert the length value of the master data into 64-bit binary information, and then splice it after the binary data stream to form complete stream data; A3, the complete stream data is divided into blocks of 512 bits in length, each 512-bit data block constitutes a group, wherein the first group is all enhanced information; four custom calculation functions and four standard values ​​are pre-built; A4. For each of the remaining groups except the first group, four rounds of standard value update operations are performed using the four custom calculation functions and the four standard values. Each round of operations obtains four new standard values ​​based on the original four standard values. The four standard values ​​obtained by the four rounds of operations are added together and then the four added values ​​are spliced ​​to generate an intermediate hash value corresponding to each group. For the first group, the 512-bit data therein is divided into 8 subgroups according to the 64-bit length, and each 64-bit subgroup is further divided into 4 data blocks. Four 16-bit data blocks are added to a preset hash initial value to obtain a 16-bit hash value. The 16-bit hash values ​​of the 8 subgroups are spliced ​​in sequence to obtain the intermediate hash value corresponding to the first group. The intermediate hash values ​​corresponding to all the groups are spliced ​​in sequence to obtain the hash value that is the final output of the hash summary algorithm that considers the characteristics of the master slice.

3. The transmission verification method of the master in the repeatable shooting system according to claim 1, characterized in that: For any group except the first group, the specific process of performing four rounds of standard value update calculations using the four custom calculation functions and the four standard values ​​is as follows: The 512-bit binary data in the current group is divided into 8 subgroups, and then the 8 subgroups are used to execute a round of hash function operation consisting of one of the custom calculation functions, four standard values, one subgroup data, one bit in the 32-bit constant table and a circular shift operation. The result value of the hash function operation is used to update one of the standard values. After each round of execution, the four standard values ​​are updated twice, and the final standard value is used as the new four standard values ​​obtained by this round of standard value update operation; after a total of four rounds of updates, the new four standard values ​​corresponding to each round of standard value update operation are obtained.

4. The transmission verification method of the master in the repeatable shooting system according to claim 1, characterized in that: When comparing the second hash value with the third hash value, the last 256 bits of hash data and the other bits of hash data can be compared separately, the last 256 bits of hash data are used to verify the enhanced information, and the remaining bits of hash data are used to verify the master video.

5. The transmission verification method of the master in the repeatable shooting system according to claim 1, characterized in that: The sender needs to encrypt the master and the digital signature and send them to the receiver in ciphertext form. The receiver then decrypts the ciphertext to restore the master and the digital signature.

6. The transmission verification method of the master in the repeatable shooting system according to claim 1, characterized in that: The sender encrypts the master slice and the digital signature using RSA asymmetric encryption and sends the encrypted data to the receiver.

7. A master user identity authentication and verification system for master transmission in a repeatable shooting system, characterized in that: include: The first local client is used for the master slice owner to generate a first hash value from the master slice data to be transmitted by using a hash digest algorithm that takes into account the master slice characteristics, and then encrypt the first hash value with a local private key to obtain a digital signature, and finally send the master slice data and the digital signature stored locally to the cloud service platform; Cloud service platform, including key storage module, registration module, encryption module and transmission module; The key storage module is used to store the cloud service public key and cloud service private key used for encryption and decryption by the cloud platform itself; The registration module is used for the master slice owner and the authorized user of the master slice to register as a user on the cloud platform, and to log in to use the cloud platform functions after identity authentication; and for the master slice owner to register the local public key used in pair with the local private key on the cloud platform in advance; The encryption module is used to receive the master data and the digital signature sent by the first local client, and use the cloud service private key to encrypt the received master data, the digital signature, the local public key and the user information of the master owner to generate a digital certificate; The transmission module is used to formulate instructions according to the authority of the master slice owner to send the digital certificate and the cloud service public key to the designated authorized user of the master slice; The second local client is used for the master slice to authorize the master slice to download the digital certificate and the cloud service public key sent by the cloud service platform to the local client, and use the cloud service public key to decrypt the digital certificate to obtain the master slice data, the digital signature, the local public key and the user information of the master slice owner, and finally generate a second hash value for the master slice data by a hash digest algorithm considering the master slice characteristics, and decrypt the digital signature by using the local public key to obtain a third hash value, and compare the second hash value with the third hash value. If they are the same, it is judged that the transmitted master slice data is complete and has not been modified by the attack; if they are different, it is judged that the transmitted master slice data is incomplete or has been modified by the attack, thereby completing the verification.

8. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instruction is executed by a processor, the transmission verification method of a master film in a repeatable shooting system according to any one of claims 1 to 6 can be implemented.

9. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed by the processor, the transmission verification method of the master film in the repeatable shooting system according to any one of claims 1 to 7 is implemented.

10. A computer electronic device, characterized in that: including memory and processor; The memory is used to store computer programs; The processor is configured to implement the transmission verification method for a master film in a repeatable shooting system according to any one of claims 1 to 7 when executing the computer program.

Images