Data distribution method and device, computer equipment and storage medium

Abstract

The invention relates to the technical field of view monitoring, and discloses a data distribution method and device, computer equipment and a storage medium, and the method comprises the steps: obtaining first target data stored in a view monitoring system based on a preset subscription rule, and determining a first target view monitoring system identifier corresponding to the first target data; sending the first target data and the first target view monitoring system identifier to a password cloud platform, so that the password cloud platform encrypts the first target data based on the first target view monitoring system identifier, and feeding back the first encrypted data to the view monitoring system; acquiring cascade topology information of the view monitoring system, determining a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier, and transmitting the first target view monitoring system identifier to the first target view monitoring system based on the first transmission path. And distributing first to-be-transmitted data determined based on the first encrypted data and the first target view monitoring system identifier to the first target view monitoring system. According to the invention, the security of data transmission is improved.

Description

Technical Field

[0001] The present invention relates to the field of view monitoring technology, and in particular to a data distribution method, device, computer equipment and storage medium. Background Art

[0002] With the increasing demand for monitoring, the cascade mode is widely used in the design of visual monitoring systems due to its advantages such as simplified network structure and reduced costs.

[0003] In order to solve the problem of real-time data distribution in cascade mode, the relevant technology adopts the message middleware method. When the data of the view monitoring system at this level changes, the distributor of the view monitoring system at this level is used to send the changed data to all lower-level view monitoring systems and report it to all upper-level view monitoring systems, so as to realize the transmission of data between view monitoring systems at different levels.

[0004] However, this data distribution method sends the changed data to all cascaded view monitoring systems, which makes the data vulnerable to attacks during transmission and has low security. Summary of the invention

[0005] In view of this, the present invention provides a data distribution method, apparatus, computer equipment and storage medium to solve the problem that the data distribution method in the related technology sends the changed data to all cascaded view monitoring systems, which is vulnerable to attacks during the data transmission process and has low security.

[0006] In a first aspect, the present invention provides a data distribution method, which is applied to any view monitoring system in a cascade network, and the method comprises:

[0007] Based on a preset subscription rule, obtaining first target data stored in the view monitoring system, and determining a first target view monitoring system identifier corresponding to the first target data;

[0008] Sending the first target data and the first target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains first encrypted data, and feeds the first encrypted data back to the view monitoring system;

[0009] Receiving the first encrypted data, and acquiring the cascade topology information of the view monitoring system;

[0010] Determining a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier;

[0011] Determining first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier;

[0012] Based on the first transmission path, the first data to be transmitted is distributed to a first target view monitoring system.

[0013] The data distribution method provided in this embodiment obtains the first target data stored in the view monitoring system based on the preset subscription rule, and determines the first target view monitoring system identifier corresponding to the first target data, thereby ensuring the accuracy of the obtained first target data. By determining the first target view monitoring system identifier, it is ensured that the first target data only needs to be sent to the first target view monitoring system, and does not need to be sent to all view monitoring systems, thereby reducing unnecessary data transmission.

[0014] By using the first target view monitoring system identifier to encrypt the first target data, the security of the first target data during data transmission is ensured, and it is ensured that only the first target view monitoring system can decrypt the first encrypted data to obtain the first target data, further ensuring the security of data transmission.

[0015] By determining the first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier, it is ensured that the data is transmitted along the correct path, thereby improving the accuracy of data transmission.

[0016] In an optional implementation, before acquiring the first target data stored in the view monitoring system based on the preset subscription rule, the method further includes:

[0017] Determining whether key information of the view monitoring system is stored in the view monitoring system;

[0018] In the case where the key information of the view monitoring system is not stored in the view monitoring system, the registration information of the view monitoring system is obtained from the view monitoring system, and the registration information is sent to the cryptographic cloud platform so that the cryptographic cloud platform registers the view monitoring system based on the registration information. In the case of successful registration, the key information of the view monitoring system is obtained and the key information is fed back to the view monitoring system.

[0019] The data distribution method provided in this embodiment ensures that each view monitoring system has its own key information in the cascade network of view monitoring systems, thereby achieving end-to-end transmission of data and improving the security and accuracy of data transmission.

[0020] In an optional implementation, when the key information of the view monitoring system is not stored in the view monitoring system, obtaining the registration information of the view monitoring system from the view monitoring system, sending the registration information to the cryptographic cloud platform so that the cryptographic cloud platform registers the view monitoring system based on the registration information, and when the registration is successful, obtaining the key information of the view monitoring system, and feeding the key information back to the view monitoring system, including:

[0021] In the case that the key information of the view monitoring system is not stored in the view monitoring system, the view monitoring system identifier and view monitoring system permission information corresponding to the view monitoring system are obtained from the view monitoring system, and the view monitoring system identifier and view monitoring system permission information are sent to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the view monitoring system identifier and the view monitoring system permission information. In the case of successful registration, the key information of the view monitoring system is generated based on the view monitoring system identifier, and the key information of the view monitoring system is fed back to the view monitoring system based on the view monitoring system permission information.

[0022] The data distribution method provided in this embodiment generates key information of the view monitoring system based on the view monitoring system identifier, thereby ensuring that each view monitoring system has unique key information, thereby enabling end-to-end data transmission, thereby improving the security of data transmission. By feeding back the key information of the view monitoring system to the view monitoring system based on the view monitoring system authority information, it is ensured that the key information of the view monitoring system is accurately fed back to the view monitoring system.

[0023] In an optional embodiment, the method further includes:

[0024] In the case where the registration of the view monitoring system fails, the process returns to the step of obtaining the registration information of the view monitoring system from the view monitoring system and sending the registration information to the password cloud platform until the registration of the view monitoring system succeeds.

[0025] The data distribution method provided in this embodiment can ensure that each view monitoring system can successfully register and obtain key information through an automatic retry mechanism, thereby achieving secure transmission and accurate distribution of data.

[0026] In an optional embodiment, the method further includes:

[0027] When the view monitoring system receives second data to be transmitted sent by other view monitoring systems in the cascade network, determining whether a second target view monitoring system identifier in the second data to be transmitted is the same as a view monitoring system identifier corresponding to the view monitoring system;

[0028] If the second target view monitoring system identifier is different from the view monitoring system identifier corresponding to the view monitoring system, obtaining cascade topology information of the view monitoring system from the view monitoring system, and determining a second transmission path based on the cascade topology information of the view monitoring system and the second target view monitoring system identifier;

[0029] Based on the second transmission path, the second data to be transmitted is distributed to a second target view monitoring system.

[0030] The data distribution method provided in this embodiment verifies whether the second target view monitoring system identifier in the received second data to be transmitted is the same as the view monitoring system identifier. If the second target view monitoring system identifier is different from the view monitoring system identifier, the cascade topology information of the view monitoring system is obtained from the view monitoring system, and the second transmission path is determined based on the cascade topology information of the view monitoring system and the second target view monitoring system identifier. Based on the second transmission path, the second data to be transmitted is distributed to the second target view monitoring system. This prevents data from being received or processed incorrectly, and ensures the security of data transmission.

[0031] In an optional embodiment, the method further includes:

[0032] If the second target view monitoring system identifier is the same as the view monitoring system identifier corresponding to the view monitoring system, the key information of the view monitoring system and the view monitoring system identifier of the view monitoring system are obtained from the view monitoring system, second encrypted data is obtained from the second data to be transmitted, and the key information, the view monitoring system identifier of the view monitoring system and the second encrypted data are sent to the cryptographic cloud platform, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system, obtains second target data, and feeds the second target data back to the view monitoring system.

[0033] The data distribution method provided in this embodiment sends the key information and the view monitoring system identifier of the view monitoring system to the cryptographic cloud platform when the second target view monitoring system identifier is the same as the view monitoring system identifier, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system to obtain the second target data, and feeds the second target data back to the view monitoring system, ensuring that the second encrypted data can be correctly decrypted and the second target data can be obtained only when the view monitoring system identifier is the same as the second target view monitoring system identifier, thereby ensuring the security of data transmission.

[0034] In an optional embodiment, the method further includes:

[0035] When the view monitoring system receives a data reading request, acquiring a data requirement and a third target view monitoring system identifier in the data reading request;

[0036] Based on the data requirement, obtaining third target data from the view monitoring system;

[0037] Sending the third target data and the third target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the third target data based on the third target view monitoring system identifier, obtains third encrypted data, and feeds the third encrypted data back to the view monitoring system;

[0038] receiving the third encrypted data, and acquiring the cascade topology information of the view monitoring system;

[0039] Determining a third transmission path based on the cascade topology information of the view monitoring system and the third target view monitoring system identifier;

[0040] Determining third data to be transmitted based on the third encrypted data and a third target view monitoring system identifier;

[0041] Based on the third transmission path, the third data to be transmitted is distributed to a third target view monitoring system.

[0042] The data distribution method provided in this embodiment obtains the third target data stored in the view monitoring system based on data requirements, thereby ensuring the accuracy of the obtained third target data. By determining the third target view monitoring system identifier, it is ensured that the third target data only needs to be sent to the third target view monitoring system, and does not need to be sent to all view monitoring systems, thereby reducing unnecessary data transmission.

[0043] By using the third target view monitoring system identifier to encrypt the third target data, the security of the third target data during data transmission is ensured, and it is ensured that only the third target view monitoring system can decrypt the third encrypted data to obtain the third target data, further ensuring the security of data transmission.

[0044] By determining the third transmission path based on the cascade topology information of the view monitoring system and the identifier of the third target view monitoring system, it is ensured that the data is transmitted along the correct path, thereby improving the accuracy of data transmission.

[0045] In a second aspect, the present invention provides a data distribution device, which is applied to any view monitoring system in a cascade network, and the device comprises:

[0046] A first acquisition module, configured to acquire first target data stored in the view monitoring system based on a preset subscription rule, and determine a first target view monitoring system identifier corresponding to the first target data;

[0047] A first sending module, configured to send the first target data and the first target view monitoring system identifier to a cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains first encrypted data, and feeds the first encrypted data back to the view monitoring system;

[0048] A first receiving module, configured to receive the first encrypted data and obtain cascade topology information of the view monitoring system;

[0049] A first determining module, configured to determine a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier;

[0050] A second determining module, configured to determine first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier;

[0051] The first distribution module is used to distribute the first data to be transmitted to a first target view monitoring system based on the first transmission path.

[0052] In a third aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the data distribution method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0053] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the data distribution method of the first aspect or any corresponding embodiment thereof.

[0054] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the data distribution method of the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the related technologies, the drawings required for use in the specific embodiments or the related technical descriptions will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0056] Figure 1 is a flow chart of a data distribution method according to an embodiment of the present invention;

[0057] Figure 2 is a schematic diagram of a cascade topology structure of a cascade network according to an embodiment of the present invention;

[0058] Figure 3 is a flow chart of another data distribution method according to an embodiment of the present invention;

[0059] Figure 4 is a schematic diagram of a process of obtaining key information from a cryptographic cloud platform by a video monitoring system according to an embodiment of the present invention;

[0060] Figure 5 is a schematic diagram of the structure of a view monitoring system in a cascade network according to an embodiment of the present invention;

[0061] Figure 6 is a flow chart of another data distribution method according to an embodiment of the present invention;

[0062] Figure 7 is a flow chart of yet another data distribution method according to an embodiment of the present invention;

[0063] Figure 8 is a structural block diagram of a data distribution device according to an embodiment of the present invention;

[0064] Fig. 9 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0065] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0066] With the increasing demand for monitoring in specific environments, most of the network connections between visual monitoring systems use cascade mode to improve the flexibility and coverage of visual monitoring systems. The cascade mode can simplify the network structure, reduce the number of network nodes, reduce network complexity, improve construction efficiency, maintenance costs, and reduce the cost of engineering equipment and consumables.

[0067] In order to solve the problem that when a view monitoring system at any level changes in the cascade mode, the change information of the view monitoring system at that level cannot be transmitted to the view monitoring systems at other levels in real time, the relevant technology adopts a message middleware approach. When the distributor of the view monitoring system at that level detects that the data of the view monitoring system at this level has changed, the change information is sent to all lower-level view monitoring systems according to the data type of the change information, and reported to all upper-level view monitoring systems, so as to realize the transmission of data between view monitoring systems at different levels, and then realize the data distribution in the cascaded view monitoring system.

[0068] However, this data distribution method sends the change information to all other view monitoring systems in the cascade mode, which increases the routing complexity of data transmission and reduces the efficiency of data processing, data security and data transmission security.

[0069] Furthermore, this data distribution method is prone to distribute the change information to a view monitoring system that does not match the business scenario of the view monitoring system corresponding to the change information, resulting in additional resource consumption.

[0070] It can be seen that how to optimize data transmission paths, improve data processing efficiency, and enhance data security and data transmission security has become an urgent problem that needs to be solved.

[0071] An embodiment of the present invention provides a data distribution method, which obtains first target data stored in a view monitoring system based on a preset subscription rule, and determines a first target view monitoring system identifier corresponding to the first target data; sends the first target data and the first target view monitoring system identifier to a cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains first encrypted data, and feeds the first encrypted data back to the view monitoring system; receives the first encrypted data, and obtains cascade topology information of the view monitoring system; determines a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier; determines first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier; and distributes the first data to be transmitted to the first target view monitoring system based on the first transmission path to achieve the effect of improving data transmission security and accuracy, reducing unnecessary data transmission, and improving data processing efficiency.

[0072] According to an embodiment of the present invention, a data distribution method embodiment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0073] In this embodiment, a data distribution method is provided, which can be used for any view monitoring system in a cascade network. It should be noted that the cascade network is a network composed of multiple view monitoring systems connected in cascade. Among them, cascade networking refers to connecting multiple view monitoring systems through specific network technology to form a view monitoring system network that can communicate with each other and share resources and data, namely, a cascade network. This cascade method can effectively expand the monitoring scope, improve monitoring efficiency, and realize data sharing and collaboration among multiple view monitoring systems.

[0074] For cascade networks, effective data distribution between view monitoring systems is the key to achieving cascade networking, and effective data distribution between view monitoring systems plays a vital role in the performance, stability, security and effectiveness of business functions of the overall cascade network.

[0075] Figure 1 is a flow chart of a data distribution method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0076] Step S101: based on a preset subscription rule, first target data stored in a view monitoring system is acquired, and a first target view monitoring system identifier corresponding to the first target data is determined.

[0077] The preset subscription rule is preset by the user. Specifically, according to the data type of the data in the view monitoring system and the business function of the view monitoring system, the data receiver corresponding to the data in the view monitoring system, that is, the target view monitoring system receiving the data of the view monitoring system, is determined. The corresponding relationship between different data types and the target view monitoring system identifiers of their corresponding target view monitoring systems is set as the preset subscription rule.

[0078] It is understandable that the preset subscription rules corresponding to the view monitoring systems of different business functions are different. The preset subscription rules corresponding to the view monitoring systems of the same business functions may be the same or different, and are set by the user.

[0079] When the information stored in the view monitoring system changes, the data recipient of the changed data is determined according to the data type of the changed data and based on preset subscription rules.

[0080] It should be noted that each view monitoring system in the cascade network has a unique corresponding view monitoring system identification (ID), which is the main basis for registering with the cryptographic cloud platform, obtaining key information, encrypting and decrypting data content, and determining the data transmission path.

[0081] Step S102, sending the first target data and the first target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains the first encrypted data, and feeds the first encrypted data back to the view monitoring system.

[0082] Among them, after obtaining the first target data and the first target view monitoring system identifier, the first target data and the first target view monitoring system identifier are sent to the cryptographic cloud platform, and the cryptographic cloud platform encrypts the first target data according to the first target view monitoring system identifier to obtain the first encrypted data, and the cryptographic cloud platform feeds the first encrypted data back to the view monitoring system.

[0083] Step S103: receiving first encrypted data and acquiring cascade topology information of the video monitoring system.

[0084] After receiving the first encrypted data fed back by the cryptographic cloud platform, the view monitoring system obtains the cascade topology information of the view monitoring system, which is the cascade topology information of the view monitoring system in the cascade network.

[0085] Any view monitoring system in the cascade network can be cascaded upward and downward with multiple other view monitoring systems, that is, one view monitoring system can connect to multiple upper-level view monitoring systems and multiple lower-level view monitoring systems. Each view monitoring system stores the complete cascade topology information of the cascade network, can distribute effective data according to its business functions, and can use the most effective path for data transmission.

[0086] Figure 2 Schematic diagram of a cascade topology structure of a cascade network according to an embodiment of the present invention. Figure 2 As shown, the upper-level view monitoring system in the cascade network can send basement data to the current-level view monitoring system and the lower-level view monitoring system, and the lower-level view monitoring system and the current-level view monitoring system can report the comparison data to the upper-level view monitoring system. The current-level view monitoring system can send basement data to the lower-level view monitoring system, and the lower-level view monitoring system can report the comparison data to the current-level view monitoring system.

[0087] like Figure 2 As shown, each view monitoring system has its corresponding business functions. For example, the business functions of one view monitoring system are face recognition, behavior detection, vehicle recognition, etc. The business functions of another view monitoring system are one person one file, one car one file, personnel gathering, etc.

[0088] In this embodiment, when a certain upper-level view monitoring system wants to send face base data to a certain lower-level view monitoring system with face recognition function, the face base data is only sent to the lower-level view monitoring system. Even if the face base data needs to be transferred through a certain level view monitoring system due to network reasons, the face base data received by the level view monitoring system is also encrypted. When it is determined that it is not sent to the level view monitoring system, the level view monitoring system can only forward the received face base data to the designated lower-level view monitoring system. The level view monitoring system cannot use the face base data, which improves the security of data transmission. The reporting of comparison data by a lower-level view monitoring system to a certain upper-level view monitoring system is also realized by the same implementation mechanism, which will not be repeated here.

[0089] Step S104: determining a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier.

[0090] After the cascade topology information of the view monitoring system is acquired, the first transmission path is determined according to the cascade topology information of the view monitoring system and the first target view monitoring system identifier.

[0091] Step S105: determining first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier.

[0092] That is to say, the first data to be transmitted includes the first encrypted data and the first target view monitoring system identifier.

[0093] Step S106: Distribute the first data to be transmitted to the first target view monitoring system based on the first transmission path.

[0094] After the first transmission path and the first data to be transmitted are determined, the first data to be transmitted is distributed to the first target view monitoring system according to the first transmission path.

[0095] It should be noted that data distribution includes the sending of basement data by the view monitoring system and the reporting of comparison data by the view monitoring system.

[0096] The data distribution method provided in this embodiment obtains the first target data stored in the view monitoring system based on the preset subscription rule, and determines the first target view monitoring system identifier corresponding to the first target data, thereby ensuring the accuracy of the obtained first target data. By determining the first target view monitoring system identifier, it is ensured that the first target data only needs to be sent to the first target view monitoring system, and does not need to be sent to all view monitoring systems, thereby reducing unnecessary data transmission.

[0097] By using the first target view monitoring system identifier to encrypt the first target data, the security of the first target data during data transmission is ensured, and it is ensured that only the first target view monitoring system can decrypt the first encrypted data to obtain the first target data, further ensuring the security of data transmission.

[0098] By determining the first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier, it is ensured that the data is transmitted along the correct path, thereby improving the accuracy of data transmission.

[0099] In this embodiment, a data distribution method is provided, which can be used in any view monitoring system in a cascade network. Figure 3 is a flow chart of a data distribution method according to an embodiment of the present invention. Figure 3 As shown, the process includes the following steps:

[0100] Step S301: determine whether key information of the view monitoring system is stored in the view monitoring system.

[0101] The fact that the key information of the corresponding view monitoring system is stored in each view monitoring system is a prerequisite for the normal operation of data distribution of the view monitoring system in the cascade network. Therefore, before data distribution, it is necessary to ensure that the corresponding key information is stored in each view monitoring system.

[0102] Figure 4 1 is a schematic diagram of a process of obtaining key information from a cryptographic cloud platform through a video monitoring system according to an embodiment of the present invention. Figure 4 As shown, after the view monitoring system is started for the first time, the view monitoring system reads the system ID of this level, i.e., the view monitoring system identifier and user authority configuration information, and determines whether there is key information in the user authority configuration information, i.e., whether the view monitoring system key information is stored in the view monitoring system.

[0103] Step S302, when the key information of the view monitoring system is not stored in the view monitoring system, the registration information of the view monitoring system is obtained from the view monitoring system, and the registration information is sent to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the registration information. When the registration is successful, the key information of the view monitoring system is obtained and the key information is fed back to the view monitoring system.

[0104] like Figure 4 As shown, when the key information of the view monitoring system is not stored in the view monitoring system, that is, when the key information does not exist in the user authority configuration information, the system ID and the user authority configuration information are used to register with the password cloud platform. The registration information includes the system ID and the user authority configuration information, the system ID is the view monitoring system identifier, and the user authority configuration information is the view monitoring system authority information.

[0105] The cryptographic cloud platform receives the platform registration information, registers the view monitoring system based on the registration information, obtains the key information of the view monitoring system if the registration is successful, and returns the key information to the view monitoring system.

[0106] After receiving the key information, the view monitoring system stores the key information for use in data decryption. At this point, the key information initialization is completed. The key information is the key for the view monitoring system to decrypt the received data in the future.

[0107] It should be noted that the cryptographic cloud platform is a cryptographic service solution based on cloud computing technology. It virtualizes cryptographic resources to achieve unified management and scheduling of cryptographic resources, thereby creating a "one-stop" cryptographic infrastructure service platform and providing full-scenario, elastic, scalable and compliant cryptographic services. The cryptographic cloud platform in the embodiment of the present invention is a cloud-based key management that manages and controls all encryption keys through a centralized key repository to ensure key security. The cryptographic cloud platform provides fine-grained access control, authorizing the view monitoring system to access specific keys based on the view monitoring system ID and the user authority configuration information of the view monitoring system. The cryptographic cloud platform only needs to encrypt the data according to the view monitoring system ID. When decrypting the data, the key information corresponding to the view monitoring system ID must be available for decryption. Only the real data receiving view monitoring system can decrypt the data, which ensures the security of the data during the entire transmission process.

[0108] Specifically, the above step S302 includes:

[0109] Step S3021, when the key information of the view monitoring system is not stored in the view monitoring system, obtain the view monitoring system identifier and view monitoring system permission information corresponding to the view monitoring system from the view monitoring system, and send the view monitoring system identifier and the view monitoring system permission information to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the view monitoring system identifier and the view monitoring system permission information. When the registration is successful, generate the key information of the view monitoring system based on the view monitoring system identifier, and feed back the key information of the view monitoring system to the view monitoring system based on the view monitoring system permission information.

[0110] When the view monitoring system is successfully registered, the key cloud platform generates a key corresponding to the system according to the system ID and user authority configuration information. Specifically, the key information of the view monitoring system is generated based on the view monitoring system identifier, and the key information of the view monitoring system is fed back to the view monitoring system based on the view monitoring system authority information.

[0111] It should be noted that the password cloud platform uses the view monitoring system permission information to access the view monitoring system.

[0112] Step S303: Based on the preset subscription rule, obtain the first target data stored in the view monitoring system, and determine the first target view monitoring system identifier corresponding to the first target data. Figure 1 Step S101 of the illustrated embodiment will not be described in detail here.

[0113] Step S304: Send the first target data and the first target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains the first encrypted data, and feeds the first encrypted data back to the view monitoring system. Figure 1 Step S102 of the illustrated embodiment will not be described in detail here.

[0114] Step S305: Receive the first encrypted data and obtain the cascade topology information of the view monitoring system. Figure 1 Step S103 of the illustrated embodiment will not be described in detail here.

[0115] Step S306: Determine a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier. Figure 1 Step S104 of the illustrated embodiment will not be described in detail here.

[0116] Step S307: Determine the first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier. Figure 1 Step S105 of the illustrated embodiment will not be described in detail here.

[0117] Step S308: Distribute the first data to be transmitted to the first target view monitoring system based on the first transmission path. Figure 1 Step S106 of the illustrated embodiment will not be described in detail here.

[0118] The data distribution method provided in this embodiment ensures that each view monitoring system has its own key information in the cascade network of view monitoring systems, thereby achieving end-to-end transmission of data and improving the security and accuracy of data transmission.

[0119] By generating the key information of the view monitoring system based on the view monitoring system identifier, it is ensured that each view monitoring system has unique key information, thereby enabling end-to-end data transmission and improving the security of data transmission. By feeding back the key information of the view monitoring system to the view monitoring system based on the view monitoring system authority information, it is ensured that the key information of the view monitoring system is accurately fed back to the view monitoring system.

[0120] In some optional implementations, the data distribution method further includes:

[0121] Step a1, when the view monitoring system registration fails, return to execute the step of obtaining the view monitoring system registration information from the view monitoring system and sending the registration information to the password cloud platform until the view monitoring system registration succeeds.

[0122] In the event that the view monitoring system registration fails, the timing returns to execute the steps of obtaining the view monitoring system registration information from the view monitoring system, and sending the registration information to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the registration information until the view monitoring system registration is successful and its corresponding key information is obtained.

[0123] The data distribution method provided in this embodiment can ensure that each view monitoring system can successfully register and obtain key information through an automatic retry mechanism, thereby achieving secure transmission and accurate distribution of data.

[0124] In some optional implementations, the data distribution method further includes:

[0125] Step b1: when the view monitoring system receives second data to be transmitted sent by other view monitoring systems in the cascade network, it is determined whether the second target view monitoring system identifier in the second data to be transmitted is the same as the view monitoring system identifier corresponding to the view monitoring system.

[0126] Among them, if the view monitoring system receives second data to be transmitted sent by other view monitoring systems, since the view monitoring system does not know the transmission path of the second data to be transmitted, it is necessary to determine whether the second target view monitoring system identifier in the second data to be transmitted is the same as the view monitoring system identifier corresponding to the view monitoring system, so as to determine whether the second encrypted data in the second data to be transmitted is the data sent to the view monitoring system.

[0127] Step b2: if the second target view monitoring system identifier is different from the view monitoring system identifier corresponding to the view monitoring system, obtain the cascade topology information of the view monitoring system from the view monitoring system, and determine the second transmission path based on the cascade topology information of the view monitoring system and the second target view monitoring system identifier.

[0128] Among them, the second target view monitoring system identifier is different from the view monitoring system identifier corresponding to the view monitoring system, indicating that the second encrypted data in the second data to be transmitted is not data sent to the view monitoring system, and the view monitoring system is only used to transfer data. The second transmission path is determined according to the cascade topology information of the view monitoring system and the second target view monitoring system identifier.

[0129] Step b3: Distribute the second data to be transmitted to the second target view monitoring system based on the second transmission path.

[0130] The data distribution method provided in this embodiment verifies whether the second target view monitoring system identifier in the received second data to be transmitted is the same as the view monitoring system identifier. If the second target view monitoring system identifier is different from the view monitoring system identifier, the cascade topology information of the view monitoring system is obtained from the view monitoring system, and the second transmission path is determined based on the cascade topology information of the view monitoring system and the second target view monitoring system identifier. Based on the second transmission path, the second data to be transmitted is distributed to the second target view monitoring system. This prevents data from being received or processed incorrectly, and ensures the security of data transmission.

[0131] In some optional implementations, the data distribution method further includes:

[0132] Step c1: if the second target view monitoring system identifier is the same as the view monitoring system identifier corresponding to the view monitoring system, then obtain the key information of the view monitoring system and the view monitoring system identifier of the view monitoring system from the view monitoring system, obtain the second encrypted data from the second data to be transmitted, and send the key information, the view monitoring system identifier of the view monitoring system and the second encrypted data to the cryptographic cloud platform, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system, obtains the second target data, and feeds the second target data back to the view monitoring system.

[0133] Among them, the second target view monitoring system identifier is the same as the view monitoring system identifier corresponding to the view monitoring system, indicating that the second encrypted data in the second data to be transmitted is data sent to the view monitoring system, then the view monitoring system sends its corresponding key information, view monitoring system identifier and second encrypted data to the key cloud platform, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system, obtains the second target data, and feeds the second target data back to the view monitoring system.

[0134] After receiving the second target data, the view monitoring system stores the second target data.

[0135] The data distribution method provided in this embodiment sends the key information and the view monitoring system identifier of the view monitoring system to the cryptographic cloud platform when the second target view monitoring system identifier is the same as the view monitoring system identifier, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system to obtain the second target data, and feeds the second target data back to the view monitoring system, ensuring that the second encrypted data can be correctly decrypted and the second target data can be obtained only when the view monitoring system identifier is the same as the second target view monitoring system identifier, thereby ensuring the security of data transmission.

[0136] In some optional implementations, the data distribution method further includes:

[0137] Step d1: when the view monitoring system receives a data reading request, obtain the data requirement and the third target view monitoring system identifier in the data reading request.

[0138] It is understandable that, in addition to sending the target data to the target view monitoring system according to the preset subscription rule, the view monitoring system may also send the corresponding data to the corresponding target view monitoring system when receiving a data reading request sent by other view monitoring systems.

[0139] Specifically, after receiving the data reading request, the data requirement and the third target view monitoring system identifier are obtained.

[0140] Step d2, based on data requirements, obtaining third target data from the view monitoring system.

[0141] Wherein, third target data meeting the data requirements is obtained from the view monitoring system.

[0142] Step d3, sending the third target data and the third target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the third target data based on the third target view monitoring system identifier, obtains the third encrypted data, and feeds the third encrypted data back to the view monitoring system.

[0143] After obtaining the third target data, the third target data and the third target view monitoring system identifier are sent to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the third target data based on the third target view monitoring system identifier.

[0144] Step d4, receiving the third encrypted data, and obtaining the cascade topology information of the video monitoring system.

[0145] Step d5: determining a third transmission path based on the cascade topology information of the view monitoring system and the third target view monitoring system identifier.

[0146] Step d6: determining third data to be transmitted based on the third encrypted data and the third target view monitoring system identifier.

[0147] Step d7: Distribute the third data to be transmitted to the third target view monitoring system based on the third transmission path.

[0148] The descriptions of step d4 to step d7 are similar to the descriptions of the aforementioned step S103 to step S106 and are not repeated here.

[0149] The data distribution method provided in this embodiment obtains the third target data stored in the view monitoring system based on data requirements, thereby ensuring the accuracy of the obtained third target data. By determining the third target view monitoring system identifier, it is ensured that the third target data only needs to be sent to the third target view monitoring system, and does not need to be sent to all view monitoring systems, thereby reducing unnecessary data transmission.

[0150] By using the third target view monitoring system identifier to encrypt the third target data, the security of the third target data during data transmission is ensured, and it is ensured that only the third target view monitoring system can decrypt the third encrypted data to obtain the third target data, further ensuring the security of data transmission.

[0151] By determining the third transmission path based on the cascade topology information of the view monitoring system and the identifier of the third target view monitoring system, it is ensured that the data is transmitted along the correct path, thereby improving the accuracy of data transmission.

[0152] In some optional implementations, the data distribution method further includes:

[0153] Step e1, when the registration of the view monitoring system fails, return to execute the step of obtaining the registration information of the view monitoring system from the view monitoring system and sending the registration information to the password cloud platform.

[0154] Step e2: if the number of returned executions exceeds the preset number threshold and the view monitoring system still fails to register, stop returning to the step of obtaining the registration information of the view monitoring system from the view monitoring system, sending the registration information to the password cloud platform, and issue an alarm.

[0155] Among them, the preset number threshold is pre-set by the technical staff.

[0156] The data distribution method provided in this embodiment prevents falling into an infinite loop and reduces unnecessary resource consumption by stopping returning to execute the steps of obtaining the registration information of the view monitoring system from the view monitoring system and sending the registration information to the cryptographic cloud platform when the number of return executions exceeds the preset number threshold and the view monitoring system still fails to register, thereby reducing unnecessary resource consumption. Timely alarms are issued to facilitate operation and maintenance personnel to handle problems in a timely manner and shorten fault handling time.

[0157] In this embodiment, a data distribution method is provided, which is applied to any view monitoring system in a cascade network. Figure 5 Schematic diagram of the structure of the view monitoring system in the cascade network according to an embodiment of the present invention. Figure 5As shown, the view monitoring system in the embodiment of the present invention includes modules such as data access, data management, data storage, configuration management, authority management, data encryption, data decryption, and data distribution, and these modules are used to process data distribution in the cascade mode. Among them, each independent view monitoring system needs to be registered on the cryptographic cloud platform and obtain its corresponding key information. Only when the view monitoring system is successfully registered with the cryptographic cloud platform can the cryptographic cloud platform perform data encryption and decryption processing according to the view monitoring system identifier of the view monitoring system.

[0158] Among them, the function of the authority management module is mainly to register the view monitoring system with the password cloud platform and receive and store the key information corresponding to the view monitoring system returned by the password cloud platform.

[0159] Figure 6 FIG. 1 is a flow chart of a data distribution method according to an embodiment of the present invention. Figure 6 As shown, the permission management module reads the system ID and user permission configuration information from the configuration management module and sends this information to the password cloud platform for registration. After successful registration, the password cloud platform will return the key information corresponding to the view monitoring system. After receiving the key information, the permission management module stores the key information in the configuration management module. If the registration fails or the key information is not received, the permission management will periodically try to send the system ID and user permission configuration information to the password cloud platform for registration until the registration is successful.

[0160] The function of the data management module is to read the target data stored in the view monitoring system or locate the target view monitoring system of the received data, and send the read target data or the located received data to different modules for processing. Figure 6 As shown, the data management module is the core of data distribution in the view monitoring system. The prerequisite for the data management module to process data is to obtain the system ID, key information and upper and lower system information from the configuration management module, that is, the entire cascade topology information of the upper and lower levels of the system. Data processing will be carried out only after successful acquisition, otherwise it will periodically go to the configuration management module to read this information until success.

[0161] like Figure 6 As shown, the data access module is used to receive data sent by other view monitoring systems and send the received data to the data management module. It can be understood that the data sent by other view monitoring systems are encrypted data and data receiving system ID.

[0162] After the data management module receives the data sent by the data access module, the process of processing the received data is: first, determine whether the data receiving system ID, i.e., the target view monitoring system identifier, in the data information is the ID of this system, i.e., the identifier of this view monitoring system; if so, send the encrypted data of this system, i.e., the received encrypted data and key information, to the data decryption module for processing.

[0163] The data decryption module sends the key information, system ID and encrypted data of this system to the cryptographic cloud platform for decryption, then receives the decrypted data sent by the cryptographic cloud platform, and then sends the decrypted data to the data storage module for storage.

[0164] It can be understood that the data decryption module is mainly used to receive encrypted data belonging to this system, and send the encrypted data, the system ID and key information to the cryptographic cloud platform for decryption.

[0165] If the data receiving system ID in the data information is not the ID of this system, that is, the data is not the data of this system, the data management module will find the address of the data receiving system (the data receiving system is the subordinate or superior of this system) or the address of the data transfer system (the data receiving system is the subordinate of a subordinate system of this system or the superior of a superior system of this system), and send the address of the data receiving system or the address of the data transfer system to the data distribution module.

[0166] The data distribution module will send the data to the data receiving system or the data transfer system according to the address of the data receiving system or the address of the data transfer system.

[0167] It can be understood that the data distribution module is mainly used to send data to the lower-level view monitoring system or report data to the upper-level view monitoring system.

[0168] When the system acts as a data sender, the processing flow of the data management module is as follows: first read the data stored in the system that meets the sending conditions, where the sending conditions can be preset subscription rules or data requirements in the data reading request. Then send the data and the system information of the data receiver, i.e., the data receiver ID, to the data encryption module.

[0169] The data encryption module sends the data and the data recipient ID to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the data according to the data recipient ID and returns the encrypted data to the data encryption module.

[0170] The data encryption module sends the encrypted data to the data distribution module. The data distribution module sends the encrypted data and the data recipient ID to the data receiving system or the data transfer system according to the data recipient address or the data transfer address.

[0171] It can be understood that the data encryption module is mainly used to send the data that meets the sending conditions and the data recipient ID in this system to the cryptographic cloud platform for encryption before data distribution.

[0172] When the data receiving system is a subordinate or superior of this system, the data encryption module sends the data recipient address, data recipient ID and encrypted data to the data distribution module. When the data receiving system is a subordinate of a subordinate system of this system or a superior of a superior system of this system, the data encryption module sends the data transfer party address, data recipient ID and encrypted data to the data distribution module.

[0173] It should be noted that the system mentioned in this embodiment is a view monitoring system.

[0174] The data distribution method provided in this embodiment is that the view monitoring system sending data will specify the sending or reporting according to the data type and the business function of the view monitoring system, and send the data content to the cryptographic cloud platform through the data receiving system ID for encryption before data transmission. Even in a three-level cascade scenario where a certain level system has multiple upper-level systems and multiple lower-level systems, a certain upper-level system of the current system needs to send data to a certain lower-level system of the current system through the current system, and the upper-level system will encrypt the data content according to the lower-level system ID and then send the data to the current system. After the current system receives the data, it identifies the data of the non-system of the current level according to the system ID, and directly forwards the data to the corresponding lower-level system. After the lower-level system receives the data, it identifies the data of its own system and sends the system ID and key information to the cryptographic cloud platform for decryption and storage and application. The optimization processing of operations such as data encryption, data decryption, data transmission, and data processing is realized, and data distribution can be selectively carried out according to business needs while ensuring data security, optimizing the data transmission path, improving data processing efficiency, and improving the performance, security, and stability of the cascade network.

[0175] At the same time, when the view monitoring system receives data that is not from the view monitoring system itself, it does not need to analyze or store the data and directly forwards it to the designated view monitoring system, thereby reducing the additional resource overhead caused by processing erroneous data and improving data processing efficiency.

[0176] The data distribution of the cascade network in the embodiment of the present invention can be that a certain upper view monitoring system sends data to a certain lower view monitoring system of the system or a lower view monitoring system of a certain lower view monitoring system of the system. It can also be that a certain lower view monitoring system reports data to a certain upper view monitoring system of the system or a higher view monitoring system of a certain upper view monitoring system of the system. Based on this, this embodiment provides a data distribution method, Figure 7is a flow chart of a data distribution method according to an embodiment of the present invention. Figure 7 As shown, the process includes the following steps:

[0177] In the first step, when a superior or subordinate view monitoring system executes data sending or data reporting, it reads the data stored in the system that meets the sending conditions, and then sends the data receiving system ID and the read data to the cryptographic cloud platform for encryption.

[0178] In the second step, the cryptographic cloud platform receives the data information, i.e., the data receiving system ID and the read data, encrypts the data content, i.e., the read data, according to the data receiving system ID, and returns the encrypted data to a superior or subordinate view monitoring system.

[0179] In the third step, a superior or subordinate view monitoring system receives the encrypted data returned by the cryptographic cloud platform, and sends or reports the data information, i.e., the encrypted data and the data receiving system ID, to a subordinate system or a superior system of this system (a subordinate system or a superior system of this system is the view monitoring system at this level).

[0180] In the fourth step, the view monitoring system at this level receives the data information sent by the upper system or reported by the lower system, namely the encrypted data and the data receiving system ID, and determines whether the data receiving system ID in the data information is the system ID of this level. If not, execute step 8; if yes, execute step 5.

[0181] In the fifth step, the view monitoring system at this level sends the system ID, key information and encrypted data to the cryptographic cloud platform for data decryption operations.

[0182] In the sixth step, the cryptographic cloud platform receives the data information sent by the view monitoring system at this level, namely, the system ID, key information and encrypted data, and verifies whether the authority is correct based on the system ID and key information, that is, verifies whether the view monitoring system at this level is successfully registered in the cryptographic cloud platform.

[0183] If the verification authority is incorrect, the cryptographic cloud platform sends the authority verification failure result to the view monitoring system at the same level. After receiving the authority verification failure result, the view monitoring system at the same level sends the authority verification failure result to a superior or subordinate view monitoring system, so that the superior or subordinate view monitoring system determines that the encrypted data transmission fails.

[0184] If the verification authority is correct, the encrypted data will be decrypted according to the system ID and key information and the decrypted data will be returned, and the data sending operation result will be returned to a superior or subordinate view monitoring system.

[0185] In the seventh step, the view monitoring system at this level receives the decrypted data returned by the cryptographic cloud platform and stores the decrypted data.

[0186] In the eighth step, the view monitoring system at the same level forwards the data information, namely the encrypted data and the data receiving system ID, to the lower-level view monitoring system or the upper-level view monitoring system of the system.

[0187] In the ninth step, the lower-level view monitoring system or the upper-level view monitoring system receives the data information sent by the current-level view monitoring system, i.e., the encrypted data and the data receiving system ID, and determines whether the data receiving system ID in the data information is the current-level system ID, i.e., the ID of the lower-level view monitoring system or the upper-level view monitoring system.

[0188] If yes, the system ID, key information and encrypted data of this level are sent to the cryptographic cloud platform for data decryption. The cryptographic cloud platform receives the data information sent by the lower-level view monitoring system or the upper-level view monitoring system, namely, the system ID, key information and encrypted data of this level, and verifies whether the authority is correct according to the system ID and key information of this level, namely, verifies whether the lower-level view monitoring system or the upper-level view monitoring system is successfully registered in the cryptographic cloud platform.

[0189] If the verification authority is incorrect, the password cloud platform sends the authority verification failure result to the lower-level view monitoring system or the upper-level view monitoring system.

[0190] If the verification authority is correct, the encrypted data will be decrypted according to the system ID and key information at this level and the decrypted data will be returned.

[0191] In the tenth step, the lower-level view monitoring system or the upper-level view monitoring system receives the decrypted data returned by the cryptographic cloud platform and stores the decrypted data.

[0192] It should be noted that the system mentioned in this embodiment is a view monitoring system.

[0193] The data distribution method provided in this embodiment encrypts and decrypts data through the system ID, selects the optimal transmission path according to the business scenario, improves the data distribution efficiency, and avoids the additional resource consumption caused by erroneous data. Compared with the related art, the present invention has the following advantages:

[0194] 1. Security. Before data is distributed, it must be encrypted by the cryptographic cloud platform according to the unique identifier of the data receiving system. Only when the data enters the data receiving system can it be decrypted according to the data receiving system ID and the key information corresponding to the data receiving system. This method ensures that the data is secure during the entire transmission process.

[0195] Second, high efficiency. Each view monitoring system has complete cascade topology information. According to the business scenario, whether the upper-level view monitoring system sends data downward or the lower-level view monitoring system reports data upward, it can find a unique optimal path for efficient and fast transmission. In addition, any view monitoring system can quickly detect whether the data is distributed to this view monitoring system and make corresponding processing. This method improves performance in both data transmission and data processing.

[0196] 3. Low consumption. Data transmission will not distribute data that does not match the business scenario of a certain view monitoring system. When the view monitoring system detects data that is not monitored by this view, it only forwards the data without parsing and storing it. This method allows data transmission and data processing to avoid data redundancy and additional resource consumption caused by erroneous data, greatly reducing the transmission cost of the entire cascade network.

[0197] In the present embodiment, a data distribution device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0198] This embodiment provides a data distribution device, which is applied to any view monitoring system in a cascade network, such as Figure 8 As shown, including:

[0199] The first acquisition module 801 is used to acquire first target data stored in the view monitoring system based on a preset subscription rule, and determine a first target view monitoring system identifier corresponding to the first target data.

[0200] The first sending module 802 is used to send the first target data and the first target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains the first encrypted data, and feeds the first encrypted data back to the view monitoring system.

[0201] The first receiving module 803 is used to receive the first encrypted data and obtain the cascade topology information of the view monitoring system.

[0202] The first determining module 804 is configured to determine a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier.

[0203] The second determination module 805 is configured to determine first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier.

[0204] The first distribution module 806 is configured to distribute the first data to be transmitted to the first target view monitoring system based on the first transmission path.

[0205] In some optional implementations, the data distribution device further includes:

[0206] The first judgment module is used to judge whether the key information of the view monitoring system is stored in the view monitoring system.

[0207] The second acquisition module is used to obtain the registration information of the view monitoring system from the view monitoring system when the key information of the view monitoring system is not stored in the view monitoring system, and send the registration information to the cryptographic cloud platform so that the cryptographic cloud platform registers the view monitoring system based on the registration information. When the registration is successful, the key information of the view monitoring system is obtained and the key information is fed back to the view monitoring system.

[0208] In some optional implementations, the second acquisition module includes:

[0209] The first acquisition unit is used to obtain the view monitoring system identifier and view monitoring system permission information corresponding to the view monitoring system from the view monitoring system when the key information of the view monitoring system is not stored in the view monitoring system, and send the view monitoring system identifier and the view monitoring system permission information to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the view monitoring system identifier and the view monitoring system permission information. When the registration is successful, the key information of the view monitoring system is generated based on the view monitoring system identifier, and the key information of the view monitoring system is fed back to the view monitoring system based on the view monitoring system permission information.

[0210] In some optional implementations, the data distribution device further includes:

[0211] The return execution module is used to return to the step of obtaining the registration information of the view monitoring system from the view monitoring system and sending the registration information to the password cloud platform until the view monitoring system is successfully registered when the view monitoring system fails to be registered.

[0212] In some optional implementations, the data distribution device further includes:

[0213] The second judgment module is used to judge whether the second target view monitoring system identifier in the second data to be transmitted is the same as the view monitoring system identifier corresponding to the view monitoring system when the view monitoring system receives the second data to be transmitted sent by other view monitoring systems in the cascade network.

[0214] The third acquisition module is used to obtain cascade topology information of the view monitoring system from the view monitoring system if the second target view monitoring system identifier is different from the view monitoring system identifier corresponding to the view monitoring system, and determine the second transmission path based on the cascade topology information of the view monitoring system and the second target view monitoring system identifier.

[0215] The second distribution module is used to distribute the second data to be transmitted to the second target view monitoring system based on the second transmission path.

[0216] In some optional implementations, the data distribution device further includes:

[0217] The fourth acquisition module is used to obtain the key information of the view monitoring system and the view monitoring system identifier of the view monitoring system from the view monitoring system if the second target view monitoring system identifier is the same as the view monitoring system identifier corresponding to the view monitoring system, obtain the second encrypted data from the second data to be transmitted, and send the key information, the view monitoring system identifier of the view monitoring system and the second encrypted data to the cryptographic cloud platform, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system, obtains the second target data, and feeds the second target data back to the view monitoring system.

[0218] In some optional implementations, the data distribution device further includes:

[0219] The fifth acquisition module is used to acquire the data requirement and the third target view monitoring system identifier in the data reading request when the view monitoring system receives the data reading request.

[0220] The sixth acquisition module is used to acquire third target data from the view monitoring system based on data requirements.

[0221] The second sending module is used to send the third target data and the third target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the third target data based on the third target view monitoring system identifier, obtains the third encrypted data, and feeds the third encrypted data back to the view monitoring system.

[0222] The second receiving module is used to receive the third encrypted data and obtain the cascade topology information of the visual monitoring system.

[0223] The third determining module is used to determine a third transmission path based on the cascade topology information of the view monitoring system and the third target view monitoring system identifier.

[0224] The fourth determination module is used to determine the third data to be transmitted based on the third encrypted data and the third target view monitoring system identifier.

[0225] The third distribution module is used to distribute the third data to be transmitted to the third target view monitoring system based on the third transmission path.

[0226] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0227] The data distribution device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0228] The embodiment of the present invention also provides a computer device having the above Figure 8 The data distribution device shown.

[0229] See also Fig. 9 , Fig. 9 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Fig. 9 As shown, the computer device includes: one or more processors 901, memory 902, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Each component utilizes different buses to communicate with each other, and can be installed on a common mainboard or installed in other ways as required. The processor can process the instructions executed in the computer device, including instructions stored in the memory or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides part of the necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Fig. 9 A processor 901 is taken as an example.

[0230] The processor 901 may be a central processing unit, a network processor or a combination thereof. The processor 901 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable logic gate array, a general purpose array logic or any combination thereof.

[0231] The memory 902 stores instructions executable by at least one processor 901 so as to enable at least one processor 901 to implement the method shown in the above embodiment.

[0232] The memory 902 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 902 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 902 may optionally include a memory remotely arranged relative to the processor 901, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0233] The memory 902 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 902 may also include a combination of the above types of memory.

[0234] The computer device also includes a communication interface 903, which is used for the computer device to communicate with other devices or a communication network.

[0235] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0236] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0237] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A data distribution method, characterized in that: Applied to any view monitoring system in a cascade network, the method comprises: Based on a preset subscription rule, obtaining first target data stored in the view monitoring system, and determining a first target view monitoring system identifier corresponding to the first target data; Sending the first target data and the first target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains first encrypted data, and feeds the first encrypted data back to the view monitoring system; Receiving the first encrypted data, and acquiring the cascade topology information of the view monitoring system; Determining a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier; Determining first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier; Based on the first transmission path, the first data to be transmitted is distributed to a first target view monitoring system.

2. The method according to claim 1, characterized in that Before acquiring the first target data stored in the view monitoring system based on the preset subscription rule, the method further includes: Determining whether key information of the view monitoring system is stored in the view monitoring system; In the case where the key information of the view monitoring system is not stored in the view monitoring system, the registration information of the view monitoring system is obtained from the view monitoring system, and the registration information is sent to the cryptographic cloud platform so that the cryptographic cloud platform registers the view monitoring system based on the registration information. In the case of successful registration, the key information of the view monitoring system is obtained and the key information is fed back to the view monitoring system.

3. The method according to claim 2, characterized in that In the case where the key information of the view monitoring system is not stored in the view monitoring system, obtaining the registration information of the view monitoring system from the view monitoring system, sending the registration information to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the registration information, and in the case where the registration is successful, obtaining the key information of the view monitoring system, and feeding the key information back to the view monitoring system, including: In the case that the key information of the view monitoring system is not stored in the view monitoring system, the view monitoring system identifier and view monitoring system permission information corresponding to the view monitoring system are obtained from the view monitoring system, and the view monitoring system identifier and view monitoring system permission information are sent to the cryptographic cloud platform, so that the cryptographic cloud platform registers the view monitoring system based on the view monitoring system identifier and the view monitoring system permission information. In the case of successful registration, the key information of the view monitoring system is generated based on the view monitoring system identifier, and the key information of the view monitoring system is fed back to the view monitoring system based on the view monitoring system permission information.

4. The method according to claim 2, characterized in that: The method further comprises: In the case where the registration of the view monitoring system fails, the process returns to the step of obtaining the registration information of the view monitoring system from the view monitoring system and sending the registration information to the password cloud platform until the registration of the view monitoring system succeeds.

5. The method according to claim 1, characterized in that The method further comprises: When the view monitoring system receives second data to be transmitted sent by other view monitoring systems in the cascade network, determining whether a second target view monitoring system identifier in the second data to be transmitted is the same as a view monitoring system identifier corresponding to the view monitoring system; If the second target view monitoring system identifier is different from the view monitoring system identifier corresponding to the view monitoring system, obtaining cascade topology information of the view monitoring system from the view monitoring system, and determining a second transmission path based on the cascade topology information of the view monitoring system and the second target view monitoring system identifier; Based on the second transmission path, the second data to be transmitted is distributed to a second target view monitoring system.

6. The method according to claim 5, characterized in that The method further comprises: If the second target view monitoring system identifier is the same as the view monitoring system identifier corresponding to the view monitoring system, the key information of the view monitoring system and the view monitoring system identifier of the view monitoring system are obtained from the view monitoring system, second encrypted data is obtained from the second data to be transmitted, and the key information, the view monitoring system identifier of the view monitoring system and the second encrypted data are sent to the cryptographic cloud platform, so that the cryptographic cloud platform decrypts the second encrypted data based on the key information and the view monitoring system identifier of the view monitoring system, obtains second target data, and feeds the second target data back to the view monitoring system.

7. The method according to claim 1, characterized in that The method further comprises: When the view monitoring system receives a data reading request, acquiring a data requirement and a third target view monitoring system identifier in the data reading request; Based on the data requirement, obtaining third target data from the view monitoring system; Sending the third target data and the third target view monitoring system identifier to the cryptographic cloud platform, so that the cryptographic cloud platform encrypts the third target data based on the third target view monitoring system identifier, obtains third encrypted data, and feeds the third encrypted data back to the view monitoring system; receiving the third encrypted data, and acquiring the cascade topology information of the view monitoring system; Determining a third transmission path based on the cascade topology information of the view monitoring system and the third target view monitoring system identifier; Determining third data to be transmitted based on the third encrypted data and the third target view monitoring system identifier; Based on the third transmission path, the third data to be transmitted is distributed to a third target view monitoring system.

8. A data distribution device, characterized in that: Applicable to any view monitoring system in a cascade network, the device comprises: A first acquisition module, configured to acquire first target data stored in the view monitoring system based on a preset subscription rule, and determine a first target view monitoring system identifier corresponding to the first target data; A first sending module, configured to send the first target data and the first target view monitoring system identifier to a cryptographic cloud platform, so that the cryptographic cloud platform encrypts the first target data based on the first target view monitoring system identifier, obtains first encrypted data, and feeds the first encrypted data back to the view monitoring system; A first receiving module, configured to receive the first encrypted data and obtain cascade topology information of the view monitoring system; A first determining module, configured to determine a first transmission path based on the cascade topology information of the view monitoring system and the first target view monitoring system identifier; A second determining module, configured to determine first data to be transmitted based on the first encrypted data and the first target view monitoring system identifier; The first distribution module is used to distribute the first data to be transmitted to a first target view monitoring system based on the first transmission path.

9. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the data distribution method according to any one of claims 1 to 7 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the data distribution method according to any one of claims 1 to 7.

Images