Video conference data security encryption method, system, device, and storage medium

Abstract

The present disclosure provides a video conference data security encryption method and system, device, and storage medium, which belongs to the field of data encryption technology. The method includes: based on the data security level information transmitted by multiple terminal devices, generating a key pair corresponding to each terminal device, the key pair includes a public key and a private key, and the data security level information is the security level information corresponding to the video conference data recorded by each participating terminal device in the video conference; based on the evaluation key, the target data is aggregated and calculated to obtain comprehensive data information, and the key data is the data after any terminal device extracts features from the video conference data; and the comprehensive data information is sent to each terminal device respectively. The video conference data security encryption method and system, device, and storage medium provided by the present disclosure can improve the security and reliability of video conference data processing.

Description

Technical Field

[0001] The present disclosure belongs to the field of data encryption technology, and more specifically, relates to a video conference data security encryption method and system, device, and storage medium. Background Art

[0002] With the rapid development of information technology, video conferencing has become an important tool for remote communication and collaboration among enterprises, institutions and individuals. During video conferencing, a large amount of data containing sensitive information is generated, such as business secrets, technical solutions, personal privacy, etc. The security of this data is extremely important.

[0003] The existing technology does not provide adequate security protection during data transmission and storage, and it is difficult to effectively prevent data from being intercepted during transmission or illegally accessed during storage. Summary of the invention

[0004] The purpose of the present disclosure is to provide a video conference data security encryption method and system, device, and storage medium to improve the security and reliability of video conference data processing.

[0005] A first aspect of the embodiments of the present disclosure provides a method for securely encrypting video conference data, including: Based on the data security level information transmitted by multiple terminal devices, a key pair corresponding to each terminal device is generated. The key pair includes a public key and a private key. The data security level information is the security level information corresponding to the video conference data recorded by each participating terminal device in the video conference. Based on the evaluation key, the target data is aggregated and calculated to obtain comprehensive data information. The public key is used to encrypt the key data to obtain the target data, and the private key is used to decrypt the comprehensive data. The key data is the data after any terminal device extracts features from the video conference data. The evaluation key is the key for aggregate calculation of the target data; The comprehensive data information is sent to each terminal device separately.

[0006] A second aspect of the disclosed embodiment provides a video conference data security encryption system, a key pair generation module, for generating a key pair corresponding to each terminal device based on data security level information transmitted by multiple terminal devices, the key pair including a public key and a private key, the data security level information being security level information corresponding to video conference data recorded by each participating terminal device in the video conference; An information aggregation module is used to perform aggregation calculation on the target data based on the evaluation key to obtain comprehensive data information. The public key is used to encrypt the key data to obtain the target data, and the private key is used to decrypt the comprehensive data. The key data is the data after any terminal device extracts features from the video conference data. The evaluation key is the key for performing aggregation calculation on the target data. The encrypted transmission module is used to send the comprehensive data information to each terminal device respectively.

[0007] According to a third aspect of an embodiment of the present disclosure, an electronic device is provided, including a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor implements the steps of the above-mentioned video conference data security encryption method when executing the computer program.

[0008] According to a fourth aspect of the embodiments of the present disclosure, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the above-mentioned video conference data security encryption method are implemented.

[0009] The beneficial effects of the video conference data security encryption method, system, device, and storage medium provided by the embodiments of the present disclosure are: the embodiments of the present disclosure can first generate a corresponding key pair based on the data security level information transmitted by the terminal device, and can provide differentiated encryption protection according to the sensitivity of the data. Secondly, the key data is encrypted after feature extraction to obtain the target data, and then the comprehensive data information is obtained by aggregation calculation based on the evaluation key, which realizes the effective integration of data without leaking data privacy and facilitates the analysis of the overall situation of the meeting. Finally, the encrypted comprehensive data information is sent to each terminal device, which is decrypted by the private key, which not only ensures the security of the data during transmission and prevents theft and tampering, but also ensures that only legitimate terminal devices can obtain the decrypted data, thereby protecting the privacy of the data and improving the security and reliability of video conference data processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0011] Figure 1 A schematic diagram of a process for securely encrypting video conference data provided by an embodiment of the present disclosure; Figure 2 A structural block diagram of a video conference data security encryption system provided by an embodiment of the present disclosure; Figure 3 A schematic block diagram of an electronic device provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0012] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present disclosure. However, it should be clear to those skilled in the art that the present disclosure may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, systems, circuits, and methods are omitted to avoid obstructing the description of the present disclosure with unnecessary details.

[0013] In order to make the purpose, technical solutions and advantages of the present disclosure more clear, specific embodiments will be described below in conjunction with the accompanying drawings.

[0014] Please refer to Figure 1 , Figure 1 A schematic diagram of a process for securely encrypting video conference data provided by an embodiment of the present disclosure, the method comprising: S101: Based on the data security level information transmitted by multiple terminal devices, generate a key pair corresponding to each terminal device, the key pair includes a public key and a private key, and the data security level information is the security level information corresponding to the video conference data recorded by each participating terminal device in the video conference.

[0015] In this embodiment, during the video conference, each participating terminal device can record various types of conference data, such as audio, video, text records, etc. The video conference data can be evaluated based on the set rules to determine its corresponding security level. For example, conference content data involving commercial secrets and sensitive information can be rated as a high security level; general communication and discussion data has a relatively low security level.

[0016] This embodiment can generate an exclusive key pair for each terminal device based on the data security level information transmitted by each terminal device, which includes a public key and a private key. Different security levels may correspond to key pairs of different strengths. For data with a high security level, a key pair with higher complexity and stronger security can be generated. For example, an RSA algorithm with a longer key length can be used to generate a key pair; for data with a low security level, a relatively simple and less computationally intensive elliptic curve cryptosystem (ECC) can be used to generate a key pair. The generated public key and private key are one-to-one corresponding. The public key can be made public and used to encrypt data; the private key is kept by the terminal device and used to decrypt data.

[0017] S102: Perform aggregate calculation on the target data based on the evaluation key to obtain comprehensive data information. The public key is used to encrypt the key data to obtain the target data, and the private key is used to decrypt the comprehensive data. The key data is the data after any terminal device extracts features from the video conference data.

[0018] In this embodiment, each terminal device extracts features from the recorded video conference data to obtain key data.

[0019] In response to the video conference data being audio data, extracting frequency features, intonation features, etc. of the audio data; In response to the video conference data being video data, color features, texture features, etc. of frame images in the video data are extracted.

[0020] Through feature extraction, the amount of data can be reduced while retaining the key information of the data.

[0021] The terminal devices use their own public keys to encrypt the extracted key data to obtain the target data. The public key encryption algorithm used in the encryption process (such as RSA encryption algorithm, ECC encryption algorithm, etc.) can ensure the security of data during transmission. Even if the data is intercepted, the attacker cannot decrypt and obtain the information without the private key.

[0022] The evaluation key is a special key used to perform aggregate calculations on target data in video conferencing data security encryption scenarios.

[0023] The target data sent by each terminal device is aggregated based on the evaluation key. The evaluation key allows the target data to be aggregated without decrypting it. Through the aggregate calculation, comprehensive data information can be obtained, which reflects the overall characteristics of the video conference data recorded by all terminal devices. For example, in some cases, the encrypted numerical data can be summed, averaged, etc.

[0024] S103: Send the comprehensive data information to each terminal device respectively.

[0025] In this embodiment, the comprehensive data information obtained by the aggregate calculation is sent to each terminal device respectively. During the transmission process, the comprehensive data information remains encrypted to ensure the security of the data during transmission and prevent the data from being stolen or tampered with.

[0026] After receiving the comprehensive data information, each terminal device can use its own private key to decrypt it. The private key is only owned by the terminal device itself, and only the corresponding terminal device can correctly decrypt the comprehensive data, thus ensuring the privacy of the data. The decrypted comprehensive data can be further processed and used by the terminal device, such as data analysis, storage and other operations.

[0027] For example, suppose a large enterprise plans to hold a video conference on new product development strategy. Participants from different departments use their own terminal devices (such as laptops, tablets, etc.) to access the meeting. The meeting involves sensitive information such as the core technology, market positioning, and marketing strategy of the new product, as well as general communication and discussion content.

[0028] The terminal devices of the R&D department record the core technical details of new products. These data involve commercial secrets and are rated as high security level.

[0029] The terminal devices of the marketing department record market research data and preliminary marketing strategies, which are also sensitive information and have a high security level.

[0030] The administrative department's terminal equipment mainly records meeting organization arrangements and general communication content, and the security level is relatively low.

[0031] For the terminal devices of the R&D department and the marketing department, the RSA algorithm with a key length of 2048 bits is used to generate the key pair. For example, a laptop in the R&D department obtains the public key and private key , a tablet in the marketing department gets the public key and private key .

[0032] For the terminal devices of the administrative department, the key pair is generated for them using the SECP256k1 curve of ECC. For example, a laptop computer of the administrative department obtains the public key and private key .

[0033] The terminal device of the R&D department recorded the audio of a technical expert explaining the core technology in a meeting. The device extracted the frequency characteristics and intonation characteristics of the audio data as key data. For example, it detected that the intonation of the expert increased when explaining the key technology, and this feature was extracted. The terminal device of the marketing department recorded the video presentation of the market research. The device extracted the color characteristics and texture characteristics of the frame images in the video. For example, the color distribution and texture details of the charts in the market research report were extracted.

[0034] The terminal devices of the R&D department use the public key Perform RSA encryption on the extracted key data to obtain the target data The terminal device of the marketing department uses the public key Perform RSA encryption on key data to obtain target data The administrative department's terminal equipment uses the public key Perform ECC encryption on key data to obtain target data .

[0035] Using this evaluation key pair , and Perform aggregate calculations. Assume that the conference involves predicted market share values, which exist in encrypted form in the key data of each terminal device. These encrypted values ​​are summed without decryption to obtain comprehensive data information DCI, which reflects the overall situation of the video conference data recorded by all terminal devices in terms of market share prediction.

[0036] The system sends the comprehensive data information DCI to the terminal devices of the R&D department, the marketing department, and the administrative department respectively. During the transmission process, the DCI is always encrypted to prevent it from being stolen or tampered with. The terminal devices of the R&D department, the marketing department, and the administrative department can use their own private keys to decrypt the received data and obtain the decrypted comprehensive data.

[0037] In this way, the company's video conferencing data can be effectively aggregated and shared under the premise of secure encryption, ensuring the security and privacy of sensitive information, while meeting the needs of various departments for comprehensive analysis and utilization of conference data.

[0038] From the above, it can be concluded that this embodiment can first generate a corresponding key pair based on the data security level information transmitted by the terminal device, and can provide differentiated encryption protection according to the sensitivity of the data. Secondly, the key data is encrypted after feature extraction to obtain the target data, and then the comprehensive data information is obtained by aggregation calculation based on the evaluation key, which realizes the effective integration of data without leaking data privacy, and facilitates the analysis of the overall situation of the meeting. Finally, the encrypted comprehensive data information is sent to each terminal device, which is decrypted by the private key, which not only ensures the security of the data during transmission and prevents theft and tampering, but also ensures that only legitimate terminal devices can obtain the decrypted data, thereby protecting the privacy of the data and improving the security and reliability of video conferencing data processing.

[0039] In one embodiment of the present disclosure, based on data security level information transmitted by multiple terminal devices, a key pair corresponding to each terminal device is generated, including: The data security level information, performance parameter information and corresponding environment information transmitted by each terminal device are integrated to obtain the comprehensive data security level information corresponding to each terminal device; Determine a key pair generation algorithm corresponding to each terminal device based on the comprehensive data security level information; A key pair corresponding to each terminal device is generated based on a key pair generation algorithm.

[0040] In this embodiment, the data security level information reflects the sensitivity and importance of the video conference data recorded by the terminal device. For example, data involving key contents such as commercial secrets and personal privacy has a higher security level, while general communication and discussion data has a relatively lower security level.

[0041] Performance parameter information: refers to the hardware performance and operating status of the terminal device, such as CPU processing power, memory size, storage capacity, etc. Devices with better performance may be able to withstand more complex encryption algorithms and computing tasks.

[0042] Environmental information: refers to the network environment and physical environment where the terminal device is located. The network environment includes network bandwidth, stability, whether it is a public network, etc.; the physical environment includes the safety of the location where the device is located, whether there is electromagnetic interference, etc.

[0043] In this embodiment, weighted fusion may be performed based on the weights of the data security level information, performance parameter information, and corresponding environmental information transmitted by each terminal device to obtain comprehensive data security level information corresponding to the terminal device.

[0044] In response to the comprehensive data security level information being greater than the first security level, a key pair corresponding to each terminal device is generated based on the RSA algorithm; in response to the comprehensive data security level information being less than or equal to the first security level, a key pair corresponding to each terminal device is generated based on the elliptic curve cryptography system.

[0045] In this embodiment, the first security level is a key threshold set in the video conference data security encryption scenario. When the comprehensive data security level information is greater than the first security level, it indicates that the video conference data is sensitive and important. The RSA algorithm can effectively prevent data from being cracked and ensure encryption reliability with its high security, maturity and wide applicability. When the comprehensive data security level information is less than or equal to the first security level, the elliptic curve cryptography system, with its characteristics of small computational complexity, high efficiency and short key, can reduce the computing burden and resource consumption of the device while meeting basic security requirements, and achieve a balance between security and efficiency.

[0046] In this embodiment, after determining the key pair generation algorithm for each terminal device, this embodiment can generate a corresponding key pair for the terminal device according to the rules and processes of the algorithm, including a public key and a private key. The public key can be publicly used to encrypt data, and the private key is properly kept by the terminal device for decrypting data. The generated key pair is unique and one-to-one corresponding, ensuring the accuracy and security of data encryption and decryption.

[0047] From the above, it can be concluded that this embodiment can evaluate the security status of each terminal by integrating multiple aspects of information to obtain comprehensive data security level information. Based on this, the key pair generation algorithm is determined, and a strong algorithm is used for high security requirements and a lightweight algorithm is used for low security requirements. This not only ensures data security, but also reasonably utilizes device resources, avoids over-encryption or under-encryption, and improves the efficiency and quality of video conference data encryption.

[0048] In one embodiment of the present disclosure, the target data is aggregated and calculated based on the evaluation key to obtain comprehensive data information, including: Assign a weight coefficient to the comprehensive data security level information corresponding to each terminal device; The comprehensive data security level information corresponding to each weight coefficient is weighted and summed to obtain the comprehensive data information In this embodiment, a weight coefficient may be allocated to the comprehensive data security level information of each terminal device based on the importance and reliability of the comprehensive data security level information. The weight coefficient reflects the importance of the target data of the terminal device in the comprehensive calculation.

[0049] Terminal devices with higher comprehensive data security level information indicate that their data is more critical and reliable, so they can be assigned a higher weight coefficient; terminal devices with lower comprehensive data security level information can be assigned a relatively lower weight coefficient. For example, in a corporate high-level decision-making video conference, the terminal device where the core leader is located has a high comprehensive data security level information and can be assigned a larger weight; while the terminal device where ordinary employees record general discussion content has a smaller weight.

[0050] This embodiment can be calculated by a data analysis algorithm based on historical data and actual conditions. For example, a weight coefficient can be obtained by using a hierarchical analysis method to perform quantitative analysis based on various information of each terminal device.

[0051] Under the action of the evaluation key, the comprehensive data security level information corresponding to each weight coefficient is weighted and summed. The evaluation key allows this calculation to be performed without decrypting the target data, thereby ensuring the privacy of the data. Specifically, assuming that there are n terminal devices in total, the target data of the i-th terminal device is , the corresponding weight coefficient is , the comprehensive data information S can be calculated by the following formula:

[0052] The comprehensive data information integrates the data characteristics of each terminal device, while taking into account the security level and importance of the data of each terminal device, and can more comprehensively and accurately reflect the data situation of the entire video conference.

[0053] From the above, it can be concluded that this embodiment allocates weight coefficients for comprehensive data security level information, which can be reasonably considered based on the importance of each terminal device and the reliability of data. The comprehensive data information is obtained by weighted summation, which not only retains the characteristics of each terminal data, but also highlights the value of key data.

[0054] In one embodiment of the present disclosure, the comprehensive data security level information corresponding to each weight coefficient is weighted and summed to obtain comprehensive data information, including: Based on the first formula, weighted summation is performed on the comprehensive data security level information corresponding to each weight coefficient to obtain comprehensive data information; The first formula is:

[0055] in, Indicates comprehensive data information, represents the weight coefficient of the comprehensive data security level information allocation of the i-th terminal device, represents the uniqueness index of the i-th terminal device data, represents the target data of the i-th terminal device, represents the target data of the jth terminal device, It represents the data association degree between the i-th terminal device and the j-th terminal device, and n represents the number of terminal devices.

[0056] In this embodiment, the weight coefficient It can be determined based on the comprehensive data security level information obtained by integrating the data security level information, performance parameter information and environmental information of the terminal device, reflecting the importance of the terminal device in the overall video conferencing data.

[0057] Uniqueness Index It is used to measure the difference between the terminal device data and other device data. The uniqueness index can be understood as the terminal device recording key information that other devices do not involve. The value range can be The closer the value is to 1, the more unique the data of the terminal device is, and it should be more prominently reflected in the comprehensive data information.

[0058] Target data It is the data obtained after the terminal device extracts features from the video conference data and then encrypts it with a public key. It represents the key information recorded by the terminal device in the video conference.

[0059] Data Relevance It reflects the correlation between data from different terminal devices, which can be calculated by factors such as the similarity of data features and the correlation of business logic. For example, if two terminal devices record information from different angles of the same event, the data correlation between them is high. The value range can also be set in between.

[0060] Taking into account the target data of the terminal device itself And the relationship with all other terminal device data. Target data for other devices Perform weighted sum and add Addition reflects the mutual complementation and correlation between data.

[0061] It plays a normalization role, ensuring that the final comprehensive data information S is within a reasonable numerical range.

[0062] It can be concluded from the above that this embodiment comprehensively considers the importance of each terminal device, the uniqueness of the data, and the correlation between the data. It is not just a simple summary of the target data of each terminal device, but a comprehensive and reasonable integration of all terminal device data in the video conference under the premise of ensuring data privacy, which can more accurately reflect the data characteristics and overall situation of the entire video conference.

[0063] In one embodiment of the present disclosure, it also includes: Based on the performance parameter information of multiple terminal devices, risk assessment is performed on each terminal device to obtain a risk assessment value corresponding to each terminal device; In response to the risk assessment value being greater than the risk assessment threshold, the transmission channel corresponding thereto is cut off.

[0064] In this embodiment, the performance parameter information of the terminal device can reflect the running status and capability of the device. The performance parameter information of the terminal device can include: CPU usage, network bandwidth, etc.

[0065] If the CPU is running at high load for a long time, the device processing speed will slow down, making the system unable to process new data in time, resulting in data loss or transmission delay. The network bandwidth determines the speed of data transmission. Insufficient bandwidth may cause video freezes and audio delays.

[0066] This embodiment can use historical data to train the neural network model, so that the model can learn the relationship between performance parameter information and risk. In practical applications, the collected performance parameter information is input into the trained neural network model, and the neural network model can output the corresponding risk assessment value.

[0067] The risk assessment threshold is a critical value set according to security policies and actual needs, and is used to determine whether the risk of the terminal device exceeds an acceptable range.

[0068] The risk assessment value of each terminal device is compared with the pre-set risk assessment threshold. If the risk assessment value is less than or equal to the risk assessment threshold, it means that the risk of the terminal device is within an acceptable range, and the data transmission channel of the terminal device can continue to be maintained to ensure the normal progress of the video conference.

[0069] If the risk assessment value is greater than the risk assessment threshold, it means that the risk of the terminal device is high and the data security and stability of the entire video conference are threatened.

[0070] When the risk assessment value of a terminal device is greater than the risk assessment threshold, the data transmission channel between the terminal device and the server can be cut off. This can effectively prevent high-risk terminal devices from affecting other devices and the entire system, and ensure the security and stability of video conferencing.

[0071] It can be concluded from the above that this embodiment can timely discover potential risks and take effective measures to ensure the safe and stable operation of video conferencing through real-time monitoring and risk assessment of terminal device performance parameter information.

[0072] In one embodiment of the present disclosure, it also includes: The risk assessment threshold is determined based on the comprehensive change rate of the terminal device's data security level information, performance parameter information and environmental information.

[0073] In this embodiment, the comprehensive change rate reflects the degree of change of the data security level information, performance parameter information and environmental information of the terminal device within a certain period of time. When the comprehensive change rate increases, it indicates that the state of the terminal device fluctuates violently and the potential risk increases. At this time, the risk assessment threshold needs to be lowered. This increases the sensitivity to risks and ensures that measures are taken quickly to ensure safety when the device state is unstable.

[0074] For each information dimension, calculate its change rate within a certain time interval. Take the CPU usage in the performance parameter information as an example. Assume that The CPU usage at this moment is ,exist Time is , then the change rate of CPU usage for:

[0075] Similarly, the change rate of data security level information and environmental information is calculated.

[0076] Based on the importance of data security level information, performance parameter information and environmental information to the risk of terminal equipment, different weights are assigned to the change rates of data security level information, performance parameter information and environmental information, and the comprehensive change rate is calculated by weighted summation.

[0077] The comprehensive change rate R is: ,in, , , are the weights of data security level information, performance parameter information and environmental information change rate, respectively. , , They are the change rates corresponding to the data security level information, performance parameter information and environmental information change rates respectively.

[0078] In this embodiment, the risk assessment threshold of the terminal device may be determined based on a mapping relationship between the comprehensive change rate and the risk assessment threshold.

[0079] Based on historical data and experience, a mapping relationship between the comprehensive change rate and the risk assessment threshold is established. Machine learning algorithms can be used for modeling. By analyzing a large amount of historical data, the correlation between the comprehensive change rate and the actual risk events can be found, and then the appropriate risk assessment threshold corresponding to different comprehensive change rates can be determined.

[0080] For example, when the comprehensive change rate is in a certain range, based on historical data, it is found that the probability of high risk of equipment in this range is relatively high. The risk assessment threshold can be set lower to enhance the system's sensitivity to risk.

[0081] The risk assessment threshold can be dynamically adjusted as the comprehensive change rate is updated in real time. The real-time risk assessment value of the terminal device is compared with the dynamically adjusted risk assessment threshold. If the risk assessment value is greater than the current risk assessment threshold, the corresponding terminal device is judged to be in a high-risk state; if the risk assessment value is less than or equal to the threshold, the normal operation of the device is maintained.

[0082] It can be concluded from the above that this embodiment can flexibly adjust the risk assessment threshold according to the dynamic changes of the multi-dimensional information of the terminal device, so as to more accurately assess and respond to the risks of the terminal device and ensure the safe and stable conduct of the video conference.

[0083] In one embodiment of the present disclosure, determining a risk assessment threshold based on a comprehensive change rate of data security level information, performance parameter information, and environmental information of a terminal device includes: determining a risk assessment threshold based on a second formula; The second formula is:

[0084] in, represents the risk assessment threshold, represents the basic threshold, represents the adjustment coefficient, represents the comprehensive rate of change, represents the historical risk factor, Represents the meeting importance coefficient.

[0085] In this embodiment, if any terminal device is in the time interval Inside: Data security level information is in Time is ,exist Time is , the weight of data security level information is .

[0086] Performance parameter information is represented by vector Indicates that is the i-th performance parameter information (such as CPU usage, memory usage, etc.). The performance parameter information vector at the moment is ,exist Time is , the weight vector of each performance parameter information is ,and .

[0087] Environmental information vector Indicates that For the Environmental information indicators (such as network bandwidth, network delay, etc.). The momentary environmental information vector is ,exist Time is , the weight vector of each environmental information indicator is ,and .

[0088] Data security level information change rate:

[0089] Comprehensive change rate of performance parameter information:

[0090] Comprehensive change rate of environmental information:

[0091] The comprehensive change rate R is: ,in and are the overall weights of performance parameter information and environmental information respectively.

[0092] In this embodiment, the historical risk factor H (value range ), the historical risk coefficient reflects the frequency and severity of risk events that have occurred in the history of the corresponding terminal equipment. The higher the historical risk, the greater the H value. At the same time, the conference importance coefficient I is introduced (the value range is ), which can be set by the conference organizer according to the importance of the conference content. The higher the importance, the larger the I value.

[0093] Risk Assessment Thresholds

[0094] Basic threshold It is a pre-set fixed value, representing the initial risk assessment threshold when all aspects of information remain unchanged. It is used to adjust the influence of the comprehensive change rate on the threshold and can be adjusted according to the actual situation.

[0095] It can be concluded from the above that the second formula of this embodiment not only calculates the change rate of data security level information, performance parameter information and environmental information respectively, but also obtains the comprehensive change rate through weighted summation, which comprehensively considers the impact of dynamic changes of various factors on risk assessment. The introduction of historical risk coefficient enables the threshold calculation to take into account the historical performance of terminal devices. For devices that have frequently experienced risk events in history, the risk assessment threshold will be set more strictly, which enhances the accuracy and pertinence of risk assessment. The conference importance coefficient reflects the different tolerances for risks of different meetings. For important meetings, the risk assessment threshold is lowered, the sensitivity of the system is increased, and the security of meeting data is ensured. The comprehensive change rate can be updated in real time, so that the risk assessment threshold can be dynamically adjusted to adapt to changes in the terminal device status and meeting conditions, and to ensure the security of video conferencing in different scenarios.

[0096] Corresponding to the video conference data security encryption method in the above embodiment, Figure 2 This is a structural block diagram of a video conference data security encryption system provided by an embodiment of the present disclosure. For ease of explanation, only the parts related to the embodiment of the present disclosure are shown. Figure 2 The video conference data security encryption system 20 includes: a key pair generation module 21, an information aggregation module 22, and an encryption transmission module 23.

[0097] Among them, the key pair generation module 21 is used to generate a key pair corresponding to each terminal device based on the data security level information transmitted by multiple terminal devices, the key pair includes a public key and a private key, and the data security level information is the security level information corresponding to the video conference data recorded by each participating terminal device in the video conference; The information aggregation module 22 is used to perform aggregation calculation on the target data based on the evaluation key to obtain comprehensive data information. The public key is used to encrypt the key data to obtain the target data, and the private key is used to decrypt the comprehensive data. The key data is the data after any terminal device extracts features from the video conference data. The encryption transmission module 23 is used to send the comprehensive data information to each terminal device respectively.

[0098] In one embodiment of the present disclosure, the key pair generation module 21 is specifically used to: The data security level information, performance parameter information and corresponding environment information transmitted by each terminal device are integrated to obtain the comprehensive data security level information corresponding to each terminal device; Determine a key pair generation algorithm corresponding to each terminal device based on the comprehensive data security level information; A key pair corresponding to each terminal device is generated based on a key pair generation algorithm.

[0099] In one embodiment of the present disclosure, the key pair generation module 21 is further configured to: Assign a weight coefficient to the comprehensive data security level information corresponding to each terminal device; The comprehensive data security level information corresponding to each weight coefficient is weighted and summed to obtain the comprehensive data information.

[0100] In one embodiment of the present disclosure, the key pair generation module 21 is further configured to: Based on the first formula, weighted summation is performed on the comprehensive data security level information corresponding to each weight coefficient to obtain comprehensive data information; The first formula is:

[0101] in, Indicates comprehensive data information, represents the weight coefficient of the comprehensive data security level information allocation of the i-th terminal device, represents the uniqueness index of the i-th terminal device data, represents the target data of the i-th terminal device, represents the target data of the jth terminal device, It represents the data association degree between the i-th terminal device and the j-th terminal device, and n represents the number of terminal devices.

[0102] In one embodiment of the present disclosure, the video conference data security encryption system 20 further includes: a risk assessment module, specifically used to: Based on the performance parameter information of multiple terminal devices, risk assessment is performed on each terminal device to obtain a risk assessment value corresponding to each terminal device; In response to the risk assessment value being greater than the risk assessment threshold, the transmission channel corresponding thereto is cut off.

[0103] In one embodiment of the present disclosure, the risk assessment module is further used to: The risk assessment threshold is determined based on the comprehensive change rate of the terminal device's data security level information, performance parameter information and environmental information.

[0104] In one embodiment of the present disclosure, the risk assessment module is further used to: determining a risk assessment threshold based on a second formula; The second formula is:

[0105] in, represents the risk assessment threshold, represents the basic threshold, represents the adjustment coefficient, represents the comprehensive rate of change, represents the historical risk factor, Represents the meeting importance coefficient.

[0106] See also Figure 3 , Figure 3 A schematic block diagram of an electronic device provided by an embodiment of the present disclosure. Figure 3 The electronic device 300 in the embodiment shown may include: one or more processors 301, one or more input devices 302, one or more output devices 303 and one or more memories 304. The processors 301, input devices 302, output devices 303 and memories 304 communicate with each other via a communication bus 305. The memory 304 is used to store computer programs, which include program instructions. The processor 301 is used to execute the program instructions stored in the memory 304. The processor 301 is configured to call the program instructions to execute the functions of each module / unit in the above-mentioned system embodiments, such as Figure 2 The functions of modules 21 to 23 are shown.

[0107] It should be understood that in the embodiment of the present disclosure, the processor 301 may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0108] The input device 302 may include a touch panel, a fingerprint collection sensor (for collecting the user's fingerprint information and fingerprint direction information), a microphone, etc., and the output device 303 may include a display (LCD, etc.), a speaker, etc.

[0109] The memory 304 may include a read-only memory and a random access memory, and provide instructions and data to the processor 301. A portion of the memory 304 may also include a non-volatile random access memory. For example, the memory 304 may also store information about the device type.

[0110] In a specific implementation, the processor 301, input device 302, and output device 303 described in the embodiments of the present disclosure can execute the implementation methods described in the first and second embodiments of the video conference data security encryption method provided in the embodiments of the present disclosure, and can also execute the implementation methods of the electronic device described in the embodiments of the present disclosure, which will not be repeated here.

[0111] In another embodiment of the present disclosure, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by the processor, all or part of the processes in the above-mentioned embodiment method are implemented, and the computer program can also be completed by instructing the relevant hardware through the computer program. The computer program can be stored in a computer-readable storage medium, and when the computer program is executed by the processor, the steps of each of the above-mentioned method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. The computer-readable medium can include: any entity or system capable of carrying computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium, etc.

[0112] The computer-readable storage medium may be an internal storage unit of the electronic device of any of the aforementioned embodiments, such as a hard disk or memory of the electronic device. The computer-readable storage medium may also be an external storage device of the electronic device, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (SecureDigital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device. Furthermore, the computer-readable storage medium may also include both an internal storage unit of the electronic device and an external storage device. The computer-readable storage medium is used to store computer programs and other programs and data required by the electronic device. The computer-readable storage medium may also be used to temporarily store data that has been output or is to be output.

[0113] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this disclosure.

[0114] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the electronic devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0115] In the several embodiments provided in the present application, it should be understood that the disclosed electronic device and method can be implemented in other ways. For example, the system embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces or units, or it can be an electrical, mechanical or other form of connection.

[0116] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present disclosure.

[0117] In addition, each functional unit in each embodiment of the present disclosure may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0118] The above are only specific embodiments of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present disclosure, and these modifications or replacements should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims

1. A video conference data security encryption method, characterized in that: include: Based on the data security level information transmitted by multiple terminal devices, a key pair corresponding to each terminal device is generated, wherein the key pair includes a public key and a private key, and the data security level information is the security level information corresponding to the video conference data recorded by each participating terminal device in the video conference; Performing aggregate calculation on the target data based on the evaluation key to obtain comprehensive data information, wherein the public key is used to encrypt key data to obtain the target data, and the private key is used to decrypt the comprehensive data, wherein the key data is data obtained after any terminal device performs feature extraction on the video conference data, and the evaluation key is a key for performing aggregate calculation on the target data; The comprehensive data information is sent to each terminal device respectively.

2. The video conference data security encryption method according to claim 1, characterized in that: The step of generating a key pair corresponding to each terminal device based on the data security level information transmitted by the multiple terminal devices includes: The data security level information, performance parameter information and corresponding environment information transmitted by each terminal device are integrated to obtain the comprehensive data security level information corresponding to each terminal device; Determine a key pair generation algorithm corresponding to each terminal device based on the comprehensive data security level information; A key pair corresponding to each terminal device is generated based on the key pair generation algorithm.

3. The video conference data security encryption method according to claim 2, characterized in that: The target data is aggregated and calculated based on the evaluation key to obtain comprehensive data information, including: Assign a weight coefficient to the comprehensive data security level information corresponding to each terminal device; The comprehensive data security level information corresponding to each weight coefficient is weighted and summed to obtain the comprehensive data information.

4. The video conference data security encryption method according to claim 3, characterized in that: The weighted summation of the comprehensive data security level information corresponding to each weight coefficient is performed to obtain comprehensive data information, including: Based on the first formula, weighted summation is performed on the comprehensive data security level information corresponding to each weight coefficient to obtain comprehensive data information; The first formula is: in, Indicates comprehensive data information, represents the weight coefficient of the comprehensive data security level information allocation of the i-th terminal device, represents the uniqueness index of the i-th terminal device data, represents the target data of the i-th terminal device, represents the target data of the jth terminal device, It represents the data association degree between the i-th terminal device and the j-th terminal device, and n represents the number of terminal devices.

5. The video conference data security encryption method according to claim 1, characterized in that: Also includes: Based on the performance parameter information of multiple terminal devices, risk assessment is performed on each terminal device to obtain a risk assessment value corresponding to each terminal device; In response to the risk assessment value being greater than a risk assessment threshold, cutting off a transmission channel corresponding thereto.

6. The video conference data security encryption method according to claim 5, characterized in that: Also includes: The risk assessment threshold is determined based on the comprehensive change rate of the data security level information, performance parameter information and environmental information of the terminal device.

7. The video conference data security encryption method according to claim 6, characterized in that: The determining of the risk assessment threshold based on the comprehensive change rate of the data security level information, performance parameter information and environment information of the terminal device includes: Determining the risk assessment threshold based on a second formula; The second formula is: in, represents the risk assessment threshold, represents the basic threshold, represents the adjustment coefficient, represents the comprehensive rate of change, represents the historical risk factor, Represents the meeting importance coefficient.

8. A video conference data security encryption system, characterized in that: include: A key pair generation module, used to generate a key pair corresponding to each terminal device based on data security level information transmitted by multiple terminal devices, wherein the key pair includes a public key and a private key, and the data security level information is the security level information corresponding to the video conference data recorded by each participating terminal device in the video conference; An information aggregation module, used to perform aggregation calculation on the target data based on the evaluation key to obtain comprehensive data information, wherein the public key is used to encrypt key data to obtain the target data, and the private key is used to decrypt the comprehensive data, wherein the key data is data obtained after any terminal device performs feature extraction on the video conference data, and the evaluation key is a key for performing aggregation calculation on the target data; The encryption transmission module is used to send the comprehensive data information to each terminal device respectively.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images