Video and audio digital copyright encryption method, decryption method, system and device

Abstract

The embodiment of the invention provides a video and audio digital copyright encryption method, decryption method, system and device, and the encryption method comprises the steps: dividing a to-be-encrypted video and audio media content stream into a first video and audio media content to an Nth video and audio media content according to the sequence of playing time; a first decryption key and a second decryption key are generated and sent to the playing end and the key gateway respectively; and encrypting the first video and audio media content and the second video and audio media content by using the first encryption key and the second encryption key, and selecting the first encryption key or the second encryption key to encrypt the third video and audio media content to the Nth video and audio media content according to the playing type of the video and audio media content stream to be encrypted, according to the technical scheme, the decrypted video and audio media content is directly decrypted and played at the playing end, the first decryption key does not need to be obtained from the key gateway, the playing starting speed of the playing end is increased, and after the second decryption key is successfully obtained, the decrypted media content is decrypted and played through the second decryption key.

Description

Technical Field

[0001] The present application relates to the field of audio-visual digital copyright technology, and in particular, to an audio-visual digital copyright encryption method, decryption method, system and device. Background Art

[0002] With the booming development of multimedia services, audio-visual content is becoming more and more closely related to people's work and life. In order to prevent audio-visual content from being illegally broadcast, the industry generally adopts DRM (Digital Rights Management) technology to encrypt and protect audio-visual content. The playback end first obtains the decryption key from the key gateway, and then uses the key to successfully decrypt the encrypted audio-visual content before the audio-visual content can be played normally. The key usually changes dynamically over time, and the playback end needs to continuously obtain new keys from the key gateway during the playback process. For example, the key scheme in the audio-visual DRM standard ChinaDRM is such a key scheme.

[0003] The dynamic key strategy significantly enhances the anti-cracking capability of the DRM system, but it also faces two difficult-to-overcome problems: first, the key gateway is affected by a large number of concurrent requests, which affects the speed at which the playback end obtains the key, and is one of the reasons that slow down the playback start-up speed; second, the key gateway may be blocked or malfunction due to a large number of concurrent key requests from the playback end, causing the playback end to fail to obtain the key from the key gateway in a timely manner or even fail, which in turn makes the playback end unable to successfully decrypt the audio and video content and fails to play.

[0004] There is no effective solution to the above two problems yet. Summary of the invention

[0005] The embodiments of the present application provide a method, a method, a system and a device for encrypting and decrypting digital copyrights of audio and video.

[0006] A first aspect of an embodiment of the present application provides a method for encrypting digital copyright of video and audio, comprising:

[0007] Dividing the video and audio media content stream to be encrypted into first video and audio media content to Nth video and audio media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first video and audio media content to the Nth video and audio media content respectively include at least one continuous and adjacent video and audio frame;

[0008] Generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key;

[0009] Encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, select the first encryption key or the second encryption key to encrypt the third audio-visual media content to the Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted, and in the first audio-visual media content to the Nth audio-visual media content, use the audio-visual media content before and after encryption with the first encryption key as the first media content to be encrypted and the first encrypted media content, respectively, and use the audio-visual media content before and after encryption with the second encryption key as the second media content to be encrypted and the second encrypted media content, respectively;

[0010] At least one of the first encrypted media content and the second encrypted media content is sent to the content distribution end, so that the playback end obtains at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypts and plays it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0011] In an optional embodiment of the present application, the first encryption key and its corresponding first decryption key are provided by a media content encryptor, and the first encryption key and its corresponding first decryption key include at least one of a random value that changes dynamically and has an irregular length, a preset value, and a null value.

[0012] In an optional embodiment of the present application, the method further includes:

[0013] The first decryption key or its mapping relationship is pre-stored in a designated place through a media content encryption machine, wherein the designated place includes an encrypted media content file, an index file of the encrypted media content, and encrypted media content file information, the encrypted media content file information includes address information of the encrypted media content file, when the first decryption key is a preset value or an empty value, the mapping relationship of the first decryption key is stored, and when the first decryption key is a random value, the first decryption key is stored.

[0014] In an optional embodiment of the present application, before the first decryption key or its mapping relationship is pre-stored in a designated place through a media content encryptor, the method further includes: encrypting the first decryption key or its mapping relationship using a preset encryption key and algorithm, wherein the preset encryption key and algorithm correspond to a preset decryption key and algorithm, and the preset decryption key and algorithm are pre-stored at the playback end; storing the encrypted first decryption key or its mapping relationship in the designated place.

[0015] In an optional embodiment of the present application, selecting a first encryption key or a second encryption key to encrypt the third video and audio media content to the Nth video and audio media content according to the playback type of the video and audio media content stream to be encrypted includes:

[0016] In the case where the playback type of the audio-visual media content stream to be encrypted is live broadcast, the third audio-visual media content to the Nth audio-visual media content are encrypted in an alternating cycle mode, wherein the alternating cycle mode is that the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media contents from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key, respectively; when N is an odd number, the Nth audio-visual media content is encrypted with the first encryption key, and when N is an even number, the Nth audio-visual media content is encrypted with the second encryption key;

[0017] When the playback type of the audio-visual media content stream to be encrypted is on-demand, the third to the Nth audio-visual media content are encrypted in an alternating loop mode or a single mode, wherein in the single mode, the third to the Nth audio-visual media content are encrypted using the second encryption key.

[0018] In an optional embodiment of the present application, for a segmented audio-visual media file, the first encrypted media content is located at the beginning of the segmented file.

[0019] In an optional embodiment of the present application, the first encryption key includes a first encryption segment key and a second encryption segment key, and encrypting the first to-be-encrypted media content using the first encryption key includes:

[0020] Dividing the first media content to be encrypted into a first segment of audio-visual media content and a second segment of audio-visual media content according to the order of playback time;

[0021] A first segmented audio-visual media content and a second segmented audio-visual media content are encrypted using a first encryption segment key and a second encryption segment key, respectively, wherein the time consumed to decrypt a single frame in the first segmented audio-visual media content is shorter than the time consumed to decrypt a single frame in the second segmented audio-visual media content.

[0022] In an optional embodiment of the present application, the time length of the first encrypted media content is determined by the following steps:

[0023] Monitoring the operating status of the current system, wherein the current system includes at least one of a key management server, a key gateway, and an authentication system;

[0024] Determine a status score of the current system according to the operating status of the current system;

[0025] Determine whether the status score is less than a first score threshold;

[0026] When the state score is less than the first score threshold, the media content encryptor encrypts all the video and audio media content using the first encryption key;

[0027] When the state score is greater than or equal to a first score threshold, determining whether the state score is less than a second score threshold, wherein the first score threshold is less than the second score threshold;

[0028] When the state score is less than the second score threshold, the time length of the first encrypted media content is set to a time value corresponding to the state score, wherein the larger the state score is, the smaller the time value is, and the smaller the state score is, the larger the time value is;

[0029] When the state score is greater than or equal to the second score threshold, the time length of the first encrypted media content is set to a preset time value.

[0030] In an optional embodiment of the present application, the method further includes:

[0031] The update frequency of the second encryption key is determined according to the state score of the current system, wherein the higher the state score is, the greater the update frequency of the second encryption key is, and the lower the state score is, the smaller the update frequency of the second encryption key is.

[0032] In an optional embodiment of the present application, the preset time value is greater than a preset ratio of the time value at which the overall playback end obtains the second decryption key.

[0033] A second aspect of the embodiment of the present application provides a method for decrypting digital copyright of video and audio, comprising:

[0034] Acquire the first encrypted media content corresponding to the start position and the first decryption key corresponding thereto, and decrypt the first encrypted media content using the first decryption key;

[0035] Play the decrypted audio-visual media content, and for the first encrypted media content and the second encrypted media content after the start position, obtain each encrypted audio-visual media content and its corresponding first decryption key or second decryption key. After completing the start, play each decrypted audio-visual media content in the order of the playback time.

[0036] In an optional embodiment of the present application, the second decryption key is obtained from the key gateway by the playback terminal, and the method further includes:

[0037] Before the player obtains the second decryption key from the key gateway, the player authenticates the player through a preset digital copyright management system;

[0038] When the playback terminal is authenticated, verifying the second decryption key acquisition request initiated by the playback terminal through the preset digital copyright management system;

[0039] When the second decryption key acquisition request is verified to be successful, the preset digital copyright management system controls the key gateway to send the second decryption key to the playback terminal.

[0040] In an optional embodiment of the present application, the method further includes:

[0041] When a freeze occurs when playing the second encrypted media content adjacent to the first encrypted media content that appears first, the playback end records freeze duration information and reports the freeze duration information to the system monitoring module.

[0042] In an optional embodiment of the present application, the method further includes:

[0043] When the playback end starts playing, the playback of the first decrypted first encrypted media content is delayed according to the recorded historical jamming duration information.

[0044] In an optional embodiment of the present application, the method further includes:

[0045] The timing for the playback end to report the freeze duration information to the system monitoring module is: report immediately in an emergency; if it is a general situation, wait until the next second decryption key request and report it together with the request information. Emergency situations include freeze duration exceeding the preset duration or failure to obtain the second decryption key; general situations mean that the second decryption key is successfully obtained by the playback end within the preset duration.

[0046] A third aspect of the embodiments of the present application provides an audio-visual digital copyright encryption device, comprising:

[0047] A division module, used to divide the video and audio media content stream to be encrypted into first video and audio media content to Nth video and audio media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first video and audio media content to the Nth video and audio media content respectively include at least one continuous and adjacent video and audio frame;

[0048] A generation module, used to generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key;

[0049] an encryption module, configured to encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, select the first encryption key or the second encryption key to encrypt the third audio-visual media content to the Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted, and in the first audio-visual media content to the Nth audio-visual media content, use the audio-visual media content before and after encryption with the first encryption key as the first media content to be encrypted and the first encrypted media content, respectively, and use the audio-visual media content before and after encryption with the second encryption key as the second media content to be encrypted and the second encrypted media content, respectively;

[0050] The sending module is used to send at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0051] A fourth aspect of the embodiments of the present application provides a video and audio digital copyright decryption device, including:

[0052] A decryption module, used to obtain the first encrypted media content corresponding to the start position and the first decryption key corresponding thereto, and decrypt the first encrypted media content using the first decryption key;

[0053] The playback module is used to play the decrypted audio-visual media content. For the first encrypted media content and the second encrypted media content after the start position, each encrypted audio-visual media content and its corresponding first decryption key or second decryption key are obtained. After the start is completed, each decrypted audio-visual media content is played in the order of the playback time.

[0054] A fifth aspect of the embodiments of the present application provides a video and audio digital copyright encryption and decryption system, including a media content encryptor, a playback terminal, a key management server, a key gateway, and a content distribution terminal, wherein:

[0055] A media content encryption machine is used to divide the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content in the order of playback time, wherein N is a positive integer not less than 2; generate a first encryption key and a first decryption key, and send the first decryption key to the playback end, wherein the decryption key corresponding to the first encryption key is the first decryption key; encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, and select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content, in the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively, and the audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively; and send at least one of the first encrypted media content and the second encrypted media content to the content distribution end;

[0056] The key management server is used to generate a second encryption key and a second decryption key, and send the second encryption key and the second decryption key to the media content encryptor and the key gateway respectively, wherein the decryption key corresponding to the second encryption key is the second decryption key;

[0057] The playback end is used to obtain the first encrypted media content and its corresponding first decryption key corresponding to the start position from the content distribution end, and use the first decryption key to decrypt the first encrypted media content; play the decrypted audio and video media content at the start position, and after the playback is completed, play the decrypted audio and video media content after the start position in the order of playback time.

[0058] According to a sixth aspect of an embodiment of the present application, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any of the above methods when executing the computer program.

[0059] According to a seventh aspect of the embodiments of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above methods are implemented.

[0060] The above technical solution provided by the embodiment of the present application has at least some or all of the following advantages compared with the prior art:

[0061] The audio-visual digital copyright encryption method described in the embodiment of the present application divides the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first audio-visual media content to the Nth audio-visual media content respectively include at least one continuous and adjacent audio-visual frame; generates a first encryption key, a first decryption key, a second encryption key and a second decryption key, and sends the first decryption key and the second decryption key to the playback end and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key; encrypts the first audio-visual media content using the first encryption key, encrypts the second audio-visual media content using the second encryption key, selects the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content, and in the first audio-visual media The method comprises the steps of: loading the Nth audio-visual media content, using the audio-visual media content before and after being encrypted with the first encryption key as the first media content to be encrypted and the first encrypted media content, and using the audio-visual media content before and after being encrypted with the second encryption key as the second media content to be encrypted and the second encrypted media content, respectively; sending at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play the first decryption key and the second decryption key obtained from the playback end and the key gateway; when the playback end obtains the first encrypted media content at the start-up position, the first decryption key is directly used at the playback end to decrypt and play the decrypted audio-visual media content, without waiting for the second decryption key to be obtained from the key gateway, thereby improving the playback speed of the playback end; after the second decryption key is successfully obtained, the second decryption key is used to decrypt and play the audio-visual media content after the start-up position. At the same time, by setting up the DRM monitoring module and using it to monitor the operating status of the DRM system, the time length of the first encrypted media content is automatically adjusted, so that the DRM system has the ability to adaptively adjust and recover according to its actual operating status, including automatic emergency handling when the DRM system fails. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0063] Figure 1 A flowchart of a method for encrypting audio and video digital copyrights provided by an embodiment of the present application;

[0064] Figure 2A schematic diagram of encrypted first audiovisual media content and second audiovisual media content provided by one embodiment of the present application;

[0065] Figure 3 A schematic diagram of an alternating cycle mode provided for one embodiment of the present application;

[0066] Figure 4 A schematic diagram of a single-shot mode provided for an embodiment of the present application;

[0067] Figure 5 A schematic diagram of the location of a first audiovisual media content segment in a ts file provided for one embodiment of the present application;

[0068] Figure 6 A schematic diagram of a first segmented audio-visual media content and a second segmented audio-visual media content provided by an embodiment of the present application;

[0069] Figure 7 A schematic diagram of confirming the time length of a first audiovisual media content provided by an embodiment of the present application;

[0070] Figure 8 A schematic diagram of transmitting the time length of the first encrypted media content provided by one embodiment of the present application;

[0071] Fig. 9 A schematic diagram of a method for decrypting audio and video digital copyrights provided by an embodiment of the present application;

[0072] Fig.10 A schematic diagram of an audio and video digital copyright encryption and decryption system provided by an embodiment of the present application;

[0073] Fig.11 A schematic diagram of the computer device structure provided for one embodiment of the present application. DETAILED DESCRIPTION

[0074] In order to make the technical solutions and advantages in the embodiments of the present application more clearly understood, the exemplary embodiments of the present application are further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than an exhaustive list of all the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict.

[0075] See also Figure 1 The audio and video digital copyright encryption method provided in the embodiment of the present application includes the following steps 100 to 400:

[0076] S100, dividing the video and audio media content stream to be encrypted into first video and audio media content to Nth video and audio media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first video and audio media content to the Nth video and audio media content respectively include at least one continuous and adjacent video and audio frame;

[0077] S200, generating a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and sending the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key;

[0078] S300, encrypting the first audio-visual media content by using the first encryption key, encrypting the second audio-visual media content by using the second encryption key, selecting the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content, and using the audio-visual media content before and after encryption with the first encryption key as the first media content to be encrypted and the first encrypted media content, respectively, and using the audio-visual media content before and after encryption with the second encryption key as the second media content to be encrypted and the second encrypted media content;

[0079] S400, sending at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end obtains at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypts and plays it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0080] In an optional embodiment of the present application, the second encryption key is generated by the key management server, and the second media content to be encrypted can be encrypted by the media content encryptor. The playback end obtains the second decryption key from the key gateway and uses it to decrypt the second encrypted media content before playback. The second encryption key and its corresponding second decryption key can also be dynamically changed, that is, the same live channel or the same on-demand video can have multiple second encryption keys and their corresponding second decryption keys, and one second encryption key and its corresponding second decryption key correspond to at least one second encrypted media content.

[0081] In an optional embodiment of the present application, each of the first audiovisual media content to the Nth audiovisual media content is composed of at least one continuous and adjacent audiovisual frame. Figure 2In the present invention, the first encrypted media content consists of n consecutive and adjacent audio-visual media content frames, namely frame 1, frame 2, frame 3 to frame n, which are encrypted with a first encryption key; the second encrypted media content consists of m consecutive and adjacent audio-visual media content frames, namely frame n+1, frame n+2, frame n+3 to frame n+m, which are encrypted with a second encryption key.

[0082] In an optional embodiment of the present application, a first encryption key and a corresponding first decryption key are provided by a media content encryptor, the first encryption key and the corresponding first decryption key are difficult to predict, and the first encryption key and the corresponding first decryption key include at least one of a random value that changes dynamically and has no fixed length, a preset value, and a null value.

[0083] The random value includes letters, numbers and special characters and any combination thereof.

[0084] When the first encryption key is a null value, it indicates that the first media content to be encrypted is not encrypted using any key.

[0085] The preset value includes a value pre-agreed between the media content encryptor and the playback end. When the media content encryptor uses the preset value as the first encryption key to encrypt the media content, the corresponding decryption key is pre-stored at the playback end.

[0086] In an optional embodiment of the present application, the first decryption key or its mapping relationship is pre-stored in a designated place by a media content encryption machine, wherein the designated place includes an encrypted media content file, an index file of the encrypted media content, and encrypted media content file information, the encrypted media content file information includes address information of the encrypted media content file, when the first decryption key is a preset value or an empty value, the mapping relationship of the first decryption key is stored, and when the first decryption key is a random value, the first decryption key is stored.

[0087] It should be noted that if the playback end obtains the value of the mapping relationship, when the value represents a preset value, the playback end can decrypt the first encrypted media content according to the decryption key mapped by the value and pre-stored in the playback end; when the value represents a null value, it means that the first media content to be encrypted has not been encrypted by any key and can be played directly.

[0088] In an optional embodiment of the present application, before the first decryption key or its mapping relationship is pre-stored in a designated place by a media content encryptor, the method further includes: encrypting the first decryption key or its mapping relationship using a preset encryption key and algorithm, wherein the preset encryption key and algorithm correspond to a preset decryption key and algorithm, and the preset decryption key and algorithm are pre-stored at the playback end; storing the encrypted first decryption key or its mapping relationship in the designated place. Only the playback end with a preset decryption key knows the decryption key corresponding to it, which can improve the anti-cracking capability of the audio-visual media content encrypted by the first encryption key.

[0089] In an optional embodiment of the present application, the encryption key and its paired decryption key may be the same or different, and they are usually the same in a DRM system.

[0090] In an optional embodiment of the present application, selecting a first encryption key or a second encryption key to encrypt the third video and audio media content to the Nth video and audio media content according to the playback type of the video and audio media content stream to be encrypted includes:

[0091] In the case where the playback type of the audio-visual media content stream to be encrypted is live broadcast, the third audio-visual media content to the Nth audio-visual media content are encrypted in an alternating cycle mode, wherein the alternating cycle mode is that the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media contents from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key, respectively; when N is an odd number, the Nth audio-visual media content is encrypted with the first encryption key, and when N is an even number, the Nth audio-visual media content is encrypted with the second encryption key;

[0092] When the playback type of the audio-visual media content stream to be encrypted is on-demand, the third to the Nth audio-visual media content are encrypted in an alternating loop mode or a single mode, wherein in the single mode, the third to the Nth audio-visual media content are encrypted using the second encryption key.

[0093] In an optional embodiment of the present application, the alternating cycle mode is as follows Figure 3As shown, in the encrypted audio-visual media content stream, there are first encrypted media content, second encrypted media content, first encrypted media content, second encrypted media content, first encrypted media content, second encrypted media content, first encrypted media content, ..., in sequence, until the end of the audio-visual media content stream. Among them, the on-demand audio-visual media content stream has an end, and the live audio-visual media content stream may continue or end soon. In the alternating cycle mode, the media content encrypted by the first encryption key appears at least twice in the audio-visual media content stream. The single mode is as follows: Figure 4 As shown, in the encrypted audio-visual media content stream, the media content encrypted by the first encryption key appears once and only once, the media content encrypted by the second encryption key appears at most once, and the audio-visual media content encrypted by the first encryption key is at the beginning of the audio-visual media content stream.

[0094] In an optional embodiment of the present application, for a segmented audio-visual media file, the first encrypted media content is at the beginning of the segmented file. The HLS standard and China's independent audio-visual standard AVS (Audio Video Coding Standard) both use segmented audio-visual media files, i.e., ts files. After the playback end obtains the ts file, it usually starts playing from the beginning of the ts file, so that the first encrypted media content is at the beginning of the segmented file, ensuring that the playback end starts playing from the first encrypted media content of the ts file, such as Figure 5 shown.

[0095] In an optional embodiment of the present application, the first encryption key includes a first encryption segment key and a second encryption segment key, and encrypting the first to-be-encrypted media content using the first encryption key includes:

[0096] Dividing the first media content to be encrypted into a first segment of audio-visual media content and a second segment of audio-visual media content according to the order of playback time;

[0097] A first segmented audio-visual media content and a second segmented audio-visual media content are encrypted using a first encryption segment key and a second encryption segment key, respectively, wherein the time consumed to decrypt a single frame in the first segmented audio-visual media content is shorter than the time consumed to decrypt a single frame in the second segmented audio-visual media content.

[0098] In an optional embodiment of the present application, Figure 6As shown, the first segmented audio-visual media content is located at the beginning of the first encrypted media content, and the time consumed for decrypting a single frame in the first segmented audio-visual media content is shorter than the time consumed for decrypting a single frame in the second segmented audio-visual media content. It takes a certain amount of time for the playback end to decrypt the encrypted media content. Generally, the longer the key and the more complex the algorithm, the longer the time spent on decryption. In order to further reduce the start-up time, the first encrypted segmented key corresponding to the first encrypted media content can be set to a shorter length and a simpler and faster decryption algorithm, so that the time consumed for decrypting a single frame in the first segmented audio-visual media content is shorter than the time consumed for decrypting a single frame in the second segmented audio-visual media content. Generally, the time consumed for encryption and decryption is positively correlated, so reducing the time consumed for decryption is also conducive to reducing the encryption time.

[0099] In an optional embodiment of the present application, Figure 7 As shown, the time length of the first encrypted media content is determined by the following steps:

[0100] Monitoring the operating status of the current system, wherein the current system includes at least one of a key management server, a key gateway, and an authentication system;

[0101] Determine a status score of the current system according to the operating status of the current system;

[0102] Determine whether the status score is less than a first score threshold;

[0103] When the state score is less than the first score threshold, the media content encryptor encrypts all the video and audio media content using the first encryption key;

[0104] When the state score is greater than or equal to a first score threshold, determining whether the state score is less than a second score threshold, wherein the first score threshold is less than the second score threshold;

[0105] When the state score is less than the second score threshold, the time length of the first encrypted media content is set to a time value corresponding to the state score, wherein the larger the state score is, the smaller the time value is, and the smaller the state score is, the larger the time value is;

[0106] When the state score is greater than or equal to the second score threshold, the time length of the first encrypted media content is set to a preset time value.

[0107] In an optional embodiment of the present application, the preset time value is greater than a preset ratio of the time value at which the overall playback end obtains the second decryption key.

[0108] In an optional embodiment of the present application, the overall playback end refers to all users who are watching the current audio-visual media content, which can be all users who are using the current system to watch the same live program or on-demand content, or all users who are watching all live programs or all on-demand content. The time value (set as t1) for the playback end to obtain the second decryption key includes the time interval (set as t2) from the start of authentication and authorization to the receipt of the second decryption key returned from the key gateway, then t1>=t2. Sort the t1 of all playback ends from large to small, and take the t1 value of the preset proportion of the overall playback end from the smallest, where the largest t1 value (set as t1max) is the time value for the preset proportion of the overall playback end to obtain the second decryption key. For example, if the preset ratio is 90%, the number of overall playback terminals is 10, and their t1 values ​​are 600 milliseconds, 570 milliseconds, 560 milliseconds, 540 milliseconds, 540 milliseconds, 510 milliseconds, 500 milliseconds, 480 milliseconds, 460 milliseconds and 410 milliseconds from large to small, then the time value for the overall playback terminal of the preset ratio to obtain the second decryption key is the ninth to last, that is, 570 milliseconds. If the preset time value is T1, then T1>t1max. The purpose of setting T1>t1max is to ensure that most playback terminals can achieve normal playback of audio-visual content by decrypting the video of the first encrypted media content before obtaining the second decryption key, reduce playback delay, and increase the playback speed of the playback terminal, while avoiding the phenomenon of freezing due to the fact that most playback terminals do not obtain the second decryption key in time and do not have time to decrypt the second encrypted media content. The playback type of the start-up includes at least one of the following: start playback, switch playback, and jump playback of the playback terminal. Switch playback refers to switching from one program to another and then starting playback, and jump playback refers to jumping to a specified time point and then playing.

[0109] When the current system is running well, the above preset time value is used as the time length of the first encrypted media content. In order to reduce the burden of the current system, the time for the overall playback end to obtain the second decryption key can be determined by previous big data, or set as a default value based on experience, without real-time monitoring and determination. Figure 8 As shown, the time length of the first encrypted media content can be sent directly to the media content encryptor by the key gateway or indirectly to the media content encryptor through the key management server.

[0110] Because the current system is blocked or fails, it is closely related to the key gateway, so the key gateway can directly obtain and calculate the time length of the first encrypted media content; moreover, before the playback end obtains the second decryption key, the DRM authentication, authorization and other modules must also perform a legitimacy check on the playback end and its request for the second decryption key. Only the authenticated and legal playback end and its legal request for the second decryption key can obtain the second decryption key from the key gateway. Therefore, the key gateway can easily obtain the running status of the DRM authentication, authorization and other modules, thereby conveniently obtaining the time length of the first encrypted media content related to the running status of the DRM authentication, authorization and other modules.

[0111] By monitoring the current system operation status, the time length of the first encrypted media content is automatically adjusted dynamically. During the start-up process, the playback end plays the first encrypted media content first, because the corresponding first decryption key is easy to obtain quickly, and the playback end can immediately use the first encrypted media content to decrypt and play, which reduces the start-up time. The second decryption key corresponding to the second encrypted media content needs to be obtained from the key gateway, and must also be verified by the legitimacy of modules such as DRM authentication and authorization. Therefore, the time and success of the playback end to obtain the second decryption key are easily affected by the current system operation status. When the playback end plays the second encrypted media content, if it still has not obtained the corresponding second decryption key, the playback will be stuck, so the time length of the first encrypted media content needs to be appropriately longer, so that the playback end has enough time to obtain the second decryption key corresponding to the second encrypted media content. Because the first decryption key is easy to obtain and is generally not as secure as the second decryption key, the time length of the first encrypted media content should not be too long. In addition, when the current system fails and seriously affects the playback end from obtaining the second decryption key in time, the media content encryptor only uses the first encryption key to encrypt the media content, ensuring the stable and continuous supply of audio and video playback services. In summary, the time length of the first encrypted media content is dynamically adjusted to a suitable value, which improves the user experience while ensuring the security and stability of audio and video services.

[0112] In an optional embodiment of the present application, the operating state includes fault conditions, load conditions, service delay conditions, etc. The load condition is related to the load capacity and concurrent access volume of the current system. The stronger the load capacity and the smaller the concurrent access volume, the better the load condition of the system. The service delay condition includes the time for DRM authentication and authorization of the playback end and the time required for the playback end to obtain the second decryption key from the key gateway. The state score is determined by the operating state of the current system. The better the operating state of the current system, the higher the state score. For example, if the key gateway fails, a large number of playback ends will have problems in obtaining the second decryption key from the key gateway, which will have a serious impact on the decryption of the media content encrypted with the second encryption key. At this time, the state score can be set to 0, which is less than the first score threshold. At this time, the media content encryptor uses the first encryption key to encrypt all audio and video media content, and the media content encrypted with the second encryption key will not appear in the audio and video stream, ensuring the normal operation of subsequent services. When the load condition or service delay condition is poor to a certain extent, the state score can also be set to be less than the first score threshold. When the load condition or service delay condition has an impact on the authentication or key acquisition of the playback end, but the degree is limited, for example, the key gateway has a certain degree of extension in providing the second decryption key due to a large number of accesses, but within an acceptable range, the state score can be set to be greater than or equal to the first score threshold and less than or equal to the second score threshold, indicating that the time length of the first encrypted media content can be adjusted according to the state score, that is, the duration of the audio-visual media content encrypted with the first encryption key can be adjusted. At this time, the time length of the first encrypted media content is usually greater than its preset time value. When the current system is in good operating condition, there is no failure, and the load condition and service delay condition of the DRM authentication system and the key gateway are excellent, the time length of the first encrypted media content is set to the preset time value. Under normal circumstances, the current system is in good operating condition, and it is a low probability event that the playback end obtains the second decryption key due to blockage or failure and the restoration of their status to normal. Only when this low probability event occurs, the state score is obtained and then adjusted and the time length of the first encrypted media content is transmitted to the media content encryptor. The media content encryptor uses the preset time value as the time length of the first encrypted media content most of the time. Therefore, this strategy can significantly reduce the burden on the current system.

[0113] In an optional embodiment of the present application, the method further includes:

[0114] The update frequency of the second encryption key is determined according to the state score of the current system, wherein the higher the state score, the greater the update frequency of the second encryption key, and the lower the state score, the smaller the update frequency of the second encryption key. The key update refers to the change of the key value.

[0115] In an optional embodiment of the present application, the update frequency of the second encryption key corresponding to the second encrypted media content is positively correlated with the state score, that is, the higher the state score, the faster the second encryption key changes, and the lower the state score, the slower the second encryption key changes. When the state score is relatively high, it means that the current system is in good operating condition, and the update frequency of the second encryption key can be appropriately increased to improve the security of the current system. When the state score is relatively low, it means that the current system is in poor operating condition, and the update frequency of the second encryption key can be appropriately reduced at this time, thereby reducing the request frequency of the playback end for the second decryption key, reducing the burden on the current system, and improving and restoring the operating condition of the current system.

[0116] It should be noted that, because the live video and audio media content is updated in real time, the change in the second encryption key update frequency mainly affects the live broadcast. On-demand video and audio media content is usually pre-stored at the content distribution end and has been encrypted, so the change in the second encryption key update frequency generally does not affect the encrypted media content.

[0117] It should be noted that even if the pirate successfully decrypts and plays the first encrypted media content, due to the existence of the second encrypted media content encrypted with the second encryption key, the pirate cannot achieve continuous normal playback of the media content, and such pirated broadcasting behavior is worthless and meaningless, so the pirate will give up the pirated broadcasting behavior. Therefore, the setting of the first encryption key and the second encryption key in this application reduces the start-up time of the playback end while also having the security of the DRM system.

[0118] like Fig. 9 As shown, the embodiment of the present application provides a method for decrypting digital copyright of video and audio, including:

[0119] Acquire the first encrypted media content corresponding to the start position and the first decryption key corresponding thereto, and decrypt the first encrypted media content using the first decryption key;

[0120] Play the decrypted audio-visual media content, and for the first encrypted media content and the second encrypted media content after the start position, obtain each encrypted audio-visual media content and its corresponding first decryption key or second decryption key. After completing the start, play each decrypted audio-visual media content in the order of the playback time.

[0121] In an optional embodiment of the present application, the second decryption key is obtained from the key gateway by the playback terminal, and the method further includes:

[0122] Before the player obtains the second decryption key from the key gateway, the player authenticates the player through a preset digital copyright management system;

[0123] When the playback terminal is authenticated, verifying the second decryption key acquisition request initiated by the playback terminal through the preset digital copyright management system;

[0124] When the second decryption key acquisition request is verified to be successful, the preset digital copyright management system controls the key gateway to send the second decryption key to the playback terminal.

[0125] In an optional embodiment of the present application, the method further includes:

[0126] When a freeze occurs when playing the second encrypted media content adjacent to the first encrypted media content that appears first, the playback end records freeze duration information and reports the freeze duration information to the system monitoring module.

[0127] In an optional embodiment of the present application, the playback end can obtain encrypted audio-visual media content from a content distribution network, and the second decryption key is usually obtained from a key gateway. The first encrypted media content that appears first is located at the starting position of the encrypted media content obtained, and has the time length of the complete first encrypted media content. Since the playback will start from the first encrypted media content that appears first, the first encrypted media content that appears first is located at the starting position of the encrypted media content obtained, which reduces the download amount and download time of the media content data. The acquisition of the first decryption key is simple and fast, so the playback end can quickly play the first encrypted media content after decryption, without waiting for the successful acquisition of the second decryption key, which reduces the start-up time. When the second encrypted media content adjacent to the first encrypted media content that appears first is played, but the second decryption key corresponding to it has not been obtained, the playback end cannot complete the decryption of the second encrypted media content segment, and the playback will be stuck.

[0128] In an optional embodiment of the present application, when the second encrypted media content adjacent to the first encrypted media content that appears first is played, and the playback is stuck because the second decryption key corresponding to it is not obtained in time, the playback end records the stuck duration information and reports the stuck duration information to the system monitoring module. Only when the playback end plays the second encrypted media content adjacent to the first encrypted media content that appears first, and the playback is stuck because the second decryption key corresponding to it is not obtained in time, the playback end will record the stuck duration information, and the stuck in other cases will not be recorded as the stuck duration information. When the stuck duration exceeds a certain time, it is considered that the second decryption key acquisition has failed. The playback end reports the above-mentioned stuck duration information to the system monitoring module, which is conducive to the system monitoring module to evaluate the operating status of the current system, and then determine the status score, and then adjust the time length of the first encrypted media content to make the audio and video service more stable and reliable.

[0129] In an optional embodiment of the present application, the method further includes:

[0130] When the playback end starts playing, the playback of the first decrypted first encrypted media content is delayed according to the recorded historical jamming duration information.

[0131] In an optional embodiment of the present application, when the playback end starts broadcasting, the playback of the first encrypted media content that appears first is appropriately delayed according to the historical jamming duration information recorded by the playback end. There are individual differences in the playback end. For example, due to network reasons, a certain playback end often takes longer to obtain the second decryption key than most other playback ends. The system's adjustment of the time length of the first encrypted media content cannot solve the above-mentioned jamming problem that occurs at the playback end. Then, when the playback end starts broadcasting, the playback of the first encrypted media content that appears first can be appropriately delayed according to the historical jamming duration information recorded by the playback end. For example, the above-mentioned jamming phenomenon has occurred in the last five broadcasts of a certain playback end, and the jamming durations are 32 milliseconds, 41 milliseconds, 28 milliseconds, 37 milliseconds and 35 milliseconds respectively. Then, the playback end can delay the playback of the first encrypted media content that appears first by 50 milliseconds when it starts broadcasting next time, so as to reduce the probability of the above-mentioned jamming phenomenon. When the playback end reports the jamming duration information to the system monitoring module, the system needs to authenticate and authenticate the playback end and the reporting request this time. Only the legitimate playback end and the reporting request will be recorded by the system monitoring module with the jamming duration information reported by it.

[0132] In an optional embodiment of the present application, the method further includes:

[0133] The timings for the playback terminal to report the freeze duration information to the system monitoring module include immediate reporting and reporting together with the next second decryption key request information. The timing for the playback terminal to report the freeze duration information to the system monitoring module is: reporting immediately in an emergency, and if it is a general situation, waiting until the next second decryption key request to report it together with the request information. Emergency situations include excessive freeze duration or failure to obtain the second decryption key; the general situation means that the second decryption key is successfully obtained by the playback terminal within an acceptable time. In this case, the freeze duration information is carried in the next second decryption key request, and there is no need to report it separately. At the same time, the system's authentication and certification of the playback terminal and the freeze duration information report request can be combined with the second decryption key request, which is conducive to reducing the burden on the system.

[0134] The present application uses a combination of a first encryption key and a second encryption key to encrypt and decrypt audio-visual media content. The first decryption key does not need to be obtained specifically from a key gateway, and the legitimacy of the request of the playback end and the first encryption key can be verified without going through system authentication, authorization and other modules, and has the characteristic of being easily and quickly obtained by the playback end. When starting broadcasting, the playback end can directly decrypt the media content encrypted by the first encryption key with the help of the first encryption key and then play it without waiting for the successful acquisition of the second decryption key, which reduces the start-up time and improves the user experience. The existence of the second decryption key also allows the present application to retain the security characteristics of a conventional DRM system. At the same time, through the setting of the system monitoring module, and by using it to monitor the operating status of the current system, the time length of the first encrypted media content is automatically and dynamically adjusted, so that the current system has the ability to adaptively adjust and recover according to its actual operating status, including automatic emergency handling for current system failures.

[0135] It should be understood that, although the various steps in the flow chart are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the figure may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0136] An embodiment of the present application provides a video and audio digital copyright encryption device, including:

[0137] A division module, used to divide the video and audio media content stream to be encrypted into first video and audio media content to Nth video and audio media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first video and audio media content to the Nth video and audio media content respectively include at least one continuous and adjacent video and audio frame;

[0138] A generation module, used to generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key;

[0139] an encryption module, configured to encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, select the first encryption key or the second encryption key to encrypt the third audio-visual media content to the Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted, and in the first audio-visual media content to the Nth audio-visual media content, use the audio-visual media content before and after encryption with the first encryption key as the first media content to be encrypted and the first encrypted media content, respectively, and use the audio-visual media content before and after encryption with the second encryption key as the second media content to be encrypted and the second encrypted media content, respectively;

[0140] The sending module is used to send at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0141] An embodiment of the present application provides a video and audio digital copyright decryption device, comprising:

[0142] A decryption module, used to obtain the first encrypted media content corresponding to the start position and the first decryption key corresponding thereto, and decrypt the first encrypted media content using the first decryption key;

[0143] The playback module is used to play the decrypted audio-visual media content. For the first encrypted media content and the second encrypted media content after the start position, each encrypted audio-visual media content and its corresponding first decryption key or second decryption key are obtained. After the start is completed, each decrypted audio-visual media content is played in the order of the playback time.

[0144] For the specific definition of the above-mentioned device, please refer to the definition of the audio-visual digital copyright encryption method or the audio-visual digital copyright decryption method in the above text, which will not be repeated here. Each module in the above-mentioned device can be implemented in whole or in part by software, hardware and a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0145] like Fig.10 As shown, an embodiment of the present application provides a video and audio digital copyright encryption and decryption system, including a media content encryptor, a playback terminal, a key management server, a key gateway and a content distribution terminal, wherein:

[0146] A media content encryption machine is used to divide the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content in the order of playback time, wherein N is a positive integer not less than 2; generate a first encryption key and a first decryption key, and send the first decryption key to the playback end, wherein the decryption key corresponding to the first encryption key is the first decryption key; encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, and select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content, in the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively, and the audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively; and send at least one of the first encrypted media content and the second encrypted media content to the content distribution end;

[0147] The key management server is used to generate a second encryption key and a second decryption key, and send the second encryption key and the second decryption key to the media content encryptor and the key gateway respectively, wherein the decryption key corresponding to the second encryption key is the second decryption key;

[0148] The playback end is used to obtain the first encrypted media content and its corresponding first decryption key corresponding to the start position from the content distribution end, and use the first decryption key to decrypt the first encrypted media content; play the decrypted audio and video media content at the start position, and after the playback is completed, play the decrypted audio and video media content after the start position in the order of playback time.

[0149] In an optional embodiment of the present application, the key management server generates a key, provides the encryption key to the media content encryptor, and provides the decryption key to the key gateway. The encryption key and its paired decryption key can be the same or different. The key gateway stores the second decryption key required for decrypting the media content, which is obtained by the playback end and then decrypted and played. The key of the key gateway can be provided by the key management server. The media content encryptor is responsible for encrypting the audio-visual media content and distributing the encrypted media content to the content distribution end. The content distribution end stores the audio-visual media content for the playback end to download and play, and the content distribution end includes a content delivery network (Content Delivery Network, CDN). The playback end can realize the functions of obtaining audio-visual media content, requesting to obtain keys, decrypting and playing encrypted media content, and is generally located on terminal devices such as mobile phones, tablet computers, smart TVs, and computers. Starting playback is referred to as starting playback. Starting playback includes playback scenarios such as the playback end starting to play videos, switching video program playback, and selecting a certain time point to play from the player progress bar. Live program playback also belongs to on-demand.

[0150] In one embodiment, a computer device is provided, the internal structure diagram of which can be as follows: Fig.11 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for encrypting audio and video digital copyrights or a method for decrypting audio and video digital copyrights as described above is implemented. It includes: a memory and a processor, the memory stores a computer program, and when the processor executes the computer program, any step in the method for encrypting audio and video digital copyrights or the method for decrypting audio and video digital copyrights as described above is implemented.

[0151] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, any step in the above-mentioned audio-visual digital copyright encryption method or audio-visual digital copyright decryption method can be implemented.

[0152] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0153] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0154] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0155] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0156] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0157] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A method for encrypting digital copyright of video and audio, characterized in that: include: Dividing the video and audio media content stream to be encrypted into first video and audio media content to Nth video and audio media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first video and audio media content to the Nth video and audio media content respectively include at least one continuous and adjacent video and audio frame; Generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key; Encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, select the first encryption key or the second encryption key to encrypt the third audio-visual media content to the Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted, and in the first audio-visual media content to the Nth audio-visual media content, use the audio-visual media content before and after encryption with the first encryption key as the first media content to be encrypted and the first encrypted media content, respectively, and use the audio-visual media content before and after encryption with the second encryption key as the second media content to be encrypted and the second encrypted media content, respectively; At least one of the first encrypted media content and the second encrypted media content is sent to the content distribution end, so that the playback end obtains at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypts and plays it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

2. The method according to claim 1, characterized in that The first encryption key and its corresponding first decryption key are provided by the media content encryptor, and the first encryption key and its corresponding first decryption key include at least one of a random value that changes dynamically and has an unfixed length, a preset value, and a null value.

3. The method according to claim 1, characterized in that The method further comprises: The first decryption key or its mapping relationship is pre-stored in a designated place through a media content encryption machine, wherein the designated place includes an encrypted media content file, an index file of the encrypted media content, and encrypted media content file information, the encrypted media content file information includes address information of the encrypted media content file, when the first decryption key is a preset value or an empty value, the mapping relationship of the first decryption key is stored, and when the first decryption key is a random value, the first decryption key is stored.

4. The method according to claim 3, characterized in that Before the first decryption key or its mapping relationship is pre-stored in a designated place through a media content encryptor, the method further includes: encrypting the first decryption key or its mapping relationship using a preset encryption key and algorithm, wherein the preset encryption key and algorithm correspond to a preset decryption key and algorithm, and the preset decryption key and algorithm are pre-stored at the playback end; storing the encrypted first decryption key or its mapping relationship in the designated place.

5. The method according to claim 1, characterized in that: The method of selecting a first encryption key or a second encryption key according to the playback type of the video and audio media content stream to be encrypted to encrypt the third video and audio media content to the Nth video and audio media content includes: In the case where the playback type of the audio-visual media content stream to be encrypted is live broadcast, the third audio-visual media content to the Nth audio-visual media content are encrypted in an alternating cycle mode, wherein the alternating cycle mode is that the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media contents from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key, respectively; when N is an odd number, the Nth audio-visual media content is encrypted with the first encryption key, and when N is an even number, the Nth audio-visual media content is encrypted with the second encryption key; When the playback type of the audio-visual media content stream to be encrypted is on-demand, the third to the Nth audio-visual media content are encrypted in an alternating loop mode or a single mode, wherein in the single mode, the third to the Nth audio-visual media content are encrypted using the second encryption key.

6. The method according to claim 1, characterized in that For a segmented audio-visual media file, the first encrypted media content is located at the beginning of the segmented file.

7. The method according to claim 1, characterized in that The first encryption key includes a first encryption segment key and a second encryption segment key, and encrypting the first to-be-encrypted media content using the first encryption key includes: Dividing the first media content to be encrypted into a first segment of audio-visual media content and a second segment of audio-visual media content according to the order of playback time; A first segmented audio-visual media content and a second segmented audio-visual media content are encrypted using a first encryption segment key and a second encryption segment key, respectively, wherein the time consumed to decrypt a single frame in the first segmented audio-visual media content is shorter than the time consumed to decrypt a single frame in the second segmented audio-visual media content.

8. The method according to claim 1, characterized in that The time length of the first encrypted media content is determined by the following steps: Monitoring the operating status of the current system, wherein the current system includes at least one of a key management server, a key gateway, and an authentication system; Determine a status score of the current system according to the operating status of the current system; Determine whether the status score is less than a first score threshold; When the state score is less than the first score threshold, the media content encryptor encrypts all the video and audio media content using the first encryption key; When the state score is greater than or equal to a first score threshold, determining whether the state score is less than a second score threshold, wherein the first score threshold is less than the second score threshold; When the state score is less than the second score threshold, the time length of the first encrypted media content is set to a time value corresponding to the state score, wherein the larger the state score is, the smaller the time value is, and the smaller the state score is, the larger the time value is; When the state score is greater than or equal to the second score threshold, the time length of the first encrypted media content is set to a preset time value.

9. The method according to claim 8, characterized in that The method further comprises: The update frequency of the second encryption key is determined according to the state score of the current system, wherein the higher the state score is, the greater the update frequency of the second encryption key is, and the lower the state score is, the smaller the update frequency of the second encryption key is.

10. The method according to claim 8, characterized in that The preset time value is greater than the preset ratio of the time value at which the overall playback end obtains the second decryption key.

11. A method for decrypting digital copyright of video and audio, characterized in that: include: Acquire the first encrypted media content corresponding to the start position and the first decryption key corresponding thereto, and decrypt the first encrypted media content using the first decryption key; Play the decrypted audio-visual media content, and for the first encrypted media content and the second encrypted media content after the start position, obtain each encrypted audio-visual media content and its corresponding first decryption key or second decryption key. After completing the start, play each decrypted audio-visual media content in the order of the playback time.

12. The method according to claim 11, characterized in that The second decryption key is obtained from the key gateway by the playback terminal, and the method further includes: Before the player obtains the second decryption key from the key gateway, the player authenticates the player through a preset digital copyright management system; When the playback terminal is authenticated, verifying the second decryption key acquisition request initiated by the playback terminal through the preset digital copyright management system; When the second decryption key acquisition request is verified to be successful, the preset digital copyright management system controls the key gateway to send the second decryption key to the playback terminal.

13. The method according to claim 11, characterized in that The method further comprises: When a freeze occurs when playing the second encrypted media content adjacent to the first encrypted media content that appears first, the playback end records freeze duration information and reports the freeze duration information to the system monitoring module.

14. The method according to claim 13, characterized in that The method further comprises: When the playback end starts playing, the playback of the first decrypted first encrypted media content is delayed according to the recorded historical jamming duration information.

15. The method according to claim 13, characterized in that The method further comprises: The timing for the playback end to report the freeze duration information to the system monitoring module is: report immediately in an emergency; if it is a general situation, wait until the next second decryption key request and report it together with the request information. Emergency situations include freeze duration exceeding the preset duration or failure to obtain the second decryption key; general situations mean that the second decryption key is successfully obtained by the playback end within the preset duration.

16. A video and audio digital copyright encryption device, characterized in that: include: A division module, used to divide the video and audio media content stream to be encrypted into first video and audio media content to Nth video and audio media content in the order of playback time, wherein N is a positive integer not less than 2, wherein the first video and audio media content to the Nth video and audio media content respectively include at least one continuous and adjacent video and audio frame; A generation module, used to generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key; an encryption module, configured to encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, select the first encryption key or the second encryption key to encrypt the third audio-visual media content to the Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted, and in the first audio-visual media content to the Nth audio-visual media content, use the audio-visual media content before and after encryption with the first encryption key as the first media content to be encrypted and the first encrypted media content, respectively, and use the audio-visual media content before and after encryption with the second encryption key as the second media content to be encrypted and the second encrypted media content, respectively; The sending module is used to send at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

17. A video and audio digital copyright decryption device, characterized in that: include: A decryption module, used to obtain the first encrypted media content corresponding to the start position and the first decryption key corresponding thereto, and decrypt the first encrypted media content using the first decryption key; The playback module is used to play the decrypted audio-visual media content. For the first encrypted media content and the second encrypted media content after the start position, each encrypted audio-visual media content and its corresponding first decryption key or second decryption key are obtained. After the start is completed, each decrypted audio-visual media content is played in the order of the playback time.

18. A video and audio digital copyright encryption and decryption system, characterized in that: It includes a media content encryptor, a player, a key management server, a key gateway and a content distribution terminal, among which: A media content encryption machine is used to divide the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content in the order of playback time, wherein N is a positive integer not less than 2; generate a first encryption key and a first decryption key, and send the first decryption key to the playback end, wherein the decryption key corresponding to the first encryption key is the first decryption key; encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, and select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content, in the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively, and the audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively; and send at least one of the first encrypted media content and the second encrypted media content to the content distribution end; The key management server is used to generate a second encryption key and a second decryption key, and send the second encryption key and the second decryption key to the media content encryptor and the key gateway respectively, wherein the decryption key corresponding to the second encryption key is the second decryption key; The playback end is used to obtain the first encrypted media content and its corresponding first decryption key corresponding to the start position from the content distribution end, and use the first decryption key to decrypt the first encrypted media content; play the decrypted audio and video media content at the start position, and after the playback is completed, play the decrypted audio and video media content after the start position in the order of playback time.

19. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 15 are implemented.

20. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 15 are implemented.

Images