Audiovisual digital copyright encryption method, decryption method, system and device

Abstract

The application provides a video and audio digital copyright encryption method, decryption method, system and device, the encryption method comprising: dividing the to-be-encrypted video and audio media content stream into first video and audio media content to Nth video and audio media content according to the playing time sequence; generating and sending a first decryption key and a second decryption key to a playing terminal and a key gateway respectively; encrypting the first video and audio media content and the second video and audio media content by using the first encryption key and the second encryption key, selecting the first encryption key or the second encryption key to encrypt the third video and audio media content to the Nth video and audio media content according to the playing type of the to-be-encrypted video and audio media content stream, directly decrypting and playing the decrypted video and audio media content in the playing terminal, and not needing to obtain the first decryption key from the key gateway, thereby improving the playing speed of the playing terminal; and after the second decryption key is successfully obtained, decrypting and playing the decrypted media content by using the second decryption key.

Description

Technical Field

[0001] This application relates to the field of audio-visual digital rights technology, specifically to an audio-visual digital rights encryption method, decryption method, system, and apparatus. Background Technology

[0002] With the booming development of multimedia services, audio and video content is becoming increasingly integrated into people's work and lives. To prevent the illegal broadcasting of audio and video content, the industry generally adopts DRM (Digital Rights Management) technology to encrypt and protect it. The playback terminal first obtains a decryption key from the key gateway, and then uses this key to successfully decrypt the encrypted audio and video content before it can be played normally. The key usually changes dynamically over time, and the playback terminal needs to continuously obtain a new key from the key gateway during playback. For example, this is the key scheme in the audio and video DRM standard ChinaDRM.

[0003] Dynamic key policies significantly enhance the anti-cracking capabilities of DRM systems, but they also face two insurmountable problems: First, the high concurrency of requests to the key gateway affects the speed at which the playback end obtains keys, which is one of the reasons for slowing down the playback start-up speed; Second, the key gateway may be blocked or malfunction due to high concurrency key requests from the playback end, which may cause the playback end to obtain keys from the key gateway in a timely manner or even fail, thus preventing the playback end from successfully decrypting the audio and video content and causing playback failure.

[0004] There are currently no effective solutions to the two problems mentioned above. Summary of the Invention

[0005] This application provides an audio / video digital rights management encryption method, decryption method, system, and apparatus.

[0006] The first aspect of this application provides a method for encrypting digital rights management (DRM) data for audio and video, including:

[0007] According to the order of playback time, the audio and video media content stream to be encrypted is divided into the first audio and video media content to the Nth audio and video media content, where N is a positive integer not less than 2, and the first audio and video media content to the Nth audio and video media content each includes at least one consecutive and adjacent audio and video frame.

[0008] Generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key. Send the first decryption key and the second decryption key to the playback terminal and the key gateway, respectively. The decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key.

[0009] The first audio-visual media content is encrypted using the first encryption key, and the second audio-visual media content is encrypted using the second encryption key. The first encryption key or the second encryption key is selected according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content. In the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively. The audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively.

[0010] At least one of the first encrypted media content and the second encrypted media content is sent to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0011] In an optional embodiment of this application, the first encryption key and its corresponding first decryption key are provided by a media content encryption machine. The first encryption key and its corresponding first decryption key include at least one of a dynamically changing random value, a preset value, and a null value.

[0012] In an optional embodiment of this application, the method further includes:

[0013] The first decryption key or its mapping relationship is pre-stored in a designated location by the media content encryption device. The designated location includes the encrypted media content file, the encrypted media content index file, and the encrypted media content file information. The encrypted media content file information includes the address information of the encrypted media content file. When the first decryption key is a preset value or a null value, the mapping relationship of the first decryption key is stored. When the first decryption key is a random value, the first decryption key is stored.

[0014] In an optional embodiment of this application, before the first decryption key or its mapping relationship is pre-stored in a designated location by the media content encryption device, the method further includes: encrypting the first decryption key or its mapping relationship using a preset encryption key and algorithm, wherein the preset encryption key and algorithm corresponds to a preset decryption key and algorithm, and the preset decryption key and algorithm are pre-stored in the playback terminal; and storing the encrypted first decryption key or its mapping relationship in the designated location.

[0015] In an optional embodiment of this application, encrypting the third to Nth audio-visual media content using either a first encryption key or a second encryption key based on the playback type of the audio-visual media content stream to be encrypted includes:

[0016] When the playback type of the audio-visual media content stream to be encrypted is live, an alternating loop mode is used to encrypt the third audio-visual media content to the Nth audio-visual media content. In the alternating loop mode, the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media content from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key respectively. When N is odd, the Nth audio-visual media content is encrypted with the first encryption key, and when N is even, the Nth audio-visual media content is encrypted with the second encryption key.

[0017] When the playback type of the audio-visual media content stream to be encrypted is on-demand, the third audio-visual media content to the Nth audio-visual media content is encrypted using an alternating loop mode or a single-time mode. In the single-time mode, the third audio-visual media content to the Nth audio-visual media content are all encrypted using the second encryption key.

[0018] In an optional embodiment of this application, for a segmented audio / video media file, the first encrypted media content is located at the beginning of the segmented file.

[0019] In an optional embodiment of this application, the first encryption key includes a first encryption segment key and a second encryption segment key. Encrypting the first media content to be encrypted using the first encryption key includes:

[0020] Based on the order of playback time, the first media content to be encrypted is divided into the first segment of audio-visual media content and the second segment of audio-visual media content.

[0021] The first segment of audio-visual media content and the second segment of audio-visual media content are encrypted using the first encryption segment key and the second encryption segment key, respectively. The time consumed to decrypt a single frame in the first segment of audio-visual media content is shorter than the time consumed to decrypt a single frame in the second segment of audio-visual media content.

[0022] In an optional embodiment of this application, the duration of the first encrypted media content is determined by the following steps:

[0023] Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system;

[0024] Determine the current system's state score based on its current operating status;

[0025] Determine if the state score is less than the first score threshold;

[0026] If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key;

[0027] If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold;

[0028] If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value.

[0029] If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value.

[0030] In an optional embodiment of this application, the method further includes:

[0031] The update frequency of the second encryption key is determined based on the current system state score. The higher the state score, the more frequently the second encryption key is updated, and the lower the state score, the less frequently the second encryption key is updated.

[0032] In one optional embodiment of this application, the preset time value is greater than the time value at which the overall playback terminal obtains the second decryption key, which is a preset proportion.

[0033] A second aspect of this application provides a method for decrypting digital rights management (DRM) data for audio and video content, including:

[0034] Obtain the first encrypted media content corresponding to the start-up position and its corresponding first decryption key, and use the first decryption key to decrypt the first encrypted media content;

[0035] Play the decrypted audio and video media content. For the first and second encrypted media content after the start position, obtain each encrypted audio and video media content and its corresponding first or second decryption key. After the start of playback is completed, play each decrypted audio and video media content in the order of playback time.

[0036] In an optional embodiment of this application, the second decryption key is obtained from the key gateway via the playback terminal, and the method further includes:

[0037] Before obtaining the second decryption key from the key gateway through the playback terminal, the playback terminal is authenticated by a preset digital rights management system.

[0038] If the playback terminal is successfully authenticated, the second decryption key acquisition request initiated by the playback terminal is verified through the preset digital rights management system;

[0039] If the request to obtain the second decryption key is verified, the key gateway is controlled by the preset digital rights management system to send the second decryption key to the playback terminal.

[0040] In an optional embodiment of this application, the method further includes:

[0041] When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module.

[0042] In an optional embodiment of this application, the method further includes:

[0043] When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on the historical stuttering duration information it has recorded.

[0044] In an optional embodiment of this application, the method further includes:

[0045] The timing for the playback terminal to report the stuttering duration information to the system monitoring module is as follows: in case of emergency, it reports immediately; in case of normal situation, it reports along with the request information when the second decryption key is requested again. Emergency situations include stuttering duration exceeding the preset duration or failure to obtain the second decryption key; normal situations refer to the second decryption key being successfully obtained by the playback terminal within the preset duration.

[0046] A third aspect of this application provides an audio / video digital rights management encryption device, comprising:

[0047] The segmentation module is used to divide the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content according to the order of playback time, where N is a positive integer not less than 2, and the first audio-visual media content to the Nth audio-visual media content each includes at least one consecutive and adjacent audio-visual frame.

[0048] The generation module is used to generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway, respectively. The decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key.

[0049] The encryption module is used to encrypt the first audio-visual media content using a first encryption key, encrypt the second audio-visual media content using a second encryption key, and select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content. In the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively. The audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively.

[0050] The sending module is used to send at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0051] A fourth aspect of this application provides an audio / video digital rights decryption device, comprising:

[0052] The decryption module is used to obtain the first encrypted media content corresponding to the start-up position and its corresponding first decryption key, and to decrypt the first encrypted media content using the first decryption key;

[0053] The playback module is used to play decrypted audio and video media content. For the first and second encrypted media content after the start position, it obtains each encrypted audio and video media content and its corresponding first or second decryption key. After the start position is completed, it plays each decrypted audio and video media content in the order of playback time.

[0054] A fifth aspect of this application provides an audio / video digital rights management encryption / decryption system, including a media content encryption device, a playback terminal, a key management server, a key gateway, and a content distribution terminal, wherein...

[0055] A media content encryption device is used to divide the audio-visual media content stream to be encrypted into first audio-visual media content to Nth audio-visual media content according to the playback time sequence, where N is a positive integer not less than 2; generate a first encryption key and a first decryption key, and send the first decryption key to the playback end, wherein the decryption key corresponding to the first encryption key is the first decryption key; encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using a second encryption key, and select either the first encryption key or the second encryption key to encrypt the third audio-visual media content to Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted; in the first audio-visual media content to Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively; the audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively; and send at least one of the first encrypted media content and the second encrypted media content to the content distribution end.

[0056] A key management server is used to generate a second encryption key and a second decryption key, and send the second encryption key and the second decryption key to the media content encryption machine and the key gateway respectively. The decryption key corresponding to the second encryption key is the second decryption key.

[0057] The playback end is used to obtain the first encrypted media content corresponding to the start position and its corresponding first decryption key from the content distribution end, and use the first decryption key to decrypt the first encrypted media content; play the decrypted audio and video media content at the start position, and after the playback is completed, play the decrypted audio and video media content after the start position in the order of playback time.

[0058] A sixth aspect of the present application provides a computer device including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of any of the above methods.

[0059] A seventh aspect of the present application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in any of the above embodiments.

[0060] Compared with the prior art, the technical solutions provided in this application have at least some or all of the following advantages:

[0061] The audio-visual digital rights management encryption method described in this application divides the audio-visual media content stream to be encrypted into a first audio-visual media content to an Nth audio-visual media content according to the playback time sequence, where N is a positive integer not less than 2. Each of the first to Nth audio-visual media content includes at least one consecutive and adjacent audio-visual frame. A first encryption key, a first decryption key, a second encryption key, and a second decryption key are generated. The first and second decryption keys are sent to the playback end and the key gateway, respectively. The decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key. The first audio-visual media content is encrypted using the first encryption key, and the second audio-visual media content is encrypted using the second encryption key. Depending on the playback type of the audio-visual media content stream to be encrypted, either the first or second encryption key is selected to encrypt the third to Nth audio-visual media content. The audio and video media content is incorporated into the Nth audio and video media content. The audio and video media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively. The audio and video media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively. At least one of the first encrypted media content and the second encrypted media content is sent to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end. The playback end can decrypt and play the content according to the first decryption key and the second decryption key obtained from the playback end and the key gateway. When the playback end obtains the first encrypted media content at the start position, it can directly decrypt and play the decrypted audio and video media content at the playback end using the first decryption key without waiting to obtain the second decryption key from the key gateway, which improves the start speed of the playback end. After the second decryption key is successfully obtained, the playback end can decrypt and play the audio and video media content after the start position using the second decryption key. Meanwhile, by setting up the DRM monitoring module and monitoring the operating status of the DRM system, the duration of the first encrypted media content can be automatically adjusted, enabling the DRM system to adaptively adjust and recover according to its actual operating status, including automatic emergency handling in case of DRM system failure. Attached Figure Description

[0062] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0063] Figure 1 A flowchart illustrating an audio / video digital rights management encryption method provided in one embodiment of this application;

[0064] Figure 2A schematic diagram of encrypted first and second audio-visual media content provided in one embodiment of this application;

[0065] Figure 3 A schematic diagram of an alternating cyclic pattern provided in one embodiment of this application;

[0066] Figure 4 A schematic diagram of a single-shot mode provided in one embodiment of this application;

[0067] Figure 5 A schematic diagram showing the location of a first audio / video media content segment in a .ts file, provided as an embodiment of this application;

[0068] Figure 6 A schematic diagram of a first segment of audio-visual media content and a second segment of audio-visual media content provided in one embodiment of this application;

[0069] Figure 7 A schematic diagram illustrating the confirmation of the duration of a first audio-visual media content provided in one embodiment of this application;

[0070] Figure 8 A schematic diagram illustrating the transmission duration of a first encrypted media content provided in one embodiment of this application;

[0071] Figure 9 A schematic diagram illustrating an audio / video digital rights decryption method provided in one embodiment of this application;

[0072] Figure 10 A schematic diagram of an audio-visual digital rights management system provided in one embodiment of this application;

[0073] Figure 11 This is a schematic diagram of a computer device structure provided in one embodiment of this application. Detailed Implementation

[0074] To make the technical solutions and advantages of the embodiments of this application clearer, the exemplary embodiments of this application will be described in further detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not an exhaustive list of all embodiments. It should be noted that, unless otherwise specified, the embodiments and features in the embodiments of this application can be combined with each other.

[0075] Please see Figure 1 The audio-visual digital rights management encryption method provided in this application includes the following steps 100 to 400:

[0076] S100, according to the order of playback time, divide the audio and video media content stream to be encrypted into the first audio and video media content to the Nth audio and video media content, where N is a positive integer not less than 2, and the first audio and video media content to the Nth audio and video media content each includes at least one consecutive and adjacent audio and video frame.

[0077] S200, generate a first encryption key, a first decryption key, a second encryption key and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway respectively, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key;

[0078] S300, encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted, and encrypt the third audio-visual media content to the Nth audio-visual media content. In the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption using the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively, and the audio-visual media content before and after encryption using the second encryption key is used as the second media content to be encrypted and the second encrypted media content.

[0079] S400, at least one of the first encrypted media content and the second encrypted media content is sent to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0080] In an optional embodiment of this application, the second encryption key is generated by a key management server. It can be used to encrypt the second media content to be encrypted using a media content encryption device. The playback terminal obtains the second decryption key from the key gateway and uses it to decrypt the second encrypted media content before playback. Furthermore, the second encryption key and its corresponding second decryption key can be dynamically changed; that is, the same live channel or the same on-demand video can have multiple second encryption keys and their corresponding second decryption keys, and one second encryption key and its corresponding second decryption key correspond to at least one second encrypted media content.

[0081] In an optional embodiment of this application, each audio / video media content, from the first to the Nth, consists of at least one consecutive and adjacent audio / video frame. Figure 2In this context, the first encrypted media content consists of n consecutive and adjacent audio-visual media content frames encrypted with the first encryption key, namely frames 1, 2, 3 to n; the second encrypted media content consists of m consecutive and adjacent audio-visual media content frames encrypted with the second encryption key, namely frames n+1, n+2, n+3 to n+m.

[0082] In an optional embodiment of this application, the first encryption key and its corresponding first decryption key are provided by a media content encryption machine. The first encryption key and its corresponding first decryption key are difficult to predict. The first encryption key and its corresponding first decryption key include at least one of a dynamically changing random value, a preset value, and a null value with an indefinite length.

[0083] The random value includes letters, numbers, and special characters, as well as any combination thereof.

[0084] When the first encryption key is empty, it means that no key was used to encrypt the first media content to be encrypted.

[0085] The preset value includes a value agreed upon in advance between the media content encryption device and the playback terminal. When the media content encryption device uses the preset value as the first encryption key to encrypt the media content, the corresponding decryption key is stored in advance on the playback terminal.

[0086] In an optional embodiment of this application, the first decryption key or its mapping relationship is pre-stored in a designated location by a media content encryption machine. The designated location includes the encrypted media content file, the encrypted media content index file, and the encrypted media content file information. The encrypted media content file information includes the address information of the encrypted media content file. When the first decryption key is a preset value or a null value, the mapping relationship of the first decryption key is stored. When the first decryption key is a random value, the first decryption key is stored.

[0087] It should be noted that if the playback terminal obtains the value of the mapping relationship, when the value represents a preset value, the playback terminal can decrypt the first encrypted media content according to the decryption key pre-stored on the playback terminal mapped by the value; when the value represents an empty value, it means that the first media content to be encrypted has not been encrypted by any key and can be played directly.

[0088] In an optional embodiment of this application, before the first decryption key or its mapping relationship is pre-stored in a designated location by the media content encryption device, the method further includes: encrypting the first decryption key or its mapping relationship using a preset encryption key and algorithm, wherein the preset encryption key and algorithm correspond to a preset decryption key and algorithm, and the preset decryption key and algorithm are pre-stored in the playback terminal; and storing the encrypted first decryption key or its mapping relationship in the designated location. Only the playback terminal with the preset decryption key knows the corresponding decryption key, which can improve the anti-cracking capability of the audio and video media content encrypted by the first encryption key.

[0089] In an optional embodiment of this application, the encryption key and its paired decryption key may be the same or different; in a DRM system, they are usually the same.

[0090] In an optional embodiment of this application, encrypting the third to Nth audio-visual media content using either a first encryption key or a second encryption key based on the playback type of the audio-visual media content stream to be encrypted includes:

[0091] When the playback type of the audio-visual media content stream to be encrypted is live, an alternating loop mode is used to encrypt the third audio-visual media content to the Nth audio-visual media content. In the alternating loop mode, the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media content from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key respectively. When N is odd, the Nth audio-visual media content is encrypted with the first encryption key, and when N is even, the Nth audio-visual media content is encrypted with the second encryption key.

[0092] When the playback type of the audio-visual media content stream to be encrypted is on-demand, the third audio-visual media content to the Nth audio-visual media content is encrypted using an alternating loop mode or a single-time mode. In the single-time mode, the third audio-visual media content to the Nth audio-visual media content are all encrypted using the second encryption key.

[0093] In an optional embodiment of this application, the alternating cyclic pattern is as follows: Figure 3As shown, in the encrypted audio-visual media content stream, the sequence is: first encrypted media content, second encrypted media content, first encrypted media content, second encrypted media content, first encrypted media content, second encrypted media content, first encrypted media content, second encrypted media content, first encrypted media content, ..., repeating continuously until the end of the audio-visual media content stream. Among these, on-demand audio-visual media content streams have an end, while some live audio-visual media content streams will continue indefinitely, while others will end quickly. In the alternating loop mode, the media content encrypted with the first encryption key appears at least twice in the audio-visual media content stream. The single-time mode is as follows... Figure 4 As shown, in the encrypted audio-visual media content stream, the media content encrypted by the first encryption key appears exactly once, the media content encrypted by the second encryption key appears at most once, and the audio-visual media content encrypted by the first encryption key is located at the beginning of the audio-visual media content stream.

[0094] In an optional embodiment of this application, for segmented audio / video media files, the first encrypted media content is located at the beginning of the segmented file. Both the HLS standard and China's independent audio / video standard AVS (Audio Video Coding Standard) use segmented audio / video media files, i.e., TS files. After obtaining the TS file, the playback terminal typically starts playback from the beginning of the TS file. Therefore, placing the first encrypted media content at the beginning of the segmented file ensures that the playback terminal starts playback from the first encrypted media content of the TS file. Figure 5 As shown.

[0095] In an optional embodiment of this application, the first encryption key includes a first encryption segment key and a second encryption segment key. Encrypting the first media content to be encrypted using the first encryption key includes:

[0096] Based on the order of playback time, the first media content to be encrypted is divided into the first segment of audio-visual media content and the second segment of audio-visual media content.

[0097] The first segment of audio-visual media content and the second segment of audio-visual media content are encrypted using the first encryption segment key and the second encryption segment key, respectively. The time consumed to decrypt a single frame in the first segment of audio-visual media content is shorter than the time consumed to decrypt a single frame in the second segment of audio-visual media content.

[0098] In an optional embodiment of this application, such as Figure 6As shown, the first segment of audio-visual media content is located at the beginning of the first encrypted media content. Decrypting a single frame in the first segment takes less time than decrypting a single frame in the second segment. The playback end needs time to decrypt the encrypted media content. Generally, the longer the key and the more complex the algorithm, the longer the decryption time. To further reduce playback time, the first encrypted segment key corresponding to the first encrypted media content can be set to a shorter key with a simpler and faster decryption algorithm, making the time spent decrypting a single frame in the first segment shorter than that in the second segment. Generally, encryption and decryption times are positively correlated; therefore, reducing decryption time also helps reduce encryption time.

[0099] In an optional embodiment of this application, such as Figure 7 As shown, the duration of the first encrypted media content is determined through the following steps:

[0100] Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system;

[0101] Determine the current system's state score based on its current operating status;

[0102] Determine if the state score is less than the first score threshold;

[0103] If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key;

[0104] If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold;

[0105] If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value.

[0106] If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value.

[0107] In one optional embodiment of this application, the preset time value is greater than the time value at which the overall playback terminal obtains the second decryption key, which is a preset proportion.

[0108] In an optional embodiment of this application, the "overall playback end" refers to all users currently watching the current audio-visual media content. This could be all users currently using the system to watch the same live or on-demand program, or all users watching all live programs or all on-demand content. The time value (denoted as t1) for the playback end to obtain the second decryption key includes the time interval (denoted as t2) between the start of authentication and the receipt of the second decryption key from the key gateway. Therefore, t1 >= t2. The t1 values ​​of all playback ends are sorted from largest to smallest. Starting with the smallest, a preset proportion of the overall playback end's t1 values ​​are taken. The largest t1 value (denoted as t1max) is the time value for the preset proportion of the overall playback end to obtain the second decryption key. For example, if the preset ratio is 90% and the total number of playback terminals is 10, their t1 values ​​from largest to smallest are 600 milliseconds, 570 milliseconds, 560 milliseconds, 540 milliseconds, 540 milliseconds, 510 milliseconds, 500 milliseconds, 480 milliseconds, 460 milliseconds, and 410 milliseconds, then the time for the total number of playback terminals with the preset ratio to obtain the second decryption key is the 9th from the end, i.e., 570 milliseconds. Let the preset time value be T1, then T1 > t1max. The purpose of setting T1 > t1max is to ensure that the vast majority of playback terminals can decrypt the video of the first encrypted media content before obtaining the second decryption key, thereby enabling normal playback of the audio and video content, reducing playback latency, improving the playback startup speed of the playback terminals, and preventing stuttering caused by the vast majority of playback terminals not having enough time to decrypt the second encrypted media content due to not obtaining the second decryption key in time. The playback type of startup includes at least one of the following: playback start, switching playback, and skipping playback. Switching playback refers to switching from one program to another and then starting playback; skipping playback refers to skipping to a specified time point and then playing.

[0109] Assuming the current system is functioning well, the aforementioned preset time value is used as the duration of the first encrypted media content. To reduce the burden on the current system, the time for the overall playback terminal to obtain the second decryption key can be determined from historical big data or set to a default value based on experience, without requiring real-time monitoring and determination. For example... Figure 8 As shown, the duration of the first encrypted media content can be sent directly to the media content encryption machine by the key gateway or indirectly to the media content encryption machine through the key management server.

[0110] Because the current system experiences blockages or malfunctions, which are largely related to the key gateway, the key gateway can directly obtain and calculate the duration of the first encrypted media content. Furthermore, before the playback terminal obtains the second decryption key, the DRM authentication and authorization modules must verify the legitimacy of the playback terminal and its request for the second decryption key. Only legitimate playback terminals that have passed authentication and their legitimate requests for the second decryption key can obtain the second decryption key from the key gateway. Therefore, the key gateway can easily obtain the operating status of the DRM authentication and authorization modules, thereby conveniently obtaining the duration of the first encrypted media content related to the operating status of the DRM authentication and authorization modules.

[0111] By monitoring the current system's operational status, the duration of the first encrypted media content is dynamically adjusted automatically. During playback, the first encrypted media content is played first because its corresponding first decryption key is easily and quickly obtained. The playback client can immediately decrypt the first encrypted media content and play it, reducing playback time. However, the second decryption key for the second encrypted media content needs to be obtained from the key gateway and undergoes legality checks by modules such as DRM authentication and authorization. Therefore, the time and success of the playback client in obtaining the second decryption key are easily affected by the current system's operational status. If the playback client reaches the second encrypted media content but has not yet obtained its corresponding second decryption key, playback will experience stuttering. Therefore, the duration of the first encrypted media content needs to be appropriately longer to allow the playback client sufficient time to obtain the second decryption key. Furthermore, because the first decryption key is easily obtained, its security is generally not as good as the second decryption key; therefore, the duration of the first encrypted media content should not be too long. Furthermore, when a system malfunction severely impacts the playback end's ability to obtain the second decryption key in a timely manner, the media content encryption machine uses only the first encryption key to encrypt the media content, ensuring a stable and continuous supply of audio and video playback services. In summary, dynamically adjusting the duration of the first encrypted media content to a suitable value improves user experience while ensuring the security and stability of audio and video services.

[0112] In an optional embodiment of this application, the operating status includes fault conditions, load conditions, and service latency conditions. Load conditions are related to the current system's load capacity and concurrent access volume; a system with stronger load capacity and lower concurrent access volume has better load conditions. Service latency conditions include the time required for DRM authentication and authorization of the playback terminal and the time required for the playback terminal to obtain the second decryption key from the key gateway. The status score is determined by the current system's operating status; the better the current system's operating status, the higher the status score. For example, if the key gateway fails, many playback terminals will have problems obtaining the second decryption key from the key gateway, severely impacting the decryption of media content encrypted with the second encryption key. In this case, the status score can be set to 0, less than a first score threshold. The media content encryption machine then uses the first encryption key to encrypt all audio and video media content, ensuring that media content encrypted with the second encryption key will not appear in the audio and video stream, guaranteeing the normal operation of subsequent services. When the load condition or service latency condition is poor to a certain extent, the status score can also be set to less than the first score threshold. When load conditions or service latency affect the authentication or key acquisition at the playback end, but to a limited extent—for example, if the key gateway experiences a surge in access, causing a slight delay in providing the second decryption key, but within an acceptable range—the status score can be set to be greater than or equal to the first score threshold and less than or equal to the second score threshold. This indicates that the duration of the first encrypted media content can be adjusted based on the status score, i.e., the duration of the audio / video media content encrypted with the first encryption key. In this case, the duration of the first encrypted media content is usually greater than its preset time value. When the current system is running well, with no faults and excellent load and service latency performance of the DRM authentication system and key gateway, the duration of the first encrypted media content is set to the preset time value. Normally, the current system is running well, and the significant impact of congestion, faults, and their recovery on the playback end's acquisition of the second decryption key is a low-probability event. Only when this low-probability event occurs is the status score acquired to adjust and transmit the duration of the first encrypted media content to the media content encryption device. The media content encryption device mostly uses the preset time value as the duration of the first encrypted media content. Therefore, this strategy can significantly reduce the burden on the current system.

[0113] In an optional embodiment of this application, the method further includes:

[0114] The update frequency of the second encryption key is determined based on the current system state score. A higher state score corresponds to a more frequent update frequency, and vice versa. A key update refers to a change in the key value.

[0115] In an optional embodiment of this application, the update frequency of the second encryption key corresponding to the second encrypted media content is positively correlated with the state score; that is, the higher the state score, the faster the second encryption key changes, and the lower the state score, the slower the second encryption key changes. When the state score is relatively high, it indicates that the current system is operating well, and the update frequency of the second encryption key can be appropriately increased to improve the security of the current system. When the state score is relatively low, it indicates that the current system is operating poorly, and the update frequency of the second encryption key can be appropriately reduced, thereby reducing the frequency of requests for the second decryption key from the playback terminal, alleviating the burden on the current system, and improving and restoring the operating state of the current system.

[0116] It should be noted that because the audio and video media content of live broadcasts is updated in real time, changes in the update frequency of the second encryption key primarily affect the live broadcast. However, the audio and video media content for on-demand viewing is usually pre-stored at the content distribution end, and its encryption is already complete. Therefore, changes in the update frequency of the second encryption key generally do not affect the already encrypted media content.

[0117] It should be noted that even if a pirate successfully decrypts and plays the first encrypted media content, the existence of the second encrypted media content, encrypted with the second encryption key, prevents the pirate from achieving continuous and normal playback. Such piracy is therefore worthless and meaningless, and the pirate will abandon the piracy attempt. Thus, the setting of the first and second encryption keys in this application reduces playback startup time while maintaining the security of a DRM system.

[0118] like Figure 9 As shown in the embodiment of this application, a method for decrypting audio-visual digital rights management systems is provided, including:

[0119] Obtain the first encrypted media content corresponding to the start-up position and its corresponding first decryption key, and use the first decryption key to decrypt the first encrypted media content;

[0120] Play the decrypted audio and video media content. For the first and second encrypted media content after the start position, obtain each encrypted audio and video media content and its corresponding first or second decryption key. After the start of playback is completed, play each decrypted audio and video media content in the order of playback time.

[0121] In an optional embodiment of this application, the second decryption key is obtained from the key gateway via the playback terminal, and the method further includes:

[0122] Before obtaining the second decryption key from the key gateway through the playback terminal, the playback terminal is authenticated by a preset digital rights management system.

[0123] If the playback terminal is successfully authenticated, the second decryption key acquisition request initiated by the playback terminal is verified through the preset digital rights management system;

[0124] If the request to obtain the second decryption key is verified, the key gateway is controlled by the preset digital rights management system to send the second decryption key to the playback terminal.

[0125] In an optional embodiment of this application, the method further includes:

[0126] When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module.

[0127] In an optional embodiment of this application, the playback device can obtain encrypted audio and video media content from a content delivery network, and the second decryption key is typically obtained from a key gateway. The first appearing first encrypted media content is located at the beginning of the obtained encrypted media content and has the complete duration of the first encrypted media content. Since playback starts from the first appearing first encrypted media content, which is located at the beginning of the obtained encrypted media content, the amount of media content data downloaded and the download time are reduced. Obtaining the first decryption key is simple and quick, so the playback device can quickly decrypt and play the first encrypted media content without waiting for the successful acquisition of the second decryption key, thus reducing the start-up time. When playing second encrypted media content adjacent to the first appearing first encrypted media content, but the corresponding second decryption key has not yet been obtained, the playback device cannot complete the decryption of the second encrypted media content segment, and playback will experience stuttering.

[0128] In an optional embodiment of this application, when playback of second encrypted media content adjacent to the first encrypted media content occurs, and playback stutters due to the failure to obtain the corresponding second decryption key in a timely manner, the playback device records the stutter duration and reports this stutter duration information to the system monitoring module. The playback device only records stutter duration information when playback stutters occur due to the failure to obtain the corresponding second decryption key while playing second encrypted media content adjacent to the first encrypted media content; stutters occurring in other situations are not recorded. If the stutter duration exceeds a certain time, it is considered that the acquisition of the second decryption key has failed. The playback device reporting the stutter duration information to the system monitoring module helps the system monitoring module evaluate the current system operating status, determine a status score, and then adjust the duration of the first encrypted media content to make the audio and video service more stable and reliable.

[0129] In an optional embodiment of this application, the method further includes:

[0130] When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on the historical stuttering duration information it has recorded.

[0131] In an optional embodiment of this application, when a playback terminal starts playback, it appropriately delays the playback of the first encrypted media content based on its recorded historical stuttering duration information. Individual differences exist among playback terminals. For example, due to network issues, a particular playback terminal may take longer than most other playback terminals to obtain the second decryption key, and adjusting the duration of the first encrypted media content cannot resolve the stuttering problem for that terminal. In such cases, the playback terminal can appropriately delay the playback of the first encrypted media content based on its recorded historical stuttering duration information. For instance, if a playback terminal has experienced stuttering in its last five playback attempts, with stuttering durations of 32 milliseconds, 41 milliseconds, 28 milliseconds, 37 milliseconds, and 35 milliseconds respectively, then the next time the playback terminal starts playback, it can delay the playback of the first encrypted media content by 50 milliseconds to reduce the probability of the stuttering phenomenon. When a playback terminal reports stuttering duration information to the system monitoring module, the system needs to authenticate and verify the playback terminal and the reporting request. Only legitimate playback terminals and reporting requests will have their reported stuttering duration information recorded by the system monitoring module.

[0132] In an optional embodiment of this application, the method further includes:

[0133] The timing for the playback client to report stuttering duration information to the system monitoring module includes immediate reporting and reporting it along with the next second decryption key request. Specifically, in emergency situations, the playback client reports immediately; in normal situations, it reports it along with the next second decryption key request. Emergency situations include excessive stuttering duration or failure to acquire the second decryption key. Normal situations refer to the playback client successfully acquiring the second decryption key within an acceptable timeframe. In this case, the stuttering duration information is included in the next second decryption key request without separate reporting. Furthermore, the system's authentication and authorization of the playback client and this stuttering duration reporting request can be combined with the second decryption key request, reducing the system's workload.

[0134] This application employs a combination of a first encryption key and a second encryption key to encrypt and decrypt audio and video media content. The first decryption key does not need to be obtained specifically from a key gateway and can be obtained quickly and easily by the playback end without requiring system authentication or authorization modules to verify the legitimacy of the request for the first encryption key. Upon startup, the playback end can directly decrypt and play the media content encrypted with the first encryption key without waiting for the successful acquisition of the second decryption key, reducing startup time and improving user experience. The existence of the second decryption key also allows this application to retain the security features of conventional DRM systems. Furthermore, by setting up a system monitoring module to monitor the current system's operating status and automatically and dynamically adjusting the duration of the first encrypted media content, the system possesses the ability to adaptively adjust and recover based on its actual operating status, including automatic emergency handling for system failures.

[0135] It should be understood that although the steps in the flowchart are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order constraint on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the diagram may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the sub-steps or stages of other steps.

[0136] One embodiment of this application provides an audio / video digital rights management encryption device, comprising:

[0137] The segmentation module is used to divide the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content according to the order of playback time, where N is a positive integer not less than 2, and the first audio-visual media content to the Nth audio-visual media content each includes at least one consecutive and adjacent audio-visual frame.

[0138] The generation module is used to generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway, respectively. The decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key.

[0139] The encryption module is used to encrypt the first audio-visual media content using a first encryption key, encrypt the second audio-visual media content using a second encryption key, and select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content. In the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively. The audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively.

[0140] The sending module is used to send at least one of the first encrypted media content and the second encrypted media content to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway.

[0141] One embodiment of this application provides an audio / video digital rights decryption device, comprising:

[0142] The decryption module is used to obtain the first encrypted media content corresponding to the start-up position and its corresponding first decryption key, and to decrypt the first encrypted media content using the first decryption key;

[0143] The playback module is used to play decrypted audio and video media content. For the first and second encrypted media content after the start position, it obtains each encrypted audio and video media content and its corresponding first or second decryption key. After the start position is completed, it plays each decrypted audio and video media content in the order of playback time.

[0144] For specific limitations regarding the aforementioned device, please refer to the limitations on audio / video digital rights management encryption or decryption methods described above, which will not be repeated here. Each module in the aforementioned device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device in hardware form, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0145] like Figure 10 As shown, one embodiment of this application provides an audio / video digital rights management encryption / decryption system, including a media content encryption device, a playback terminal, a key management server, a key gateway, and a content distribution terminal, wherein...

[0146] A media content encryption device is used to divide the audio-visual media content stream to be encrypted into first audio-visual media content to Nth audio-visual media content according to the playback time sequence, where N is a positive integer not less than 2; generate a first encryption key and a first decryption key, and send the first decryption key to the playback end, wherein the decryption key corresponding to the first encryption key is the first decryption key; encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using a second encryption key, and select either the first encryption key or the second encryption key to encrypt the third audio-visual media content to Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted; in the first audio-visual media content to Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively; the audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively; and send at least one of the first encrypted media content and the second encrypted media content to the content distribution end.

[0147] A key management server is used to generate a second encryption key and a second decryption key, and send the second encryption key and the second decryption key to the media content encryption machine and the key gateway respectively. The decryption key corresponding to the second encryption key is the second decryption key.

[0148] The playback end is used to obtain the first encrypted media content corresponding to the start position and its corresponding first decryption key from the content distribution end, and use the first decryption key to decrypt the first encrypted media content; play the decrypted audio and video media content at the start position, and after the playback is completed, play the decrypted audio and video media content after the start position in the order of playback time.

[0149] In an optional embodiment of this application, the key management server generates a key, provides the encryption key to the media content encryption machine, and provides the decryption key to the key gateway. The encryption key and its paired decryption key can be the same or different. The key gateway stores a second decryption key required to decrypt the media content, which the playback terminal obtains to decrypt the media content before playback. The key of the key gateway can be provided by the key management server. The media content encryption machine is responsible for encrypting the audio and video media content and distributing the encrypted media content to the content distribution terminal. The content distribution terminal stores the audio and video media content for the playback terminal to download and play. The content distribution terminal includes a Content Delivery Network (CDN). The playback terminal can realize functions such as obtaining audio and video media content, requesting and obtaining keys, decrypting encrypted media content, and playing it. It is generally located on terminal devices such as mobile phones, tablets, smart TVs, and computers. Starting playback is abbreviated as "starting broadcast". Starting broadcast includes playback scenarios such as the playback terminal starting to play video, switching video program playback, and selecting a certain time point from the player's progress bar. Replaying live programs is also considered on-demand.

[0150] In one embodiment, a computer device is provided, the internal structure of which can be as follows: Figure 11 As shown. The computer device includes a processor, memory, network interface, and database connected via a system bus. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The database stores data. The network interface communicates with external terminals via a network connection. When the computer program is executed by the processor, it implements one of the above-described audio / video digital rights management encryption or decryption methods. It includes: memory and a processor; the memory stores a computer program; and the processor, when executing the computer program, implements any step of the above-described audio / video digital rights management encryption or decryption method.

[0151] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, can implement any step of the above-described audio / video digital rights encryption method or audio / video digital rights decryption method.

[0152] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0153] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0154] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0155] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0156] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0157] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. A method for encrypting digital rights of audio and video content, characterized in that, include: According to the order of playback time, the audio and video media content stream to be encrypted is divided into the first audio and video media content to the Nth audio and video media content, where N is a positive integer not less than 2, and the first audio and video media content to the Nth audio and video media content each includes at least one consecutive and adjacent audio and video frame. Generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key. Send the first decryption key and the second decryption key to the playback terminal and the key gateway, respectively. The decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key. The first audio-visual media content is encrypted using the first encryption key, and the second audio-visual media content is encrypted using the second encryption key. The first encryption key or the second encryption key is selected according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content. In the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively. The audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively. At least one of the first encrypted media content and the second encrypted media content is sent to the content distribution end, so that the playback end can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution end, and decrypt and play it according to the first decryption key and the second decryption key obtained from the playback end and the key gateway. The first encryption key and its corresponding first decryption key are provided by the media content encryption machine, and the key management server generates the second encryption key and the second decryption key, and sends the second encryption key and the second decryption key to the media content encryption machine and the key gateway respectively. Based on the playback type of the audio / video media content stream to be encrypted, select either the first or second encryption key to encrypt the third to Nth audio / video media content, including: When the playback type of the audio-visual media content stream to be encrypted is live, an alternating loop mode is used to encrypt the third audio-visual media content to the Nth audio-visual media content. In the alternating loop mode, the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media content from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key respectively. When N is odd, the Nth audio-visual media content is encrypted with the first encryption key, and when N is even, the Nth audio-visual media content is encrypted with the second encryption key. When the playback type of the audio / video media content stream to be encrypted is video-on-demand, the third to the Nth audio / video media content is encrypted using either an alternating loop mode or a single-pass mode. In the single-pass mode, all audio / video media content from the third to the Nth audio / video media content is encrypted using the second encryption key. The duration of the first encrypted media content is determined through the following steps: Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system; Determine the current system's state score based on its current operating status; Determine if the state score is less than the first score threshold; If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key; If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold; If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value. If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value. Specifically, the time required to decrypt a single frame in the first segment of audio-visual media content is shorter than the time required to decrypt a single frame in the second segment of audio-visual media content. The method further includes: When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module. The method further includes: When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on the historical stuttering duration information it has recorded.

2. The method according to claim 1, characterized in that, The first encryption key and its corresponding first decryption key include at least one of the following: a dynamically changing random value with a variable length, a preset value, and a null value.

3. The method according to claim 1, characterized in that, The method further includes: The first decryption key or its mapping relationship is pre-stored in a designated location by the media content encryption device. The designated location includes the encrypted media content file, the encrypted media content index file, and the encrypted media content file information. The encrypted media content file information includes the address information of the encrypted media content file. When the first decryption key is a preset value or a null value, the mapping relationship of the first decryption key is stored. When the first decryption key is a random value, the first decryption key is stored.

4. The method according to claim 3, characterized in that, Before the first decryption key or its mapping relationship is pre-stored in a designated location by the media content encryption device, the method further includes: encrypting the first decryption key or its mapping relationship using a preset encryption key and algorithm, wherein the preset encryption key and algorithm corresponds to a preset decryption key and algorithm, and the preset decryption key and algorithm are pre-stored in the playback terminal; and storing the encrypted first decryption key or its mapping relationship in the designated location.

5. The method according to claim 1, characterized in that, For segmented audio and video media files, the first encrypted media content is located at the beginning of the segment file.

6. The method according to claim 1, characterized in that, The first encryption key includes a first encryption segment key and a second encryption segment key. The first encryption key is used to encrypt the first media content to be encrypted, including: Based on the order of playback time, the first media content to be encrypted is divided into the first segment of audio-visual media content and the second segment of audio-visual media content. The first segment of audio-visual media content and the second segment of audio-visual media content are encrypted using the first encryption segment key and the second encryption segment key, respectively.

7. The method according to claim 1, characterized in that, The method further includes: The update frequency of the second encryption key is determined based on the current system state score. The higher the state score, the more frequently the second encryption key is updated, and the lower the state score, the less frequently the second encryption key is updated.

8. The method according to claim 1, characterized in that, The time value at which the overall playback terminal obtains the second decryption key is greater than the preset time value.

9. A method for decrypting digital rights management (DRM) data for audio and video content, characterized in that, include: Obtain the first encrypted media content corresponding to the start-up position and its corresponding first decryption key, and use the first decryption key to decrypt the first encrypted media content; Playing decrypted audio and video media content: For the first and second encrypted media content after the start position, obtain each encrypted audio and video media content and its corresponding first or second decryption key. After completion of playback, play each decrypted audio and video media content in the order of playback time. The first and second decryption keys are sent to the playback terminal and the key gateway, respectively. The first decryption key is provided by the media content encryption device, and the key management server generates the second decryption key and sends it to the key gateway. Specifically, the time required to decrypt a single frame in the first segment of audio-visual media content is shorter than the time required to decrypt a single frame in the second segment of audio-visual media content. The method further includes: When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module. The method further includes: When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on its recorded historical buffering duration information. The duration of the first encrypted media content is determined through the following steps: Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system; Determine the current system's state score based on its current operating status; Determine if the state score is less than the first score threshold; If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key; If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold; If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value. If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value.

10. The method according to claim 9, characterized in that, The second decryption key is obtained from the key gateway through the playback terminal, and the method further includes: Before obtaining the second decryption key from the key gateway through the playback terminal, the playback terminal is authenticated by a preset digital rights management system. If the playback terminal is successfully authenticated, the second decryption key acquisition request initiated by the playback terminal is verified through the preset digital rights management system; If the request to obtain the second decryption key is verified, the key gateway is controlled by the preset digital rights management system to send the second decryption key to the playback terminal.

11. The method according to claim 9, characterized in that, The method further includes: The timing for the playback terminal to report the stuttering duration information to the system monitoring module is as follows: in case of emergency, it reports immediately; in case of normal situation, it reports along with the request information when the second decryption key is requested again. Emergency situations include stuttering duration exceeding the preset duration or failure to obtain the second decryption key; normal situations refer to the second decryption key being successfully obtained by the playback terminal within the preset duration.

12. An audio-visual digital rights management encryption device, characterized in that, include: The segmentation module is used to divide the audio-visual media content stream to be encrypted into the first audio-visual media content to the Nth audio-visual media content according to the order of playback time, where N is a positive integer not less than 2, and the first audio-visual media content to the Nth audio-visual media content each includes at least one consecutive and adjacent audio-visual frame. The generation module is used to generate a first encryption key, a first decryption key, a second encryption key, and a second decryption key, and send the first decryption key and the second decryption key to the playback terminal and the key gateway, respectively. The decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key. The encryption module is used to encrypt the first audio-visual media content using a first encryption key, encrypt the second audio-visual media content using a second encryption key, and select the first encryption key or the second encryption key according to the playback type of the audio-visual media content stream to be encrypted to encrypt the third audio-visual media content to the Nth audio-visual media content. In the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively. The audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively. The sending module is used to send at least one of a first encrypted media content and a second encrypted media content to a content distribution terminal, so that the playback terminal can obtain at least one of the first encrypted media content and the second encrypted media content from the content distribution terminal, and decrypt and play it according to a first decryption key and a second decryption key obtained from the playback terminal and the key gateway. The first encryption key and its corresponding first decryption key are provided by the media content encryption machine, and the key management server generates a second encryption key and a second decryption key, and sends the second encryption key and the second decryption key to the media content encryption machine and the key gateway, respectively. Based on the playback type of the audio / video media content stream to be encrypted, select either the first or second encryption key to encrypt the third to Nth audio / video media content, including: When the playback type of the audio-visual media content stream to be encrypted is live, an alternating loop mode is used to encrypt the third audio-visual media content to the Nth audio-visual media content. In the alternating loop mode, the third audio-visual media content is encrypted with the first encryption key, and two adjacent audio-visual media content from the third audio-visual media content to the Nth audio-visual media content are encrypted with the first encryption key and the second encryption key respectively. When N is odd, the Nth audio-visual media content is encrypted with the first encryption key, and when N is even, the Nth audio-visual media content is encrypted with the second encryption key. When the playback type of the audio / video media content stream to be encrypted is video-on-demand, the third to the Nth audio / video media content is encrypted using either an alternating loop mode or a single-pass mode. In the single-pass mode, all audio / video media content from the third to the Nth audio / video media content is encrypted using the second encryption key. The duration of the first encrypted media content is determined through the following steps: Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system; Determine the current system's state score based on its current operating status; Determine if the state score is less than the first score threshold; If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key; If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold; If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value. If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value. Specifically, the time required to decrypt a single frame in the first segment of audio-visual media content is shorter than the time required to decrypt a single frame in the second segment of audio-visual media content. When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module. When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on the historical stuttering duration information it has recorded.

13. A digital rights management device for audio and video content, characterized in that, include: The decryption module is used to obtain the first encrypted media content corresponding to the start-up position and its corresponding first decryption key, and to decrypt the first encrypted media content using the first decryption key; The playback module is used to play decrypted audio and video media content. For the first and second encrypted media content after the start position, it obtains each encrypted audio and video media content and its corresponding first or second decryption key. After the start of playback, it plays each decrypted audio and video media content in the order of playback time. The first and second decryption keys are sent to the playback terminal and the key gateway, respectively. The first decryption key is provided by the media content encryption device, and the key management server generates the second decryption key and sends it to the key gateway. Specifically, the time required to decrypt a single frame in the first segment of audio-visual media content is shorter than the time required to decrypt a single frame in the second segment of audio-visual media content. When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module. When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on its recorded historical buffering duration information. The duration of the first encrypted media content is determined through the following steps: Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system; Determine the current system's state score based on its current operating status; Determine if the state score is less than the first score threshold; If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key; If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold; If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value. If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value.

14. An audio-visual digital rights management encryption / decryption system, characterized in that, This includes a media content encryption device, a playback terminal, a key management server, a key gateway, and a content distribution terminal. A media content encryption device is used to divide the audio-visual media content stream to be encrypted into a first audio-visual media content to an Nth audio-visual media content according to the playback time sequence, where N is a positive integer not less than 2; generate a first encryption key and a first decryption key, and send the first decryption key to the playback end, wherein the decryption key corresponding to the first encryption key is the first decryption key, and the decryption key corresponding to the second encryption key is the second decryption key; encrypt the first audio-visual media content using the first encryption key, encrypt the second audio-visual media content using the second encryption key, and select either the first encryption key or the second encryption key to encrypt the third audio-visual media content to the Nth audio-visual media content according to the playback type of the audio-visual media content stream to be encrypted; in the first audio-visual media content to the Nth audio-visual media content, the audio-visual media content before and after encryption with the first encryption key is used as the first media content to be encrypted and the first encrypted media content, respectively; the audio-visual media content before and after encryption with the second encryption key is used as the second media content to be encrypted and the second encrypted media content, respectively; and send at least one of the first encrypted media content and the second encrypted media content to the content distribution end. A key management server is used to generate a second encryption key and a second decryption key, and send the second encryption key and the second decryption key to the media content encryption machine and the key gateway respectively. The decryption key corresponding to the second encryption key is the second decryption key. The playback end is used to obtain the first encrypted media content corresponding to the start position and its corresponding first decryption key from the content distribution end, and to decrypt the first encrypted media content using the first decryption key; it plays the decrypted audio and video media content at the start position, and after playback is complete, it plays the decrypted audio and video media content after the start position in chronological order. The first encryption key and its corresponding first decryption key are provided by the media content encryption machine. The key management server generates a second encryption key and a second decryption key, and sends the second encryption key and the second decryption key to the media content encryption machine and the key gateway, respectively. Specifically, the time required to decrypt a single frame in the first segment of audio-visual media content is shorter than the time required to decrypt a single frame in the second segment of audio-visual media content. When a pause occurs during the playback of a second encrypted media content adjacent to the first encrypted media content, the playback device records the duration of the pause and reports this duration to the system monitoring module. When the playback device starts playing, it delays the playback of the first decrypted encrypted media content based on its recorded historical buffering duration information. The duration of the first encrypted media content is determined through the following steps: Monitor the current operating status of the system, which includes at least one of the key management server, key gateway, and authentication system; Determine the current system's state score based on its current operating status; Determine if the state score is less than the first score threshold; If the state score is less than the first score threshold, the media content encryption machine encrypts all audio and video media content using the first encryption key; If the state score is greater than or equal to the first score threshold, determine whether the state score is less than the second score threshold, where the first score threshold is less than the second score threshold; If the state score is less than the second score threshold, the duration of the first encrypted media content is set to the time value corresponding to the state score, wherein the larger the state score, the smaller the time value, and the smaller the state score, the larger the time value. If the state score is greater than or equal to the second score threshold, the duration of the first encrypted media content is set to a preset time value.

15. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 11.

16. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 11.

Images