File playing method, display terminal, file playing system, medium and product

Abstract

The invention discloses a file playing method, a display terminal, a file playing system, a medium and a product. The method comprises the following steps: receiving a playing file, wherein the playing file comprises a security algorithm, a plurality of sub-files, playing configuration information of each sub-file and an initial hash value corresponding to each sub-file; the data integrity of the playing file is judged according to a security algorithm and the initial hash value, under the condition that the data of the playing file is complete, encryption processing is conducted on the playing file through a pre-stored secret key, and the encrypted playing file is stored in a preset storage space; the secret key is created and encrypted by the cloud platform and then sent to the local display terminal; in response to a playing instruction of a user, decrypting the encrypted secret key, and decrypting the encrypted playing file by using the secret key; and playing the playing file according to the playing configuration information of each sub-file. By adopting the method, the security of the playing file can be effectively ensured, namely the security of the playing content of the display terminal is effectively ensured.

Description

Technical Field

[0001] The present application relates to the field of data processing, and in particular to a file playback method, a display terminal, a file playback system, a medium, and a product. Background Art

[0002] With the development of electronic devices, the types of terminals are increasing, such as all-in-one computers, smart TVs, and large commercial displays. Accordingly, the application scenarios of terminals are also increasing. For example, in scenarios such as product information display, exhibitions, and internal corporate presentations, terminals need to play and display videos, images, audio, and other files.

[0003] However, the playback files stored in the terminal are at risk of being replaced and modified, which can easily lead to security issues in the terminal playback content. Summary of the Invention

[0004] In view of the above-mentioned defects or deficiencies in the prior art, it is desired to provide a file playback method, display terminal, file playback system, medium and product, which effectively ensure the security of the playback file through the triple encryption measures of integrity verification, secret key encryption and playback file encryption, that is, effectively ensure the security of the playback content of the display terminal.

[0005] In a first aspect, the present application provides a file playback method. The method comprises: Receive a playback file, which includes a security algorithm, multiple sub-files, playback configuration information for each sub-file, and an initial hash value corresponding to each sub-file; The data integrity of the playback file is determined based on the security algorithm and the initial hash value. If the playback file data is complete, the playback file is encrypted using the pre-stored secret key and stored in the preset storage space; the secret key is created and encrypted by the cloud platform and then sent to the local display terminal; In response to a user's playback instruction, the encrypted key is decrypted, and the encrypted playback file is decrypted using the key; Play the files according to the playback configuration information of each sub-file In combination with the first aspect, in a possible implementation method, the data integrity of the playback file is determined based on the security algorithm and the initial hash value, including: parsing the playback file to obtain the security algorithm, multiple sub-files and the initial hash value corresponding to each sub-file; for each sub-file, encrypting the sub-file using the security algorithm to obtain the hash value of the sub-file; comparing the hash value with the initial hash value corresponding to the sub-file, if the hash value and the corresponding initial hash value are consistent, it is determined that the sub-file data is complete; when each sub-file data is complete, it is determined that the playback file data is complete.

[0006] In combination with the first aspect, in a possible implementation method, the playback file also includes the storage address of each sub-file on the server where the cloud platform is located, and the method also includes: if the hash value of the sub-file is inconsistent with the corresponding initial hash value, obtaining the sub-file corresponding to the initial hash value from the storage address; and replacing the sub-file according to the sub-file corresponding to the initial hash value.

[0007] In combination with the first aspect, in one possible implementation method, the playback file is encrypted using a pre-stored key, including: for each sub-file, comparing the storage space occupied by the sub-file with a preset threshold; if the storage space occupied by the sub-file is greater than the preset threshold, locally encrypting the sub-file using the pre-stored key.

[0008] In combination with the first aspect, in a possible implementation method, the sub-file includes a file header and a file body, and the sub-file is locally encrypted using a pre-stored secret key, including: segmenting the file body of the sub-file to obtain multiple initial data segments; using the secret key to encrypt the file header of the sub-file and at least one target data segment among the multiple data segments; generating a locally encrypted sub-file based on the position of the target data segment, each encrypted target data segment, the encrypted file header, and other initial data segments among the multiple initial data segments except the target data segments.

[0009] In combination with the first aspect, in a possible implementation method, the file playback method also includes: creating encryption information and decryption information corresponding to the secret key, sending the encryption information to the cloud platform to instruct the cloud platform to use the encryption information to encrypt the generated secret key; after receiving the encrypted secret key sent by the cloud platform, using the decryption information to decrypt the encrypted secret key to obtain the secret key.

[0010] In a second aspect, the present application further provides a display terminal. The display terminal includes a transceiver unit, a display panel, and a processing unit. The transceiver unit is used to receive a playback file; the playback file includes a security algorithm, multiple sub-files, playback configuration information of each sub-file, and an initial hash value corresponding to each sub-file; A processing unit is used to determine the data integrity of the playback file based on the security algorithm and the initial hash value. When the playback file data is complete, the playback file is encrypted using a pre-stored secret key and the encrypted playback file is stored in a preset storage space. The secret key is created and encrypted by the cloud platform and sent to the local display terminal. The processing unit is used to respond to the user's playback instruction, decrypt the encrypted secret key, and decrypt the encrypted playback file using the secret key; and play the playback file on the display panel according to the playback configuration information of each sub-file.

[0011] In a third aspect, the present application also provides a file playback system. The system includes at least one display terminal, a user terminal, and a cloud platform. The user terminal is used to generate a playback file in response to a user operation and send the playback file to the display terminal, or send the playback file to the display terminal via a cloud platform; The cloud platform is used to create a secret key corresponding to each display terminal and encrypt the key and send it to the corresponding display terminal; The display terminal is used to implement the method as described in the first aspect and any one of the first aspects.

[0012] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the method as described in the first aspect and any one of the first aspects is implemented.

[0013] In a fifth aspect, the present application further provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, implements the method described in any one of the first and second aspects.

[0014] The embodiment of the present application provides a file playback method, a display terminal, a file playback system, a medium and a product. After receiving the playback file, the display terminal first determines the data integrity of the playback file based on the security algorithm and the initial hash value to ensure the security of the playback file during the transmission process. When the playback file data is complete, the encrypted key is first decrypted, and then the decrypted key is used to encrypt and store the playback file, ensuring the security of the playback file during the storage process and the security of the key used to encrypt the playback file. Then, when the display terminal needs to play the file, the encrypted key is first decrypted, and then the decrypted key is used to decrypt the playback file again, and finally the file playback is completed. In the embodiment of the present application, the display terminal effectively ensures the security of the playback file through triple encryption measures (integrity verification, key encryption, and playback file encryption) from receiving the playback file, storing the playback file to before the file is played, that is, effectively ensures the security of the playback content of the display terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Other features, objects and advantages of the present application will become more apparent upon reading the detailed description of non-limiting embodiments made with reference to the following drawings: Figure 1 A schematic structural diagram of a file playback system in one embodiment; Figure 2 1 is a flowchart of a file playing method according to an embodiment; Figure 3 is another flowchart of a file playing method in one embodiment; Figure 4 is another flowchart of a file playing method in one embodiment; Figure 5 is another flowchart of a file playing method in one embodiment; Figure 6 is another flowchart of a file playing method in one embodiment; Figure 7 is another flowchart of a file playing method in one embodiment; Figure 8 FIG. 1 is a schematic diagram showing the structure of a display terminal in an embodiment. DETAILED DESCRIPTION

[0016] The present application will be further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are merely for the purpose of explaining the relevant invention and are not intended to limit the invention. It should also be noted that, for ease of description, only portions relevant to the invention are shown in the accompanying drawings.

[0017] It should be noted that, in the absence of conflict, the embodiments in this application and the features in the embodiments can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments. In addition, the term "and / or" herein is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. The terms "first" and "second" in the description and claims of the embodiments of this application are used to distinguish different objects, rather than to describe a specific order of objects.

[0018] The file playing method provided in the embodiment of the present application can be applied to Figure 1 The file playback system shown includes at least one display terminal 10, a user terminal 20, and a cloud platform 30. The user terminal 20 is configured to generate a playback file in response to a user operation and send the playback file to the display terminal 10, or to send the playback file to the display terminal 10 via the cloud platform 30. The display terminal 10 is configured to display and play the playback file. The display terminal 10 can be an all-in-one computer, a smart TV, a large commercial display screen, or other display device.

[0019] In one embodiment, Figure 2 As shown, a file playing method is provided, which is applied to Figure 1 The display terminal 10 in the embodiment is used as an example to illustrate, including the following steps: Step 101: Receive a playback file.

[0020] The playback file includes a security algorithm, multiple sub-files, playback configuration information of each sub-file, and an initial hash value corresponding to each sub-file.

[0021] The sub-files are multimedia files such as pictures, videos, music, etc. The play configuration information may include the play time, play times, and play order of the sub-files.

[0022] In the embodiment of the present application, the user can create a playback file on the user terminal 20, such as selecting a sub-file, configuring the playback time of the sub-file, etc. After the playback file is created, the playback file is sent directly to the display terminal 10, or the playback file is sent to the cloud platform 30, which then sends it to the corresponding display terminal 10.

[0023] In one possible implementation, if the user terminal 20 directly sends a playback file to the display terminal 10, the user terminal 20 must establish a connection with the display terminal 10 before sending the playback file. Specifically, the display terminal 10 may display its network connection information (e.g., the connected wireless network) on a display panel using text, a QR code, or other means. The user terminal 20 then uses this network connection information to join the wireless network where the display terminal 10 resides, establishing a communication connection with the display terminal 10. Alternatively, the user terminal 20 may store information for multiple display terminals 10, and the user may select a display terminal 10 and establish a connection by clicking an icon or selecting an identifier on the user terminal 20's display interface. It is understood that the user terminal 20 and the cloud platform 30 can simultaneously connect to multiple display terminals, allowing for simultaneous file transfer and playback control for multiple display terminals 10, thereby improving file playback control efficiency. For example, file transfer and playback control can be performed for multiple navigation terminals within a shopping mall.

[0024] In one possible implementation, if the user terminal 20 sends a playback file to the cloud platform 30, the cloud platform 30 may store the playback file in a backend server and add the storage address of the playback file, or the storage address of each sub-file in the playback file, to the playback file; then, the playback file with the added storage address information is sent to the display terminal 10. In other words, the playback file also includes the storage address of the playback file in the backend server of the cloud platform, or the storage address of each sub-file in the backend server of the cloud platform.

[0025] In an embodiment of the present application, considering the security risks of subfiles being replaced or deleted during transmission, after determining the subfiles to be played, the user terminal 10 can use a preset security algorithm to encrypt each subfile to obtain an initial hash value corresponding to each subfile, which can uniquely represent the corresponding subfile. A playback file is then generated based on the multiple subfiles, the playback configuration information of each subfile, the security algorithm, and the initial hash value corresponding to each subfile. The security algorithm can be a secure hash algorithm, such as SHA-256, based on which the subfiles are encrypted to obtain a 256-bit initial hash value that uniquely represents the subfile.

[0026] In one possible implementation, the user terminal 20 may also use a preset security algorithm to perform overall encryption processing on the multiple sub-files to obtain a corresponding initial hash value. Then, a playback file is generated based on the multiple sub-files, the playback configuration information of each sub-file, the security algorithm, and the initial hash value corresponding to the multiple sub-files.

[0027] In one possible implementation, the display terminal 10 and the user terminal 20 may be integrated with a playback management module, such as an application for playback management. The user terminal 20 may use the playback management module to create and transmit playback files, and the display terminal 10 may use the playback management module to manage the security and playback of playback files.

[0028] Step 102: Determine the data integrity of the playback file based on the security algorithm and the initial hash value. If the playback file data is complete, encrypt the playback file using a pre-stored secret key and store the encrypted playback file in a preset storage space.

[0029] In the embodiment of the present application, after the display terminal 10 receives the playback file sent by the user terminal 20 or the cloud platform 30, it first verifies the data integrity of the received playback file based on the security algorithm and the initial hash value. Since the initial hash value can uniquely represent the corresponding sub-file, if any data in the sub-file changes, the hash value obtained by encrypting the sub-file again based on the security algorithm will also change. Therefore, after receiving the playback file, the display terminal 10 can encrypt each sub-file based on the security algorithm to obtain the corresponding hash value, and compare it with the initial hash value corresponding to the sub-file. According to the comparison result, it can be determined whether the data in the sub-file has changed. If the data in the sub-file has not changed, it indicates that the sub-file data is complete, and then the data of each sub-file in the playback file is complete, which indicates that the playback file data is complete, indicating that no transmission errors such as replacement or deletion have occurred in the playback file during the transmission process.

[0030] After confirming that the playback file data is complete, the playback file can be stored locally until the display terminal 10 has a playback request, and then each sub-file in the playback file is played. During the storage process of the playback file, in order to ensure its security, the playback file can be encrypted using a pre-stored secret key and the encrypted playback file is stored locally.

[0031] Furthermore, to avoid security issues with playback files caused by key leakage, the key can be created and encrypted by the cloud platform, sent to the display terminal 10, and stored locally on the display terminal 10. After verifying the data integrity of the playback file, the display terminal 10 must first decrypt the pre-stored encrypted key and then use the decrypted key to encrypt the playback file. A symmetric encryption algorithm, such as the Advanced Encryption Standard (AES), can be used to encrypt the playback file using the key. This means that the same key is used to encrypt and decrypt the playback file. Since both encryption and decryption of the playback file are performed locally on the display terminal 10, using the same key is more convenient and efficient.

[0032] After the playback file is encrypted using a secret key, the encrypted playback file can be stored in a preset storage space. The preset storage space can be a private storage space, for example, it can be the storage space corresponding to the playback management module integrated on the display terminal 10. The private storage space cannot be scanned by the local system of the display terminal 10, thereby preventing other users from viewing or modifying the playback file through the local system of the display terminal 10, ensuring the security of the playback file. Moreover, the playback file can be deleted synchronously with the uninstallation or deletion of the playback management module, avoiding the legacy of the playback file. Step 103: In response to the user's play instruction, the encrypted key is decrypted, and the encrypted play file is decrypted using the key.

[0033] In this embodiment of the present application, a user can control playback of a display terminal 10 on the user terminal 20. For example, the user can select at least one display terminal 10 on which to play a file on the program page of the playback management module of the user terminal 20 and then click the "Play" button. In response to the user's operation, the user terminal 20 generates a playback instruction and sends it to the at least one display terminal 10 selected by the user. After receiving the playback instruction, the display terminal 10 first decrypts the pre-stored encryption key and then uses the decrypted key to decrypt the encrypted playback file to obtain the playback file.

[0034] In one possible implementation, after decrypting the playback file, before playing the file, the integrity of each sub-file in the playback file can be checked again according to the security algorithm and the initial hash value to ensure the data integrity of each sub-file, that is, to ensure the security of the playback content of the display terminal 10.

[0035] Step 104: Play the files according to the playback configuration information of each sub-file.

[0036] In the embodiment of the present application, after decrypting the playback file, the playback file is parsed to obtain multiple sub-files and the playback configuration information corresponding to each sub-file. Then, the corresponding sub-file can be played according to the parameters such as the playback time, playback number, and playback order indicated by the playback configuration information.

[0037] It can be understood that the decrypted secret key and the playback configuration information obtained after decryption are only used for system reading and use (for example, the decrypted secret key is used to encrypt and decrypt the playback file; the decrypted playback configuration information is used to control the playback of each sub-file), and no corresponding physical file is generated to prevent malicious reading and utilization.

[0038] In the file playback method provided in the embodiment of the present application, after receiving the playback file, the display terminal first determines the data integrity of the playback file based on the security algorithm and the initial hash value to ensure the security of the playback file during the transmission process. When the playback file data is complete, the encrypted key is first decrypted, and then the playback file is encrypted and stored using the decrypted key to ensure the security of the playback file during the storage process, as well as the security of the key used to encrypt the playback file. Then, when the display terminal needs to play the file, the encrypted key is first decrypted, and then the decrypted key is used to decrypt the playback file again, and finally the file playback is completed. In the embodiment of the present application, the display terminal effectively ensures the security of the playback file through triple encryption measures (integrity verification, key encryption, and playback file encryption) from receiving the playback file, storing the playback file to before the file is played, that is, effectively ensures the security of the playback content of the display terminal.

[0039] The embodiment described above introduces a scheme for integrity checking of playback files. In another embodiment of the present application, the data integrity of the playback file can be determined by comparing the hash value. For example, the above-mentioned "determining the data integrity of the playback file based on the security algorithm and the initial hash value" specifically includes the following: Figure 3 Steps shown: Step 201: parse the playback file to obtain a security algorithm, multiple sub-files, and an initial hash value corresponding to each sub-file.

[0040] Step 202: For each sub-file, encrypt the sub-file using a security algorithm to obtain a hash value of the sub-file; compare the hash value with the initial hash value corresponding to the sub-file; if the hash value is consistent with the corresponding initial hash value, it is determined that the sub-file data is complete.

[0041] Step 203: If the data of each sub-file is complete, determine that the playback file data is complete.

[0042] In the embodiment of the present application, after receiving a playback file, the playback file is first parsed to obtain the security algorithm, multiple sub-files, and the initial hash value corresponding to each sub-file. The hash value obtained by processing the data file using the security algorithm is unique. If any data in the data file changes, the corresponding hash value will be different.

[0043] Therefore, a security algorithm can be used to encrypt each subfile in turn, obtaining a corresponding hash value for each subfile. The hash value is then compared with the subfile's initial hash value. If the hash value matches the corresponding initial hash value, it indicates that no data in the subfile has changed, meaning that the subfile has not been replaced or modified during transmission, thus confirming the subfile's data integrity. If all subfiles in a playback file are intact, the playback file can be confirmed to be data complete.

[0044] After receiving the playback file, the method provided in the embodiment of the present application can use a security algorithm to perform integrity verification on the playback file to ensure the security of the playback file during data transmission, that is, to ensure the security of the playback file stored locally.

[0045] In one embodiment, there are security issues such as replacement during the transmission of the playback file. In this case, the playback file also includes the storage address of each sub-file on the server where the cloud platform is located, and the playback file can be retrieved through the corresponding storage address. This embodiment includes Figure 4 Steps shown: Step 301: If the hash value of the sub-file is inconsistent with the corresponding initial hash value, obtain the sub-file corresponding to the initial hash value from the storage address.

[0046] Step 302: Replace the sub-file according to the sub-file corresponding to the initial hash value.

[0047] In the embodiment of the present application, when the user terminal 20 sends a playback file to the display terminal 10 via the cloud platform 30, the cloud platform 30 can store the playback file in the corresponding backend server and add the storage address of the playback file, or the storage address of each subfile in the playback file, to the playback file; then, the playback file with the added storage address information is sent to the display terminal 10. In other words, the playback file also includes the storage address of the playback file in the cloud platform's backend server, or the storage address of each subfile in the cloud platform's backend server. For example, a subfile in the playback file can be represented as follows: test.mp4::http: / / www.test.com / test.mp4::2::7be1c388318eefa2eaf72671b5483ace740bfde89cb852d8d1bbef2d21a30e8. Among them, test.mp4 is the file name of the sub-file, :: is a separator, http: / / www.test.com / test.mp4 is the storage address of the backend server corresponding to the sub-file on the cloud platform 30, 2 is the number of times the sub-file is played, and 7be1c388318eefa2eaf72671b5483ace740bfde89cb852d8d1bbef2d21a30e8 is the initial hash value of the sub-file.

[0048] Therefore, if the hash value obtained by display terminal 10 using the security algorithm to encrypt the subfile is inconsistent with the subfile's initial hash value, it indicates that the subfile has a security issue. The subfile is then retrieved from the subfile's corresponding storage address, i.e., the subfile corresponding to the initial hash value. Finally, the subfile with the security issue is replaced using the retrieved subfile.

[0049] The method provided in the embodiment of the present application can re-obtain the accurate sub-file based on the storage address corresponding to the sub-file that has security issues discovered during the integrity verification process, and replace the sub-file with security issues to ensure the accuracy of the playback file stored in the display terminal.

[0050] The above-mentioned embodiment introduces a scheme for encrypting and storing playback files. In another embodiment of the present application, in order to ensure the encryption and decryption efficiency of playback files, thereby ensuring the playback efficiency of playback files, the playback files can be partially encrypted. For example, the above-mentioned "encryption of playback files using pre-stored secret keys" may include the following: Figure 5 Steps shown: Step 401: For each sub-file, compare the storage space occupied by the sub-file with a preset threshold.

[0051] Step 402: If the storage space occupied by the sub-file is greater than a preset threshold, the sub-file is partially encrypted using a pre-stored key.

[0052] In the embodiment of the present application, considering that the storage space occupied by the file is relatively large, the time required for encryption and decryption is correspondingly long, resulting in a long response time for the display terminal 10 after receiving the play instruction. Therefore, for the sub-file that occupies a large storage space, only part of the data therein can be encrypted.

[0053] Specifically, a preset threshold may be set, and then the storage space occupied by each sub-file is compared with the preset threshold, and sub-files whose storage space occupied is greater than the preset threshold are screened out, and partial encryption processing is performed on these sub-files.

[0054] It is understandable that when partially encrypting a sub-file, the key may also be used to encrypt the portion of data that needs to be encrypted, that is, "partially encrypting the sub-file using a pre-stored key". This embodiment may include the following: Figure 6 The steps shown; Step 501: Segment the file body of the sub-file to obtain multiple initial data segments.

[0055] A subfile consists of a file header and a file body. The file header includes key information such as the subfile's file type, creation date, modification date, and file size, which needs to be encrypted. Therefore, the file body can be partially encrypted.

[0056] In the embodiment of the present application, the file body can be segmented into fixed lengths, for example, each 1000 bytes of data is divided into an initial data segment, and then at least one initial data segment is selected from the multiple initial data segments as the target data segment for encryption.

[0057] In one possible implementation, the user can manually segment the file body of each subfile on the user terminal 20 to obtain multiple initial data segments. The user can then specify at least one initial data segment to be encrypted, which is the target data segment. In response to the user's operation, the user terminal 20 generates the segmented subfiles and the location information of the target data segment (e.g., the order of the target data segment within the multiple initial data segments), and transmits this information to the display terminal 10.

[0058] Step 502: Use a secret key to encrypt the file header of the sub-file and at least one target data segment among the multiple data segments.

[0059] In an embodiment of the present application, after obtaining multiple data segments of a file body, an interval of initial data segments can be determined as target data segments. For example, the first, third, fifth, and so on initial data segments can be determined as target data segments, or the second, fourth, sixth, and so on initial data segments can be determined as target data segments. Then, the decrypted key is used to sequentially encrypt the subfile header and at least one target data segment from the multiple data segments, thereby obtaining an encrypted file header and each encrypted target data segment.

[0060] Step 503: Generate a partially encrypted sub-file based on the position of the target data segment, each encrypted target data segment, the encrypted file header, and other initial data segments except the target data segments in the multiple initial data segments.

[0061] In an embodiment of the present application, an encrypted file header and each encrypted target data segment are obtained, and then a locally encrypted sub-file can be generated based on the position of the target data segment, each encrypted target data segment, the encrypted file header, and other initial data segments except the target data segments in multiple initial data segments.

[0062] Specifically, the encrypted file header can be replaced with the original file header, and the encrypted target data segment can be replaced with the original target data segment, thereby obtaining a partially encrypted sub-file. For example, if the file body is segmented into 1000-byte segments and each initial data segment is encrypted at intervals, the partially encrypted sub-file can be represented as: [encrypted file header] + {[encrypted data segment 1, length 1000 bytes] + [normal data segment 1, length 5000 bytes] + [encrypted data segment 2, length 1000 bytes] + [normal data segment 2, length 5000 bytes] + … + [encrypted data segment n, length 1000 bytes], [normal data segment n, length n bytes]}.

[0063] In one possible implementation, metadata can also be generated based on the location of the target data segment and encryption information (key-related information) and added to the sub-file after local encryption processing, so that the display terminal 10 can accurately decrypt the sub-file before playing the file to ensure the reliability of file playback.

[0064] The method provided in the embodiment of the present application can perform local encryption processing on sub-files that occupy a large storage space, thereby improving the encryption and decryption efficiency of the playback file, and further improving the playback response speed of the display terminal.

[0065] The embodiment described above introduces a scheme for encrypting the key used to encrypt and play files. In another embodiment of the present application, encryption and decryption of the key can be achieved through different encryption information and decryption information. This embodiment includes the following: Figure 7 Steps shown: Step 601: Create encryption information and decryption information corresponding to the key, and send the encryption information to the cloud platform to instruct the cloud platform to use the encryption information to encrypt the generated key.

[0066] Step 602: After receiving the encrypted key sent by the cloud platform, the encrypted key is decrypted using the decryption information to obtain the key.

[0067] In the embodiment of the present application, the key is generated by the cloud platform 30 and encrypted and transmitted to the display terminal 10, which is then decrypted locally by the display terminal 10. That is, the encryption and decryption of the key are performed on different platforms. Therefore, to further ensure the security of the key, the asymmetric encryption algorithm RSA can be used to encrypt and decrypt the key. That is, the key is encrypted and decrypted using different encryption information (public key) and decryption information (private key).

[0068] Specifically, the display terminal 10 may create encryption information and decryption information corresponding to the key, and send the encryption information to the cloud platform 30. After instructing the cloud platform 30 to generate the key corresponding to the display terminal 10, it uses the encryption information to encrypt the key and returns the encrypted key to the display terminal 10. After receiving the encrypted key sent by the cloud platform 30, the display terminal 10 uses the decryption information to decrypt the encrypted key and ultimately obtain the key.

[0069] For example, the display terminal 10 creates a private key PK_RSAPriv and a public key PK_RSAPub, where the private key is stored locally and the public key is sent to the cloud platform 30. After the cloud platform 30 generates the secret key K_AES, it encrypts the secret key using the public key. This process can be expressed as Enc_K_AES = RSA_Encrypt(K_AES, PK_RSAPub), where Enc_K_AES is the encrypted secret key and RSA_Encrypt is the encryption function. The cloud platform 30 sends Enc_K_AES to the display terminal 10. After receiving the encrypted secret key Enc_K_AES, the display terminal 10 decrypts it using the private key. This process can be expressed as K_AES = RSA_Decrypt(Enc_K_AES, PK_RSAPriv), where RSA_Decrypt is the decryption function.

[0070] In the method provided in the embodiment of the present application, the display terminal can create different encryption information and decryption information, realize the encryption and decryption of the secret key on different platforms, and effectively ensure the security of the secret key.

[0071] It should be noted that although the operations of the present method are described in a particular order in the accompanying drawings, this does not require or imply that the operations must be performed in that particular order, or that all of the illustrated operations must be performed to achieve the desired results. Rather, the steps depicted in the flowcharts may be performed in a different order. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into a single step, and / or a single step may be broken down into multiple steps.

[0072] In one embodiment, Figure 8 As shown, a display terminal 10 is provided, which includes a transceiver unit 11, a display panel 12, and a processing unit 13. The transceiver unit 11 is used to receive a playback file; the playback file includes a security algorithm, multiple sub-files, playback configuration information of each sub-file, and an initial hash value corresponding to each sub-file; the processing unit 13 is used to determine the data integrity of the playback file based on the security algorithm and the initial hash value, and if the playback file data is complete, encrypt the playback file using a pre-stored secret key and store the encrypted playback file in a preset storage space; the secret key is created and encrypted by the cloud platform and sent to the display terminal 10 locally; and the processing unit 13 is used to decrypt the encrypted secret key in response to a user's playback instruction and decrypt the encrypted playback file using the secret key; and the playback file is played on the display panel 12 according to the playback configuration information of each sub-file.

[0073] In one embodiment, Figure 1 As shown, a file playback system is provided, comprising at least one display terminal 10, a user terminal 20, and a cloud platform 30. The user terminal 20 is configured to generate a playback file in response to a user operation and send the playback file to the display terminal 10, or to send the playback file to the display terminal 10 via the cloud platform 30. The cloud platform 30 is configured to create a key corresponding to each display terminal 10 and encrypt the key and send it to the corresponding display terminal 10. The display terminal 10 is configured to implement the file playback method described in the above embodiment. The cloud platform 30 can proactively generate a key corresponding to each connected display terminal 10, or it can generate a key for the display terminal 10 upon receiving encrypted information (public key) sent by the display terminal 10 and encrypt the key using the encrypted information.

[0074] It should be noted that the computer-readable medium described herein may be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this application, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. This propagated data signal may take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transfer a program for use by or in conjunction with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium may be transmitted using any suitable medium, including but not limited to wireless, wire, optical cable, RF, or any suitable combination thereof.

[0075] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present invention. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of code, and the module, program segment, or a part of code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order than that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of the boxes in the block diagram and / or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0076] The units or modules involved in the embodiments described in this application may be implemented in software or hardware. The units or modules described may also be provided in a processor. The names of these units or modules do not, in certain circumstances, constitute limitations on the units or modules themselves.

[0077] As another aspect, the present application further provides a computer-readable storage medium, which may be included in the computer device described in the above embodiment, or may exist independently without being assembled into the computer device. The above computer-readable storage medium stores one or more programs, and when the above programs are used by one or more processors to execute the method described in the present application. For example, it can be executed Figures 2 to 7 The individual steps of the method are shown.

[0078] The present application embodiment provides a computer program product, which includes instructions. When the instructions are executed, the method described in the embodiment of the present application is executed. For example, you can execute Figures 2 to 7 The individual steps of the method are shown.

[0079] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the above-mentioned embodiments. In particular, any reference to memory, database, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The databases involved in the various embodiments provided herein may include at least one of a relational database and a non-relational database. Non-relational databases may include, but are not limited to, distributed databases based on blockchains. The processors involved in the various embodiments provided herein may be, but are not limited to, general-purpose processors, central processing units (CPUs), graphics processing units (GPUs), digital signal processors (DSPs), programmable logic devices (PLDs), data processing logic devices based on quantum computing, and the like.

[0080] The above description is merely a preferred embodiment of the present application and an illustration of the technical principles employed. Those skilled in the art should understand that the scope of the invention herein is not limited to the technical solutions formed by the specific combination of the above-mentioned technical features, but also encompasses other technical solutions formed by any combination of the above-mentioned technical features or their equivalents without departing from the inventive concept. For example, a technical solution formed by replacing the above-mentioned features with (but not limited to) technical features having similar functions disclosed in this application.

Claims

1. A file playing method, characterized in that: The method comprises: Receive a playback file, the playback file including a security algorithm, multiple sub-files, playback configuration information of each sub-file, and an initial hash value corresponding to each sub-file; Determining the data integrity of the playback file based on the security algorithm and the initial hash value, and if the playback file data is complete, encrypting the playback file using a pre-stored secret key, and storing the encrypted playback file in a preset storage space; the secret key is created and encrypted by the cloud platform and then sent to the local display terminal; In response to a user's playback instruction, decrypting the encrypted key and using the key to decrypt the encrypted playback file; The playback file is played according to the playback configuration information of each sub-file.

2. The method according to claim 1, characterized in that The determining the data integrity of the playback file according to the security algorithm and the initial hash value includes: Parsing the playback file to obtain the security algorithm, the multiple sub-files, and the initial hash value corresponding to each sub-file; For each of the subfiles, encrypt the subfile using the security algorithm to obtain a hash value of the subfile; compare the hash value with an initial hash value corresponding to the subfile, and if the hash value is consistent with the corresponding initial hash value, determine that the subfile data is complete; When each of the sub-file data is complete, it is determined that the playback file data is complete.

3. The method according to claim 2, characterized in that The playback file also includes the storage address of each sub-file on the server where the cloud platform is located, and the method further includes: If the hash value of the sub-file is inconsistent with the corresponding initial hash value, obtaining the sub-file corresponding to the initial hash value from the storage address; The sub-file is replaced according to the sub-file corresponding to the initial hash value.

4. The method according to claim 1, wherein The encrypting the playback file using a pre-stored key includes: For each of the sub-files, comparing the storage space occupied by the sub-file with a preset threshold; If the storage space occupied by the sub-file is greater than the preset threshold, the sub-file is partially encrypted using a pre-stored key.

5. The method according to claim 4, characterized in that The sub-file includes a file header and a file body, and the partially encrypting the sub-file using a pre-stored secret key includes: Segmenting the file body of the sub-file to obtain a plurality of initial data segments; Using the secret key, encrypting the file header of the subfile and at least one target data segment among the multiple data segments; A partially encrypted sub-file is generated based on the position of the target data segment, each encrypted target data segment, the encrypted file header, and other initial data segments in the multiple initial data segments except each target data segment.

6. The method according to claim 1, characterized in that The method further comprises: Creating encryption information and decryption information corresponding to the secret key, and sending the encryption information to the cloud platform to instruct the cloud platform to encrypt the generated secret key using the encryption information; After receiving the encrypted key sent by the cloud platform, the encrypted key is decrypted using the decryption information to obtain the key.

7. A display terminal, characterized in that: The display terminal includes a transceiver unit, a display panel and a processing unit. The transceiver unit is used to receive a playback file; the playback file includes a security algorithm, multiple sub-files, playback configuration information of each sub-file, and an initial hash value corresponding to each sub-file; The processing unit is configured to determine the data integrity of the playback file based on the security algorithm and the initial hash value, and if the playback file data is complete, encrypt the playback file using a pre-stored secret key, and store the encrypted playback file in a preset storage space; The secret key is created and encrypted by the cloud platform and then sent to the local display terminal; And, it is used to decrypt the encrypted secret key in response to the user's playback instruction, and use the secret key to decrypt the encrypted playback file; and play the playback file on the display panel according to the playback configuration information of each sub-file.

8. A file playing system, characterized in that: The system includes at least one display terminal, a user terminal and a cloud platform. The user terminal is configured to generate a playback file in response to a user operation and send the playback file to the display terminal, or send the playback file to the display terminal via the cloud platform; The cloud platform is used to create a secret key corresponding to each of the display terminals, and encrypt the secret key and send it to the corresponding display terminal; The display terminal is used to implement the steps of the method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images