Audio and video encryption and broadcasting methods, devices and equipment
By fully encrypting, dynamically segmenting, and adaptively encrypting audio and video data, combined with timestamps and network bandwidth monitoring, an encrypted information stream is generated and broadcast output is controlled. This solves the stability and security issues of audio and video encryption under network fluctuations, and achieves efficient and secure audio and video transmission.
Patent Information
- Application Number
- CN202510939689.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-08
- Publication Date
- 2026-03-06
- Estimated Expiration
- 2045-07-08
AI Technical Summary
Existing audio and video encryption methods are difficult to adapt in real time to changes in user bandwidth and network fluctuations, resulting in high risks of content piracy and reconstruction. Furthermore, traditional encryption methods are easily cracked, affecting playback stability.
The system performs full encryption of the target audio and video metadata, dynamically segments the data into blocks and distributes independent keys based on timestamps, monitors network bandwidth in real time for adaptive encryption, generates encrypted data packets, and controls the broadcast output of the encrypted information stream through a broadcast monitoring algorithm.
It enhances the security and anti-piracy capabilities of audio and video content, ensures the stability of transmission and playback quality under different network environments, and solves the problem that traditional encryption methods are easily cracked.
Smart Images

Figure CN120751178B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the technical field of audio and video encryption, and more particularly to an audio and video encryption and broadcasting method, apparatus, and device. Background Technology
[0002] With the widespread adoption of various audio and video applications such as streaming media platforms, smart TVs, OTT services, online education, and virtual conferencing, audio and video content is transmitted over the internet at high speed and on a large scale. Content protection has become a core issue in digital media services. Traditional audio and video encryption methods mainly include full file encryption, fixed block encryption, and static key encryption. These methods cannot adapt to changes in user bandwidth and network fluctuations in real time. Static keys are easily cracked, and the risk of content piracy and reconstruction is high. At the same time, in the public network environment, network bandwidth fluctuates drastically, especially in mobile networks or weak network environments. If encrypted content does not have adaptive transmission capabilities, it is very easy to cause stuttering, delays, or playback failures. Summary of the Invention
[0003] The purpose of this invention is to provide a method, apparatus, and device for audio and video encryption and broadcasting, aiming to solve the problem of high risk of cracking in the prior art.
[0004] The present invention is implemented as follows: Firstly, the present invention provides a method for audio and video encryption and broadcasting, comprising:
[0005] Full encryption of audio and video metadata is performed on the target audio and video to obtain basic encrypted information;
[0006] The target audio and video data is dynamically segmented into several blocks based on a predetermined time standard, and an independent key is distributed to each data block based on the current timestamp.
[0007] Real-time monitoring of network bandwidth status, combined with the independent key, is used to adaptively encrypt the data block to obtain a data encryption packet;
[0008] Based on the encryption form of the data encryption package, the basic encryption information is transformed accordingly to be combined with the data encryption package to generate an encrypted information stream;
[0009] The encrypted information stream is securely identified by a monitoring algorithm pre-deployed on the broadcast end in order to control the broadcast output of the encrypted information stream.
[0010] In a second aspect, the present invention provides an audio-visual encryption and broadcasting apparatus for implementing an audio-visual encryption and broadcasting method as described in any one of the first aspects, comprising:
[0011] The basic encryption module is used to fully encrypt the audio and video metadata of the target audio and video to obtain basic encrypted information;
[0012] The dynamic segmentation module is used to dynamically segment the target audio and video media data based on a predetermined time standard to generate several data blocks, and distribute an independent key to each data block based on the current timestamp.
[0013] A real-time encryption module is used to monitor network bandwidth in real time and combine it with the independent key to adaptively encrypt the data block to obtain a data encryption packet.
[0014] The information combination module is used to perform corresponding format transformation on the basic encrypted information based on the encryption form of the data encryption package, so as to combine it with the data encryption package to generate an encrypted information stream;
[0015] The information output module is used to perform security identification on the encrypted information stream through a monitoring algorithm pre-deployed on the broadcast end, so as to control the broadcast output of the encrypted information stream.
[0016] Thirdly, the present invention provides an audio-visual encryption and broadcasting device, including a memory and a processor, wherein the memory stores a computer program that can run on the processor, and the processor executes the computer program to implement an audio-visual encryption and broadcasting method as described in any of the first aspects.
[0017] This invention provides a method for encrypting and broadcasting audio and video, which has the following beneficial effects:
[0018] This invention performs full encryption of the target audio and video metadata, embeds encrypted watermarks during the encoding stage, dynamically divides data into blocks according to a predetermined time standard, distributes independent keys to each data block based on timestamps, monitors network bandwidth in real time, and adaptively encrypts data blocks using the keys to generate encrypted data packets. The basic encrypted information is formatted in an encrypted form and combined with the encrypted data packets to generate an encrypted information stream. The information stream is securely identified and its broadcast output is controlled by a monitoring algorithm at the broadcast end. This method can improve content security, anti-piracy capabilities, and transmission adaptability, ensuring broadcast quality and copyright security, and solving the problem of high cracking risk in existing technologies. Attached Figure Description
[0019] Figure 1 This is a schematic diagram illustrating the steps of an audio / video encryption and broadcasting method provided in an embodiment of the present invention;
[0020] Figure 2 This is a schematic diagram of the structure of an audio-visual encryption and broadcasting device provided in an embodiment of the present invention. Detailed Implementation
[0021] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.
[0022] The implementation of the present invention will be described in detail below with reference to specific embodiments.
[0023] Reference Figure 1 , Figure 2 The diagram shows a preferred embodiment of the present invention.
[0024] In a first aspect, the present invention provides a method for audio and video encryption and broadcasting, comprising:
[0025] S1: Full encryption of the target audio and video metadata is performed to obtain basic encrypted information;
[0026] S2: Dynamically divide the target audio and video into media data blocks based on a predetermined time standard to generate several data blocks, and distribute an independent key to each data block based on the current timestamp;
[0027] S3: Monitor network bandwidth in real time and combine it with the independent key to adaptively encrypt the data block to obtain a data encryption packet;
[0028] S4: Based on the encryption form of the data encryption package, the basic encryption information is transformed accordingly to combine with the data encryption package to generate an encrypted information stream;
[0029] S5: Securely identify the encrypted information stream using a monitoring algorithm pre-deployed on the broadcast end, in order to control the broadcast output of the encrypted information stream.
[0030] Specifically, in step S1 of the embodiment provided by the present invention, the audio and video metadata of the target audio and video is obtained. The metadata of the target audio and video contains key information, such as basic description information, technical parameters, copyright management information, file structure, etc. This information helps to maintain the integrity and traceability of the audio and video during the encryption process. Obtaining this metadata is a prerequisite for full encryption of the audio and video files. By extracting the audio and video metadata in a structured manner, it is ensured that the encryption can cover all key parts, while providing the basic information support required for decryption.
[0031] More specifically, audio and video metadata needs to be structured to convert it into an encryptable byte sequence. Structured processing helps ensure the consistency of metadata format, avoids data loss or incorrect processing, and can improve the efficiency and accuracy of subsequent encryption operations. The generation of standardized byte sequences contributes to the uniformity and standardization of subsequent encryption operations.
[0032] More specifically, randomly generating a 128-bit key can enhance encryption security. After the key is initialized into a basic encryption matrix, it can effectively encrypt the metadata of the target audio and video. Using a random key and matrix initialization ensures the uniqueness of each encryption process and prevents the security risks caused by the reuse of keys. The random key improves the unpredictability of the encryption process, making each encryption result unique and preventing data from being cracked or tampered with.
[0033] More specifically, a deep encryption matrix is generated and information correlation analysis is performed. The deep encryption matrix increases the security of the system through more complex encryption operations. Through information correlation analysis, the matching degree between the encryption matrix and the data can be improved. The purpose of this step is to enhance the encryption strength and ensure that the encrypted data has higher resistance to cracking attacks. By generating a deep encryption matrix, the encryption algorithm is further strengthened, the difficulty of data cracking is increased, and the stability of encryption is improved.
[0034] More specifically, information mapping correlation factors are generated. By generating information mapping correlation factors, a deeper integration between encrypted data and the encryption matrix can be achieved, making the encryption process more refined. This step, by processing the mapping factors, makes the encryption operation more flexible, facilitates subsequent decryption operations, provides a more efficient encryption and decryption process, makes the encryption process more intelligent, and further enhances data security.
[0035] More specifically, the original encoded ciphertext is generated and the data is encoded. The byte sequence is converted into information, and the original encoded ciphertext is generated by combining the data encoding in a predetermined format with the basic encryption matrix and the deep encryption matrix. This step is the key step in converting the data from the original format to the encrypted format, ensuring the traceability of the encrypted data and the original data. By generating the original encoded ciphertext, the consistency and integrity of the encrypted data and the original data are ensured, providing an accurate basis for the subsequent encryption and decryption process.
[0036] More specifically, embedded encrypted watermarks are used for copyright protection and identification of audio and video content. After embedding the watermark, even if the audio or video is illegally copied or transmitted, the source can be traced, protecting original content. As an "invisible" protective measure, encrypted watermarks prevent the unauthorized use of audio and video content, enhancing copyright protection. The watermark is invisible and therefore does not affect the user's viewing experience, but it can effectively trace copyright information when needed.
[0037] Understandably, this scheme provides an efficient and secure encryption and broadcasting mechanism by fully encrypting the target audio and video, embedding encrypted watermarks, performing structured processing, and generating a multi-level encryption matrix. Each step aims to improve encryption security, increase processing efficiency, and ensure that data is protected from tampering during broadcasting and transmission, while guaranteeing data integrity and traceability during decryption.
[0038] Specifically, in step S2 of the embodiment provided by the present invention, the audio and video data is dynamically segmented based on a predetermined time standard. Audio and video data usually contain a large amount of information. Directly encrypting the entire data results in an excessively long encryption process and high resource consumption. By segmenting based on a time standard, the audio and video data can be divided into several independent small blocks, which facilitates parallel processing and distributed encryption. The predetermined time standard can be to divide the audio and video data at certain time intervals (e.g., per second, per minute, or per frame), so that each data block has a fixed start and end point, which facilitates subsequent encryption and transmission. This segmentation method improves processing efficiency and can reduce the processing time of each encryption operation. Through dynamic segmentation, the system can make more efficient use of storage and transmission resources, making data transmission and decryption more flexible and efficient.
[0039] More specifically, distributing an independent key to each data block based on data segmentation can significantly improve encryption security. Each data block has an independent key, meaning that even if one key is cracked, the other data blocks remain secure. Distributing keys using timestamps ensures that the key for each data block is time-sensitive, enhancing the dynamism and unpredictability of encryption. This design effectively reduces the risk of system attacks, especially during data transmission. Each data block is encrypted with an independent key, reducing security risks associated with key sharing and improving the system's resistance to attacks. Distributing keys based on timestamps makes key updates for each data block more flexible and timely, preventing security issues caused by key reuse.
[0040] More specifically, encrypting the segmented audio and video data with an independent key for each block ensures individual protection for each data block, enhancing overall data security. This encryption method ensures efficiency and flexibility, employing different encryption methods (such as symmetric encryption algorithms) to guarantee high efficiency and meet performance requirements. Using an independent key for each data block improves data security. Even if an attacker obtains the key for a particular data block, they cannot decrypt other blocks. After encryption, each data block retains a timestamp-related key, making subsequent decryption dependent on the key at a specific point in time, thus avoiding the risk of key reuse or leakage.
[0041] More specifically, the process involves generating an encrypted information stream and broadcasting the data. When broadcasting each encrypted data block, the encrypted information stream needs to be organized in chronological order to ensure that each data block is decrypted and played at the correct time. When generating and transmitting the encrypted information stream, relevant decryption factors and information mappings are combined to ensure that the receiver can correctly restore the data. This ensures that the encrypted data can be transmitted in chronological order and in the correct manner, thereby reducing timing errors that occur during decryption and playback. Through the association of keys and information factors, the integrity and validity of the encrypted data are guaranteed, and an efficient encryption and decryption process can be maintained even in multiple transmissions.
[0042] More specifically, the receiving end uses timestamps and independent keys for data decryption. At the receiving end, the decryption process requires the use of a corresponding independent key to decrypt each data block. Keys are tracked and allocated through timestamps. The decryption end can correctly select the key for decryption based on the time information of each data block. The decryption process needs to take timeliness into account to ensure that the data can be decrypted and played on time upon receipt. The decryption end can associate the correct key with the timestamp, making the decryption process more accurate and smooth. Using timestamps and keys for decryption ensures the security and integrity of the data and synchronizes the decryption process with the playback time, thereby improving the smoothness of the data.
[0043] Understandably, by dynamically segmenting data based on time standards and assigning an independent key to each data block, the encryption security and transmission efficiency of the target audio and video data can be effectively improved. The independent key for each data block increases the difficulty of cracking, and the dynamic allocation of keys through timestamps avoids the risk of key reuse or leakage. This encryption method ensures the security of data during transmission and makes the decryption and playback process more efficient and smooth.
[0044] Specifically, in step S3 of the embodiment provided by the present invention, the network bandwidth status is monitored in real time. Network bandwidth is a key factor affecting data transmission performance, especially when transmitting large-scale audio and video data. Fluctuations in network bandwidth directly affect data encryption and transmission efficiency. Real-time monitoring of network bandwidth can help the system dynamically adjust encryption strategies to ensure the stability of data transmission. The bandwidth monitoring tool can periodically or in real time collect network bandwidth usage, including upload and download speeds, network latency, and packet loss rate. By monitoring bandwidth in real time, the system can determine whether to adjust the encryption strength or optimize the encryption algorithm based on the current bandwidth status, thereby avoiding excessively high encryption strength that could lead to network congestion and affect data transmission speed. It provides accurate bandwidth data, ensures reasonable allocation of network load, and improves the overall performance and efficiency of the system.
[0045] More specifically, the encryption strength is adjusted according to bandwidth conditions. Different network bandwidths affect encryption processing time and data transmission speed. When network bandwidth is high, a stronger encryption algorithm can be selected to enhance data security. Conversely, when bandwidth is low, a lower-strength encryption algorithm needs to be selected to ensure smooth and real-time data transmission. The matching of encryption strength and bandwidth needs to be adjusted in real time to ensure that high security is achieved without causing data transmission lag or delay. Automatically adjusting the encryption strength according to network bandwidth can improve data transmission efficiency without sacrificing security, ensuring the system's flexibility and adaptability. Through adaptive adjustment of encryption strength, performance bottlenecks caused by over-encryption are avoided, ensuring a smooth and fast data transmission process.
[0046] More specifically, adaptive encryption of data blocks using independent keys is employed. Each data block is assigned an independent key via timestamp. When adjusting the encryption strength based on real-time bandwidth conditions, the independent key for each data block ensures data security. Each data block selects a different encryption strength based on network bandwidth conditions, ensuring reasonable data protection even under conditions of significant bandwidth fluctuations. The encryption method of the data block switches according to different real-time network bandwidth, ensuring strong encryption when bandwidth is sufficient and weak encryption when bandwidth is insufficient. Adaptive encryption of data blocks using independent keys ensures the security of each data block. At the same time, the encryption strategy is dynamically adjusted according to bandwidth fluctuations to achieve optimal transmission efficiency and security. This approach ensures the intelligence and flexibility of the encryption process, avoiding the network congestion and latency problems caused by static encryption methods.
[0047] More specifically, data encryption packets are generated. These packets are data packages that have undergone adaptive encryption processing and contain audio and video data blocks encrypted with independent keys. Each encryption packet needs to carry a corresponding decryption factor during transmission so that the receiving end can correctly decrypt and restore the data. The data encryption packets need to be supplemented with necessary metadata and decryption information according to the encryption strength and encryption key selection to ensure that the decryption end can correctly process the encrypted data. The generated data encryption packets contain both secure encryption information and ensure data transmission efficiency. The encryption strength of each packet is optimized according to the current bandwidth conditions, thereby improving the stability and efficiency of data transmission. The design of the encryption packets enables the system to dynamically adapt to bandwidth changes in different network environments, avoiding performance bottlenecks caused by over-encryption, while ensuring data security and integrity.
[0048] More specifically, data encryption packets are broadcast, and the generated encryption packets are broadcast across the network to transmit data to the receiving end. The data packets need to remain structured during the broadcast process to ensure the security of each data block. The number and size of the encryption packets sent need to be determined based on network conditions to avoid network congestion caused by excessively large encryption packets. During data broadcasting, a reasonable balance between the size of the encryption packets and the encryption strength is ensured, effectively avoiding problems such as lag and packet loss in data transmission, ensuring real-time performance and smoothness. The data packet structure during broadcasting is clear, providing the receiving end with sufficient decryption information and timing control to ensure that the data can be efficiently and securely restored.
[0049] More specifically, the receiving end decrypts and restores the data. Based on the content of the encrypted packets in the broadcast, the receiving end needs to decrypt the encrypted packets in chronological order according to the corresponding decryption key and factors to restore the original audio and video data. During decryption, the receiving end needs to adjust the decryption strategy according to changes in bandwidth and encryption strength to ensure that each data packet can be decrypted in a timely and correct manner. The receiving end can flexibly adjust the decryption strategy according to the broadcast data packets and real-time bandwidth conditions to ensure data security while maximizing decryption efficiency, thus ensuring efficient data decryption, supporting real-time playback or processing, and maintaining data integrity and consistency.
[0050] Understandably, by monitoring network bandwidth in real time and using independent keys for adaptive encryption to generate encrypted data packets, the impact of bandwidth fluctuations can be effectively addressed. When bandwidth is high, a stronger encryption strategy is used to ensure data security; when bandwidth is low, the encryption strength is reduced to improve data transmission efficiency. This dynamic encryption strategy can ensure both data security and efficient transmission in different network environments, optimizing the data broadcasting and decryption process.
[0051] Specifically, in step S4 of the embodiment provided by the present invention, the encryption form of the data encryption packet is determined. The encryption form of the data encryption packet determines how the encrypted information is processed and formatted. The encryption form can be symmetric encryption, asymmetric encryption, or other encryption algorithms (such as AES, RSA, etc.). The choice of encryption form will affect the subsequent processing method of encrypted information. In this step, it is first necessary to identify or determine the encryption method used by the data encryption packet, as well as the related encryption key or decryption factor, to ensure that it can correctly connect with the subsequent encrypted information format transformation. After determining the encryption form, the system can process the encrypted information according to specific rules to avoid incompatibility issues between encrypted information and encryption packet, ensure the security and validity of data, provide a basis for the format transformation of subsequent steps, and ensure the smooth combination of encryption form and encryption packet.
[0052] More specifically, basic encryption information is extracted. This information typically includes encryption algorithms, key information, timestamps, and identifiers for encrypted blocks. It indicates the encryption method and information required for the decryption process of the encrypted packet. By extracting this basic encryption information, the system can better format the encrypted packet according to its format requirements. The extracted basic encryption information serves as input for format transformation, ensuring that the generated encrypted information stream has correct encrypted content and identifiers. Extracting basic encryption information ensures the accuracy of subsequent formatting and combination operations, enabling seamless integration of encrypted information with the data encrypted packet. Accurate basic information ensures the smooth parsing and decryption process of the encrypted packet, improving data security and availability.
[0053] More specifically, the basic encrypted information undergoes format transformation. Depending on the encryption method of the data encryption packet, the basic encrypted information needs to be formatted to conform to the structural requirements of the encryption packet. For example, in the case of AES encryption, the basic information needs to be converted into key material, initialization vector (IV), encryption mode, and other structures. This format transformation includes converting the encryption key into a specific encoding format, adjusting the structure of the timestamp information, or rearranging the data blocks according to the encryption algorithm to ensure that the encrypted information can be effectively embedded in the encryption packet. The format transformation ensures that the basic encrypted information is compatible with the encryption packet structure, thereby generating a reasonable encrypted information stream. Through the formatted encrypted information, the system can process and transmit data packets in a standardized manner, avoiding decryption problems caused by format mismatch.
[0054] More specifically, the formatted encrypted information is combined with the data encryption packet. The formatted encrypted information needs to be combined with the data encryption packet to form a complete encrypted information stream. This combination step ensures the integrity and consistency of the encrypted information stream. During the combination process, the system integrates the formatted encrypted information with the content of the data packet to generate an encrypted information stream that can be transmitted over the network. This step also includes adding necessary identifiers or metadata to ensure that the receiving end can correctly parse it. The combination of the data encryption packet and the encrypted information ensures data integrity and maintains the connection between the encrypted information and the original data. The combined encrypted information stream has a standard format, which facilitates encryption and decryption during transmission and ensures data security during transmission.
[0055] More specifically, generating an encrypted information stream involves combining formatted encrypted information with data encryption packets to create the final encrypted information stream. This encrypted information stream is a complete packet containing all encrypted data and can be transmitted over a network or other media. The generation of the encrypted information stream ensures the security, validity, and integrity of the data. The generated encrypted information stream will contain all necessary decryption factors, keys, and encrypted data blocks, ensuring the receiving end can perform the correct decryption operation. The generated encrypted information stream is standardized and can be transmitted stably in complex network environments, guaranteeing data security and reliability. The generation of the encrypted information stream provides a complete framework for subsequent data processing (such as decryption, playback, and other processing), ensuring the receiving end can accurately restore the encrypted data.
[0056] More specifically, the transmission of encrypted information streams involves transmitting the generated encrypted information stream so that the receiving end can decrypt and restore the original data. The encrypted information stream is then sent to the target receiving end for further processing via a network or other transmission methods. During transmission, the encrypted information stream must maintain its security to prevent tampering or leakage of information. The transmission process of the encrypted information stream can be further secured using encryption protocols such as TLS. Secure transmission methods ensure that the encrypted information stream is not tampered with during transmission, guaranteeing data integrity and confidentiality. The transmitted encrypted information stream ensures that the receiving end receives complete and correct encrypted data, guaranteeing data reliability and validity.
[0057] Understandably, by transforming the basic encrypted information and the data encryption packet into the corresponding formats, and combining the data encryption packet to generate an encrypted information stream, the secure transmission of encrypted data can be ensured. The execution of each step ensures that the encrypted information can be correctly formatted and combined under different encryption forms, and is finally transmitted to the receiving end for decryption. Through this process, not only is the security of the data improved, but also the efficiency and stability of the transmission process are ensured.
[0058] Specifically, in step S5 of the embodiment provided by the present invention, a monitoring algorithm is deployed at the broadcast end. By pre-deploying the monitoring algorithm at the broadcast end, the content of the encrypted information stream can be analyzed in real time to ensure that the data during the broadcast output process meets security standards and avoid potential security risks and vulnerabilities. The monitoring algorithm is responsible for evaluating and processing the encrypted information stream before broadcasting, ensuring that only encrypted information streams that meet the requirements are broadcast to the network. Deploying the monitoring algorithm can enhance the security of the broadcast end, making it the first line of defense for data stream monitoring, reducing security incidents that may be caused by illegal or abnormal data stream transmission. By deploying the monitoring algorithm, the broadcast end can check the encrypted information stream during real-time data transmission to prevent malicious tampering, forgery, or leakage of data, eliminating security risks from the source. The pre-deployed algorithm can effectively improve the security of the data broadcasting process and reduce the risks caused by human error or hacker attacks.
[0059] More specifically, the encrypted information stream undergoes security identification. This security identification step analyzes the encrypted data stream before transmission, checking for any potential anomalies or insecure content. Monitoring algorithms can perform security analysis based on characteristics such as the data's encryption algorithm, key length, and data block structure to identify risks of data leakage, tampering, or unauthorized access. Security identification typically includes verification of the encryption algorithm, key validity checks, and data structure consistency verification to ensure that the encrypted information stream complies with security regulations and has not been illegally tampered with. Through security identification, the system can effectively identify and prevent encrypted information streams that do not meet security requirements from entering the broadcast channel, avoiding threats to network security. The security identification process can quickly detect any abnormal or illegal behavior and take timely measures to ensure the confidentiality and integrity of the data are protected.
[0060] More specifically, after security identification, the algorithm needs to further analyze the legality and security of the encrypted information stream to confirm that it complies with the security specifications of the broadcast end. This analysis involves checking the source, destination, encryption strength, and other aspects of the encrypted information stream to ensure that the transmission path, receiving end, and encryption strength of the information stream meet the requirements. This step can ensure that the encrypted information stream complies with the prescribed encryption method and has not been maliciously tampered with or forged by comparing it with preset security standards. By analyzing the legality and security of the encrypted information stream, illegal data streams that may pose security risks can be effectively identified and blocked, reducing vulnerabilities in data transmission. This step helps prevent data streams transmitted through illegal encryption methods from posing potential threats to the network and ensures that the output data of the broadcast end complies with all security protocols and regulations.
[0061] More specifically, controlling the broadcast output of encrypted information streams involves the algorithm identifying and analyzing the security and legitimacy of the encrypted information streams. Based on the analysis results, the algorithm decides whether to allow the encrypted information stream to be broadcast. If the encrypted information stream meets security requirements, it can be allowed to broadcast; if an anomaly is detected or it does not meet security standards, broadcasting will be stopped or appropriate processing will be performed. The purpose of this step is to adopt a dynamic control mechanism based on previous check results to avoid broadcasting insecure or illegal data streams, improve the security protection capabilities of the broadcast end, and control the broadcast output of encrypted information streams. This can prevent insecure or illegal data streams from entering the network in real time, thereby ensuring the security of the broadcast process. This step can effectively prevent malicious data or attacks from harming the network environment, while ensuring that the broadcast encrypted information complies with data protection standards.
[0062] More specifically, recording and reporting security identification and control results enhances system security and traceability. Monitoring algorithms record the security identification and control results of encrypted information streams. These records facilitate subsequent security audits and analyses, and provide data support for future security protection. Reports on security control results can be provided to system administrators or security teams for further analysis and decision-making, helping to identify potential security vulnerabilities or areas for improvement. By recording and reporting security identification and control results, the system can accumulate data and achieve long-term security monitoring, ensuring that any potential security issues are detected and addressed in a timely manner. This provides data support for subsequent system optimization and security protection, and enhances the transparency of network security management.
[0063] More specifically, the system provides feedback and optimizes security identification algorithms. Based on recorded and reported security events and results, the system can provide feedback and optimize the monitoring algorithms to improve their identification and protection capabilities. By continuously learning and adapting to new security threats, the algorithms can more efficiently identify and prevent potential security risks. During the optimization process, the identification rules and processing procedures can be adjusted according to the actual attack situation to improve the system's intelligence and response capabilities. Through feedback and optimization, the security identification algorithms can continuously improve their performance, adapt to ever-changing network security threats, and enhance the system's resistance to attacks. The optimized algorithms can more accurately identify abnormal information flows, improving data security and transmission stability.
[0064] Understandably, by using monitoring algorithms pre-deployed on the broadcast end to securely identify encrypted information streams and control their broadcast output, efficient and secure management of encrypted data can be achieved. The execution of each step ensures the legality, integrity, and confidentiality of the data during the broadcast process, preventing potential security threats. The entire process effectively improves the security of the broadcast end and ensures the stability and security of the network environment.
[0065] This invention provides a method for encrypting and broadcasting audio and video, which has the following beneficial effects:
[0066] This invention performs full encryption of the target audio and video metadata, embeds encrypted watermarks during the encoding stage, dynamically divides data into blocks according to a predetermined time standard, distributes independent keys to each data block based on timestamps, monitors network bandwidth in real time, and adaptively encrypts data blocks using the keys to generate encrypted data packets. The basic encrypted information is formatted in an encrypted form and combined with the encrypted data packets to generate an encrypted information stream. The information stream is securely identified and its broadcast output is controlled by a monitoring algorithm at the broadcast end. This method can improve content security, anti-piracy capabilities, and transmission adaptability, ensuring broadcast quality and copyright security, and solving the problem of high cracking risk in existing technologies.
[0067] Preferably, the step of fully encrypting the target audio and video metadata to obtain basic encrypted information includes:
[0068] S11: Obtain the audio and video metadata of the target audio and video, and perform structured processing on the audio and video metadata of the target audio and video to generate a corresponding byte sequence; wherein, the audio and video metadata includes the basic description information, technical parameter information, file system information, copyright management information, and content structure information of the target audio and video;
[0069] S12: Randomly generate a 128-bit random key, and initialize the random key with a vector to generate a basic encryption matrix;
[0070] S13: Randomly generate a 128-bit multiple of random key and initialize it as a deep encryption matrix. Based on the basic encryption matrix, analyze the information correlation of the deep encryption matrix to produce several information mapping correlation factors.
[0071] S14: Perform information conversion on the byte sequence according to the information mapping association factor to generate the corresponding original encoded ciphertext, and perform data encoding on the basic encryption matrix and the deep encryption matrix in a predetermined format to combine the basic encryption matrix and the deep encryption matrix with the original encoded ciphertext in a predetermined format in the form of data encoding to obtain basic encrypted information.
[0072] Specifically, acquiring and structuring the audio and video metadata of the target audio / video file is crucial for standardizing the storage of various information within the audio / video (such as basic descriptions, technical parameters, file systems, copyright management, and content structure), and transforming this information into byte sequences that facilitate encryption. Structuring is fundamental for subsequent encryption and watermark embedding. By converting complex audio and video metadata into an ordered byte stream, data integrity and consistency are ensured, facilitating subsequent encryption. Furthermore, structured data makes it easier to embed encrypted watermarks.
[0073] More specifically, a 128-bit random key is randomly generated and vector-initialized to generate a basic encryption matrix. This 128-bit random key serves as the base key in the encryption process, and the vector initialization ensures that the generated key is unpredictable, increasing encryption security. The basic encryption matrix is the core of subsequent encryption processes, used to guarantee the strength of the encryption. By generating a random key and initializing it with a vector, the diversity and security of the encryption matrix are ensured, thus giving the encryption process a high degree of resistance to cracking. The introduction of the basic encryption matrix provides a necessary encryption layer for full encryption.
[0074] More specifically, a random key of multiples of 128 bits is randomly generated and initialized into a deep encryption matrix. This matrix is used to enhance the security of the encryption process, provide more complex encryption strength, and make the encryption process more difficult to reverse engineer. By generating the deep encryption matrix, the complexity of the encrypted data is further enhanced, the encryption security is improved, and the encrypted information is more difficult to parse and recover.
[0075] More specifically, the deep encryption matrix is analyzed based on the basic encryption matrix to generate information mapping correlation factors. The deep encryption matrix is then analyzed using the basic encryption matrix to find the correlation between the two and generate information mapping correlation factors to guide the subsequent encryption process. This process is crucial to ensuring that the encryption matrix can produce the expected encryption effect. The generation of information mapping correlation factors can ensure the synergistic effect between the basic encryption matrix and the deep encryption matrix, making the encryption process more accurate and effective.
[0076] More specifically, the byte sequence is transformed according to the information mapping association factor to generate the original encoded ciphertext. The byte sequence of the target audio and video is then transformed according to the generated information mapping association factor. This process transforms the original data into encrypted ciphertext through an encryption algorithm. This transformation can prevent the data from being illegally accessed or tampered with. The generated original encoded ciphertext is the encrypted data of the target audio and video, which has a strong protective effect and ensures that it is not stolen or cracked during transmission or storage.
[0077] More specifically, the basic encryption matrix and the deep encryption matrix are encoded in a predetermined format, and the encryption matrix is combined with the original encoded ciphertext. This operation integrates the various parts of the encryption process to ensure that the encrypted data can be stored and transmitted in a specific format. By encoding the encryption matrix and the ciphertext, the compatibility of the encrypted data and the encryption matrix in terms of format can be ensured, thus guaranteeing the operability and transmission stability of the encrypted data.
[0078] More specifically, the basic encryption matrix and deep encryption matrix are combined with the original encoded ciphertext in a predetermined format to form the final basic encryption information. This combination ensures that the encrypted information can effectively correspond to the target audio and video, so that the encrypted data can maintain the structure and information integrity of the original data. The final generated basic encryption information can not only effectively protect the audio and video metadata of the audio and video, but also ensure that the data is not lost or damaged during transmission, providing a guarantee for subsequent decryption and security verification.
[0079] Understandably, through the above steps, the audio and video metadata of the target audio and video is fully encrypted, and an encrypted watermark is embedded during the encoding stage. This process employs techniques such as random key generation, matrix initialization, and information association parsing to ensure high security and data integrity during the encryption process. The basic encrypted information generated after encryption provides strong protection for the audio and video data, preventing data leakage, tampering, or unauthorized access. At the same time, the pre-defined data encoding format ensures the operability and transmission stability of the encrypted data, improving the overall efficiency of the encryption process.
[0080] Preferably, the step of dynamically segmenting the target audio / video media data into blocks based on a predetermined time standard to generate several data blocks includes:
[0081] S21: Continuously generate timestamps through a pre-deployed time source module to construct a time positioning axis;
[0082] S22: Based on the time positioning axis, perform time positioning on the target audio and video media data, and perform preliminary block processing on the media data according to a predetermined time standard to obtain the preliminary block form of the media data;
[0083] S23: Based on the preliminary segmentation form, the media data is mapped with hash values of each segment data content, and keyframe sampling and similarity analysis are performed on each segment data content at the same time. The data compression redundancy of each segment data content is predicted by combining the hash value mapping results and the similarity analysis results, so as to dynamically optimize the preliminary segmentation form and obtain the dynamically optimized segmentation form.
[0084] S24: Divide the media data into several data blocks according to the dynamically optimized block division method.
[0085] Specifically, a time positioning axis is constructed by continuously generating timestamps through a pre-deployed time source module. The purpose of this time positioning axis is to provide a precise time reference for media data segmentation. This is the foundation for achieving time standardization and making segmentation time-based. The constructed time positioning axis provides a clear time scale for subsequent media data segmentation, enabling segmentation operations to rely on a precise time standard. This helps avoid data misalignment issues caused by time inconsistencies and ensures segmentation accuracy.
[0086] More specifically, the media data of the target audio and video is time-positioned based on the time positioning axis, and then initially segmented according to a predetermined time standard. This process ensures that the data is evenly distributed into different blocks according to specific time intervals, meeting the requirement of block time consistency. The initial block segmentation process, through standardized time block form, enables subsequent data compression, transmission and other operations to maintain a unified time structure, avoiding the problem of data misalignment or loss across time periods.
[0087] More specifically, hash value mapping is performed on the initially segmented media data, and keyframe sampling and similarity analysis are conducted on each segment. Hash value mapping for each segment helps ensure data consistency during the segmentation process and detects the integrity of segment content through hash values. At the same time, keyframe sampling and similarity analysis can identify and extract important information, reducing the amount of redundant data. Hash value mapping ensures the integrity of each data block, and sampling of keyframes reduces the processing of redundant data, improving data compression efficiency. Similarity analysis further optimizes the segmented data, thereby reducing the storage and processing costs of redundant data.
[0088] More specifically, by combining hash value mapping results and similarity analysis results, data compression redundancy prediction is performed on the content of each data block. By combining hash value mapping and similarity analysis results, the redundancy part of the data is identified through the redundancy prediction model, thereby optimizing the data compression process. This can effectively reduce unnecessary data load during storage and transmission. Through redundancy prediction, the storage requirements of the data blocks are dynamically optimized, avoiding the waste of storage space and accelerating the efficiency of subsequent data transmission. Effective data compression and redundancy prediction can improve the overall performance of the system and reduce storage pressure.
[0089] More specifically, the initial block format is dynamically optimized to obtain a dynamically optimized block format. Based on the redundancy prediction results, the initial block format is dynamically optimized. This optimization is based not only on the feedback of hash value and similarity analysis, but also on the data compression benefits and storage and transmission requirements, thereby optimizing the organization of data blocks. By dynamically optimizing the block format, the block structure can be flexibly adjusted according to the changes in real-time data characteristics, so that the final block format is most suitable for the data transmission and storage requirements in practical applications, thereby improving the overall efficiency and stability of the system.
[0090] More specifically, media data is divided into several data blocks according to a dynamically optimized segmentation method. Based on the dynamically optimized segmentation method, the target audio and video media data is finally segmented. This step ensures that the data segmentation not only meets the requirements of the time standard, but also takes into account the removal of redundant data, compression efficiency, and storage requirements of data blocks. The final segmentation ensures that the size and content of the data blocks can be balanced and optimized in various stages such as storage, transmission, and processing. This optimized segmentation method can effectively reduce unnecessary redundancy and improve the processing efficiency of media data in subsequent processes.
[0091] Understandably, through the above steps, the target audio and video media data is dynamically segmented based on time standards. In the segmentation process, techniques such as hash value mapping, keyframe sampling, similarity analysis, and redundancy prediction are introduced. Finally, through dynamic optimization, an efficient and accurate data block partitioning form is generated, which effectively improves the data compression and transmission efficiency, reduces the occupation of redundant information, and ensures the integrity and efficiency of the data.
[0092] Preferably, the step of distributing an independent key to each of the data blocks based on the current timestamp includes:
[0093] S25: Obtain the corresponding area of each data block on the time positioning axis to obtain the time positioning interval of each data block;
[0094] S26: Perform feature conversion on the timestamps contained in the time positioning intervals of each data block to generate a time-encoded sequence corresponding to each time positioning interval;
[0095] S27: Retrieve the pre-constructed master key and key evolution strategy, and analyze the key evolution characteristics of each time-coded sequence based on the key evolution strategy, so as to perform key evolution of the master key according to the key evolution characteristics to adapt to each data block, so as to generate an independent key for each data block.
[0096] Specifically, the corresponding region of each data block on the time positioning axis is obtained to obtain the time positioning interval of each data block. The data blocks are located through the time positioning axis to obtain the time range (time positioning interval) corresponding to each data block. This is a prerequisite for allocating an independent key to each data block, ensuring that the key evolution is based on the actual time period of the data block. By accurately determining the time interval of the data block, a time basis is provided for subsequent key allocation and evolution. This step ensures that the key allocation is consistent with the time interval of the data block, avoiding time mismatch or inconsistency problems, and ensuring the effectiveness and security of the encryption process.
[0097] More specifically, the timestamps within the time positioning intervals of each data block undergo feature transformation to generate a time-coded sequence corresponding to each time positioning interval. This time-coded sequence can be viewed as a digital representation of that time period and is used for subsequent key evolution and generation. This transformation provides unique and time-related input data for the key allocation process. Feature transformation enables timestamps to be converted into time-coded sequences suitable for key generation, closely linking key generation with the timestamps of data blocks. The generation of time-coded sequences provides a clear basis for subsequent evolution and key adjustments.
[0098] More specifically, the pre-constructed master key and key evolution strategy are retrieved. Based on the key evolution strategy, the key evolution characteristics of each time-coded sequence are analyzed. The pre-stored master key is retrieved, and the key evolution strategy is combined with the key evolution strategy to analyze the key evolution characteristics of the time-coded sequence. The key evolution strategy defines how to adjust the master key based on changes in the time-coded sequence so as to generate different independent keys for each data block. This analysis ensures that the key evolution process not only conforms to the predetermined security strategy, but also intelligently adjusts the master key according to changes in the time series. Through the analysis of key evolution characteristics, the key allocated to each data block is unique, improving the security and unpredictability of the key.
[0099] More specifically, based on the aforementioned key evolutionary characteristics, the master key undergoes key evolution adapted to each data block to generate an independent key for each data block. According to the analyzed key evolutionary characteristics, the master key evolves to adapt to the specific time period of each data block, thereby generating an independent key. The key for each data block evolves according to its time interval, ensuring that keys between different data blocks are independent and do not overlap. Through adaptive key evolution, data blocks from different time periods will each have their own unique key. This ensures strong key security during encryption while avoiding key reuse and potential security vulnerabilities. The independent key for each data block provides a reliable foundation for subsequent decryption and access control.
[0100] Understandably, through the above steps, the process of assigning an independent key to each data block based on the current timestamp is realized, and the evolution of each key is based on time positioning and feature transformation, ensuring the uniqueness and security of the key. Through key evolutionary feature parsing and key adaptive evolution, the efficiency and security of the encryption process are guaranteed. This process helps to improve the protection capability of data blocks, prevent potential key reuse risks, and make key management more flexible and secure.
[0101] Preferably, the step of real-time monitoring of network bandwidth and combining it with the independent key to adaptively encrypt the data block to obtain a data encryption packet includes:
[0102] S31: Monitor the network bandwidth status of the broadcast end in real time to generate network quality parameters at the current moment;
[0103] S32: When the data block is in a state of waiting to be sent, select a data encryption mode of a specified specification for the data block in the state of waiting to be sent according to the network quality parameters at the current time; wherein, the complexity of the data encryption mode is inversely proportional to the network quality parameters;
[0104] S33: Encrypt the data block using the independent key through the data encryption mode to obtain a data encryption packet.
[0105] Specifically, real-time monitoring of the network bandwidth at the broadcast end generates network quality parameters for the current moment. This real-time monitoring aims to obtain current network quality parameters (such as bandwidth, latency, packet loss rate, etc.). These parameters reflect changes in the network environment. Using this information, the complexity of data encryption can be dynamically adjusted to adapt to different network conditions, thereby ensuring the efficiency and stability of data transmission. Real-time monitoring provides accurate network quality parameters, ensuring that changes in network conditions are detected in a timely manner, providing a basis for subsequent encryption mode selection. This step ensures that the system can dynamically adjust the encryption strategy according to real-time network conditions, preventing data transmission bottlenecks or security issues caused by unstable network quality.
[0106] More specifically, when a data block is in the pending transmission state, a specified data encryption mode is selected for the data block based on the current network quality parameters. While the data block is in the pending transmission state, an appropriate data encryption mode is selected based on real-time monitored network quality parameters (such as bandwidth and latency). The selection of the data encryption mode is related to network conditions, ensuring that a simple encryption mode is used when network conditions are poor, while a more complex encryption mode can be selected when network conditions are good. By dynamically adjusting the encryption mode according to network quality, a balance between data encryption and transmission is ensured. In good network conditions, a more complex encryption mode is selected to improve data security; while in low bandwidth or poor network quality conditions, a simple encryption mode is used to reduce transmission latency and ensure timely data delivery. This strategy effectively improves data transmission efficiency and avoids performance bottlenecks caused by excessive encryption.
[0107] More specifically, the complexity of the data encryption mode is inversely proportional to the network quality parameters. This inverse relationship is designed to reduce encryption complexity and optimize encryption and transmission efficiency when network conditions are unfavorable. When network bandwidth is low or latency is high, a simpler encryption mode is used to ensure smooth data transmission in low-bandwidth and high-latency environments. Conversely, when network bandwidth is sufficient, a more complex encryption mode is selected to enhance data security. This strategy dynamically adjusts encryption complexity, fully considering network conditions and avoiding over-encryption or under-encryption. Simplifying the encryption mode effectively reduces latency during data transmission, while increasing encryption strength provides higher data protection in environments with good network quality, enhancing system adaptability and data security.
[0108] More specifically, data blocks are encrypted using an independent key through a data encryption mode to obtain a data encryption packet. Based on the selected data encryption mode, the data block to be sent is encrypted using an independent key to generate a data encryption packet. This encryption process ensures the confidentiality and integrity of the data, preventing the data from being stolen or tampered with during transmission. The use of an independent key ensures that the encryption strength of each data block is independent, enhancing security. At the same time, selecting an appropriate encryption mode can effectively reduce processing burden and improve transmission efficiency. By dynamically adapting the encryption mode, the system can improve overall performance and transmission efficiency while ensuring data security, ensuring efficient and secure data transmission under various network conditions.
[0109] Understandably, through the above steps, the system can monitor network bandwidth in real time and dynamically select a suitable data encryption mode based on real-time network quality parameters. The inverse relationship between encryption complexity and network quality parameters ensures that the encryption burden is reduced and transmission efficiency is optimized when the network is poor; while when the network conditions are good, the encryption strength can be increased to improve data security. Through this adaptive encryption scheme, the system can provide an efficient transmission experience while ensuring data security.
[0110] Preferably, the data encryption mode includes a first-level encryption mode and a second-level encryption mode;
[0111] S31: The step of encrypting the data block using the independent key through the first-level encryption mode includes:
[0112] S32: Randomly generate a 12-byte initialization vector for the data block, and use the independent key and the 12-byte initialization vector to initialize the pre-deployed AES-256-GCM encryptor, so that the AES-256-GCM encryptor performs encryption operation on the data block and synchronously generates a 16-byte authentication tag to generate a data encryption packet with an authentication tag.
[0113] S33: The step of encrypting the data block using the independent key through the second-level encryption mode includes:
[0114] S34: Randomly generate an 8-byte initialization vector for the data block, and use the independent key and the 8-byte initialization vector to initialize the pre-deployed AES-128-CTR encryptor so that the AES-128-CTR encryptor can encrypt the data block to generate a data encryption packet.
[0115] Specifically, data blocks are encrypted using an independent key in a first-level encryption mode. The initialization vector (IV) is a crucial parameter in symmetric encryption algorithms, ensuring that the result of each encryption is unique, even if the same data block is encrypted multiple times. By randomly generating a 12-byte initialization vector, the repetition of encryption results can be effectively avoided, increasing the randomness and security of the ciphertext. The randomly generated initialization vector guarantees the unpredictability of the encryption process, improving data security and preventing pattern reuse attacks that may occur during encryption.
[0116] More specifically, a pre-deployed AES-256-GCM encryptor is initialized using an independent key and a 12-byte initialization vector. AES-256-GCM is a strong encryption algorithm with a 256-bit key length, providing high-strength encryption protection and incorporating authentication functionality. By combining the 12-byte initialization vector with the independent key to initialize the AES-256-GCM encryptor, strong encryption of data blocks is ensured, and an authentication tag is generated for the ciphertext, thereby enhancing data integrity verification. This initialization step ensures that the AES-256-GCM encryptor begins the encryption process in a secure state and generates a 16-byte authentication tag. The authentication tag is used to ensure that the data has not been tampered with during transmission and to verify the integrity of the encrypted data. This encryption mode provides tamper-proof protection while ensuring data confidentiality.
[0117] More specifically, the AES-256-GCM encryptor encrypts data blocks and simultaneously generates a 16-byte authentication tag. During encryption, the AES-256-GCM encryptor automatically generates an authentication tag. This tag not only protects the confidentiality of the data but also verifies its integrity, ensuring that any tampering is detected during decryption. The encryption operation and authentication tag generation occur simultaneously, ensuring that the encrypted packet is not only encrypted but also verifiable for its integrity during decryption. This encryption step not only guarantees data confidentiality but also ensures data integrity and consistency through the authentication tag. During data transmission, this effectively prevents tampering or forgery attacks, enhancing the security of encrypted data packets.
[0118] More specifically, the data block is encrypted using an independent key in the second-level encryption mode, and an 8-byte initialization vector is randomly generated. Similar to the first-level encryption mode, the second-level encryption mode also needs to generate an initialization vector (IV) to ensure the randomness of encryption. Although the generated 8-byte initialization vector is shorter, it still plays the role of ensuring the uniqueness of encryption. The 8-byte initialization vector is suitable for AES-128-CTR mode, balancing encryption security and processing efficiency. The generation of this initialization vector also avoids repetition in the encryption process, enhances the unpredictability of the encryption result, and thus improves the security of the encryption system.
[0119] More specifically, a pre-deployed AES-128-CTR encryptor is initialized using an independent key and an 8-byte initialization vector. AES-128-CTR is a counter-based encryption algorithm. Compared to GCM mode, it is mainly used for encryption operations without generating authentication tags. Initializing the AES-128-CTR with an independent key and an 8-byte initialization vector ensures the start of the encryption process and provides the necessary keys and parameters for subsequent encryption operations. This step utilizes the symmetric encryption characteristics of AES-128-CTR to efficiently encrypt data. Since this mode does not involve authentication tags, it focuses primarily on the confidentiality of encrypted data blocks, and the encryption process is efficient, making it suitable for fast encryption tasks.
[0120] More specifically, the AES-128-CTR encryptor performs encryption operations on data blocks to generate encrypted data packets. The AES-128-CTR mode can quickly encrypt large-scale data by encrypting data blocks bit by bit, making it suitable for real-time transmission scenarios. The encryption operation is based on counter mode (CTR). The encryption result does not have an authentication tag, but it can provide a balance between data confidentiality and encryption efficiency. Through this encryption step, the data block is effectively encrypted, ensuring data confidentiality. This mode has high encryption efficiency and is suitable for environments with limited network bandwidth or scenarios with low requirements for encryption complexity.
[0121] Understandably, these two encryption modes are suitable for different scenarios: Level 1 encryption mode uses AES-256-GCM to provide stronger data protection (including confidentiality and integrity), suitable for data transmission requiring high security; while Level 2 encryption mode uses AES-128-CTR to focus on efficient encryption, suitable for environments with limited bandwidth or lower requirements for encryption complexity. By combining these two encryption modes, the system can flexibly perform adaptive encryption under different network and security requirements, ensuring that data can be transmitted securely without sacrificing efficiency.
[0122] Preferably, the step of performing a corresponding format transformation on the basic encrypted information based on the encryption form of the data encryption packet to combine it with the data encryption packet to generate an encrypted information stream includes:
[0123] S41: During the generation of the data encryption packet, the encryption steps that the data encryption packet goes through are recorded synchronously, and the characteristics of the encryption steps are summarized to obtain a set of encryption factors used to provide the encryption form of the data encryption packet.
[0124] S42: Separate the encrypted factor set according to a preset standard to generate additional tags and formatted information; wherein, the encrypted factor set includes a first type of factors to be converted into formatted information and a second type of factors to be converted into additional tags;
[0125] S43: Based on the formatted information, the basic encrypted information is transformed in terms of information format and combined with the additional tag to serve as a basic encryption unit;
[0126] S44: Combine the basic encryption unit with the data block to obtain a data packet encryption combination. The data packet encryption combinations corresponding to each data block jointly construct the encrypted information stream.
[0127] Specifically, during the generation of the encrypted data packet, the encryption steps taken by the encrypted data packet are recorded synchronously, and the characteristics of the encryption steps are summarized to obtain a set of encryption factors used to provide feedback on the encryption form of the encrypted data packet. Recording the encryption steps and summarizing their characteristics is to ensure that the encryption methods, algorithms, and their order are clearly understood after the encryption process. The core purpose of this step is to provide a basis for subsequent encryption form feedback, ensuring the consistency and traceability of the encryption process. By synchronously recording the encryption steps and summarizing their characteristics, a feedback mechanism can be provided for the subsequent data decryption process, ensuring the operability and verifiability of the encryption. The encryption factor set, as a key part of the feedback mechanism, helps to ensure the transparency of the data encryption process and provides flexibility for handling different types of data packets.
[0128] More specifically, the encryption factor set is separated according to preset standards to generate additional tags and formatted information. Information separation is to distinguish different data elements in the encryption factor set according to preset standards. This separation process divides the encryption factor set into two categories: one is the factors to be converted into formatted information, and the other is the factors to be converted into additional tags. This facilitates information processing and combination in subsequent steps. Through information separation, key information (such as encryption strength, encryption mode, etc.) in the encryption factor set can be effectively classified, enhancing the operability of encrypted information. The separation of additional tags and formatted information helps to accurately recover and verify data during decryption, and makes the organization of encrypted information flow more standardized and efficient.
[0129] More specifically, the first type of factors in the encryption factor set are converted into formatted information, and the second type of factors are converted into additional tags. The conversion of the first type of factors into formatted information is mainly to ensure that the encrypted information can be seamlessly integrated with subsequent data encryption packets and to perform standardized processing. The conversion of the second type of factors into additional tags is to add some extra metadata to the encrypted information, providing additional descriptions or identifiers for the data packets. This separation and conversion process helps to better integrate the encrypted information with the data encryption packets. The formatted information provides a standardized structure for combining the encrypted information with the data packets, while the additional tags provide more contextual information for the data packets, making the entire encryption process more complete and controllable. This step ensures the formatted processing of the encrypted information, making the encryption process not only more secure but also scalable.
[0130] More specifically, the basic encrypted information is transformed based on formatted information and combined with additional tags to form a basic encryption unit. This step applies formatted information to the basic encrypted information and combines it with additional tags to generate a basic encryption unit. This unit becomes the core part of data encryption, carrying all encryption-related formatted information and additional tags. Through the combination of formatting and tags, the basic encryption unit can be better combined with data packets to maintain data integrity and security. At the same time, the combination of formatted information and additional tags makes the encryption unit highly adaptable to different application scenarios, able to cope with different encryption needs, and ensure that data can be recovered efficiently and accurately during decryption.
[0131] More specifically, basic encryption units are combined with data packets to obtain a data packet encryption combination. This combination process generates the final encrypted data packet by combining the basic encryption units with the original data packet. This combination step ensures the integrity of the encryption process, maintaining the confidentiality and integrity of the data even in different network environments and data transmission requirements. Combining basic encryption units with data packets enables the construction of encrypted information streams. The effect of this step is to generate a complete encrypted data packet, ensuring the security and privacy of the data during transmission. Through this step, the data is not only encrypted and protected during physical transmission, but also ensures the complete recovery of information during decryption.
[0132] More specifically, the encrypted combinations of data packets corresponding to each data block jointly construct an encrypted information flow. The encrypted combinations of multiple encrypted data packets jointly construct an encrypted information flow, ensuring that the data encryption mechanism of the entire transmission link is unified and consistent. Each data packet encryption combination is closely related to the encryption combinations of other packets, forming a comprehensive encrypted information flow, ensuring end-to-end encrypted protection of the data flow. Constructing an encrypted information flow can maintain complete encrypted protection of data during transmission and storage in the network, preventing data leakage or tampering. The encryption combination of each data packet, through a standardized processing procedure, ensures the consistency of encryption operations, thus guaranteeing the security of the entire encrypted information flow.
[0133] Understandably, these steps, through recording the encryption process, classifying encryption factors, separating and formatting information, and finally combining encryption units, form a powerful and flexible data encryption framework. The construction of encrypted information flow not only ensures the security of data during transmission but also improves the transparency and efficiency of the encryption process. Through these technical means, the system can flexibly respond to different encryption needs and ensure the integrity and confidentiality of data transmission.
[0134] Preferably, the receiving end receiving the encrypted information stream is pre-deployed with a corresponding decryption algorithm model. The decryption algorithm model is used to perform preliminary parsing of the encrypted information stream to obtain the encryption form of the encrypted information stream, so as to drive the encryption form to decrypt the content of the encrypted information stream in combination with a pre-set key.
[0135] Specifically, the receiving end pre-deploys a decryption algorithm model. In order to effectively decrypt the received encrypted information stream, the receiving end needs to pre-deploy a corresponding decryption algorithm model. This model should have the ability to parse the encrypted information stream, identify the encryption form, and perform decryption operations. The pre-deployment of the decryption algorithm model ensures that the receiving end can respond flexibly and quickly to the received encrypted information stream. By pre-deploying the decryption algorithm model, the receiving end can parse and process the encrypted information stream in a timely manner. This model can automatically identify different encryption modes and algorithms, thereby performing targeted decryption operations without reconfiguration each time it is received, saving time and computing resources.
[0136] More specifically, the decryption algorithm model performs preliminary parsing of the encrypted information stream. The purpose of this preliminary parsing is to analyze the structure of the encrypted information stream, extract the encryption form, and prepare the necessary information for the decryption process. Through preliminary parsing, the receiving end can identify key information such as encryption factors, tags, and encryption modes of the encrypted information stream, preparing for subsequent decryption operations. Through preliminary parsing, the structure and content of the encrypted information stream can be clearly extracted, ensuring the efficiency and accuracy of the subsequent decryption process. The receiving end can quickly identify the encryption form, providing the necessary support for correctly using the key to decrypt the data.
[0137] More specifically, the encryption form of the encrypted information stream is obtained. Through parsing, the receiving end obtains the encryption form of the encrypted information stream, namely the encryption algorithm, key type, and encryption factor used. This information is crucial for subsequent correct decryption because different encryption forms require different decryption strategies and keys. After obtaining the encryption form, the receiving end can accurately select the appropriate decryption algorithm and key to ensure the correctness of the decryption operation. This step can help the system identify the category of encrypted information, thereby avoiding decryption failure or errors due to mismatched encryption modes.
[0138] More specifically, the encryption method, combined with a pre-set key, decrypts the content. Once the receiving end obtains the encrypted information, it can use the pre-set key and an appropriate decryption algorithm to decrypt the encrypted information stream. The key is typically shared between the receiving and sending ends before communication or transmitted securely to ensure that only authorized parties can decrypt the content. Combined with the key, the decryption algorithm can accurately recover the encrypted content. This step ensures the confidentiality of the encrypted information stream is effectively maintained, while also ensuring that the data is not tampered with or leaked during transmission. The decryption process efficiently recovers information while maintaining security.
[0139] Understandably, through these steps, the receiving end can accurately parse the encrypted information stream and decrypt the content using appropriate decryption algorithms and keys. The pre-deployed decryption algorithm model and its preliminary parsing function enable the receiving end to efficiently identify the encryption form and decrypt quickly. This not only ensures the security and integrity of the data but also optimizes processing efficiency and avoids errors or delays in the decryption process.
[0140] Reference Figure 2 As shown, in a second aspect, the present invention provides an audio / video encryption and broadcasting apparatus for implementing an audio / video encryption and broadcasting method as described in any one of the first aspects, comprising:
[0141] The basic encryption module is used to fully encrypt the audio and video metadata of the target audio and video to obtain basic encrypted information;
[0142] The dynamic segmentation module is used to dynamically segment the target audio and video media data based on a predetermined time standard to generate several data blocks, and distribute an independent key to each data block based on the current timestamp.
[0143] A real-time encryption module is used to monitor network bandwidth in real time and combine it with the independent key to adaptively encrypt the data block to obtain a data encryption packet.
[0144] The information combination module is used to perform corresponding format transformation on the basic encrypted information based on the encryption form of the data encryption package, so as to combine it with the data encryption package to generate an encrypted information stream;
[0145] The information output module is used to perform security identification on the encrypted information stream through a monitoring algorithm pre-deployed on the broadcast end, so as to control the broadcast output of the encrypted information stream.
[0146] In this embodiment, the specific implementation of each module in the above system embodiment is described in the above method embodiment, and will not be repeated here.
[0147] Thirdly, the present invention provides an audio-visual encryption and broadcasting device, including a memory and a processor, wherein the memory stores a computer program that can run on the processor, and the processor executes the computer program to implement an audio-visual encryption and broadcasting method as described in any of the first aspects.
[0148] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.
Claims
1. An audiovisual encryption and broadcasting method, characterized in that, The method comprises: full encryption of audio and video metadata of the target audio and video to obtain basic encryption information; dynamic block division of media data of the target audio and video based on a predetermined time standard to generate a plurality of data blocks, and distribution of independent keys to each of the data blocks based on a current timestamp; real-time monitoring of network bandwidth conditions, combined with the independent keys, to perform adaptive encryption of the data blocks to obtain data encryption packages; format conversion of the basic encryption information based on the encryption form of the data encryption packages to combine the data encryption packages to generate an encryption information stream; security identification of the encryption information stream by a monitoring algorithm pre-deployed at a broadcast end to control broadcast output of the encryption information stream; the step of full encryption of audio and video metadata of the target audio and video to obtain basic encryption information comprises: obtaining audio and video metadata of the target audio and video, and structuring the audio and video metadata of the target audio and video to generate corresponding byte sequences; wherein the audio and video metadata comprises basic description information, technical parameter information, file system information, copyright management information, and content structure information of the target audio and video; randomly generating a 128-bit random key, and vector initializing the random key to generate a basic encryption matrix; randomly generating a 128-bit multiple random key, and initializing the random key as a deep encryption matrix, and analyzing information correlation of the deep encryption matrix based on the basic encryption matrix to output a plurality of information mapping correlation factors; information conversion of the byte sequences based on the information mapping correlation factors to generate corresponding original encoding ciphertext, and data encoding of the basic encryption matrix and the deep encryption matrix in a predetermined format to combine the basic encryption matrix and the deep encryption matrix in the form of data encoding with the original encoding ciphertext in a predetermined format to obtain the basic encryption information; the step of real-time monitoring of network bandwidth conditions, combined with the independent keys, to perform adaptive encryption of the data blocks to obtain data encryption packages comprises: real-time monitoring of network bandwidth conditions at a broadcast end to generate network quality parameters at a current time; when the data blocks are in a state of waiting for sending, selecting a specified data encryption mode for the data blocks in the state of waiting for sending according to the network quality parameters at the current time; wherein the complexity of the data encryption mode is inversely proportional to the network quality parameters; encryption of the data blocks by the data encryption mode using the independent keys to obtain data encryption packages; the step of format conversion of the basic encryption information based on the encryption form of the data encryption packages to combine the data encryption packages to generate an encryption information stream comprises: synchronous recording of encryption steps passed by the data encryption packages during generation of the data encryption packages, and feature induction of the encryption steps to obtain a set of encryption factors for feedback of the encryption form of the data encryption packages; According to the preset standard, the encryption factor set is information separated to generate additional labels and formatted information; wherein, the encryption factor set includes a first type of factor to be converted into formatted information and a second type of factor to be converted into additional labels; Based on the formatted information, the basic encryption information is information format transformed and combined with the additional labels to serve as a basic encryption unit; The basic encryption unit is combined with the data blocks to obtain a data packet encryption combination, and the data packet encryption combinations corresponding to each data block jointly construct an encryption information stream.
2. The audio / video encryption and broadcasting method of claim 1, wherein, The step of dynamically dividing the target audio and video into data blocks based on a predetermined time standard includes: A time source module is pre-deployed to continuously generate timestamps to construct a time positioning axis; Based on the time positioning axis, the media data of the target audio and video is time positioned to preliminarily divide the media data according to the predetermined time standard to obtain a preliminary block form of the media data; According to the preliminary block form, the hash value of each block data content is mapped, and at the same time, key frame sampling and similarity analysis are performed on each block data content, to combine the hash value mapping result and the similarity analysis result to predict the data compression redundancy of each block data content, to dynamically optimize the preliminary block form to obtain a dynamically optimized block form; According to the dynamically optimized block form, the media data is divided into data blocks.
3. The audio / video encryption and broadcasting method of claim 2, wherein the step of encrypting the audio / video data comprises the steps of: encrypting the audio / video data using a first encryption key; and encrypting the first encryption key using a second encryption key. The step of distributing independent keys to each data block based on the current timestamp includes: Obtaining the corresponding region of each data block on the time positioning axis to obtain the time positioning interval of each data block; Performing feature conversion on the timestamps contained in the time positioning interval of each data block to generate a time coding sequence corresponding to each time positioning interval; Retrieve the pre-constructed master key and key evolution strategy, analyze the key evolution characteristics of each time coding sequence based on the key evolution strategy, and evolve the master key according to the key evolution characteristics to generate independent keys for each data block.
4. The audio / video encryption and broadcasting method of claim 1, wherein the step of encrypting the audio / video data comprises the steps of: encrypting the audio / video data using a first encryption key; and encrypting the first encryption key using a second encryption key. The data encryption mode includes a primary encryption mode and a secondary encryption mode; The step of encrypting the data block using the independent key through the primary encryption mode includes: Randomly generating a 12-byte initial vector for the data block, and initializing the pre-deployed AES-256-GCM encrypter using the independent key and the 12-byte initial vector, so that the AES-256-GCM encrypter performs encryption operation on the data block and synchronously generates a 16-byte authentication tag to generate a data encryption package with an authentication tag; The step of encrypting the data block using the independent key through the secondary encryption mode includes: An 8-byte initial vector is randomly generated for the data block, and a pre-deployed AES-128-CTR encryptor is initialized using the independent key and the 8-byte initial vector, so that the AES-128-CTR encryptor performs an encryption operation on the data block to generate a data encryption package.
5. The method of video encryption and broadcasting of claim 1, wherein, A receiving end receiving the encrypted information stream is pre-deployed with a corresponding decryption algorithm model, which is used to preliminarily analyze the encrypted information stream, obtain an encrypted form of the encrypted information stream, and drive the encrypted form to combine with a pre-set key to perform content decryption on the encrypted information stream.
6. An audiovisual encryption and broadcasting apparatus, characterized by comprising: The video and audio encryption and broadcasting method comprises the following steps: A basic encryption module is configured to perform full-amount encryption on audio and video metadata of the target video and audio to obtain basic encrypted information; A dynamic block module is configured to perform dynamic block on media data of the target video and audio based on a predetermined time standard to generate a plurality of data blocks, and distribute independent keys to the data blocks based on a current timestamp; A real-time encryption module is configured to monitor network bandwidth in real time, and combine the independent keys to perform adaptive encryption on the data blocks to obtain data encryption packages; An information combination module is configured to perform corresponding format conversion on the basic encrypted information based on an encrypted form of the data encryption packages, and combine the data encryption packages to generate an encrypted information stream; An information output module is configured to perform secure identification on the encrypted information stream through a pre-deployed monitoring algorithm on a broadcasting end to control broadcasting output of the encrypted information stream.
7. An audiovisual encryption and broadcasting apparatus comprising a memory and a processor, said memory storing a computer program operable on the processor, characterized in that, The processor executes the computer program to implement the video and audio encryption and broadcasting method according to any one of claims 1-5.
Citation Information
Patent Citations
Media data encryption method, system, device and storage medium
CN109067814A
Data security protection system and fragmentation encryption method for energy operation platform
CN119760756A