Household multi-user content grading encryption system
By employing device registration, the LSTM-BERT model, and a dynamic key generation module, the system addresses content security and compliance issues in multi-user home environments, enabling personalized content decryption and secure playback, thereby enhancing user experience and system security.
Patent Information
- Application Number
- CN202511060116.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-30
- Publication Date
- 2025-10-31
AI Technical Summary
Existing technologies lack flexibility in multi-user home environments and cannot adapt to the needs of different user groups, resulting in difficulty in ensuring content security and compliance, poor user experience, high risk of key leakage, and frequent misidentification and missed identification.
The device registration and account management module generates unique device fingerprints and user accounts, and combines the LSTM-BERT model to identify sensitive content. The dynamic key generation and distribution module enables real-time encryption and decryption of content, and dynamically adjusts strategies based on user behavior and environmental changes to ensure the security and compliance of content.
It enables personalized content decryption services for different users, improves identification accuracy, reduces the risk of key leakage, enhances system security and user satisfaction, and ensures effective protection for minors.
Smart Images
Figure CN120880741A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of information security technology, and in particular to a multi-user home content hierarchical encryption system. Background Technology
[0002] With the popularization of digital life, digital content (such as movies, games, e-books, etc.) in the home is becoming increasingly abundant. However, different family members have different levels of acceptance and needs for content. In particular, parents need to limit children's access to inappropriate content.
[0003] However, existing technologies typically use static keys for content protection. This method is too simplistic and lacks flexibility in dynamic environments. For example, if a static key is leaked, the security of the entire system is seriously compromised, and user privacy cannot be guaranteed. In terms of content presentation, traditional systems often use simple keyword matching to identify sensitive content. This method is not only inaccurate, but also prone to misidentification and omissions. It also struggles to adapt to the complex relationships between different types of content. Furthermore, in a multi-user home environment, user type identification and content adaptation are particularly important. However, existing technologies often fail to segment authorizations for different user groups, resulting in all users sharing the same content authorization. This fails to effectively meet the needs of users of different ages and backgrounds, severely limiting the user experience. This is especially evident among child users, increasing parents' concerns about content security. In addition, traditional content decryption mechanisms often cannot respond in real time to changes in user behavior and environment. Users' actual usage scenarios change frequently, but the system cannot dynamically adjust, resulting in a subpar content playback experience. Content security and compliance cannot be effectively guaranteed, leading to decreased user satisfaction. Summary of the Invention
[0004] The purpose of this invention is to provide a multi-user content hierarchical encryption system for families, which solves the problems of unmet diverse user needs, misidentification and missed identification, high risk of key leakage, and parental anxiety about content control.
[0005] To achieve the above objectives, the present invention provides the following technical solution: a multi-user home content hierarchical encryption system, comprising: The device registration and account management module is used to generate unique device fingerprints and register different types of user accounts, while outputting user information. The content pre-analysis and sensitive content detection module receives user information, analyzes the content to be played and detects sensitive segments in the content, generates a sensitive content report and outputs it. The dynamic key generation and encryption module receives sensitive content reports, generates a base key, encrypts the corresponding content, and finally outputs the encrypted content and the base key. The dynamic key distribution and policy synchronization module receives encrypted content and a base key, supports parents to update control policies simultaneously, and outputs the updated dynamic key. The permission verification and access control module receives the dynamic key and verifies the user's permissions, then outputs the verification result; the real-time decryption and content presentation module decrypts and presents the content based on the verification result.
[0006] Preferably, the device registration and account management module includes: The device registration unit is used to generate a unique device fingerprint, which is obtained by hashing the device's MAC address and CPUID. The account management unit is used to create different types of user accounts, including children's accounts and adult accounts, and to store users' access permission information; The status monitoring unit is used to monitor the status of registered devices in real time, record the online status of the devices and user login history, so as to ensure secure access and compliant use of the devices.
[0007] Preferably, the content pre-analysis and sensitive content detection module includes: The content decomposition unit is used to decompose the content stream to be played into a sequence of frames for subsequent analysis. The sensitive content recognition unit is used to analyze the decomposed frame sequence using the LSTM-BERT model, identify and label sensitive content segments, and generate a set of sensitive segments. The sensitivity assessment unit is used to quantitatively analyze the detected sensitive segments and assess the risk level of each sensitive segment in order to provide a reference for dynamic key generation.
[0008] Preferably, the dynamic key generation and encryption module includes: The basic key generation unit is used to generate a basic key by combining the device fingerprint and the set of sensitive fragments using a quantum chaos algorithm; the content encryption unit is used to perform real-time dynamic encryption of the content based on the basic key and sensitive fragment information to ensure the secure transmission of the content. The encryption parameter adjustment unit is used to automatically adjust the encryption strength according to the user's viewing preferences and the sensitivity level of the content to improve the user experience.
[0009] Preferably, the dynamic key distribution and policy synchronization module includes: The policy update unit is used to receive updated control policies from the parent's end and generate new access keys; The key management unit is used to store and manage current access keys and policy information to ensure information security. The key distribution unit is used to distribute new access keys to the corresponding user accounts through the improved ECDH protocol to achieve dynamic control.
[0010] Preferably, the permission verification and access control module includes: The permission acquisition unit is used to receive access keys distributed by the dynamic key distribution module and generate corresponding access tokens for user accounts. The permission verification unit is used to verify the user's access rights based on the distributed access token before the content is played, ensuring that the user has the compliance to play the corresponding content. The access control unit is responsible for authorizing access to content for verified accounts and updating user access logs in real time to ensure system reliability.
[0011] Preferably, the real-time decryption and content presentation module includes: The content decryption unit is used to decrypt encrypted content according to the user account type, ensuring that the user only receives the appropriate version of the content; The content display unit controls the display method of the content according to the type of decrypted content, and displays sensitive content with mosaic processing for children's accounts in order to protect minors; The playback control unit is used to adjust the playback content according to user selection or parental control policies to ensure safe playback.
[0012] Preferably, the base key K in the dynamic key generation and encryption module b The formula for generating K is: b =QChaos(SEED,F); In the formula, K b QChaos(SEED,F) represents the base key, QChaos(SEED,F) represents the function, and the algorithm used to generate the base key is represented by SEED, which represents the random seed, and F represents the device fingerprint.
[0013] Preferably, in the content pre-analysis and sensitive content detection module, the sensitivity calculation formula for each video frame is as follows: S m ={(t start ,t end ,type)}; In the formula, S m Let t represent the set of sensitive segments. start Start time and t of sensitive segments end The end time of the sensitive segment is indicated by `type`, which represents the sensitive type.
[0014] Preferably, the verification formula for confirming user permissions in the permission verification and access control module is: Γ(K)=[Γ1|Γ2|Γ3]; In the formula, Γ(K) represents the user authentication information given parameter K, [Γ1|Γ2|Γ3] represents the multiple parts that make up the authentication result, and Γ1 represents the information based on the base key K. b The verification information generated with access key ΔK, where Γ2 represents the content stream-based verification information and Γ3 represents additional verification information.
[0015] In summary, the present invention has at least one of the following beneficial technical effects: 1. This invention employs multi-level content hierarchical encryption technology to achieve targeted content decryption services, ensuring that users obtain appropriate content based on their account type. Compared to the one-size-fits-all content authorization method in existing technologies, this invention solves the problem of failing to meet the diverse needs of users, thereby improving user satisfaction and user experience.
[0016] 2. This invention introduces the LSTM-BERT model for sensitive content identification, which significantly improves the accuracy and efficiency of identification and achieves higher content security. Compared with the traditional simple keyword matching method in the prior art, it solves the problems of false identification and missed identification, and provides users with a safer viewing experience.
[0017] 3. The dynamic key distribution mechanism of this invention makes the content decryption process more flexible and secure, allowing users to obtain appropriate access keys in different scenarios. Compared with the strategy of using static keys in the prior art, it solves the problem of high risk of key leakage and significantly enhances the overall security of the system and the protection of user privacy.
[0018] 4. The real-time decryption and content presentation module of this invention adjusts the content display according to the user type, ensuring that minors are effectively protected. This improves content compliance and security. Compared with the traditional system's lack of standardized handling of sensitive content, it solves the problem of parents' anxiety about content control and enhances the satisfaction of family users. Attached Figure Description
[0019] Figure 1 This is a schematic diagram of the system architecture of the present invention; Figure 2 This is a schematic diagram of the device registration and account management module of the present invention; Figure 3 This is a schematic diagram of the content pre-analysis and sensitive content detection module of the present invention; Figure 4 This is a schematic diagram of the dynamic key generation and encryption module of the present invention; Figure 5 This is a schematic diagram of the dynamic key distribution and policy synchronization module of the present invention; Figure 6 This is a schematic diagram of the permission verification and access control module of the present invention; Figure 7 This is a schematic diagram of the real-time decryption and content presentation module of the present invention. Detailed Implementation
[0020] The following is in conjunction with the appendix Figure 1 -Appendix Figure 7 The present invention will be further described in detail below.
[0021] This invention provides a home multi-user content hierarchical encryption system, including a device registration and account management module, a content pre-analysis and sensitive content detection module, a dynamic key generation and encryption module, a dynamic key distribution and policy synchronization module, a permission verification and access control module, and a real-time decryption and content presentation module.
[0022] The device registration and account management module is used to generate unique device fingerprints and register different types of user accounts, while outputting user information. Specifically, the functional components of the device registration and account management module include a device registration unit, an account management unit, and a status monitoring unit.
[0023] The device registration unit is responsible for generating unique device fingerprints. This is achieved by hashing the device's MAC address and CPUID to ensure the uniqueness of each device within the system. The output of this unit is the device fingerprint, which is subsequently used for account management and dynamic key generation. The specific device fingerprint generation process is as follows: F = Hash(MAC, CPUID); In the formula, F represents the generated device fingerprint, MAC represents the device's MAC address, CPUID is the device's CPUID, and Hash represents the hash processing function.
[0024] The account management unit creates different types of user accounts based on device fingerprints, including children's accounts and adult accounts. This unit is responsible for storing user access permission information to ensure compliance with content access for different users.
[0025] When an account is created, the user type, permissions, and status information are all recorded in the system database. The creation process is as follows: First, receive user input information, including username and account type (child or adult).
[0026] Then, the user ID is generated, which is achieved in the following way: UserID = Hash(F, Username); In the formula, UserID represents the generated unique user identifier, Username represents the username entered by the user, Hash represents the hash function, and F represents the generated device fingerprint. This process ensures the uniqueness of each user account and prevents duplication.
[0027] The status monitoring unit is used to monitor the status of registered devices in real time, recording the devices' online status and user login history. The monitoring process of this unit includes: Regularly check the network connection status of registered devices and send the status information to the account management unit for updates.
[0028] Record the user's login history and generate the following data structure: LoginHistory={(UserID,Timestamp,Status)}; In this formula, LoginHistory represents the login history, UserID represents the user identifier, Timestamp represents the timestamp of the user's login, and Status represents the current online status. This data structure provides a basis for subsequent auditing and monitoring.
[0029] The device registration and account management module establishes a logical association between device fingerprints and user accounts. In terms of technical implementation, it first generates device fingerprints, then creates user accounts based on these fingerprints, and finally implements status monitoring and management.
[0030] The content pre-analysis and sensitive content detection module receives user information, analyzes the content to be played and detects sensitive segments in the content, generates a sensitive content report and outputs it. Specifically, the functional units of the content pre-analysis and sensitive content detection module include a content decomposition unit, a sensitive content identification unit, and a sensitivity assessment unit.
[0031] The main function of the content decomposition unit is to break down the content stream to be played into a series of frames for subsequent analysis. This process first receives the video input stream and generates a frame sequence, such as: Frames = {F1, F2, ..., F n}; In the formula, Frames represents the frame sequence obtained from the decomposition, and F n Let i represent the i-th frame, and n be the total number of frames in the decomposition.
[0032] This unit ensures that subsequent analysis operations can be based on clear image data. The sensitive content recognition unit applies the LSTM-BERT model to perform deep learning analysis on the generated frame sequence to identify and label sensitive content segments.
[0033] The entire analysis process is as follows: First, the frame sequence is preprocessed, and then standardized and enhanced.
[0034] Each tagged frame is then input into the LSTM-BERT model for sentiment analysis and feature extraction.
[0035] The identification results generate a set of sensitive segments, denoted as S. m ={(t start ,t end ,type)}; In the formula, S m Let t represent the set of sensitive segments. start t represents the start time of the sensitive segment. end This indicates the end time of the sensitive segment, and type indicates the sensitive type.
[0036] The sensitivity assessment unit performs quantitative analysis on the detected sensitive fragments to assess the risk level of each sensitive fragment. The assessment formula is as follows: Risk level =w1·Severity+w2·Exposure+w3·Audience; In its formula, Risk level The risk level of the sensitive segment is indicated by w1, w2, and w3, which represent the severity of the content sensitivity, the degree of exposure of the content to a specific user group, and the audience type of the content.
[0037] This assessment will provide a reference for dynamic key generation, ensuring that the system can automatically adjust encryption strategies for different sensitive content.
[0038] The content pre-analysis and sensitive content detection modules are logically connected and unfold in sequence: First, the content decomposition unit processes the content to be played and generates a frame sequence; then, the sensitive content identification unit analyzes each frame and identifies sensitive segments; finally, the sensitivity assessment unit analyzes the detected sensitive segments, assesses their risk level, and generates a report.
[0039] The final sensitive content report output by this module includes a set of sensitive segments, risk levels, and recommended dynamic encryption strategies. This output directly supports the effective operation of subsequent dynamic key generation and access control modules.
[0040] The dynamic key generation and encryption module receives sensitive content reports, generates a base key, encrypts the corresponding content, and finally outputs the encrypted content and the base key. Specifically, the function of the basic key generation unit is to combine the device fingerprint and the set of sensitive fragments to generate a basic key using a quantum chaotic algorithm. The specific formula for the generation process is as follows: K b =QChaos(SEED,F); In the formula, K bQChaos(SEED,F) represents the base key, QChaos(SEED,F) represents the function, and the algorithm used to generate the base key is represented by SEED, which represents the random seed, and F represents the device fingerprint.
[0041] This process ensures the uniqueness and security of the base key to accommodate different encryption needs and improve protection effectiveness.
[0042] The function of the content encryption unit is to perform real-time dynamic encryption of content based on the base key and sensitive fragment information.
[0043] The specific encryption process can be described as follows: EncryptedContent=Encrypt(Content,K b (,SensitiveSegments); In the formula, EncryptedContent represents the encrypted content, Content represents the original content to be encrypted, Encrypt represents the encryption algorithm used, and K represents the encryption algorithm used. b The base key is represented by SensitiveSegments, which specifies the sensitive parts that need to be encrypted.
[0044] During the encryption process, the content encryption unit uses the base key K. b Content encryption is implemented to ensure the confidentiality and integrity of the content during data transmission.
[0045] The encryption parameter adjustment unit automatically adjusts the encryption strength based on user viewing preferences and content sensitivity levels to improve user experience.
[0046] The parameter relationships in the adjustment process can be described as follows: AdjustedStrength=AdjustEncryptionStrength(UserPreferences,ContentSensitivity); In the formula, AdjustedStrength represents the adjusted encryption strength, UserPreferences represents the user's viewing preferences, ContentSensitivity represents the sensitivity level of the content, and AdjustEncryptionStrength represents the function for adjusting the encryption strength.
[0047] Based on the adjusted encryption strength, the content encryption unit can dynamically adapt to user needs and optimize the user experience.
[0048] Finally, the dynamic key generation and encryption module will output the encrypted content and the base key, specifically: Output = {EncryptedContent, Kb}; In the formula, Output represents the output result, EncryptedContent represents the encrypted content, and K... b This represents the base key.
[0049] The module's implementation process is as follows: First, the basic key generation unit generates a basic key by combining the device fingerprint and sensitive content information; then, the content encryption unit uses the generated basic key to encrypt the content to be played; finally, the encryption parameter adjustment unit adjusts the encryption strength in real time according to user preferences and the sensitivity level of the content to ensure that the output content and the basic key have optimal security.
[0050] The dynamic key distribution and policy synchronization module receives encrypted content and a base key, supports parents to update control policies simultaneously, and outputs the updated dynamic key. Specifically, the dynamic key distribution and policy synchronization module. This module is designed to receive encrypted content and the base key, support parents in simultaneously updating control policies, and output the updated dynamic key. This module includes a policy update unit, a key management unit, and a key distribution unit.
[0051] The system's dynamic key generation and encryption module first receives a sensitive content report and generates a base key.
[0052] Basic key K b The generation of is achieved through the following formula: K b =GenerateBaseKey(SensitiveContent); In the formula, K b The base key is defined by GenerateBaseKey, which represents the base key generation function, and SensitiveConten, which represents sensitive content.
[0053] The next step after generating the base key is content encryption. The encryption formula is: C=Encrypt(SensitiveContent,K a ); In the formula, C represents the encrypted content, Encrypt represents the encryption function, and K... a This is a dynamically generated access key.
[0054] The policy update unit is responsible for receiving updated control policies from the parent's end and generating a new access key K. new The formula is: K new =GenerateAccessKey(UpdatedPolicy,K b ); In the formula, K new This represents the new access key. `GenerateAccessKey` represents the function used to generate the access key, and `UpdatedPolicy` represents the updated control policy. K b This represents the base key.
[0055] The key management unit is used to store and manage current access keys and policy information. Its functions include: Monitor key status in real time to ensure key validity and security.
[0056] It supports key update and expiration management to prevent unauthorized access.
[0057] The key distribution unit uses an improved ECDH protocol for key distribution, and the workflow is as follows: First, establish an ECDH key exchange model to ensure that both parties can generate shared keys; Subsequently, the shared key K is generated using the following ECDH algorithm. shared : K shared =ECDH(PrivateKey) A PublicKey B ); In the formula, K shared Indicates a shared key, ECDH represents a function of the key exchange algorithm, and PrivateKey represents a private key. A PublicKey represents the sender's private key. B This represents the recipient's public key.
[0058] Finally, the new access key K new Securely distribute to the appropriate user accounts to ensure the effective implementation of dynamic controls.
[0059] The permission verification and access control module receives the dynamic key and performs user permission verification, then outputs the verification result. Specifically, the authorization verification and access control module is responsible for receiving dynamic keys and verifying user permissions. This module includes an authorization acquisition unit, an authorization verification unit, and an access control unit.
[0060] The function of the access control unit is to receive access keys from the dynamic key distribution module and generate corresponding access tokens for user accounts. The specific process is as follows: First, the access key is received from the dynamic key distribution module, and then an access token is generated. The formula is: Token = Hash(UserID, AccessKey, Timestamp); In the formula, Token represents the generated access token, UserID represents the user's unique identifier, AccessKey represents the dynamically distributed access key, Timestamp represents the generated timestamp, and Hash represents the hash processing function.
[0061] The permission verification unit verifies the distributed access token before the user plays content to ensure the user's access is compliant.
[0062] The verification logic is as follows: IsAuthorized=Verify(Token); In the formula, IsAuthorized is a Boolean value, Verify represents the verification function, and Token represents the authentication token.
[0063] This unit verifies the access token to ensure the validity of the user's identity and permissions.
[0064] The access control unit is responsible for authorizing access to content for verified accounts and updating user access logs in real time.
[0065] The access data structure is set as follows: AccessLog={(UserID,ContentID,AccessTime,Status)}; In the formula, AccessLog represents the access log, UserID represents the user identifier, ContentID represents the content identifier, AccessTime represents the timestamp of the user accessing the content, and Status represents the access status.
[0066] The overall process of the permission verification and access control module is carried out through the following steps: First, the permission acquisition unit receives the dynamic key and generates an access token; then, the permission verification unit verifies the validity of the access token to ensure that the user has the permission to play the corresponding content; finally, the access control unit authorizes content access based on the verification result and updates the access log.
[0067] In this process, the system's user permission confirmation formula can be expressed as: Γ(K)=[Γ1|Γ2|Γ3]; In the formula, Γ(K) represents the user authentication information given parameter K, [Γ1|Γ2|Γ3] represents the multiple parts that make up the authentication result, and Γ1 represents the information based on the base key K. b The verification information generated with access key ΔK, where Γ2 represents the content stream-based verification information and Γ3 represents additional verification information.
[0068] The real-time decryption and content presentation module decrypts and presents the content based on the verification results.
[0069] Specifically, the real-time decryption and content presentation module is responsible for decrypting and presenting the content based on the user's verification results. This module includes a content decryption unit, a content display unit, and a playback control unit.
[0070] The main function of the content decryption unit is to decrypt encrypted content according to the user account type to ensure that the user only receives the appropriate version of the content.
[0071] The specific steps are as follows: First, receive the user's access token and encrypted content; Then select the appropriate decryption algorithm based on the user's account type; Finally, the encrypted content is decrypted using the user's key. The formula is expressed as: DecryptedContent=Decrypt(EncryptedContent,Key); In the formula, DecryptedContent represents the decrypted content, EncryptedContent represents the encrypted content accessed by the user, Key represents the key associated with the user account, and Decrypt(EncryptedContent,Key) represents the function that performs the decryption process.
[0072] The content display unit is responsible for controlling how the content is displayed based on the type of decrypted content. For children's accounts, sensitive content will be blurred to protect minors.
[0073] The specific steps include: First, obtain the type of the decrypted content to determine its compliance. Then select a display strategy for children's accounts. The formula for mosaic processing is: ProcessedContent=Mosaicing(DecryptedContent,SensitivityLevel); In the formula, ProcessedContent represents the processed display content, SensitivityLevel represents the sensitivity level of the content, DecryptedContent represents the decrypted content, and Mosaicing(DecryptedContent, SensitivityLevel) represents the function that performs the mosaic processing. This variable is generated by the sensitive content identification unit during the sensitive content identification stage.
[0074] The playback control unit's task is to adjust the playback content based on user selections or parental control policies to ensure safe playback.
[0075] The specific steps of this unit include: First, confirm the playback settings selected by the user, such as the playback mode (streaming, downloading, etc.); Next, check whether the parental control strategies are applicable, such as restricting the playback of specific types of content; Finally, control instructions are generated based on the audit results. The specific control formula is as follows: ControlCommand=AdjustPlaybackSettings(UserChoice,ParentalControl); In the formula, ControlCommand represents the control command for the content display unit, UserChoice represents the playback content and mode selected by the user, ParentalControl represents the parental control parameters, and AdjustPlaybackSetting represents the function used to adjust the playback settings.
[0076] The overall module execution steps are as follows: First, the content decryption unit receives the access token and key, and decrypts the content to be played; then, the content display unit detects and processes the decrypted content, and displays it according to the user type and content sensitivity; finally, the playback control unit adjusts the content and method of playback according to the user selection or parental control policy.
[0077] The design of this real-time decryption and content presentation module ensures safe and compliant playback, and can provide appropriate content display methods for different account types, enhancing the system's security and adaptability.
[0078] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.
Claims
1. A multi-user home content hierarchical encryption system, characterized in that, include: The device registration and account management module is used to generate unique device fingerprints and register different types of user accounts, while outputting user information. The content pre-analysis and sensitive content detection module receives user information, analyzes the content to be played and detects sensitive segments in the content, generates a sensitive content report and outputs it. The dynamic key generation and encryption module receives sensitive content reports, generates a base key, encrypts the corresponding content, and finally outputs the encrypted content and the base key. The dynamic key distribution and policy synchronization module receives encrypted content and a base key, supports parents to update control policies simultaneously, and outputs the updated dynamic key. The permission verification and access control module receives the dynamic key and performs user permission verification, then outputs the verification result. The real-time decryption and content presentation module decrypts and presents the content based on the verification results.
2. The home multi-user content hierarchical encryption system according to claim 1, characterized in that, The device registration and account management module includes: The device registration unit is used to generate a unique device fingerprint, which is obtained by hashing the device's MAC address and CPUID. The account management unit is used to create different types of user accounts, including children's accounts and adult accounts, and to store users' access permission information; The status monitoring unit is used to monitor the status of registered devices in real time, record the online status of the devices and user login history, so as to ensure secure access and compliant use of the devices.
3. A multi-user home content hierarchical encryption system according to claim 1, characterized in that, The content pre-analysis and sensitive content detection module includes: The content decomposition unit is used to decompose the content stream to be played into a sequence of frames for subsequent analysis. The sensitive content recognition unit is used to analyze the decomposed frame sequence using the LSTM-BERT model, identify and label sensitive content segments, and generate a set of sensitive segments. The sensitivity assessment unit is used to quantitatively analyze the detected sensitive segments and assess the risk level of each sensitive segment in order to provide a reference for dynamic key generation.
4. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, The dynamic key generation and encryption module includes: The basic key generation unit is used to generate a basic key by combining the device fingerprint and the set of sensitive fragments using a quantum chaos algorithm; the content encryption unit is used to perform real-time dynamic encryption of the content based on the basic key and sensitive fragment information to ensure the secure transmission of the content. The encryption parameter adjustment unit is used to automatically adjust the encryption strength according to the user's viewing preferences and the sensitivity level of the content to improve the user experience.
5. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, The dynamic key distribution and policy synchronization module includes: The policy update unit is used to receive updated control policies from the parent's end and generate new access keys; The key management unit is used to store and manage current access keys and policy information to ensure information security. The key distribution unit is used to distribute new access keys to the corresponding user accounts through the improved ECDH protocol to achieve dynamic control.
6. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, The permission verification and access control module includes: The permission acquisition unit is used to receive access keys distributed by the dynamic key distribution module and generate corresponding access tokens for user accounts. The permission verification unit is used to verify the user's access rights based on the distributed access token before the content is played, ensuring that the user has the compliance to play the corresponding content. The access control unit is responsible for authorizing access to content for verified accounts and updating user access logs in real time to ensure system reliability.
7. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, The real-time decryption and content presentation module includes: The content decryption unit is used to decrypt encrypted content according to the user account type, ensuring that the user only receives the appropriate content version; The content display unit controls the display method of the content according to the type of decrypted content, and displays sensitive content with mosaic processing for children's accounts in order to protect minors; The playback control unit is used to adjust the playback content according to user selection or parental control policies to ensure safe playback.
8. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, The basic key K in the dynamic key generation and encryption module b The formula for generating it is: K b =QChaos(SEED,F); In the formula, K b QChaos(SEED,F) represents the base key, QChaos(SEED,F) represents the function, and the algorithm used to generate the base key is represented by SEED, which represents the random seed, and F represents the device fingerprint.
9. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, In the content pre-analysis and sensitive content detection module, the sensitivity calculation formula for each video frame is as follows: S m ={(t start ,t end ,type)}; In the formula, S m Let t represent the set of sensitive segments. start Start time and t of sensitive segments end The end time of the sensitive segment is indicated by `type`, which represents the sensitive type.
10. A home multi-user content hierarchical encryption system according to claim 1, characterized in that, The verification formula for confirming user permissions in the permission verification and access control module is as follows: Γ(K)=[Γ1|Γ2|Γ3]; In the formula, Γ(K) represents the user authentication information given parameter K, [Γ1|Γ2|Γ3] represents the multiple parts that make up the authentication result, and Γ1 represents the information based on the base key K. b The verification information generated with access key ΔK, where Γ2 represents the content stream-based verification information and Γ3 represents additional verification information.