Video file access control method and system based on video monitoring system

Abstract

The invention discloses a video file access control method based on a video monitoring system. The method comprises the following steps: firstly, receiving configuration information including a sensitive time period and a user white list; and then executing two core control links: firstly, monitoring a video session in real time, and immediately issuing a control instruction to a non-white list user who is accessing sensitive content to a playback service; and 2, when a new playing request is processed, a control identifier is added to a non-white list user request and then the request is forwarded. The playback service automatically skips the sensitive period data in transport of the streaming media according to the instruction or identification. According to the method, through real-time monitoring and instruction issuing, existing unauthorized access is actively cut off, and the risk of'empty window period 'leakage caused by authority effective delay is eliminated; through request identification and streaming media skipping, permission filtering and content seamless hiding are realized at an access source. According to the method, the instantaneity and the reliability of leakage prevention of the sensitive video are improved in double aspects of an access process and an access source.

Description

Technical Field

[0001] This application relates to the field of video surveillance technology, specifically to a method and system for access control of video recording files based on a video surveillance system. Background Technology

[0002] With the widespread adoption of video surveillance systems, the massive amounts of video data they generate often contain sensitive content related to public safety, personal privacy, or state secrets. During emergency response or major event security operations, the leakage of such sensitive footage due to operational errors or malicious acts could have serious consequences.

[0003] Current technologies primarily rely on administrators manually identifying sensitive video clips and adjusting access permissions for relevant users one by one. This method has the following significant drawbacks: First, in city-level systems managing millions of video resources, manually locating sensitive videos is extremely inefficient, cumbersome, and prone to errors, resulting in slow response times and an inability to prevent risks from being blocked immediately. Second, permission adjustments usually do not take effect instantly. For users who have already accessed sensitive content online, there is a "window period" during which users may still perform actions such as taking screenshots or screen recordings, leading to data leaks. Therefore, there is an urgent need for a technical solution that can efficiently, accurately, and instantly control access to sensitive video recordings. Summary of the Invention

[0004] This application aims to overcome the shortcomings of existing technologies and provide a method and system for access control of video recording files based on a video surveillance system. Its core objective is to achieve automated, real-time hiding and blocking of sensitive video recording files, while ensuring normal access to non-sensitive content. To achieve the above objectives, the technical solution adopted in this application includes:

[0005] In a first aspect, embodiments of this application provide a method for access control of video recording files based on a video surveillance system, including:

[0006] Receive configuration information, which includes sensitive time periods for at least one recording channel and a whitelist of users with access permissions;

[0007] Monitor existing video sessions, and for sessions that are accessing recordings during the sensitive time period and whose corresponding users are not in the user whitelist, send control commands to the recording playback service.

[0008] Receive a recording access request from a client, extract the user identifier from the request; if the user identifier is not in the user whitelist, add a control identifier to the request and forward it to the recording playback service;

[0009] Based on the received control command or request containing the control identifier, the video playback service skips the video data during the sensitive time period when transmitting video data to the corresponding user.

[0010] Furthermore, the step of receiving configuration information includes:

[0011] Provides a management interface to receive selection operations on areas on an electronic map and obtain the identifiers of all video channels within the selected area;

[0012] The system receives grouping operations for the video channel and sensitive time periods set for the grouping, in order to establish a correlation between the video channel and the sensitive time period.

[0013] Furthermore, the step of receiving configuration information further includes:

[0014] It provides a user whitelist management interface, which supports batch addition, removal or updating of user identifiers and their permission rules in the user whitelist by importing user list files.

[0015] Furthermore, the step of sending control commands to the video playback service specifically includes:

[0016] The user whitelist is read from the database and stored by constructing a preset data structure;

[0017] Traverse the current video sessions and use the preset data structure to determine whether the receiving user of each session is in the user whitelist;

[0018] If the determination is negative, the control command is generated and sent to the corresponding video playback service.

[0019] Furthermore, the video data that skips the sensitive time period specifically includes:

[0020] The video playback service obtains the sensitive time period of the video channel corresponding to the current playback request based on the control command or control identifier;

[0021] During the transmission of video data stream, the current playback time point is compared with the sensitive time period in real time;

[0022] If the current playback time falls within any sensitive time period, the playback position will automatically jump to the end time of that sensitive time period before continuing to transmit the recording data.

[0023] Furthermore, the access control method further includes:

[0024] When the video playback service determines that the current user is constrained by the control command or control identifier, it rejects the user's request to locate the video recording within a sensitive time period.

[0025] Furthermore, adding a control identifier to the request includes:

[0026] Set specific fields or flags in the signaling protocol forwarded to the video playback service to identify that the request comes from a non-whitelisted user.

[0027] Furthermore, the user permission rules in the user whitelist include the permission effective time range, and the access control method further includes:

[0028] When determining user permissions, if the current time is outside the effective time range of the corresponding user permission rule, the user will be treated as a non-whitelisted user.

[0029] Furthermore, the operation of skipping the video recording data during the sensitive time period is not visible to users in the user whitelist, and their access and redirection operations are unrestricted.

[0030] Secondly, embodiments of this application provide an access control system capable of implementing any of the aforementioned access control methods, comprising:

[0031] The network management platform is used to receive and store configuration information, which includes sensitive time periods for at least one recording channel and a whitelist of users with access permissions.

[0032] The central management service module is used to monitor existing video sessions. For sessions that are accessing recordings during the sensitive time period and whose corresponding users are not in the user whitelist, the module sends control commands to the recording playback service module. It receives recording access requests from clients and extracts user identifiers from the requests. If the user identifier is not in the user whitelist, the module adds a control identifier to the request.

[0033] The video playback service module is used to receive the control command or request containing the control identifier from the central management service module; and, according to the control command or request containing the control identifier, skip the video data of the sensitive time period when transmitting video data to the corresponding user.

[0034] This application provides a method for access control of video recording files based on a video surveillance system. This method constructs a basic access control strategy by receiving configuration information containing sensitive time periods and user whitelists. Its core improvement lies in setting up two parallel control loops: first, monitoring the current video session and immediately sending control commands to the video playback service to block non-whitelisted users accessing recordings within sensitive time periods; second, when processing new playback requests, adding control tags to requests from non-whitelisted users before forwarding them. The video playback service automatically skips data within sensitive time periods when transmitting video streams based on the received control commands or tagged requests. This method, through a "real-time session inspection and blocking" mechanism, effectively eliminates the access "window period" that exists after permission adjustments in existing technologies, and solves the risk of immediate leakage caused by online users continuously accessing sensitive content. Simultaneously, through a "request prediction and tagging" mechanism, permission filtering is completed before access is initiated, and combined with intelligent redirection at the streaming media layer, accurate and seamless hiding of sensitive content is achieved, thereby greatly improving the immediacy and reliability of preventing the leakage of sensitive video recording files. Attached Figure Description

[0035] Figure 1 A core flowchart of a video surveillance system-based video file access control method provided in this application embodiment;

[0036] Figure 2 A flowchart illustrating the process of a system administrator editing sensitive video files and user whitelists, provided in this application embodiment;

[0037] Figure 3 This is a flowchart illustrating the process of implementing an "access control mechanism" for sensitive video files using the central management service and video playback service provided in the embodiments of this application. Detailed Implementation

[0038] To enable those skilled in the art to better understand the technical solutions of this application, exemplary embodiments of this application are described below with reference to the accompanying drawings, including various details of the embodiments of this application to aid understanding. These should be considered merely exemplary. Therefore, those skilled in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of this application. Similarly, for clarity and conciseness, descriptions of well-known functions and structures are omitted in the following description. Unless otherwise specified, the various embodiments of this application and the features within those embodiments can be combined with each other.

[0039] As used herein, the term “and / or” includes any and all combinations of one or more of the associated enumerated entries. The terminology used herein is for describing particular embodiments only and is not intended to limit the application. As used herein, the singular forms “a” and “the” are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that when the terms “comprising” and / or “made of” are used in this specification, the presence of the stated features, integrals, steps, operations, elements, and / or components is specified, but the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof is not excluded. Terms such as “connected” or “linked” are not limited to physical or mechanical connections but can include electrical connections, whether direct or indirect.

[0040] Unless otherwise specified, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art. It should also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having the meaning consistent with their meaning in the context of the relevant art and this application, and will not be interpreted as having an idealized or overly formal meaning, unless expressly so defined herein.

[0041] During emergency response or major events, the leakage of sensitive video recordings due to user error (such as accidental forwarding or publication) or content leaks can easily trigger negative effects. To effectively prevent such problems and strengthen video content security, the current mainstream solution is to precisely set user permissions to prevent unauthorized access to sensitive resources at the source. However, this approach, which relies on manually locating sensitive videos and adjusting user permissions one by one, has significant drawbacks in practical application, specifically in the following two aspects:

[0042] On the one hand, processing efficiency is extremely low in complex scenarios, and the cumbersome operation process easily leads to misoperation. Taking a city-level surveillance system as an example, it needs to manage millions of surveillance videos on a daily basis, while coordinating a large number of video maintenance personnel. When an emergency occurs and hundreds of sensitive videos need to be blocked urgently, staff must first accurately locate the target from the massive video resources associated with millions of devices—this step is like "finding a needle in a haystack," requiring a lot of time for screening and verification. Even if the target is successfully located, permissions must be adjusted for each maintenance personnel unrelated to the task to achieve the blocking. The entire process is interconnected and involves a huge amount of operations, which not only consumes a lot of manpower and time, but may also lead to oversights due to staff fatigue or operational errors. The lengthy processing cycle means that sensitive videos cannot be blocked in time, thus significantly increasing the risk of leakage of sensitive video data by unauthorized personnel.

[0043] On the other hand, for users already online and accessing sensitive data, this permission setting method cannot immediately block access, thus exacerbating the risk of data leakage. These online users may have already loaded some sensitive video content, or even be acquiring data in real time. After the permission adjustment command is issued, it often requires multiple steps, such as system background synchronization and user-side cache updates, to take effect, making it difficult to instantly sever their connection to the sensitive data source. During this "window period" before the permission officially takes effect, sensitive videos remain accessible. If users take screenshots, record screens, or forward content during this time, sensitive data may be disseminated, potentially leading to adverse consequences.

[0044] In view of this, this application provides a method and system for access control of video recording files based on a video surveillance system. This method and system possess several core advantages: First, it can efficiently and accurately shield video recording data during sensitive time periods, ensuring that sensitive information is not arbitrarily accessed; second, it can immediately and effectively sever the connection between the user and the source of sensitive video recording files, preventing information leakage risks at the source; third, while ensuring the security of sensitive data, it can ensure that video recording files during non-sensitive time periods maintain normal viewing permissions. This application adds a "sensitive video recording file access control mechanism" between the network management platform, user terminals, central management services, and video playback services. On the one hand, it can automatically hide sensitive video recording files; on the other hand, it can ensure the normal playback of daily video recording files, achieving an effective balance between data security protection and routine usage needs.

[0045] refer to Figure 2 and Figure 3 One embodiment of this application proposes a video recording file access control system based on a video surveillance system, which may specifically include several functional modules such as a network management platform, a central management service module, and a video playback service module.

[0046] The network management platform is used to receive and store configuration information, which includes sensitive time periods for at least one recording channel and a whitelist of users with access permissions.

[0047] Specifically, when sensitive video recordings need to be protected, the operation process is as follows: First, the system administrator creates a sensitive video recording time period group in the network management platform and adds the relevant data to the group; after adding the data, users with viewing permissions for classified video data are selected and added to the user whitelist; if it is necessary to update the classified video data group or user whitelist later, the system administrator only needs to manually modify the relevant content in the network management platform to synchronously change the user's access permissions to the classified video data; after the database completes the corresponding relationship operation, it can automatically send instructions to the central management service module.

[0048] The central management service module is used to monitor existing video sessions. For sessions that are accessing recordings during the sensitive time period and whose corresponding users are not in the user whitelist, the module sends control commands to the recording playback service module. It receives recording access requests from clients and extracts user identifiers from the requests. If the user identifier is not in the user whitelist, the module adds a control identifier to the request.

[0049] Specifically, one of the core tasks of the central management service module is to determine user permissions. It extracts key information such as user ID, requested video data ID, and requested playback time from the client's request session. When the central management service module receives a notification from the network management platform, it operates as follows: First, it reads the user whitelist from the database; then, it checks if any non-whitelisted users are accessing sensitive recording files. If so, it immediately notifies the video playback service module to hide that data. Simultaneously, if a non-whitelisted user attempts to access a sensitive video file, the system tags the user's request session to indicate their permissions, and then forwards the session to the video playback service module, which then performs the hiding operation for the sensitive recording file.

[0050] The video playback service module is used to receive the control command or request containing the control identifier from the central management service module; and, according to the control command or request containing the control identifier, skips the video data of the sensitive time period when transmitting video data to the corresponding user.

[0051] Specifically, the core function of the video playback service module is to transmit recorded video data. Its operating mechanism is as follows: upon receiving a request control message from the central management service module, it adopts a specific data transmission strategy for non-whitelisted users—only transmitting video file data from non-sensitive time periods, while skipping sensitive video file data. This method effectively prevents the leakage of information from sensitive video files.

[0052] refer to Figure 1 Another embodiment of this application proposes a video recording file access control method based on a video surveillance system. The core idea is to construct a dynamic, real-time two-level control mechanism. The first level is "real-time blocking during the event": the system continuously monitors all active video sessions, and once it detects an unauthorized user playing recordings from a period marked as sensitive, it immediately notifies downstream services to interrupt that part of the data stream. The second level is "precise interception beforehand": for any new recording access request, the system performs permission verification before forwarding, marks unauthorized user requests with a special mark, and instructs downstream services to automatically skip sensitive periods during transmission. A video recording file access control method based on a video surveillance system may specifically include the following steps.

[0053] Step 1: Receive configuration information, which includes sensitive time periods for at least one recording channel and a whitelist of users with access permissions.

[0054] Step 2: Monitor existing video sessions. For sessions that are accessing recordings during the sensitive time period and whose corresponding users are not in the user whitelist, send control commands to the recording playback service.

[0055] Step 3: Receive the recording access request from the client and extract the user identifier from the request; if the user identifier is not in the user whitelist, add the control identifier to the request and forward it to the recording playback service.

[0056] Step 4: When transmitting video data to the corresponding user, the video playback service skips the video data during the sensitive time period based on the received control command or request containing the control identifier.

[0057] More specifically, firstly, the system receives and stores sensitive time period information and user whitelists configured by the administrator. Secondly, the central management service module proactively monitors all current video sessions, using the whitelist to quickly identify sessions accessing sensitive content without authorization, and issues immediate control commands to the video playback service module. Simultaneously, for any newly connected client playback request, the central management service module embeds an identifier representing the user's permission status in the request signaling. Finally, based on the received control commands or requests with permission identifiers, the video playback service module intelligently skips or bypasses recording data corresponding to sensitive time periods during video stream transmission, transmitting only non-sensitive content to unauthorized users.

[0058] refer to Figure 2 In some embodiments, the specific steps for a super administrator to edit sensitive video files and user whitelists may include:

[0059] Step 21: After logging into the network management platform, the super administrator can initiate the tagging operation for sensitive recording files. First, locate the area where the sensitive event occurred on the platform map interface. After accurately locating the target location by zooming and panning the map, the administrator uses the selection tool to delineate the area. The system will automatically trigger a related search, synchronously obtaining information on all connected video channels within the area (including channel ID, device model, live feed link, etc.), and displaying it in the list on the right side of the interface.

[0060] Next, complete the batch grouping of video channels. Click the "Add to Recording Management Group" button above the video channel list. You can select an existing group or create a new one (e.g., named "XX Area Sensitive Events Group"). After confirming the grouping information, the system will add all video channels within the selected area to the target group at once to avoid duplicate operations.

[0061] Finally, set the sensitive time period identifier. Go to the details page of this video recording management group, and enter the start and end times (accurate to the second, and the date can be selected via the calendar control) for the sensitive event in the "Time Period Settings" box. After submitting the settings, the system will automatically mark all video channels within this group as "sensitive recordings" during the corresponding time period and distinguish them with a special identifier in the recording list for easy retrieval and management later.

[0062] This application enables administrators to set sensitive time periods in batches by selecting areas on a map and grouping them. This greatly improves the efficiency of configuring sensitive recording ranges, avoids manually searching for a needle in a haystack of millions of video resources, simplifies the operation process, and reduces the risk of misoperation due to cumbersome operations.

[0063] Step 22: After logging into the network management platform, the super administrator can access the user whitelist management page to perform tagging operations. This page clearly displays the complete details of added users (such as user ID, associated rules, and effective status), making it easy for administrators to quickly locate target users.

[0064] For users already on the whitelist, administrators can perform three basic operations: click the "Edit" button to modify the user's corresponding permission rules (such as effective time, access scope, etc.); select the target user and click "Remove" to delete them from the whitelist (a second confirmation is required after the operation to avoid accidental deletion); and obtain whitelist user data through the "Batch Export" function (supports filtering and exporting by department, rule type, and other conditions).

[0065] The user whitelist also includes user permission rules that specify the effective time range of permissions. This means that when determining user permissions, if the current time is outside the effective time range of the corresponding user permission rule, the user will be treated as a non-whitelist user. This setting further refines the user whitelist function, enabling fine-grained management of permission validity. It allows for setting temporary access authorizations (such as being valid only during event handling), further enhancing the flexibility and security of access control.

[0066] To adjust the whitelist user range in batches, administrators can click the "Import Update" button and upload the user list filled in according to the platform template (which must include user identifiers and corresponding rule information). The system will automatically compare the original configuration: unchanged users and rules will remain in effect, newly added users will be added to the whitelist, and users in the original whitelist who do not appear in the new list will be automatically removed, thus completing the batch update of the whitelist.

[0067] This application enables efficient and batch maintenance of user whitelists, and is especially suitable for scenarios with a large number of maintenance personnel and frequent permission changes in large systems, ensuring the timeliness and accuracy of permission management.

[0068] Step 23: After completing the above steps, the network management platform will write the sensitive video file data and user whitelist data into the database, and at the same time send the relevant change information to the central management service module in real time, so as to ensure that the management end can keep abreast of the dynamic changes of the platform's core configuration.

[0069] refer to Figure 3 In some embodiments, the process by which the central management service module and the video playback service module implement the "access control mechanism" for sensitive video files may specifically include the following steps.

[0070] Step 31: After receiving the notification message from the network management platform, the central management node reads the user whitelist information from the user whitelist table in the database and creates a user whitelist hash chain list with the user ID to store user data.

[0071] Step 32: The central management node traverses the list of managed sessions in memory, checking each session's receiving user ID against the user whitelist hash list. If the receiving user ID is not found in the hash list, a control message is sent to the video playback service. If the receiving user ID is found in the hash list, no control message is sent. This application uses data structures such as hash linked lists for fast matching, significantly improving the efficiency of real-time permission verification for massive online sessions, ensuring the immediate issuance of control commands, and meeting the requirements for rapid response in the event of emergencies.

[0072] Step 33: After receiving a new client request, the central management node will first extract the receiving user ID from the request signaling and determine whether the ID is in the user whitelist. If it is determined that the receiving user ID is not in the user whitelist hash list, the system will add a control field to the signaling to indicate that the user is not in the user whitelist, and then forward the modified signaling to the video playback service. If it is confirmed that the receiving user ID is in the user whitelist, the signaling will be forwarded directly to the video playback service.

[0073] This application provides a lightweight, loosely coupled permission information transmission mechanism by "adding control fields to signaling". By embedding specific identifiers in standard signaling, the video playback service can know the user's permission status without complex interaction with the central management service, thereby simplifying the internal communication process of the system and improving processing efficiency.

[0074] Step 34: After receiving the control message from the central management service, the video playback service processes the message as follows: Extract video channel information from the currently playing video session; access the database to read the start and end times of the sensitive recording file corresponding to that video channel; compare the real-time playback time of the recording file with the aforementioned sensitive time period: if the current playback time falls within a sensitive time period, the video playback service will automatically jump to the end time of the sensitive recording file and then continue playing non-sensitive content; when the user attempts to jump to the recording again, the system will directly reject the request. Through this mechanism, it can be ensured that non-whitelisted users cannot view sensitive recording files.

[0075] Step 35: After receiving the signaling from the central management service, the video playback service first parses the video channel information and control fields from the signaling, and then processes them according to the following rules: If the specific field is not present in the signaling, it indicates that the user is on the user whitelist, and the video playback service will send the video data of all recorded files normally; if the specific field is present in the signaling, it indicates that the user is not on the user whitelist. In this case, the server will read the start and end times of the sensitive recorded files corresponding to the video channel from the database, and check in real time whether the playback time of the current recorded file is within the sensitive period: when the playback time is not within the sensitive period, the video data is sent normally; if the playback time is within the sensitive period, the server will directly jump to the end time of the sensitive recorded file and continue playback. At the same time, when the user initiates a recording jump request, the video playback service will directly reject the operation. Through the above process, the automatic hiding of sensitive recorded files can be achieved, while ensuring the normal playback of daily recorded files.

[0076] This application achieves seamless blocking of unauthorized users through the "jump to end time" operation. The user perceives the video stream as playing continuously without any sensitive content, avoiding user questions or repeated attempts caused by directly interrupting playback or returning an error. While ensuring security, it improves the concealment and smoothness of the user experience.

[0077] This application, by "denying redirection requests," forms a second line of defense, preventing unauthorized users from bypassing the system's real-time redirection mechanism by dragging progress bars or other means to attempt to access sensitive content, thereby further strengthening the security of access control.

[0078] Skipping video recordings during sensitive time periods is invisible to users on the whitelist, whose access and navigation are unrestricted. This precisely distinguishes between authorized and unauthorized users, ensuring that authorized personnel (such as incident handlers) can view all recordings (including sensitive parts) without hindrance to perform their duties, while unauthorized personnel are effectively blocked, thus perfectly balancing the dual requirements of "data security" and "business availability".

[0079] Overall, the advantages of this application compared to the prior art include:

[0080] 1. Realizes instant blocking: By actively monitoring online sessions and issuing control commands, it can instantly cut off the connection between unauthorized users and sensitive video data sources, effectively eliminating the risk of leakage caused by the "window period" of permission changes.

[0081] 2. Improved management efficiency: By supporting the configuration of sensitive resources based on electronic map selection and batch grouping, as well as the batch management of whitelists through file import, the configuration workload of administrators is greatly simplified and the emergency response speed is improved.

[0082] 3. A balance between user experience and security is maintained: For unauthorized users, the system uses a seamless redirection rather than abrupt interruption to block sensitive content and prohibits redirection to sensitive time periods. This ensures the security of core data while minimizing interference with users' normal viewing of non-sensitive recordings. For authorized users, the process is completely transparent, ensuring their work is not affected.

[0083] The aforementioned embodiments of the video recording file access control method based on the video surveillance system and the embodiments of the video recording file access control system based on the video surveillance system are technically related, and they can be referred to each other in terms of technical details and technical effects, which will not be repeated here.

[0084] The flowcharts or block diagrams in the accompanying drawings illustrate the architecture, functionality, and / or operation of possible implementations of systems, methods, and / or computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of an instruction containing one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0085] Exemplary embodiments have been disclosed herein, and while specific terminology has been used, it is used and should be interpreted only in a general illustrative sense and is not intended to be limiting. In some embodiments, it will be apparent to those skilled in the art that features, characteristics, and / or elements described in conjunction with particular embodiments may be used alone, or in combination with features, characteristics, and / or elements described in conjunction with other embodiments, unless otherwise expressly indicated. Therefore, those skilled in the art will understand that various changes in form and detail may be made without departing from the scope of this application as set forth by the appended claims.

Claims

1. A method for access control of video recording files based on a video surveillance system, characterized in that, include: Receive configuration information, which includes sensitive time periods for at least one recording channel and a whitelist of users with access permissions; Monitor existing video sessions, and send control commands to the video playback service for sessions that are accessing recordings during the sensitive time period and whose corresponding users are not in the user whitelist. Receive a recording access request from a client and extract the user identifier from the request; If the user identifier is not in the user whitelist, then the request is forwarded to the video playback service after adding the control identifier. Based on the received control command or request containing the control identifier, the video playback service skips the video data during the sensitive time period when transmitting video data to the corresponding user.

2. The access control method according to claim 1, characterized in that, The steps for receiving configuration information include: Provides a management interface to receive selection operations on areas on an electronic map and obtain the identifiers of all video channels within the selected area; The system receives grouping operations for the video channel and sensitive time periods set for the grouping, in order to establish a correlation between the video channel and the sensitive time period.

3. The access control method according to claim 1 or 2, characterized in that, The step of receiving configuration information further includes: It provides a user whitelist management interface, which supports batch addition, removal or updating of user identifiers and their permission rules in the user whitelist by importing user list files.

4. The access control method according to claim 1, characterized in that, The step of sending control commands to the video playback service specifically includes: The user whitelist is read from the database and stored by constructing a preset data structure; Traverse the current video sessions and use the preset data structure to determine whether the receiving user of each session is in the user whitelist; If the determination is negative, the control command is generated and sent to the corresponding video playback service.

5. The access control method according to claim 1, characterized in that, The video data that skips the sensitive time period specifically includes: The video playback service obtains the sensitive time period of the video channel corresponding to the current playback request based on the control command or control identifier; During the transmission of video data stream, the current playback time point is compared with the sensitive time period in real time; If the current playback time falls within any sensitive time period, the playback position will automatically jump to the end time of that sensitive time period before continuing to transmit the recording data.

6. The access control method according to claim 5, characterized in that, The access control method further includes: When the video playback service determines that the current user is constrained by the control command or control identifier, it rejects the user's request to locate the video recording within a sensitive time period.

7. The access control method according to claim 1, characterized in that, Adding a control identifier to the request includes: Set specific fields or flags in the signaling protocol forwarded to the video playback service to identify that the request comes from a non-whitelisted user.

8. The access control method according to claim 1, characterized in that, The user permission rules in the user whitelist include the permission effective time range, and the access control method further includes: When determining user permissions, if the current time is outside the effective time range of the corresponding user permission rule, the user will be treated as a non-whitelisted user.

9. The access control method according to claim 1, characterized in that, The operation of skipping the video recording data during the sensitive time period is not visible to users on the user whitelist, but their access and redirection operations are unrestricted.

10. An access control system capable of implementing the access control method according to any one of claims 1-9, characterized in that, include: The network management platform is used to receive and store configuration information, which includes sensitive time periods for at least one recording channel and a whitelist of users with access permissions. The central management service module is used to monitor existing video sessions. For sessions that are accessing recordings during the sensitive time period and whose corresponding users are not in the user whitelist, the module sends control commands to the recording playback service module. Receive a recording access request from a client, extract the user identifier from the request; if the user identifier is not in the user whitelist, add a control identifier to the request; The video playback service module is used to receive the control command or request containing the control identifier from the central management service module; and, according to the control command or request containing the control identifier, skip the video data of the sensitive time period when transmitting video data to the corresponding user.

Images