End-to-end network audio stream encryption transmission method and device, equipment and medium

Abstract

The invention provides an end-to-end network audio stream encryption transmission method and device, equipment and a medium, and relates to the technical field of communication. The method comprises the following steps: in response to an encrypted transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end and establishing a communication session connection between the two; generating a stream encryption key for symmetric encryption by the audio stream receiving end; the audio stream sending end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode; the audio stream sending end encrypts an audio stream to be transmitted in real time by using the stream encryption key through a symmetric encryption algorithm, and transmits the encrypted audio stream to the audio stream receiving end; and the audio stream receiving end decrypts the encrypted audio stream in real time by using the stream encryption key through a symmetric encryption algorithm. According to the invention, high-security and low-delay network audio stream encryption transmission is realized.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to an end-to-end network audio stream encryption transmission method, apparatus, device and medium. Background Technology

[0002] In modern communications, network audio transmission technology enables efficient transmission of audio signals via the internet, not only meeting the growing demand for audio content but also providing more flexible and convenient audio services. However, audio data faces serious security threats during network transmission, including eavesdropping attacks, data tampering, identity spoofing, and denial-of-service risks. Unencrypted audio streams can be intercepted by malicious attackers, leading to the leakage of sensitive conversations and causing serious consequences such as privacy violations and the leakage of trade secrets. Especially with the widespread adoption of the Internet of Things and smart devices, the real-time and continuous nature of audio data makes it an even more vulnerable target for attacks.

[0003] Audio stream encryption technology, employing symmetric, asymmetric, or hybrid encryption algorithms, effectively ensures the confidentiality, integrity, and availability of audio data during transmission. Encryption not only prevents unauthorized access and eavesdropping but also ensures copyright protection and identity authentication for audio content. Currently, end-to-end encryption has become a crucial trend in audio transmission security, ensuring that only the communicating parties can access the original audio content, and that even if the data is intercepted during transmission, it cannot be decrypted.

[0004] In related technologies, patent application CN216357277U discloses a network audio transmission device and audio system, proposing a method to encrypt audio data multiple times using a single key. Although this method consumes less computing resources and has a faster encryption and decryption speed, it relies solely on symmetric encryption. The key must be shared in advance through an additional secure channel or manually injected. Not only is key management complex, but once the key is leaked, all ciphertext can be decrypted in batches, and it cannot achieve forward secrecy and "one-time pad" security protection levels.

[0005] Patent application CN117176327A discloses a method and system for encrypted audio transmission. It proposes to acquire audio and store it in multiple buffers, then perform AES encryption transmission after a multi-level concatenation process involving data rearrangement, cyclic shifting of parity numbers, mapping of a pre-set password dictionary, and perturbation of a time function. While this method improves data obfuscation to some extent, its key space is fixed and relies on a pre-set dictionary and timestamps as key sources. The key space is fixed and needs to be shared beforehand, and there is a risk of reverse engineering the key source. Once the dictionary or time function is reversed, the entire session can be decrypted, failing to achieve forward secrecy and "one-time pad" security levels. Furthermore, all audio data undergoes secondary encoding, resulting in a complex processing flow and significant processing latency, making it unsuitable for applications with high real-time requirements such as real-time sound reinforcement and two-way audio communication. Summary of the Invention

[0006] This invention provides an end-to-end network audio stream encrypted transmission method, apparatus, device, and medium, solving the problem of how to achieve high-security, low-latency network audio stream encrypted transmission.

[0007] To achieve the above objectives, this application adopts the following technical solution: Firstly, an end-to-end encrypted transmission method for network audio streams is provided, including: In response to an encrypted transmission request initiated by a third party, the system identifies the audio stream sender and receiver and establishes a communication session connection between them. The audio stream receiving end generates a stream encryption key for symmetric encryption; the audio stream sending end and the audio stream receiving end exchange the stream encryption key using an asymmetric encryption method. The audio stream sending end uses the stream encryption key to encrypt the audio stream to be transmitted in real time using a symmetric encryption algorithm, and then transmits the encrypted audio stream to the audio stream receiving end. The audio stream receiver uses the stream encryption key to decrypt the encrypted audio stream in real time using a symmetric encryption algorithm.

[0008] Secondly, an end-to-end network audio stream encryption transmission device is provided, comprising: The session management module is used to respond to encrypted transmission requests initiated by third parties, identify the audio stream sender and the audio stream receiver, and establish a communication session connection between them. The streaming encryption key generation and exchange module is used to generate a streaming encryption key for symmetric encryption by the audio stream receiving end; the audio stream sending end and the audio stream receiving end exchange the streaming encryption key through an asymmetric encryption method; An audio stream encryption and transmission module is used by the audio stream sending end to encrypt the audio stream to be transmitted in real time using the stream encryption key and a symmetric encryption algorithm, and to transmit the encrypted audio stream to the audio stream receiving end. An audio stream decryption module is used by the audio stream receiving end to decrypt the encrypted audio stream in real time using the stream encryption key and a symmetric encryption algorithm.

[0009] Thirdly, an electronic device is provided, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, performs the steps of the method as described in the first aspect.

[0010] Fourthly, a readable storage medium is provided, on which a program or instructions are stored, which, when executed by a processor, implement the steps of the method as described in the first aspect. Attached Figure Description

[0011] Figure 1 A schematic flowchart illustrating an end-to-end network audio stream encryption transmission method provided in an embodiment of this application; Figure 2 This is a schematic flowchart illustrating a stream encryption key generation and exchange process provided in an embodiment of this application. Detailed Implementation

[0012] To further illustrate the technical means and effects adopted by the present invention to achieve its intended purpose, the technical solutions in the embodiments of this application are clearly described. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art are within the scope of protection of this application.

[0013] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first," "second," etc., are generally of the same class and the number of objects is not limited; for example, a first object can be one or more. Furthermore, in the specification, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0014] The steps described in this application and the flowcharts in the accompanying drawings are not necessarily strictly executed according to the step numbers; the execution order of the steps can be changed. Furthermore, certain steps can be omitted, multiple steps can be combined into one step, and / or one step can be broken down into multiple steps.

[0015] This specification provides an end-to-end network audio stream encryption transmission method, and also relates to an end-to-end network audio stream encryption transmission device, a computer device, and a computer-readable storage medium. The following describes each of these in detail with reference to the accompanying drawings and preferred embodiments.

[0016] Please see Figure 1 This application provides an end-to-end network audio stream encryption transmission method, including: Step S1: In response to an encrypted transmission request initiated by a third party, identify the audio stream sender and the audio stream receiver and establish a communication session connection between them; Step S2: The audio stream receiving end generates a stream encryption key for symmetric encryption; the audio stream sending end and the audio stream receiving end exchange the stream encryption key using an asymmetric encryption method; Step S3: The audio stream sending end uses the stream encryption key to encrypt the audio stream to be transmitted in real time using a symmetric encryption algorithm, and then transmits the encrypted audio stream to the audio stream receiving end; Step S4: The audio stream receiving end uses the stream encryption key to decrypt the encrypted audio stream in real time using a symmetric encryption algorithm.

[0017] Furthermore, the stream encryption key is dynamically generated by the audio stream receiver using a random number generator each time a communication session is established, and a new stream encryption key is generated independently for each communication session.

[0018] This invention proposes an end-to-end encrypted transmission method for network audio streams, achieving end-to-end encrypted protection between network audio transmitting and receiving devices. The method employs a hybrid encryption architecture combining asymmetric and symmetric encryption. It securely exchanges the stream encryption key using an asymmetric encryption algorithm, effectively eliminating the risk of key leakage during transmission. Simultaneously, it utilizes a symmetric encryption algorithm to encrypt the real-time audio stream data, significantly improving encryption and decryption efficiency while ensuring data security, thus meeting the low-latency requirements of real-time audio transmission.

[0019] In this method, the stream encryption key is generated directly by the receiving device. Upon receiving this key, the sending end can directly use it to send the encrypted audio stream without further confirmation. If the stream encryption key were generated by the sending end, confirmation of correct receipt by the sending end is required before sending the encrypted audio stream. Furthermore, the direct generation of the stream encryption key by the receiving device eliminates the need for third-party key distribution services or dedicated equipment, significantly simplifying the system architecture and reducing deployment costs. Employing a dynamic key generation mechanism, a unique stream encryption key is randomly generated each time an audio communication session is established, achieving "one-time key" security. Through an end-to-end encryption path design, the audio data remains encrypted throughout the entire transmission process, effectively preventing security threats such as man-in-the-middle attacks, data eavesdropping, and tampering, providing comprehensive security for network audio communication.

[0020] Furthermore, the third party is a management platform or routing management software.

[0021] See Figure 2 Furthermore, the audio stream receiving end generates a stream encryption key for symmetric encryption; the audio stream sending end and the audio stream receiving end exchange the stream encryption key using an asymmetric encryption method, including: Step S21: The audio stream receiver generates a first asymmetric key pair, including a receiver private key and a receiver public key.

[0022] Specifically, the receiving end uses a random number generator to generate the stream encryption key sess_key. (If the stream encryption key is generated by the receiving end, the sending end can directly use this key to send the encrypted audio stream without further confirmation. If the stream encryption key is generated by the sending end, it is necessary to confirm whether the sending end has received it correctly before sending the encrypted audio stream.) The receiving end can use the key generation algorithm in an asymmetric encryption algorithm (such as the SM2 encryption algorithm) to generate the corresponding asymmetric encryption private key pri_key_recv and public key pub_key_recv.

[0023] Step S22: The audio stream sender generates a second asymmetric key pair, including a sender private key and a sender public key.

[0024] Specifically, the sending end uses a key generation algorithm in an asymmetric encryption algorithm (such as the SM2 encryption algorithm) to generate the corresponding asymmetric encryption private key pri_key_send and public key pub_key_send.

[0025] Step S23: The audio stream sender and the audio stream receiver exchange their respective public keys.

[0026] Specifically, the sender and receiver exchange public keys pub_key_send and pub_key_recv.

[0027] Step S24: The audio stream receiver uses the sender's public key to perform asymmetric encryption on the first asymmetric key, and generates an encrypted stream encryption key after encryption.

[0028] Specifically, the receiving end uses an asymmetric encryption algorithm (such as the SM2 encryption algorithm) to encrypt the sess_key using pub_key_send.

[0029] Step S25: The audio stream receiver signs the encrypted stream encryption key and the receiver's private key to generate signature data.

[0030] Specifically, the receiving end uses a signature algorithm in an asymmetric encryption algorithm (such as the SM2 encryption algorithm) to sign the encrypted sess_key and the receiving end's private key pri_key_recv.

[0031] Step S26: The audio stream receiver sends the signature data to the audio stream sender.

[0032] Step S27: The audio stream sending end uses the public key of the receiving end to verify the signature data and obtains the encrypted stream encryption key.

[0033] Specifically, after receiving the signed data, the sending end uses the signature authentication algorithm in an asymmetric encryption algorithm (such as the SM2 encryption algorithm) to design the data using the receiving end's public key pub_key_recv to confirm the sending end's identity and obtain the encrypted sess_key.

[0034] Step S28: The audio stream sending end uses the sending end private key to perform asymmetric decryption on the encrypted stream encryption key to restore the stream encryption key.

[0035] Specifically, the sending end uses the decryption algorithm in an asymmetric encryption algorithm (such as the SM2 encryption algorithm) to decrypt the encrypted sess_key using pri_key_send to obtain the sess_key. Then, the sess_key is used to begin encrypted audio stream transmission and communication.

[0036] Based on the above solution, this application has the following beneficial effects: 1. This application employs a combination of asymmetric and symmetric encryption to achieve encrypted audio stream transmission. Asymmetric encryption is used for the exchange of the stream encryption key, ensuring the security of the key. Symmetric encryption algorithms are used to encrypt the audio stream, guaranteeing the transmission efficiency of the real-time audio stream.

[0037] 2. Digital signature authentication technology can prevent the stream encryption key from being tampered with and the identity of the receiving end from being impersonated.

[0038] 3. It eliminates the need to rely on third-party key distribution services or dedicated equipment, significantly simplifying the system architecture and reducing deployment costs.

[0039] 4. Each time an audio stream encryption communication is initiated, the stream encryption key is randomly generated, achieving "one-time key" security protection and improving the security of audio stream transmission.

[0040] 5. Through end-to-end encryption path design, audio data is kept encrypted throughout the entire transmission process, effectively preventing security threats such as man-in-the-middle attacks, data eavesdropping, and tampering, providing comprehensive security for network audio communication.

[0041] Corresponding to the above-described end-to-end network audio stream encryption transmission method embodiments, this application embodiment provides an end-to-end network audio stream encryption transmission apparatus, including: The session management module is used to respond to encrypted transmission requests initiated by third parties, identify the audio stream sender and the audio stream receiver, and establish a communication session connection between them. The streaming encryption key generation and exchange module is used to generate a streaming encryption key for symmetric encryption by the audio stream receiving end; the audio stream sending end and the audio stream receiving end exchange the streaming encryption key through an asymmetric encryption method; An audio stream encryption and transmission module is used by the audio stream sending end to encrypt the audio stream to be transmitted in real time using the stream encryption key and a symmetric encryption algorithm, and to transmit the encrypted audio stream to the audio stream receiving end. An audio stream decryption module is used by the audio stream receiving end to decrypt the encrypted audio stream in real time using the stream encryption key and a symmetric encryption algorithm.

[0042] Furthermore, the stream encryption key is dynamically generated by the audio stream receiver using a random number generator each time a communication session is established, and a new stream encryption key is generated independently for each communication session.

[0043] Furthermore, the third party is a management platform or routing management software.

[0044] Furthermore, the stream encryption key generation and exchange module is further configured as follows: The audio stream receiver generates a first asymmetric key pair, including a receiver private key and a receiver public key; The audio stream sender generates a second asymmetric key pair, including a sender private key and a sender public key; The audio stream sender and the audio stream receiver exchange their respective public keys. The audio stream receiver uses the sender's public key to perform asymmetric encryption on the first asymmetric key, and generates an encrypted stream encryption key after encryption. The audio stream receiver signs the encrypted stream encryption key and the receiver's private key to generate signature data; The audio stream receiving end sends the signature data to the audio stream sending end; The audio stream sender uses the receiver's public key to verify the signature data and simultaneously obtains the encrypted stream encryption key. The audio stream sender uses its private key to perform asymmetric decryption on the encrypted stream encryption key, thereby restoring the encrypted stream encryption key.

[0045] The above-described end-to-end network audio stream encryption transmission device implements the steps and processes of the above-described end-to-end network audio stream encryption transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0046] Corresponding to the above-described end-to-end network audio stream encryption transmission method embodiments, this application provides an electronic device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, it implements the steps and processes of the above-described end-to-end network audio stream encryption transmission method embodiments and achieves the same technical effect. To avoid repetition, it will not be described again here.

[0047] Memory can be used to store software programs and various data. Memory can primarily include a first storage area for storing programs or instructions and a second storage area for storing data. The first storage area can store the operating system, application programs or instructions required for at least one function (such as sound playback, image playback, etc.). Furthermore, memory can include volatile memory or non-volatile memory, or both. Non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory can be random access memory (RAM), static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous linked dynamic random access memory (Synchlink DRAM, SLDRAM), and direct memory bus RAM (DRRAM). The memory in the embodiments of this application includes, but is not limited to, these and any other suitable types of memory.

[0048] The processor may include one or more processing units; optionally, the processor integrates an application processor and a modem processor, wherein the application processor mainly handles operations related to the operating system, user interface, and applications, while the modem processor mainly handles wireless communication signals, such as a baseband processor. It is understood that the aforementioned modem processor may also not be integrated into the processor.

[0049] Corresponding to the above-described end-to-end network audio stream encryption transmission method embodiments, this application embodiment also provides a readable storage medium storing a program or instructions. When the program or instructions are executed by a processor, they implement the steps and processes of the above-described end-to-end network audio stream encryption transmission method embodiments and achieve the same technical effect. To avoid repetition, these will not be described again here.

[0050] The processor is the processor in the electronic device described in the above embodiments of this application. The readable storage medium includes a computer-readable storage medium, such as a computer read-only memory (ROM), random access memory (RAM), a magnetic disk, or an optical disk.

[0051] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of this application is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0052] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a computer software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0053] It is understood that the embodiments of this application have been described above in conjunction with the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. As those skilled in the art will know, various changes or equivalent substitutions can be made to these features and embodiments without departing from the spirit and scope of the invention. Furthermore, those skilled in the art, under the guidance or instruction of this application, can modify these features and embodiments to adapt to specific situations and materials without departing from the spirit and scope of the invention. Therefore, this invention is not limited to the specific embodiments disclosed herein, and all embodiments falling within the scope of the claims of this application are within the protection scope of this invention.

Claims

1. A method for end-to-end encrypted transmission of network audio streams, characterized in that, include: In response to an encrypted transmission request initiated by a third party, the system identifies the audio stream sender and receiver and establishes a communication session connection between them. The audio stream receiver generates a stream encryption key for symmetric encryption; The audio stream sender and the audio stream receiver exchange the stream encryption key using an asymmetric encryption method; The audio stream sending end uses the stream encryption key to encrypt the audio stream to be transmitted in real time using a symmetric encryption algorithm, and then transmits the encrypted audio stream to the audio stream receiving end. The audio stream receiver uses the stream encryption key to decrypt the encrypted audio stream in real time using a symmetric encryption algorithm.

2. The end-to-end network audio stream encryption transmission method according to claim 1, characterized in that, The stream encryption key is dynamically generated by the audio stream receiver using a random number generator each time a communication session is established, and a new stream encryption key is generated independently for each communication session.

3. The end-to-end network audio stream encryption transmission method according to claim 1, characterized in that, The third party is a management platform or routing management software.

4. The end-to-end network audio stream encryption transmission method according to claim 1, characterized in that, The audio stream receiver generates a stream encryption key for symmetric encryption; The audio stream sender and the audio stream receiver exchange the stream encryption key using an asymmetric encryption method, including: The audio stream receiver generates a first asymmetric key pair, including a receiver private key and a receiver public key; The audio stream sender generates a second asymmetric key pair, including a sender private key and a sender public key; The audio stream sender and the audio stream receiver exchange their respective public keys. The audio stream receiver uses the sender's public key to perform asymmetric encryption on the first asymmetric key, and generates an encrypted stream encryption key after encryption. The audio stream receiver signs the encrypted stream encryption key and the receiver's private key to generate signature data; The audio stream receiver sends the signature data to the audio stream sender; The audio stream sender uses the receiver's public key to verify the signature data and simultaneously obtains the encrypted stream encryption key. The audio stream sender uses its private key to perform asymmetric decryption on the encrypted stream encryption key, thereby restoring the encrypted stream encryption key.

5. An end-to-end network audio stream encryption transmission device, characterized in that, include: The session management module is used to respond to encrypted transmission requests initiated by third parties, identify the audio stream sender and the audio stream receiver, and establish a communication session connection between them. A stream encryption key generation and exchange module is used to generate a stream encryption key for symmetric encryption from the audio stream receiving end; The audio stream sender and the audio stream receiver exchange the stream encryption key using an asymmetric encryption method; An audio stream encryption and transmission module is used by the audio stream sending end to encrypt the audio stream to be transmitted in real time using the stream encryption key and a symmetric encryption algorithm, and to transmit the encrypted audio stream to the audio stream receiving end. An audio stream decryption module is used by the audio stream receiving end to decrypt the encrypted audio stream in real time using the stream encryption key and a symmetric encryption algorithm.

6. The end-to-end network audio stream encryption transmission device according to claim 5, characterized in that, The stream encryption key is dynamically generated by the audio stream receiver using a random number generator each time a communication session is established, and a new stream encryption key is generated independently for each communication session.

7. The end-to-end network audio stream encryption transmission device according to claim 5, characterized in that, The third party is a management platform or routing management software.

8. The end-to-end network audio stream encryption transmission device according to claim 5, characterized in that, The stream encryption key generation and exchange module is further configured as follows: The audio stream receiver generates a first asymmetric key pair, including a receiver private key and a receiver public key; The audio stream sender generates a second asymmetric key pair, including a sender private key and a sender public key; The audio stream sender and the audio stream receiver exchange their respective public keys. The audio stream receiver uses the sender's public key to perform asymmetric encryption on the first asymmetric key, and generates an encrypted stream encryption key after encryption. The audio stream receiver signs the encrypted stream encryption key and the receiver's private key to generate signature data; The audio stream receiver sends the signature data to the audio stream sender; The audio stream sender uses the receiver's public key to verify the signature data and simultaneously obtains the encrypted stream encryption key. The audio stream sender uses its private key to perform asymmetric decryption on the encrypted stream encryption key, thereby restoring the encrypted stream encryption key.

9. An electronic device, characterized in that, The electronic device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the end-to-end network audio stream encryption transmission method as described in any one of claims 1 to 4.

10. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the end-to-end network audio stream encryption transmission method as described in any one of claims 1 to 4.

Images