Video anti-counterfeiting signature generation and video anti-counterfeiting verification method, device and storage medium

Abstract

The application discloses a video anti-counterfeiting signature generation and video anti-counterfeiting verification method, equipment and a storage medium. The video anti-counterfeiting signature generation method comprises the following steps: obtaining an original video stream, wherein the original video stream comprises at least two original video frames; performing label extraction processing on the corresponding original video frame based on the frame data of each original video frame in the original video stream and the obtained original device hardware fingerprint, to obtain the original video frame label value of each original video frame; and performing signature generation processing based on the original video frame label value of each original video frame and the obtained device key information, to obtain the original anti-counterfeiting signature of the original video stream. Therefore, the security and reliability of the video anti-counterfeiting signature can be improved.

Description

Technical Field

[0001] This invention relates to the field of data security technology, and in particular to a video anti-counterfeiting signature generation method, a video anti-counterfeiting verification method, an electronic device, and a computer-readable storage medium. Background Technology

[0002] Video anti-counterfeiting signatures aim to provide a proof of the authenticity and integrity of a video stream. With the help of video anti-counterfeiting signatures, it is possible to verify whether the video stream actually comes from the specific device provided, and to verify whether the video stream has been tampered with.

[0003] Fake videos can be used to create fake news, tamper with information, and carry out various misconducts, so ensuring the authenticity and integrity of video streams is crucial.

[0004] Therefore, there is an urgent need for a video anti-counterfeiting signature generation method with high security performance. Summary of the Invention

[0005] The main technical problem addressed by this application is to provide a video anti-counterfeiting signature generation method, a video anti-counterfeiting verification method, an electronic device, and a computer-readable storage medium, which can improve the reliability of video anti-counterfeiting signatures.

[0006] To address the aforementioned technical problems, this application provides a video anti-counterfeiting signature generation method. This method is applied to a video transmitting device and includes: acquiring an original video stream, which comprises at least two original video frames; performing tag extraction processing on the corresponding original video frames based on the frame data of each original video frame in the original video stream and the acquired original device hardware fingerprint to obtain the original video frame tag value of each original video frame; and performing signature generation processing based on the original video frame tag value of each original video frame and the acquired device key information to obtain the original anti-counterfeiting signature of the original video stream.

[0007] To address the aforementioned technical problems, another technical solution adopted in this application is: providing a video anti-counterfeiting verification method. This method is applied to a video receiving device, which is communicatively connected to a video sending device. The video anti-counterfeiting verification method includes: receiving a video file from the video sending device, the video file including an original anti-counterfeiting signature of the original video stream and a video stream to be verified. The original anti-counterfeiting signature of the original video stream is based on acquiring the original video stream, which includes at least two original video frames; performing tag extraction processing on the corresponding original video frames based on the frame data of each original video frame in the original video stream and the acquired original device hardware fingerprint to obtain the original video frame tag value of each original video frame; performing signature generation processing based on the original video frame tag value of each original video frame and the acquired device key information to obtain the original anti-counterfeiting signature of the original video stream; and performing verification processing on the video stream to be verified based on the original anti-counterfeiting signature to obtain the target verification result of the video stream to be verified.

[0008] To solve the above-mentioned technical problems, another technical solution adopted in this application is: to provide an electronic device, including a memory and a processor, wherein the memory stores program instructions, and the processor retrieves the program instructions from the memory to execute the above-mentioned video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method.

[0009] To solve the above-mentioned technical problems, another technical solution adopted in this application is: to provide a computer-readable storage medium including program data, wherein the program data is used to implement the above-mentioned video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method when executed by a processor.

[0010] The video anti-counterfeiting signature generation method of this application obtains the original video stream, which includes at least two original video frames. By extracting tags from the frame data of the original video frames using the obtained original device hardware fingerprint, a binding relationship is established between the frame data of the original video frames and the device. This ensures that each original video frame can be traced back to its corresponding device. Furthermore, binding the original video frame tag value to the frame data of the original video frame further increases the difficulty of signature forgery and improves the video anti-counterfeiting strength. The original anti-counterfeiting signature of the original video stream is determined by using device key information and the original video frame tag value of each original video frame in the original video stream. This not only ensures that the original video stream can be traced back to its corresponding device but also ensures the integrity of the original video stream, avoiding the loss of perception for single video frames and improving the security and reliability of the original anti-counterfeiting signature. Attached Figure Description

[0011] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly described below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort, wherein: Figure 1 This is a flowchart illustrating an exemplary embodiment of the video anti-counterfeiting signature generation method shown in this application; Figure 2 yes Figure 1 The illustrated flowchart shows an exemplary embodiment of step S130 in the video anti-counterfeiting signature generation method; Figure 3 This is a schematic diagram of a framework of an exemplary embodiment of the original device signature generation process shown in this application; Figure 4 This is a schematic diagram of an exemplary embodiment of the video transmitting apparatus shown in this application; Figure 5 This is a schematic diagram of an exemplary embodiment of the video receiving device shown in this application; Figure 6 This is a schematic diagram of the structure of an embodiment of the electronic device provided in this application; Figure 7 This is a schematic diagram of an embodiment of the computer-readable storage medium provided in this application. Detailed Implementation

[0012] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It is understood that the specific embodiments described herein are only for explaining this application and not for limiting it. Furthermore, it should be noted that, for ease of description, only the parts related to this application are shown in the accompanying drawings, not all structures. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0013] First, it's important to note that current video anti-counterfeiting methods typically involve encrypting the hash digest of the video stream using the private key in an asymmetric key, obtaining an anti-counterfeiting signature, and then embedding this signature into the video stream to create anti-counterfeiting video frames. However, this method struggles to guarantee that the video content hasn't been tampered with and makes it difficult to trace the video stream's origin.

[0014] Based on this, embodiments of this application propose a video anti-counterfeiting signature generation method, a video anti-counterfeiting verification method, an electronic device, and a computer-readable storage medium. Through dual processing of the original video frames and the original video stream, the traceability and integrity of the original video frames and the original video stream can be guaranteed. For details, please refer to... Figure 1 , Figure 1 This is a flowchart illustrating an exemplary embodiment of the video anti-counterfeiting signature generation method shown in this application.

[0015] The execution entity of the video anti-counterfeiting signature generation method can be a terminal device, a server, or other processing device. The terminal device can be a user equipment (UE), computer, mobile device, user terminal, terminal, cellular phone, cordless phone, personal digital assistant (PDA), handheld device, computing device, in-vehicle device, wearable device, etc. The execution entity of the video anti-counterfeiting signature generation method can also be a video transmitting device. In some possible implementations, the video anti-counterfeiting signature generation method can be implemented by a processor calling computer-readable instructions stored in memory.

[0016] Specifically, the video anti-counterfeiting signature generation method in this embodiment includes the following steps: S110: Acquire the raw video stream, which includes at least two raw video frames.

[0017] The raw video stream is the video stream to be transmitted in the video transmitting device. For example, the raw video stream can be obtained by a video capture device, or by acquiring a captured video stream from a video capture device and preprocessing it to obtain the raw video stream. It can also be obtained from an online website or other devices; the source of the raw video stream is not limited here. The video transmitting device can be a module within a video capture device, a module within a video recording device, or an independent module separate from the video capture device. The video capture device can be a camera, and the video recording device can be an NVR (Network Video Recorder).

[0018] The original video frame is the video frame included in the original video stream. For example, the video frames in the original video stream can be divided into keyframes (e.g., I-frames) and non-keyframes (e.g., P-frames or B-frames). A keyframe is a complete image that can be compressed independently. The video transmitting device can use the keyframes in the original video stream as the original video frames, or it can use all the video frames in the original video stream as the original video frames.

[0019] S120: Based on the frame data of each original video frame in the original video stream and the obtained original device hardware fingerprint, perform tag extraction processing on the corresponding original video frames to obtain the original video frame tag value of each original video frame.

[0020] Frame data includes pixel information and acquisition information of the original video frame. Pixel information includes, but is not limited to, at least one of the following: pixel color, pixel brightness, low-frequency texture, and high-frequency detail of each pixel. Acquisition information includes, but is not limited to, acquisition device, acquisition time, and acquisition location. Frame data is generally represented as a binary array.

[0021] The original device hardware fingerprint is used to uniquely identify the device. For example, the original device hardware fingerprint can be determined by collecting hardware information of the bound device. This can be achieved by utilizing unavoidable microscopic physical differences in the bound device (which could be a chip within the bound device) during manufacturing to generate unique fingerprint information for the bound device. The original device hardware fingerprint refers to the device intended to be bound to the original video stream. It can be the hardware fingerprint of the video capture device corresponding to the original video stream, the hardware fingerprint of the video transmission device, or other devices. When the original device hardware fingerprint is that of the video capture device, generating the original video frame tag value from the original device hardware fingerprint enables the original video frame to be traced back to the video capture device, ensuring the true origin of the original video frame.

[0022] The original video frame tag value is the tag value corresponding to the original video frame. The original video frame tag value can be used to confirm the true source and integrity of the original video frame. For example, the original video frame tag value can be generated based on the frame data and the original device hardware fingerprint. In some embodiments, the original video frame tag value can be obtained by processing the frame data and the original device hardware fingerprint using a hash calculation method. In other embodiments, the original video frame tag value can also be obtained by processing the frame data and the original device hardware fingerprint using a Cyclic Redundancy Check (CRC) method.

[0023] S130: Perform signature generation processing based on the original video frame tag values ​​of each original video frame and the obtained device key information to obtain the original anti-counterfeiting signature of the original video stream.

[0024] Device key information is the key information corresponding to the bound device. In some embodiments, the bound device can collect noise from the hardware and use a key pair generation algorithm to generate the device key information based on the noise. In other embodiments, the bound device can generate corresponding device key information based on its original device hardware fingerprint. In asymmetric encryption algorithms, device key information includes the device public key and the device private key.

[0025] The original anti-counterfeiting signature is a document that proves the origin and integrity of the original video stream. The original anti-counterfeiting signature may include a video signature of the original video stream, or a device signature of the device associated with the original video stream. In some embodiments, an overall tag extraction process can be performed based on the original video frame tag values ​​of each original video frame to obtain an overall tag value; the overall tag value is then encrypted using device key information to obtain the original anti-counterfeiting signature. In other embodiments, each original video frame tag value can be encrypted using device key information, resulting in encrypted original video frame tag values; then, an overall tag extraction process is performed on each encrypted original video frame tag value to obtain the original anti-counterfeiting signature. In still other embodiments, each original video frame tag value can be encrypted using device key information, resulting in encrypted original video frame tag values; these encrypted original video frame tag values ​​are then used as the original anti-counterfeiting signature.

[0026] As can be seen, the video anti-counterfeiting signature generation method of this application obtains the original video stream, which includes at least two original video frames; by extracting tags from the frame data of the original video frames using the obtained original device hardware fingerprint, a binding relationship is established between the frame data of the original video frames and the device, ensuring that each original video frame can be traced back to the corresponding device. Furthermore, binding the original video frame tag value to the frame data of the original video frame further increases the difficulty of signature forgery and improves the video anti-counterfeiting strength; by determining the original anti-counterfeiting signature of the original video stream through device key information and the original video frame tag value of each original video frame in the original video stream, it is possible not only to ensure that the original video stream can be traced back to the corresponding device, but also to ensure the integrity detection of the original video stream and avoid the loss of perception of a single video frame, thereby improving the security and reliability of the video anti-counterfeiting signature.

[0027] Based on the above embodiments, the embodiments of this application adopt... Figure 2 The flowchart details how to obtain the original video signature and original device signature of the original video stream when the original anti-counterfeiting signature includes both the original video signature and the original device signature. Please refer to [link / reference]. Figure 2 , Figure 2 yes Figure 1The illustrated flowchart shows an exemplary embodiment of step S130 in the video anti-counterfeiting signature generation method. Specifically, step S130, which performs signature generation processing based on the original video frame tag values ​​of each original video frame and the obtained device key information to obtain the original anti-counterfeiting signature of the original video stream, further includes the following steps: S210: Determine the original video signature based on the original video frame tag value and device key information corresponding to each original video frame.

[0028] The original video signature is used to verify the authenticity and integrity of the original video stream. For example, after obtaining the original video frame tag values ​​corresponding to each original video frame, the original video frame tag values ​​are encrypted using device key information to obtain the original video signature. In some embodiments, overall tag extraction processing can be performed based on the original video frame tag values ​​of each original video frame to obtain an overall tag value; the overall tag value is then encrypted using device key information to obtain the original anti-counterfeiting signature. Specifically, the device key information includes a device private key. Tag extraction processing is performed on the original video stream based on the original video frame tag values ​​of each original video frame and the timing information of each original video frame in the original video stream to obtain the original video stream tag value corresponding to the original video stream; the original video stream tag value is then encrypted using the device private key to obtain the original video signature of the original video stream. Thus, by performing overall tag extraction processing on the original video frame tag values ​​using the timing information of all original video frames, it is ensured that the obtained original video signature can not only verify the integrity of the original video stream but also further verify whether the order of each original video frame in the original video stream has been scrambled.

[0029] The following example uses the original video stream being captured by a video capture device. The video capture device can be considered the binding device for the original video stream. The original anti-counterfeiting signature provides verification information tracing the original video stream to the corresponding video capture device, proving that the original video stream was generated by the corresponding video capture device. In some embodiments, the original video frame tag value can be obtained by the video capture device processing each original video frame it captures in real time. In other embodiments, the original video frame tag value can also be obtained by the video capture device extracting tags from each original video frame in the original video stream after capturing it over a period of time.

[0030] For each original video frame, in response to receiving a tag extraction instruction for the original video frame, the original device hardware fingerprint of the bound device is obtained. Based on the original device hardware fingerprint and the frame data of the original video frame, an encrypted calculation is performed to obtain the original video frame tag value. The encryption algorithm can be HMAC (Hash-based Message Authentication Code). For example, the formula for calculating the original video frame tag value is as follows:

[0031] in, This represents the original video frame tag value. Indicates the encryption algorithm, Indicates the original device hardware fingerprint, This represents the frame data of the original video frame.

[0032] In some embodiments, before performing encrypted calculations on the original device hardware fingerprint and the frame data of the original video frame, the SEI region (Supplemental Enhancement Information) can be removed from the frame data of the original video frame. Then, the frame data with the SEI region removed and the original device hardware fingerprint are encrypted to obtain the original video frame tag value. After obtaining the original video frame tag value, it can be embedded into the SEI region of the corresponding original video frame's frame data. This seamlessly embeds the HMAC value into the video stream, ensuring normal video playback and compatibility.

[0033] The timing information can include the frame order of each original video frame in the original video stream, and can also include the acquisition timestamp of each original video frame. After obtaining the original video frame tag value corresponding to each original video frame, the original video frame tag value, acquisition timestamp, and frame order corresponding to the original video frame are stored in the processing sequence according to a specific format. After all the original video frame tag values, acquisition timestamps, and frame orders corresponding to each original video frame in the original video stream are stored in the processing sequence, the overall tag extraction processing is performed on each original video frame in the processing sequence to obtain the original video stream tag value.

[0034] The original video stream tag value is used to verify the integrity and sequence of the original video stream. For example, after obtaining the original video frame tag value, acquisition timestamp, and frame order of each original video frame, the original video frame tag value, acquisition timestamp, and frame order of each original video frame are combined in an ordered manner, and the overall hash value is calculated to obtain the original video stream tag value. The formula for calculating the original video stream tag value is as follows:

[0035] in, This represents the original video stream tag value. Indicates hash calculation, This represents the original video frame tag value of the i-th original video frame. This represents the capture timestamp of the i-th original video frame. This indicates the frame order of the i-th original video frame.

[0036] After determining the original video stream tag value, the video transmitting device encrypts the original video stream tag value using its private key to obtain the original video signature of the original video stream. For example, the calculation of the original video signature satisfies the following formula:

[0037] in, Indicates the original video signature. Indicates signature, This represents the device's private key. This represents the tag value of the original video stream.

[0038] S220: Determine the original device signature based on the device key information and the original device hardware fingerprint.

[0039] The original device signature is used to verify the authentic origin of the original video stream. Exemplarily, the original device signature can be generated using the device key information bound to the device and the original device hardware fingerprint. In some embodiments, the device key information can be generated based on the original device hardware fingerprint; that is, the device key information is generated based on the original device hardware fingerprint, and the original device signature is determined based on the device key information and the original device hardware fingerprint.

[0040] In some embodiments, the device key information includes a device public key and a private key corresponding to a preset root certificate. A device certificate signing request is generated based on the device public key and the original device hardware fingerprint. The device certificate signing request is then signed using the private key corresponding to the preset root certificate to obtain the original device signature. This method of generating an original device signature using the device public key and the private key of the preset root certificate further strengthens the association between the original device signature and the device, ensuring that the original device signature is permanently bound to the device.

[0041] A device certificate signing request is used to apply for an original device signature. Typically, a device certificate signing request includes the applicant's device public key and identity information, including but not limited to the applicant's organization information, domain name, and original device tag value. In some embodiments, the original device hardware fingerprint is obtained through a physically unclonable function; the original device hardware fingerprint is hashed to obtain the original device tag value; and the device certificate signing request is determined based on the device public key and the original device tag value. This method of generating the original device hardware fingerprint through a physically unclonable function provides a video transmitting device with an original device hardware fingerprint that does not require storage and cannot be read, copied, or migrated by software, achieving hardware-level anti-counterfeiting and device identity authentication, fundamentally preventing key leakage.

[0042] A Physically Unclonable Function (PUF) utilizes inherent physical properties of hardware to generate a unique, uncopyable digital fingerprint. These physical properties include, but are not limited to, the randomness of micro-manufacturing processes and random noise characteristics. It's important to note that, to ensure system security, the original device hardware fingerprint is never stored. Each time it's needed, a consistent original device hardware fingerprint is reconstructed in real-time through the PUF response. This avoids the risks associated with storing the original device hardware fingerprint. Based on this, the video transmission device needs to have a built-in physical PUF circuit (e.g., an SRAM PUF). During the process of obtaining the original device signature, the PUF is acquired through this built-in physical PUF circuit, and the original device hardware fingerprint corresponding to the PUF is generated through a challenge-response pair. A video frame PUF signature generation program also needs to be configured. This program initiates the acquisition of the PUF when generating the original video frame tag value corresponding to the original video frame, and generates the original device hardware fingerprint based on the PUF.

[0043] In some embodiments, the video transmitting device triggers a PUF (Physical Unit Frame) in a secure environment to acquire raw response data. The raw response data refers to a set of raw, noisy binary data directly measured or read from the PUF physical structure. Error correction and entropy enhancement are performed on the raw response data to obtain the raw device hardware fingerprint. Error correction and entropy enhancement can be implemented using a fuzzy extractor, which makes the raw device hardware fingerprint more stable and random. In other embodiments, the raw device hardware fingerprint can also be determined directly from the raw response data to improve the generation efficiency of the raw device hardware fingerprint.

[0044] After obtaining the original device hardware fingerprint, it can be encrypted using hash calculation to obtain the original device tag value. Hash processing the original device hardware fingerprint enhances the security of the original device tag value, facilitating subsequent verification of information authenticity. For example, the calculation of the original device tag value satisfies the following formula:

[0045] in, Indicates the original device tag value. Indicates hash calculation, This indicates the original device hardware fingerprint.

[0046] A device certificate signing request is generated based on the original device tag value and the device public key, for example, by storing the original device tag value in an extended field of the device certificate signing request.

[0047] In some embodiments, a device certificate signing request can be sent to a certificate authority (CA), which then generates the applicant's original device signature. In other embodiments, the device certificate signing request can be signed using the private key of a preset root certificate to obtain the original device signature. The private key of the preset root certificate is used to issue certificates without third-party involvement; the preset root certificate is publicly available, and other devices can verify the authenticity of the original device signature using it. For example, the private key of the preset root certificate can be generated from the original device's hardware fingerprint. Signing the device certificate signing request using the private key of the preset root certificate strengthens the binding relationship between the original device signature and the original device's hardware fingerprint.

[0048] To explain in detail the above original device signature generation process, Figure 3 The framework diagram shown below provides further explanation, as detailed below: In a secure environment, the video transmitting device triggers a PUF (Programmable Array Filter) to acquire the raw response data. A fuzz extractor is then used to correct errors and enhance entropy in the raw response data, yielding the raw device hardware fingerprint. This raw device hardware fingerprint is never stored; it is reconstructed in real-time each time it is needed, triggered by the PUF response.

[0049] The process involves hashing the original device hardware fingerprint to obtain the original device tag value; creating a device private key and generating a device certificate signing request based on the device public key within the private key, storing the original device tag value in the device certificate signing request; and signing the device certificate signing request using the private key of the preset root certificate to obtain the original device signature. The device public key and the private key of the preset root certificate can be determined based on the original device hardware fingerprint.

[0050] After obtaining the original video signature and the original device signature, the original video signature and the original device signature can be written into the header metadata area of ​​the video file; and the video file can be sent to the video receiving device.

[0051] The video receiving device receives a video file from the video sending device. The video file includes the original anti-counterfeiting signature of the original video stream and the video stream to be verified. The original anti-counterfeiting signature of the original video stream is obtained by acquiring the original video stream, which includes at least two original video frames. Based on the frame data of each original video frame in the original video stream and the acquired original device hardware fingerprint, the corresponding original video frames are subjected to tag extraction processing to obtain the original video frame tag value of each original video frame. Based on the original video frame tag value of each original video frame and the acquired device key information, a signature generation process is performed to obtain the original anti-counterfeiting signature of the original video stream. The video stream to be verified is verified according to the original anti-counterfeiting signature to obtain the target verification result of the video stream to be verified.

[0052] The original anti-counterfeiting signature can be determined with reference to the above embodiments, and will not be repeated here. After receiving the video file, the video receiving device can obtain the original anti-counterfeiting signature from the metadata area of ​​the video file header, and use the original anti-counterfeiting signature in the video file to verify whether the video file has been tampered with during transmission, so as to ensure the authenticity and integrity of the video stream.

[0053] In some embodiments, when the original anti-counterfeiting signature only includes the original video signature, the video stream to be verified is processed according to the original video signature to obtain the target verification result.

[0054] In other embodiments, when the original anti-counterfeiting signature includes both an original video signature and an original device signature, the original video signature is used to verify the video stream to be verified, resulting in a video tag verification result; the original device signature is used to verify the obtained hardware fingerprint of the device to be verified, resulting in a device tag verification result; and the target verification result is determined based on the video tag verification result and the device tag verification result. The determination of the video tag verification result and the device tag verification result may or may not be sequential, for example, they may be performed simultaneously.

[0055] As an example, the process can begin by verifying the hardware fingerprint of the device to be verified using the original device signature to obtain a device tag verification result. If the device tag verification result indicates successful verification, the original video signature is then used to verify the video stream to be verified, yielding a video tag verification result. The target verification result is determined based on the video tag verification result. If the device tag verification result indicates verification failure, the verification process ends and a verification failure is returned. Specifically, in response to successful verification of the original device signature, the original device tag value is extracted from the original device signature; the obtained hardware fingerprint of the device to be verified is processed for tag extraction to obtain the device tag value; the device tag verification result is determined based on the consistency between the device tag value and the original device tag value; in response to successful verification of the device tag verification result, the target verification result is determined based on the verification result of the original video signature. This dual verification using both device tags and video tags improves verification reliability.

[0056] Specifically, when verifying the original device signature, a preset root certificate can be used to verify the authenticity of the original device signature, ensuring that the video file was indeed generated by the corresponding video sending device. Specifically, the original device signature can be verified using the public key in the preset root certificate to ensure that the original device signature has not been replaced.

[0057] The hardware fingerprint of the device to be verified is the hardware fingerprint of the device acquired by the video receiving device. For example, the video receiving device triggers PUF, acquires the response data to be verified, and reconstructs the hardware fingerprint of the device to be verified based on the response data.

[0058] The device tag value to be verified is a device tag value determined by the video receiving device based on the video file it acquires. For example, the device tag value can be obtained by performing tag extraction processing on the hardware fingerprint of the device to be verified. For instance, the device tag value can be obtained by processing the hardware fingerprint of the device to be verified through hash calculation.

[0059] The video receiving device extracts the original device tag value from the original device signature. The original device tag value is the tag value obtained by the video sending device based on the original device hardware fingerprint for tag extraction processing. The original device tag value is compared with the tag value of the device to be verified. If they match, the device tag verification result is confirmed as successful, and the traceability of the video file is successfully completed. If they do not match, the device tag verification result is confirmed as failed, indicating that the video file is at risk of being tampered with.

[0060] After the device tag verification result is successful, the target verification result is determined based on the verification result of the original video signature. In some embodiments, when the verification result of the original video signature indicates successful verification, the target verification result is determined to be successful; when the verification result of the original video signature indicates failed verification, the target verification result is determined to be failed.

[0061] In other embodiments, when the verification result of the original video signature indicates successful verification, the target verification result is determined based on the consistency between the original video stream tag value in the original video signature and the video stream tag value calculated from the video stream to be verified; when the verification result of the original video signature indicates verification failure, the target verification result is determined to be verification failure.

[0062] In other embodiments, when the verification result of the original video signature indicates successful verification, the target verification result is determined based on the consistency between the original video stream tag value in the original video signature and the video stream tag value to be verified calculated from the video stream to be verified, and / or the consistency between the original video frame tag values ​​in the original video signature and the video frame tag values ​​to be verified in the video stream to be verified; when the verification result of the original video signature indicates verification failure, the target verification result is determined to be verification failure.

[0063] Specifically, in response to the verification result of the original video signature indicating successful verification, the original video stream tag value and / or the original video frame tag value corresponding to each original video frame are extracted from the original video signature. Tag extraction processing is performed on the corresponding video frames to be verified based on the frame data of each video frame to be verified and the hardware fingerprint of the device to be verified, obtaining the video frame tag value corresponding to each video frame to be verified. Tag extraction processing is performed on the video frame tag values ​​corresponding to each video frame to be verified and the temporal information of each video frame to be verified in the video stream to be verified, obtaining the video stream tag value to be verified. The target verification result is determined based on the consistency between the video frame tag values ​​to be verified and the corresponding original video frame tag values, and / or the consistency between the video stream tag values ​​to be verified and the original video stream tag values. This allows for the verification of both the authenticity of pixel content in a single video frame and the integrity and authenticity of the video stream.

[0064] When verifying the original video signature, the original device signature can be used to verify its authenticity. Specifically, the public key in the original device signature can be used to verify the original video signature, ensuring that it has not been replaced.

[0065] The video frame tag value to be verified is a video frame tag value determined by the video receiving device based on the video stream to be verified. For example, the video receiving device can acquire the frame data of each video frame to be verified in the video stream, and generate the corresponding video frame tag value based on the frame data and the hardware fingerprint of the device to be verified. The hardware fingerprint of the device to be verified is a device hardware fingerprint that has already been verified; therefore, it can also be obtained from the original device signature. The tag value is obtained by performing tag extraction processing on the original device hardware fingerprint and the frame data of the video frame to be verified. In some embodiments, the frame data and hardware fingerprint of the video frame to be verified can be processed using an encryption algorithm to obtain the video frame tag value. The encryption algorithm can be HMAC (Hash-based Message Authentication Code). In other embodiments, the frame data and hardware fingerprint of the video frame to be verified can also be processed using Cyclic Redundancy Check (CRC) to obtain the video frame tag value. In other embodiments, the SEI region can be removed from the frame data of the video frame to be verified, and the frame data after removing the SEI region and the hardware fingerprint of the device to be verified can be processed to extract the tag value of the video frame to be verified.

[0066] The video frame to be verified is a video frame included in the video stream to be verified. For example, the video frames in the video stream to be verified can be divided into key frames (e.g., I-frames) and non-key frames (e.g., P-frames or B-frames). A key frame is a complete image that can be compressed independently. The video receiving device can use the key frames in the video stream to be verified as the video frame to be verified, or it can use all the video frames in the video stream to be verified as the video frame to be verified.

[0067] The original video frame tag value is extracted from the original video signature. If the video transmitting device embeds the original video frame tag value into the SEI region of the frame data, the video receiving device can obtain the original video frame tag value from the SEI region of the frame data of each video frame to be verified in the video stream to be verified. The original video frame tag value is the tag value obtained by the video transmitting device through tag extraction processing based on the frame data of the original video frame and the original device hardware fingerprint. The video receiving device compares the original video frame tag value of the original video frame with the tag value of the corresponding video frame to be verified. If they match, the verification of the video frame is confirmed to be successful; if they do not match, the verification of the video frame is confirmed to be unsuccessful. During the comparison, the original video frame tag value and the tag value to be verified can be determined according to the frame order of the original video frame and the frame order of the video frame to be verified. For example, the original video frame tag value with the same frame order can be compared with the tag value of the video frame to be verified.

[0068] The tag value of the video stream to be verified is used to verify the integrity and sequence of the video stream. For example, the tag value of the video stream to be verified can be determined based on the tag value of each video frame to be verified in the video stream and the timing information of each video frame in the video stream. The timing information of the video frames to be verified may include the frame order and acquisition timestamp of the video frame in the video stream. The tag value, acquisition timestamp, and frame order of each video frame to be verified are ordered and combined according to the timing information, and the overall hash value is calculated to obtain the tag value of the video stream to be verified. For example, the calculation of the tag value of the video stream to be verified satisfies the following formula:

[0069] in, This represents the tag value of the video stream to be verified. Indicates hash calculation, This represents the tag value of the video frame to be verified corresponding to the i-th video frame. This represents the capture timestamp corresponding to the i-th video frame to be verified. This indicates the frame order corresponding to the i-th video frame to be verified.

[0070] The original video stream tag value is extracted from the original video signature. This tag value is obtained by the video transmitting device through tag extraction processing based on the original video frame tag values ​​of each original video frame and the timing information of each original video frame within the original video stream. The video receiving device compares the original video stream tag value of the original video stream with the tag value of the corresponding video stream to be verified. If they match, the verification of the video stream is confirmed as successful; otherwise, the verification of the video stream is confirmed as failed.

[0071] As an example, the video receiving device can extract the original video frame tag value from the original video signature, perform tag extraction processing based on the tag value of each video frame to be verified and the timing information of each video frame to be verified in the video stream to be verified, and obtain the video stream tag value to be verified of the video stream to be verified; determine the target verification result based on the consistency between the tag value of each video frame to be verified and the corresponding original video frame tag value; if they are consistent, the target verification result is determined to be successful; if they are inconsistent, the target verification result is determined to be unsuccessful.

[0072] As another example, the video receiving device can extract the original video stream tag value from the original video signature, perform tag extraction processing on the corresponding video frames to be verified based on the frame data of each video frame to be verified in the video stream to be verified and the hardware fingerprint of the device to be verified, and obtain the video frame tag value corresponding to each video frame to be verified; perform tag extraction processing on the video frame tag value corresponding to each video frame to be verified and the timing information of each video frame to be verified in the video stream to be verified, and obtain the video stream tag value to be verified; determine the target verification result based on the consistency between the video stream tag value to be verified and the original video stream tag value; if the consistency representation between the video stream tag value to be verified and the original video stream tag value is consistent, then the target verification result is determined to be verification success; if the consistency representation between the video stream tag value to be verified and the original video stream tag value is inconsistent, then the target verification result is determined to be verification failure.

[0073] As another example, the video receiving device can extract the original video frame tag values ​​and the original video stream tag values ​​from the original video signature. Based on the frame data of each video frame to be verified in the video stream to be verified and the hardware fingerprint of the device to be verified, the device performs tag extraction processing on the corresponding video frames to be verified, obtaining the video frame tag values ​​corresponding to each video frame to be verified. Based on the video frame tag values ​​corresponding to each video frame to be verified and the timing information of each video frame to be verified in the video stream to be verified, the device performs tag extraction processing on the video stream to be verified, obtaining the video stream tag values ​​to be verified. The device obtains the consistency between each video frame tag value and the corresponding original video frame tag value to obtain the video frame verification result. It also obtains the consistency between the video stream tag values ​​to be verified and the original video stream tag values ​​to obtain the video stream verification result. If both the video frame verification results and the video stream verification results indicate successful verification, the target verification result is determined to be successful. If at least one of the video frame verification results or the video stream verification results indicates verification failure, the target verification result is determined to be unsuccessful.

[0074] To further illustrate the video anti-counterfeiting verification method of this application, let's take the example of simultaneously using video frame verification results and video stream verification results to determine the target verification result, and then explain it in more detail: After receiving a video file, the video receiving device obtains the original video signature and the original device signature from the header metadata area of ​​the video file; it verifies the original device signature using a preset root certificate to confirm the authenticity of the original video signature; when the original device signature is successfully verified, it obtains the original device tag value from the original device signature; it triggers PUF reconstruction to obtain the hardware fingerprint of the device to be verified, and performs hash calculation on the hardware fingerprint of the device to be verified to obtain the tag value of the device to be verified; it compares the tag value of the device to be verified with the original device tag value to obtain the device tag verification result.

[0075] After successful device tag verification, the original video frame tag value is extracted from the original video signature or obtained from the frame data of the video stream to be verified. Tag extraction is performed based on the frame data of the video frame to be verified and the hardware fingerprint of the device to be verified, resulting in the corresponding video frame tag value for each video frame. The video frame tag value is then compared with the corresponding original video frame tag value to obtain the video frame verification result. This verification is performed on the content of the video frames; if a video frame is replaced, the verification will fail, thus avoiding the risk of video content tampering.

[0076] The original video signature is verified using the original device signature to determine its authenticity and the integrity of the video stream to be verified. If the verification result indicates successful verification, the original video stream tag value is extracted from the original video signature. A hash calculation is then performed on the tag values ​​of each video frame to be verified, along with the corresponding capture timestamp and frame order, to obtain the tag value for the video stream to be verified. The tag value for the video stream to be verified is compared with the tag value of the original video stream to obtain the video stream verification result. Deleting video frames will prevent the video stream from passing verification, thus avoiding the risk of video content loss.

[0077] If both the video frame verification result and the video stream verification result indicate successful verification, then the target verification result is determined to be successful, meaning the video file source is authentic and complete. If at least one of the video frame verification result and the video stream verification result indicates verification failure, then the target verification result is determined to be unsuccessful, meaning the video file may have been tampered with or corrupted.

[0078] Please see Figure 4 , Figure 4 This is a schematic diagram of an exemplary embodiment of the video transmission apparatus shown in this application. The video transmission apparatus 400 includes an acquisition module 410, a tag extraction module 420, and a signature generation module 430. The acquisition module 410 is used to acquire an original video stream, which includes at least two original video frames. The tag extraction module 420 is used to perform tag extraction processing on the corresponding original video frames based on the frame data of each original video frame in the original video stream and the acquired original device hardware fingerprint to obtain the original video frame tag value of each original video frame. The signature generation module 430 is used to perform signature generation processing based on the original video frame tag value of each original video frame and the acquired device key information to obtain the original anti-counterfeiting signature of the original video stream.

[0079] The above scheme involves a video transmitting device acquiring an original video stream, which includes at least two original video frames. The frame data of the original video frames is tagged using the acquired original device hardware fingerprint, establishing a binding relationship between the frame data and the device. This ensures that each original video frame can be traced back to its corresponding device. Furthermore, binding the original video frame tag value to the frame data further increases the difficulty of signature forgery and enhances video anti-counterfeiting strength. The original anti-counterfeiting signature of the original video stream is determined using device key information and the original video frame tag values ​​of each original video frame. This not only ensures the original video stream can be traced back to its corresponding device but also ensures the integrity detection of the original video stream, avoiding the loss of perception for single video frames, thereby improving the security and reliability of the video anti-counterfeiting signature.

[0080] Please see Figure 5 , Figure 5 This is a schematic diagram of an exemplary embodiment of the video receiving device shown in this application. The video receiving device is communicatively connected to the video transmitting device. The video receiving device 500 includes a receiving module 510 and a verification module 520. The receiving module 510 is used to receive a video file from the video transmitting device. The video file includes the original anti-counterfeiting signature of the original video stream and the video stream to be verified. The original anti-counterfeiting signature of the original video stream is obtained by acquiring the original video stream, which includes at least two original video frames. Based on the frame data of each original video frame in the original video stream and the acquired original device hardware fingerprint, the corresponding original video frames are subjected to tag extraction processing to obtain the original video frame tag value of each original video frame. Based on the original video frame tag value of each original video frame and the acquired device key information, a signature generation process is performed to obtain the original anti-counterfeiting signature of the original video stream. The verification module 520 is used to perform verification processing on the video stream to be verified according to the original anti-counterfeiting signature to obtain the target verification result of the video stream to be verified.

[0081] The functions of each module can be found in the embodiments of the video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method, and will not be repeated here.

[0082] To implement the video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method described in the above embodiments, this application proposes another electronic device, which can be found in the following details. Figure 6 , Figure 6 This is a schematic diagram of the structure of an embodiment of the electronic device provided in this application.

[0083] Electronic device 600 includes memory 610 and processor 620, wherein memory 610 and processor 620 are coupled together.

[0084] The memory 610 is used to store program data, and the processor 620 is used to execute the program data to implement the video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method of the above embodiments.

[0085] In this embodiment, processor 620 can also be referred to as a CPU (Central Processing Unit). Processor 620 may be an integrated circuit chip with signal processing capabilities. Processor 620 can also be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. The general-purpose processor can be a microprocessor, or processor 620 can be any conventional processor.

[0086] This application also provides a computer-readable storage medium, such as Figure 7 As shown, the computer-readable storage medium 700 is used to store program data 710. When the program data 710 is executed by the processor, it is used to implement the video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method as described in the method embodiments of this application.

[0087] The methods involved in the embodiments of the video anti-counterfeiting signature generation method and / or video anti-counterfeiting verification method of this application, when implemented as software functional units and sold or used as independent products, can be stored in a device, such as a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, mobile hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0088] The above description is merely an embodiment of this application and does not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

[0089] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus. The term "and / or" is merely a description of the association of related objects, indicating that three relationships can exist; for example, A and / or B can represent: A alone, A and B simultaneously, and B alone. Additionally, the character " / " in this document generally indicates that the preceding and following related objects are in an "or" relationship. Furthermore, "many" in this document means two or more. In addition, the term "at least one" in this document means any combination of at least two of any one or more of a plurality of elements, such as including at least one of A, B, and C, and may mean including any one or more elements selected from the set consisting of A, B, and C.

Claims

1. A method for generating anti-counterfeiting signatures in videos, characterized in that, The video anti-counterfeiting signature generation method is applied to a video sending device, and the video anti-counterfeiting signature generation method includes: Acquire the raw video stream, which includes at least two raw video frames; Based on the frame data of each original video frame in the original video stream and the obtained original device hardware fingerprint, the corresponding original video frames are processed to extract tags to obtain the original video frame tag values ​​of each original video frame. The original anti-counterfeiting signature of the original video stream is obtained by performing signature generation processing based on the original video frame tag value of each original video frame and the obtained device key information.

2. The video anti-counterfeiting signature generation method according to claim 1, characterized in that, The original anti-counterfeiting signature includes an original video signature and an original device signature. The step of generating a signature based on the original video frame tag value of each original video frame and the obtained device key information to obtain the original anti-counterfeiting signature of the original video stream includes: The original video signature is determined based on the original video frame tag value corresponding to each original video frame and the device key information; The original device signature is determined based on the device key information and the original device hardware fingerprint.

3. The video anti-counterfeiting signature generation method according to claim 2, characterized in that, The device key information includes a device private key. The step of determining the original video signature based on the original video frame tag value corresponding to each original video frame and the device key information includes: The original video stream is processed by tag extraction based on the original video frame tag value of each original video frame and the timing information of each original video frame in the original video stream to obtain the original video stream tag value corresponding to the original video stream. The original video stream tag value is encrypted using the device's private key to obtain the original video signature of the original video stream.

4. The video anti-counterfeiting signature generation method according to claim 2, characterized in that, The device key information includes a device public key and a private key corresponding to a preset root certificate. The step of determining the original device signature based on the device key information and the original device hardware fingerprint includes: Generate a device certificate signature request based on the device public key and the original device hardware fingerprint; The device certificate signing request is signed using the private key corresponding to the preset root certificate to obtain the original device signature.

5. The video anti-counterfeiting signature generation method according to claim 4, characterized in that, The step of generating a device certificate signature request based on the device public key and the original device hardware fingerprint includes: The original device hardware fingerprint is obtained through a physically unclonable function; The original device hardware fingerprint is hashed to obtain the original device tag value; The device certificate signing request is determined based on the device public key and the original device tag value.

6. A video anti-counterfeiting verification method, characterized in that, The video anti-counterfeiting verification method is applied to a video receiving device, which is communicatively connected to a video sending device. The video anti-counterfeiting verification method includes: The system receives a video file from the video sending device. The video file includes an original anti-counterfeiting signature of the original video stream and a video stream to be verified. The original anti-counterfeiting signature of the original video stream is based on the acquisition of the original video stream, which includes at least two original video frames. Based on the frame data of each original video frame in the original video stream and the acquired original device hardware fingerprint, the system performs tag extraction processing on the corresponding original video frames to obtain the original video frame tag value of each original video frame. Based on the original video frame tag value of each original video frame and the acquired device key information, the system performs signature generation processing to obtain the original anti-counterfeiting signature of the original video stream. The video stream to be verified is processed based on the original anti-counterfeiting signature to obtain the target verification result of the video stream to be verified.

7. The video anti-counterfeiting verification method according to claim 6, characterized in that, The original anti-counterfeiting signature includes an original video signature and an original device signature. The step of verifying the video stream to be verified based on the original anti-counterfeiting signature to obtain the target verification result of the video stream to be verified includes: In response to the successful verification of the original device signature, the original device tag value is extracted from the original device signature; The obtained hardware fingerprint of the device to be verified is processed to extract the tag value of the device to be verified. The device tag verification result is determined based on the consistency between the device tag value to be verified and the original device tag value. In response to the device tag verification result indicating successful verification, the target verification result is determined based on the verification result of the original video signature.

8. The video anti-counterfeiting verification method according to claim 7, characterized in that, The step of determining the target verification result based on the verification result of the original video signature includes: In response to the verification result of the original video signature indicating successful verification, the original video stream tag value and / or the original video frame tag value corresponding to each original video frame are extracted from the original video signature. Based on the frame data of each video frame to be verified in the video stream to be verified and the hardware fingerprint of the device to be verified, the corresponding video frame to be verified is processed by tag extraction to obtain the tag value of each video frame to be verified. Tag extraction is performed based on the tag value of each video frame to be verified and the timing information of each video frame to be verified in the video stream to be verified, to obtain the tag value of the video stream to be verified. The target verification result is determined based on the consistency between the tag values ​​of each video frame to be verified and the corresponding original video frame tag values, and / or the consistency between the tag values ​​of the video stream to be verified and the original video stream tag values.

9. An electronic device, characterized in that, include: A memory and a processor, wherein the memory stores program instructions, and the processor retrieves the program instructions from the memory to perform the method as claimed in any one of claims 1-8.

10. A computer-readable storage medium, characterized in that, include: The system stores program data, which, when executed by a processor, is used to implement the method as described in any one of claims 1-8.

Images