Data protection method for digital rights, apparatus, device, and storage medium

Abstract

A data protection method for digital rights, an apparatus, a device, and a storage medium, relating to the technical field of digital content protection. The data protection method for digital rights comprises: acquiring digital rights data, wherein the digital rights data comprises image data and / or video data; encrypting the image data to obtain image encrypted data, and encrypting the video data to obtain video encrypted data; generating an image link according to a received image viewing request of a client for the image data and on the basis of the image encrypted data, and sending the image link to the client, so that the client decrypts the image encrypted data, creates a control for preventing screen capture and screen recording operations of an operating system, and displays the decrypted image data by means of the control; and on the basis of a received video viewing request of the client for the video data, sending to the client playback parameters corresponding to the video encrypted data, so that the client views, on the basis of the playback parameters, the video data by means of accessing a target player, wherein the target player supports the playback of a digital rights management video, and prevents screen capture and screen recording operations of the operating system.

Description

A digital copyright data protection method, device, equipment and storage medium

[0001] The present application claims priority to the Chinese patent application No. 202410731048.3, filed on June 6, 2024, and entitled "A digital copyright data protection method, device, equipment and storage medium", the whole content of which is incorporated herein by reference. TECHNICAL FIELD

[0002] The present application relates to the technical field of digital content protection, in particular to a digital copyright data protection method, device, equipment and storage medium. BACKGROUND

[0003] Digital copyright, also known as network copyright, refers to the copyright created, produced, disseminated and managed through digital technology. Digital Rights Management (DRM) is a series of technical measures and protocols designed to control the distribution, use and copying of digital media content to protect the intellectual property rights of copyright owners.

[0004] In the prior art, the protection of digital copyright data is usually to authenticate the user, and after successful authentication, a temporary link containing the use validity period (such as 24 hours) is issued, and the temporary link is valid within the use validity period; the user can access the link to view images or play videos, and the link cannot be accessed after expiration. However, under this scheme, an attacker can obtain all network requests of the application by packet capture, find the temporary link of the image or video, and then download the source file and share it on the network; and the user who has purchased can take screenshots, record screens, obtain high-definition content and share it on the network. It is impossible to achieve comprehensive protection of digital copyright data. SUMMARY

[0005] Therefore, the purpose of the present application is to provide a digital copyright data protection method, device, equipment and storage medium, which can improve the ability to protect digital copyright data. The specific scheme is as follows:

[0006] In a first aspect, the present application discloses a digital copyright data protection method applied to a server, comprising:

[0007] Obtaining digital copyright data; the digital copyright data includes image data and / or video data;

[0008] Encrypting the image data to obtain image encrypted data, and encrypting the video data to obtain video encrypted data;

[0009] According to the received image viewing request of the client to the image data, an image link is generated based on the image encryption data and sent to the client, so that the client decrypts the image encryption data and creates a control to display the decrypted image data, which is resistant to operating system screenshot and screen recording operations.

[0010] According to the received video viewing request of the client to the video data, the corresponding playing parameters of the video encryption data are sent to the client, so that the client accesses the target player to view the video data according to the playing parameters; the target player supports playing of data copyright management video and is resistant to operating system screenshot and screen recording operations.

[0011] Optionally, the image data is encrypted to obtain image encryption data, including:

[0012] A random key and an initialization vector are generated, and the image data is encrypted by using the random key and the initialization vector to obtain first encryption data;

[0013] According to the identifier of the resource package corresponding to the personnel to which the image data belongs, an exclusive token and an image encryption key corresponding to the personnel are generated, and a combined key is obtained by combining the exclusive token and the image encryption key; the personnel and the resource package are one-to-one corresponding;

[0014] The random key is encrypted by using the combined key to obtain second encryption data, and the second encryption data is added to the header of the first encryption data to obtain image encryption data.

[0015] Optionally, the image link is generated based on the image encryption data and sent to the client, so that the client decrypts the image encryption data, including:

[0016] An image viewing request sent by the client and containing a user token is obtained, user identity authentication is performed according to the user token, and if the user identity authentication is passed, the asset holding situation of the user is viewed;

[0017] According to the asset holding situation, it is judged whether the user has the right to view the image data, if yes, the image link corresponding to the image encryption data is generated and sent to the client, and the exclusive token and the image encryption key corresponding to the personnel to which the image data belongs are sent to the client, so that the client views the image link according to the exclusive token and the image encryption key.

[0018] Optionally, the video data is encrypted to obtain video encryption data, including:

[0019] Obtaining a video encryption key, encrypting the video data by using the video encryption key to obtain video encryption data;

[0020] Saving the video encryption key to a license server.

[0021] Optionally, according to the received video viewing request of the client to the video data, the playing parameter corresponding to the video encryption data is sent to the client, including:

[0022] Obtaining the video viewing request sent by the client to the video data and containing a user token, performing user identity authentication according to the user token, and if the user identity authentication is passed, checking the asset holding situation of the user;

[0023] Generating a corresponding video asset list according to the asset holding situation and sending the video asset list to the client, so that the client determines the playing parameter corresponding to the video data from the video asset list; the playing parameter includes a playing address, a certificate address and a license server address;

[0024] The client sends the playing parameter to a target player, so that the target player sends a video encryption key application and user information of the client to the license server according to the playing parameter, receives the video encryption key sent by the license server after the user authentication is passed, decrypts the video encryption data by using the video encryption key and plays the decrypted video.

[0025] Optionally, the digital copyright data protection method further comprises:

[0026] The client is configured with a hypertext transfer protocol fixed certificate binding, so that after the binding, the client only accepts the fixed certificate in the communication process.

[0027] Optionally, the client creates a control against the operation system screenshot and recording operation, including:

[0028] Determining the system operation type of the client;

[0029] According to the control creation rule corresponding to the system operation type, the control against the operation system screenshot and recording operation is created.

[0030] In a second aspect, the application discloses a digital copyright data protection system, including a server and a client;

[0031] The server is configured to acquire digital copyright data, encrypt image data to obtain image encrypted data, and encrypt video data to obtain video encrypted data; generate an image link based on the image encrypted data and send the image link to the client according to a received image viewing request of the client; and send a playing parameter corresponding to the video encrypted data to the client according to a received video viewing request of the client.

[0032] The client is configured to decrypt the image encrypted data, create a control to prevent screenshot and screen recording operations of an operating system, and display decrypted image data; and access a target player to view the video data according to the playing parameter, wherein the target player supports playing of data copyright management video and prevents screenshot and screen recording operations of an operating system.

[0033] In a third aspect, the present application discloses an electronic device, comprising:

[0034] a memory configured to save a computer program;

[0035] a processor configured to execute the computer program to implement the digital copyright data protection method.

[0036] In a fourth aspect, the present application discloses a computer readable storage medium configured to store a computer program; wherein the computer program is executed by a processor to implement the digital copyright data protection method.

[0037] In the present application, digital copyright data is acquired; the digital copyright data includes image data and / or video data; the image data is encrypted to obtain image encrypted data, and the video data is encrypted to obtain video encrypted data; according to a received image viewing request of a client to the image data, an image link is generated based on the image encrypted data and sent to the client, so that the client decrypts the image encrypted data, and creates a control that prevents the operation system from being screened and recorded to display the decrypted image data; according to a received video viewing request of a client to the video data, the playing parameters corresponding to the video encrypted data are sent to the client, so that the client views the video data by accessing a target player according to the playing parameters; the target player supports the playing of the data copyright management video, and prevents the operation system from being screened and recorded. It can be seen that the copyright data storage and transmission process is protected, the server generates an image link based on the image encrypted data; the display process is protected, the client displays the decrypted image data through the control that prevents the operation system from being screened and recorded, so that the attacker cannot analyze and view the image content, and the user cannot take screenshots or record screens for sharing. The playing parameters sent by the server to the client point to the video encrypted data, only through a special player can the video be decrypted and played, and it can be ensured that the user cannot take screenshots or record screens during the playing. End-to-end protection of the digital copyright data from creation to distribution can be realized, potential leakage can be prevented, and the ability to protect the digital copyright data is improved. BRIEF DESCRIPTION OF DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings needed to be used in the embodiments or the prior art description will be briefly introduced. Obviously, the drawings in the following description are only embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor on the basis of the provided drawings.

[0039] Fig. 1 is a flowchart of a digital copyright data protection method provided by the present application;

[0040] Fig. 2 is a specific image data encryption schematic diagram of a digital copyright provided by the present application;

[0041] Fig. 3 is a specific video data encryption schematic diagram of a digital copyright provided by the present application;

[0042] Fig. 4 is a specific digital copyright data protection method flowchart provided by the present application;

[0043] Fig. 5 is a specific digital copyright data protection method flowchart provided by the present application;

[0044] Fig. 6 is a schematic diagram of a digital copyright data protection system structure provided by the present application;

[0045] Fig. 7 is a schematic diagram of a digital copyright data protection system protection field provided by the present application;

[0046] Fig. 8 is a schematic diagram of an electronic device provided by the present application. DETAILED DESCRIPTION

[0047] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0048] In the prior art, the protection of digital copyright data is usually to authenticate the user, and after successful authentication, a temporary link containing a valid period is issued, and the temporary link is valid within the valid period; the user can access the link to view images or play videos, and the link cannot be accessed after expiration. However, under this scheme, an attacker can obtain all network requests of the application by packet capture, find the temporary link of the image or video, and then download the source file and share it on the network; and the user who has purchased can take screenshots, record screens, obtain high-definition content, and share it on the network. It is impossible to achieve comprehensive protection of digital copyright data. In order to overcome the above technical problems, the present application provides a digital copyright data protection method, which can realize end-to-end protection of digital copyright data from creation to distribution, and improve the ability to protect digital copyright data.

[0049] The embodiments of the present application disclose a digital copyright data protection method applied to a server, as shown in Fig. 1, which can include the following steps:

[0050] Step S11: obtaining digital copyright data; the digital copyright data includes image data and / or video data.

[0051] Firstly, the server obtains the digital copyright data uploaded by the digital copyright data holder, and the digital copyright data includes image data and video data. The digital copyright data can be material data related to an artist. The operator uploads the image and video compression package of the artist to the server through the operation platform, and the server respectively encrypts the image and video for storage and subsequent distribution.

[0052] Step S12: encrypting the image data to obtain image encrypted data, and encrypting the video data to obtain video encrypted data.

[0053] The server obtains image encryption data by encrypting the uploaded image data, and obtains video encryption data by encrypting the video data.

[0054] The image data is encrypted to obtain image encryption data, which can specifically include: generating a random key and an initialization vector, encrypting the image data using the random key and the initialization vector to obtain first encryption data; generating a dedicated token and an image encryption key corresponding to the personnel according to the identifier of the resource package corresponding to the personnel, and obtaining a combined key by combining the dedicated token and the image encryption key; the personnel and the resource package are in one-to-one correspondence; the random key is encrypted using the combined key to obtain second encryption data, and the second encryption data is added to the head of the first encryption data to obtain image encryption data.

[0055] That is, the digital copyright data protection is illustrated by taking personnel as the dimension. A unique resource package is constructed for each personnel, that is, the personnel and the resource package are in a unique correspondence relationship; a dedicated token (token) and an image encryption key (picKey) corresponding to the personnel are generated according to the identifier (such as ID) of the resource package according to a preset rule, and since the resource package is unique, the dedicated token and the image encryption key generated are also unique. For example, as shown in FIG. 2, for each image, a random key (randKey) and an initialization vector (IV, Initialization Vector) are used to encrypt the image for the first time to generate first encryption data (A), and the above encryption can use an encryption method such as AES (Advanced Encryption Standard, a kind of high-level encryption standard) encryption; then, the dedicated token and the image encryption key are combined according to a preset combination rule to generate a combined key, and the random key of the above step is encrypted for the second time (B) using the combined key to generate second encryption data, and the second encryption data is inserted into the head of the first encryption data to obtain the final data. The above two encryptions can improve the security of the image data in the storage and transmission process, and the decryption information required by the image is only related to the resource package ID and the dedicated token corresponding to the corresponding personnel, which can effectively control the influence range of accidental leakage of single user information.

[0056] The encryption of the video data to obtain video encrypted data can include: obtaining a video encryption key, encrypting the video data using the video encryption key to obtain video encrypted data, and saving the video encryption key to a license server. The specific video encryption process is shown in FIG. 3. The video encryption key can be obtained according to the type of the operating system, such as an Apple FairPlay key as the video encryption key. FairPlay is a digital rights management technology developed by Apple to control the use of music, videos and applications purchased on iTunes and other Apple media services, and to prevent unauthorized copying and playing. A Google Widevine key can be obtained as the video encryption key. Widevine is a digital rights management technology developed by Google, which is widely used to protect streaming video content played on various devices and platforms, and to prevent unauthorized copying and distribution. After obtaining the video encryption key, transcoding and slicing are performed, i.e., the video is converted into a form suitable for online streaming, such as HLS (HLS, HTTP Live Streaming, Apple's dynamic bit rate adaptation technology) or DASH (Dynamic Adaptive Streaming over HTTP, dynamic adaptive streaming over HTTP) format. The video data is encrypted using an encryption tool. The license server is configured according to the video encryption key, i.e., a server is established for providing decryption keys to user devices requesting content. The server stores the video encryption key. Finally, a manifest file is created, m3u8 playlist (FairPlay) is generated for HLS, and mpd manifest (Widevine) is generated for DASH, specifying encryption information and license server address. Thus, for a video file, FairPlay video suitable for iOS platform and Widevine video suitable for Android platform are generated, which protects the security of the video data while improving the universality of video data viewing.

[0057] Step S13: According to the received image viewing request of the client to the image data, the image link based on the image encrypted data is sent to the client, so that the client decrypts the image encrypted data and creates a control to prevent operating system screenshot and screen recording operation to display the decrypted image data.

[0058] For example, as shown in FIG. 4, after the user logs in through the client, the user purchases digital assets, and then requests picture resources from the server. The server sends the image link corresponding to the image encryption data to the client. The client can view the image after decrypting the image link. Moreover, the decrypted image data is displayed by using the control for preventing the operating system from taking screenshots and recording screens. If the user takes a screenshot at this time, a black image is obtained. If the user records a screen, a black video screen is generated.

[0059] In some embodiments, the generating, based on the image encryption data, of the image link and the sending of the image link to the client so that the client decrypts the image encryption data can include the following steps. An image viewing request for the image data and containing a user token is obtained from the client. User identity authentication is performed according to the user token. If the user identity authentication is passed, the asset holding situation of the user is viewed. Whether the user has the right to view the image data is determined according to the asset holding situation. If yes, the image link corresponding to the image encryption data is generated and sent to the client. The exclusive token and the image encryption key corresponding to the image data are sent to the client. The client downloads the image encryption data according to the image link, and views the image encryption data according to the exclusive token and the image encryption key. The user uses the user token to request digital assets. The server authenticates the user according to the user token. After confirming that the user is the user himself / herself, the purchase record of the user is queried to obtain the asset holding situation of the user. If the user holds the asset of the requested content, the image link is generated based on the image encryption data and sent to the client. The identity authentication of the user further improves the protection capability of the digital copyright data in the content distribution stage.

[0060] When the user views the specified picture, it is first checked whether the decrypted picture exists in the memory. If yes, the picture is directly displayed. If not, the encrypted image data is first downloaded to the local in an asynchronous manner. Thus, the cached image file of the local sandbox is also encrypted data. Then, the picture encryption key is obtained according to the encryption rule described above. The data is decrypted and the image is displayed.

[0061] In some embodiments, the client creates a control against the operating system screenshot and screen recording operation, which can include: determining the system operation type of the client; according to the control creation rule corresponding to the system operation type, creating a control against the operating system screenshot and screen recording operation. Specifically, for the iOS system, create a control UITextField, and set the secure text entry attribute of the control to YES; after setting the attribute, UITextField and its subView cannot be screenshot or screen recorded. Then create a horizontal scrolling UICollectionView as a subView added to UITextField, which is used for left and right sliding to view pictures. For the Android system, call the addFlags method of Window and pass in the protection flag (WindowManager.LayoutParams.FLAG_SECURE). After setting this flag, the user cannot screenshot or screen record the APP. Then create a horizontal scrolling RecyclerView added to the current page, which is used to support left and right sliding to switch pictures. Of course, in addition to the native control, a web view (WebView) can also be used for display, which needs to be embedded in the anti-screenshot control to prevent screenshot.

[0062] Step S14: According to the received video viewing request of the client to the video data, the play parameters corresponding to the video encrypted data are sent to the client, so that the client views the video data by accessing the target player according to the play parameters; the target player supports the play of data copyright management video, and prevents the screenshot and screen recording operation of the operating system.

[0063] For video data, the embodiment adopts a specific target player to play video, and the target player supports the play of data copyright management video and prevents the screenshot and screen recording operation of the operating system. Therefore, when receiving the video viewing request of the client to the video data, the play parameters corresponding to the video encrypted data are sent to the client, and the play parameters include the play address, the certificate address and the license server address. The client accesses the target player to play the video according to the play parameters.

[0064] From the user's perspective, the user can purchase the artist resource package through the client, and after the purchase is completed, enter the asset list page, which has picture and video classification and is displayed in a waterfall form; the picture shows a thumbnail, and after clicking, the picture detail page can display a large picture, supporting left and right sliding switching. The video shows a cover picture, and after clicking, the video detail page plays the video. Through the above steps of the embodiment, when viewing pictures and playing videos, if the user screenshots a pure black picture, the screen recording obtains a black content video segment.

[0065] In some embodiments, the sending, to the client, of the play parameters corresponding to the video encryption data according to the received video viewing request of the client for the video data can include: obtaining a video viewing request sent by the client for the video data and containing a user token, performing user identity authentication according to the user token, and if the user identity authentication is passed, checking the asset holding status of the user; generating a corresponding video asset list according to the asset holding status and sending the video asset list to the client, so that the client determines the play parameters corresponding to the video data from the video asset list; the play parameters include a play address, a certificate address and a license server address; the client sends the play parameters to a target player, so that the target player sends a video encryption key application and user information of the client to the license server according to the play parameters, receives a video encryption key sent by the license server after the user authentication is passed, decrypts the video encryption data using the video encryption key and plays the decrypted video. That is, after a video playing user clicks a single video, the server first performs identity authentication on the user to improve data security, returns a video asset list of the user after the authentication, and the client specifically determines the play address, the certificate address and the license server address of the video to be played from the list through the serial number of the video, and then transmits the three play parameters to the target player for playing. The player carries the user information to request a decryption key from the license server, and the license server transmits the decryption key to the player after confirming that the user has purchased the digital content through the user information, and the player uses the key to decrypt the video and play the video. The target player cannot take screenshots or record screens during the playing process. Even if an attacker obtains and publicly shares the above three play parameters, the playing attempt will not be successful because other users cannot pass the user information verification when requesting the decryption key, thereby double guaranteeing the security of the digital copyright data.

[0066] In the embodiment, a hypertext transfer protocol fixed certificate binding can also be configured for the client, so that after the binding, the client only trusts the fixed certificate sent by the server corresponding to the bound fixed certificate in the hypertext transfer protocol based communication process. That is, only the image link, the video asset list and the play parameters and the like sent by the server corresponding to the bound fixed certificate are received, thereby avoiding man-in-the-middle attacks and avoiding attacks by an attacker through creating an agent to intercept and manipulate the communication between the client and the server.

[0067] It can be seen from the above that, in the embodiment, the digital copyright data is acquired; the digital copyright data includes image data and / or video data; the image data is encrypted to obtain image encrypted data, and the video data is encrypted to obtain video encrypted data; according to a received image viewing request of a client for the image data, an image link is generated based on the image encrypted data and sent to the client, so that the client decrypts the image encrypted data and creates a control for preventing screenshot and screen recording operations of an operating system to display the decrypted image data; according to a received video viewing request of the client for the video data, a playing parameter corresponding to the video encrypted data is sent to the client, so that the client views the video data by accessing a target player according to the playing parameter; the target player supports playing of data copyright management video and prevents screenshot and screen recording operations of an operating system. It can be seen that, the copyright data storage and transmission process is protected, the server generates an image link based on image encrypted data, the display process is protected, the client displays the decrypted image data through the control for preventing screenshot and screen recording operations of an operating system, thus, the image link obtained by an attacker through packet capture is encrypted data, the attacker cannot analyze and view the image content, and the user cannot take screenshots or record screens for sharing. The playing parameter sent by the server to the client points to the video encrypted data, only a special player can decrypt and play the video encrypted data, and it can be ensured that the user cannot take screenshots or record screens during food playing. End-to-end protection of digital copyright data from creation to distribution can be realized, potential leakage can be prevented, and the ability to protect digital copyright data is improved.

[0068] The embodiment of the application discloses a digital copyright data protection method applied to a client, which can include the following steps, as shown in FIG. 5:

[0069] Step S21: sending an image viewing request for image data to a server; the server is used to acquire digital copyright data; the digital copyright data includes image data and / or video data; the server is used to encrypt the image data to obtain image encrypted data, and encrypt the video data to obtain video encrypted data.

[0070] The server encrypts the image data to obtain image encrypted data, including: generating a random key and an initialization vector, encrypting the image data by using the random key and the initialization vector to obtain first encrypted data; generating a special token and an image encryption key corresponding to a person according to an identifier of a resource package corresponding to the person, obtaining a combined key by combining the special token and the image encryption key; the person and the resource package are in one-to-one correspondence; encrypting the random key by using the combined key to obtain second encrypted data, adding the second encrypted data to the head of the first encrypted data to obtain image encrypted data.

[0071] The server obtains a video encryption key, encrypts the video data using the video encryption key to obtain video encryption data, and saves the video encryption key to a license server.

[0072] Step S22: receiving an image link generated by the server based on the image encryption data, decrypting the image encryption data, and creating a control that prevents screenshot and screen recording operations to display the decrypted image data.

[0073] The server obtains an image viewing request sent by the client for the image data and containing a user token, performs user identity authentication based on the user token, and if the user identity authentication is passed, checks the asset holding status of the user. If the user has the right to view the image data based on the asset holding status, the server generates an image link corresponding to the image encryption data and sends it to the client, and sends a special token corresponding to the person to whom the image data belongs and an image encryption key to the client, so that the client can view the image link based on the special token and the image encryption key.

[0074] Step S23: sending a video viewing request for the video data to the server.

[0075] Step S24: receiving the playback parameters corresponding to the video encryption data sent by the server, and viewing the video data by accessing a target player based on the playback parameters; the target player supports playback of data copyright management video and prevents screenshot and screen recording operations of the operating system.

[0076] The server obtains a video viewing request sent by the client for the video data and containing a user token, performs user identity authentication based on the user token, and if the user identity authentication is passed, checks the asset holding status of the user. If the user has the right to view the image data based on the asset holding status, the server generates an image link corresponding to the image encryption data and sends it to the client, and sends a special token corresponding to the person to whom the image data belongs and an image encryption key to the client, so that the client can view the image link based on the special token and the image encryption key.

[0077] The client determines the playback parameters corresponding to the video data from the video asset list; the playback parameters include a playback address, a certificate address, and a license server address; the client sends the playback parameters to a target player, so that the target player sends a video encryption key application and user information of the client to the license server based on the playback parameters, receives a video encryption key sent by the license server after user authentication is passed, and decrypts and plays the decrypted video using the video encryption key.

[0078] The client is configured with a hypertext transfer protocol fixed certificate binding, and after the binding, the client only accepts the fixed certificate in the communication process.

[0079] The client creates a control for preventing operating system screenshot and screen recording operation, including: determining the system operation type of the client; and creating a control for preventing operating system screenshot and screen recording operation according to a control creation rule corresponding to the system operation type.

[0080] As can be seen from the above, in the embodiment, the copyright data storage and transmission process is protected, the server generates an image link based on image encrypted data; the display process is protected, and the client displays the decrypted image data through the control for preventing operating system screenshot and screen recording operation. As a result, the image link obtained by the attacker through packet capture is encrypted data, the attacker cannot analyze and view the image content, and the user cannot take screenshots or record screens for sharing. The server sends the playback parameters to the client, which point to the video encrypted data. Only through a special player can the video encrypted data be decrypted and played, and it can be ensured that the user cannot take screenshots or record screens during food playback. End-to-end protection of digital copyright data from creation to distribution can be achieved, potential leakage can be prevented, and the ability to protect digital copyright data can be improved.

[0081] Correspondingly, the embodiment of the application further discloses a digital copyright data protection system. For example, FIG. 6 shows a specific system framework diagram applicable to the digital copyright data protection method. Specifically, it can include a background server 11 and a plurality of clients 12 in communication connection with the background server. The clients include but are not limited to tablet computers, notebook computers, smart phones, personal computers (PC), and the like. The server can be a background server, which is not limited here.

[0082] The server 11 is configured to obtain digital copyright data, the digital copyright data including image data and / or video data, encrypt the image data to obtain image encrypted data, and encrypt the video data to obtain video encrypted data. The server 11 is further configured to generate an image link based on the image encrypted data and send the image link to the client according to a received image viewing request of the client for the image data, and send playback parameters corresponding to the video encrypted data to the client according to a received video viewing request of the client for the video data. The client 12 is configured to decrypt the image encrypted data, create a control for preventing operating system screenshot and screen recording operation, and display decrypted image data. The client 12 is further configured to access a target player to view the video data according to the playback parameters. The target player supports playback of a data copyright management video and prevents operating system screenshot and screen recording operation.

[0083] It can be seen that the copyright data storage and transmission process is protected, the server generates an image link based on image encrypted data; the display process is protected, the client displays the decrypted image data through the control that prevents the operating system from being screened and recorded; thus, the image link obtained by the attacker through packet capture is encrypted data, the attacker cannot analyze and view the image content, and the user cannot take screenshots or record screens for sharing. The server sends the playback parameters to the client, which points to the video encrypted data, which can only be decrypted and played through a special player, and ensures that the user cannot take screenshots or record screens during food playback. End-to-end protection of digital copyright data from creation to distribution can be achieved, potential leaks can be prevented, and the ability to protect digital copyright data can be improved.

[0084] In some embodiments, the server 11 can specifically include:

[0085] A first encryption unit configured to generate a random key and an initialization vector, encrypt the image data using the random key and the initialization vector to obtain first encrypted data;

[0086] A combined key generation unit configured to generate a special token corresponding to a person and an image encryption key according to an identifier of a resource package corresponding to the person, and obtain a combined key by combining the special token and the image encryption key; the person and the resource package correspond one-to-one;

[0087] An image encryption data generation unit configured to encrypt the random key using the combined key to obtain second encrypted data, add the second encrypted data to the header of the first encrypted data, and obtain image encrypted data.

[0088] In some embodiments, the server 11 can specifically include:

[0089] An identity authentication unit configured to obtain an image viewing request sent by a client and containing a user token for the image data, perform user identity authentication according to the user token, and view the asset holding situation of the user if the user identity authentication is passed;

[0090] An image link sending unit configured to determine whether the user has the right to view the image data according to the asset holding situation, generate an image link corresponding to the image encrypted data and send it to the client if the user has the right, and send the special token corresponding to the person to which the image data belongs and the image encryption key to the client, so that the client views the image link according to the special token and the image encryption key.

[0091] In some embodiments, the server 11 can specifically include:

[0092] a video encryption unit configured to obtain a video encryption key, and encrypt the video data by using the video encryption key to obtain video encryption data;

[0093] a video encryption key storage unit configured to store the video encryption key to a license server.

[0094] In some embodiments, the server 11 can specifically include:

[0095] an identity authentication unit configured to obtain a video viewing request sent by a client and containing a user token for the video data, perform user identity authentication according to the user token, and if the user identity authentication is passed, check the asset holding status of the user;

[0096] a video asset list generation unit configured to generate a corresponding video asset list according to the asset holding status and send the video asset list to the client, so that the client determines the play parameters corresponding to the video data from the video asset list; the play parameters include a play address, a certificate address and a license server address;

[0097] Correspondingly, in some embodiments, the client 12 can specifically include:

[0098] a play parameter sending unit configured to send the play parameters to a target player, so that the target player sends a video encryption key application and user information of the client to the license server according to the play parameters, receives the video encryption key sent by the license server after the user authentication is passed, decrypts the video encryption data by using the video encryption key, and plays the decrypted video.

[0099] In some embodiments, a hypertext transfer protocol fixed certificate binding is configured for the client 12, so that after the binding, the client only accepts the fixed certificate in the communication process.

[0100] In some embodiments, the client 12 can specifically include:

[0101] an operation type determination unit configured to determine the system operation type of the client;

[0102] a control creation unit configured to create a control for preventing the operation system from taking screenshots and recording screens according to a control creation rule corresponding to the system operation type.

[0103] As shown in FIG. 6, the digital copyright data protection system protects the digital copyright data from content distribution protection, data transmission protection and content display protection. In terms of content distribution, when a user acquires a resource list, the server first confirms the identity of the user, checks the asset holding status of the user after confirming the identity of the user, and returns the asset information in the case that the user operates by himself / herself and has purchased. In terms of data transmission protection, the client uses a fixed certificate binding and only accepts a trusted certificate to avoid a man-in-the-middle attack; pictures are encrypted, so that even if a picture link is acquired and downloaded, the content cannot be viewed without a secret key; a video playing link points to an encrypted video file, and the video cannot be played without a secret key. In terms of content display, a special image display control is encapsulated to disable screenshot and screen recording; a special video playing page is encapsulated to shield the screenshot and screen recording functions.

[0104] Further, the embodiment of the application further discloses an electronic device, as shown in FIG. 8, and the contents in the figure cannot be considered as any limitation on the use range of the application.

[0105] FIG. 8 is a structural schematic diagram of an electronic device 20 provided by the embodiment of the application. The electronic device 20 specifically can include at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25 and a communication bus 26. The memory 22 is used for storing a computer program, the computer program is loaded and executed by the processor 21 to realize the related steps in the digital copyright data protection method disclosed in any of the preceding embodiments.

[0106] In the embodiment, the power supply 23 is used for providing working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and external devices, and the communication protocol followed by the communication interface 24 is any communication protocol applicable to the technical solution of the application, which is not specifically limited here; the input / output interface 25 is used for acquiring external input data or outputting data to the outside, and the specific interface type can be selected according to the specific application needs, which is not specifically limited here.

[0107] In addition, the memory 22 as a carrier for resource storage can be a read-only memory, a random access memory, a magnetic disk or an optical disk, and the resources stored thereon include an operating system 221, a computer program 222 and data 223 including digital copyright data, and the storage mode can be temporary storage or permanent storage.

[0108] The operating system 221 is used to manage and control each hardware device on the electronic device 20 and the computer program 222, so as to realize the operation and processing of the processor 21 on the mass data 223 in the memory 22, which can be Windows Server, Netware, Unix, Linux, etc. In addition to the computer program capable of completing the digital copyright data protection method disclosed by the electronic device 20 in any of the foregoing embodiments, the computer program 222 can further include a computer program capable of completing other specific work.

[0109] Further, the embodiment of the present application further discloses a computer storage medium, which stores computer executable instructions. When the computer executable instructions are loaded and executed by a processor, the steps of the digital copyright data protection method disclosed by any of the foregoing embodiments are realized.

[0110] The embodiments in the specification are described in a progressive manner, and each embodiment focuses on the difference from other embodiments. The same or similar parts of each embodiment can be referred to each other. For the device disclosed by the embodiments, since it corresponds to the method disclosed by the embodiments, the description is relatively simple, and the related parts can be referred to the method part.

[0111] The steps of the method or algorithm described in combination with the embodiments disclosed herein can be implemented directly by hardware, a software module executed by a processor, or a combination of the two. The software module can be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0112] Finally, it should be noted that, in this document, relationship terms such as first and second are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between the entities or operations. Moreover, the terms "include", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or device. Without more limitations, the element defined by the statement "including a" does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0113] The above describes in detail the digital copyright data protection method, device, equipment and storage medium provided by the present application. The principles and implementation manners of the present application are described by using specific examples. The above description of the embodiments is only used to help understand the method of the present application and its core idea. Meanwhile, for those skilled in the art, according to the idea of the present application, the specific implementation manners and application ranges can be changed. In summary, the content of the specification should not be understood as a limitation of the present application.

Claims

1. A method of protecting digital copyright data, characterized by, Applied to a server, comprising: Obtaining digital copyright data; the digital copyright data includes image data and / or video data; Encrypting the image data to obtain image encryption data, and encrypting the video data to obtain video encryption data; According to the received image viewing request of the client to the image data, generating an image link based on the image encryption data and sending it to the client, so that the client decrypts the image encryption data and creates a control that prevents the operating system from being screened and recorded to display the decrypted image data; According to the received video viewing request of the client to the video data, send the corresponding playing parameter of the video encryption data to the client, so that the client views the video data through the target player according to the playing parameter; the target player supports the playing of data copyright management video, and prevents the operating system from being screened and recorded.

2. The digital rights data protection method of claim 1, wherein, The image data is encrypted to obtain image encryption data, comprising: Generating a random key and an initialization vector, encrypting the image data using the random key and the initialization vector to obtain first encryption data; According to the identifier of the resource package corresponding to the personnel to which the image data belongs, generate a special token and an image encryption key corresponding to the personnel, and obtain a combined key by combining the special token and the image encryption key; the personnel and the resource package are one-to-one corresponding; Encrypt the random key using the combined key to obtain second encryption data, add the second encryption data to the head of the first encryption data to obtain image encryption data.

3. The method of claim 2, wherein The image link based on the image encryption data is generated and sent to the client, so that the client decrypts the image encryption data, comprising: Obtain the image viewing request sent by the client for the image data and containing the user token, perform user identity authentication according to the user token, if the user identity authentication is passed, view the asset holding situation of the user; According to the asset holding situation, it is judged whether the user has the right to view the image data, if yes, the image link corresponding to the image encryption data is generated and sent to the client, and the special token and the image encryption key corresponding to the personnel to which the image data belongs are sent to the client, so that the client views the image link according to the special token and the image encryption key.

4. The method of claim 1, wherein The video data is encrypted to obtain video encryption data, comprising: Obtaining a video encryption key, encrypting the video data using the video encryption key to obtain video encryption data; Save the video encryption key to the license server.

5. The method of claim 4, wherein, According to the received video viewing request of the client to the video data, the playing parameter corresponding to the video encryption data is sent to the client, comprising: Obtain the video viewing request sent by the client for the video data and containing the user token, perform user identity authentication according to the user token, if the user identity authentication is passed, view the asset holding situation of the user; According to the asset holding situation, a corresponding video asset list is generated and sent to the client, so that the client determines the corresponding playing parameters of the video data from the video asset list; the playing parameters include a playing address, a certificate address and a license server address; The client sends the playing parameters to a target player, so that the target player sends a video encryption key application and user information of the client to the license server according to the playing parameters, receives a video encryption key sent by the license server after user authentication, decrypts video encryption data by using the video encryption key and plays the decrypted video.

6. The method of claim 1, wherein, Also includes: The client is configured with a hypertext transfer protocol fixed certificate binding, so that after the binding, the client only accepts the fixed certificate in the communication process.

7. The method of claim 1 to 6, wherein The client creates a control against operating system screenshot and screen recording operation, including: Determining the system operation type of the client; According to the control creation rule corresponding to the system operation type, the control against operating system screenshot and screen recording operation is created.

8. A digital copyright data protection system, characterized by Including a server and a client; The server is configured to obtain digital copyright data, the digital copyright data including image data and / or video data, encrypt the image data to obtain image encryption data, and encrypt the video data to obtain video encryption data; based on an image viewing request of the client for the image data, generate an image link based on the image encryption data and send the image link to the client; According to a video viewing request of the client for the video data, send the playing parameters corresponding to the video encryption data to the client; The client is configured to decrypt the image encryption data, and create a control against operating system screenshot and screen recording operation to display the decrypted image data. According to the playing parameters, the video data is viewed by accessing a target player; The target player supports playing of data copyright management video and prevents operating system screenshot and screen recording operation.

9. An electronic device, comprising: Including: A memory for saving a computer program; A processor for executing the computer program to realize the digital copyright data protection method of any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, For storing a computer program; wherein the computer program is executed by the processor to realize the digital copyright data protection method of any one of claims 1 to 7.

Images