WO2024032289A1 - 视频播放方法和***、视频安全平台、通信设备 - Google Patents

视频播放方法和***、视频安全平台、通信设备 Download PDF

Info

Publication number
WO2024032289A1
WO2024032289A1 PCT/CN2023/106411 CN2023106411W WO2024032289A1 WO 2024032289 A1 WO2024032289 A1 WO 2024032289A1 CN 2023106411 W CN2023106411 W CN 2023106411W WO 2024032289 A1 WO2024032289 A1 WO 2024032289A1
Authority
WO
WIPO (PCT)
Prior art keywords
video
information
pipeline
platform
pipe
Prior art date
Application number
PCT/CN2023/106411
Other languages
English (en)
French (fr)
Inventor
梁洁
陈戈
庄一嵘
卢泉
曾其妙
Original Assignee
中国电信股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国电信股份有限公司 filed Critical 中国电信股份有限公司
Publication of WO2024032289A1 publication Critical patent/WO2024032289A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4408—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4627—Rights management associated to the content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835—Generation of protective data, e.g. certificates
    • H04N21/8358—Generation of protective data, e.g. certificates involving watermark
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast

Definitions

  • the present disclosure relates to the field of video surveillance technology, specifically, to a video playback method and system, a video security platform, and communication equipment.
  • a video playback method includes: in response to receiving the first video playback request sent by the client, querying the client host for the target service permissions of the corresponding SIM card user, so as to When the SIM card user has the target service authority, an IP pipe is established between the client host and the video platform.
  • the IP pipe is a communication channel established in the IP network; in response to the client passing the IP
  • the second video playback request sent by the pipeline to the video platform determines the target video playback permission of the SIM card user corresponding to the pipeline information of the IP pipeline according to the pipeline information of the IP pipeline; when the SIM card user has the target video Play permission, generate digital watermark information according to the pipeline information of the IP pipeline; send the digital watermark information to the video platform, so that the video platform adds the digital watermark information to the target video and encodes and encrypts it to pass the client Decrypt and play the encoded and encrypted video.
  • the pipeline information of the IP pipeline is IP pipeline identification information
  • generating digital watermark information according to the pipeline information of the IP pipeline includes: generating a corresponding random number according to the IP pipeline identification information; Random numbers serve as the digital watermark information.
  • the sending the digital watermark information to the video platform so that the video platform adds the digital watermark information to the target video includes: sending the random number to the video platform so that the video platform uses the random number as an image.
  • the layer is superimposed on the target video, and the target video is the decoded video to be played.
  • the method further includes: receiving an IP pipeline establishment notification message sent by the broadband access management system, where the IP pipeline establishment notification message is used to indicate that the IP pipeline establishment is completed, so Said IP The pipeline establishment notification message includes pipeline information of the IP pipeline.
  • the client host has a SIMKey; the method further includes: determining the SIMKey card user information and the digital certificate information; and binding the association between the SIMKey card user information and the digital certificate information.
  • the method further includes: determining the corresponding SIMKey card user information based on the pipeline information of the IP pipeline; determining the digital certificate information corresponding to the SIMKey card user information based on the association relationship; and sending the corresponding SIMKey card user information to the video platform.
  • the digital certificate information is provided so that the video platform encrypts the encoded video based on the digital certificate information.
  • the method further includes: receiving an IP pipe removal notification message sent by the broadband access management system, where the IP pipe removal notification message is used to indicate that the IP The pipeline removal is completed, and the IP pipeline removal notification message includes the pipeline information of the IP pipeline.
  • a video security platform including: a first authentication module, a second authentication module, a generating module and a sending module; a first authentication module configured to respond to After receiving the first video playback request sent by the client, query the target service permissions of the client host corresponding to the SIM card user, so that when the SIM card user has the target service permissions, between the client host and the video platform An IP pipe is established between; the IP pipe is a communication channel established in the IP network; the second authentication module is configured to respond to the second video playback request sent by the client to the video platform through the IP pipe, according to the The pipeline information of the IP pipeline determines the target video playback permission of the SIM card user corresponding to the pipeline information of the IP pipeline; the generation module is configured to when the SIM card user has the target video playback permission, according to the IP pipeline The pipeline information generates digital watermark information; the sending module is configured to send the digital watermark information to the video platform, so that the video platform adds the digital watermark information to
  • a video playback system includes a client, a broadband access management system, a video platform and a video security platform, wherein: the client is used to send messages to the video platform. A first video playback request; the video platform is used to forward the first video playback request to the video security platform; the video security platform is used to respond to receiving the first video playback request sent by the client.
  • the broadband access management system is used to provide the target service permissions when the SIM card user has the target service permissions
  • an IP pipe is established between the client host and the video platform, and pipe information related to the IP pipe is sent to the client; the client is also used to send the second step to the video platform through the IP pipe.
  • a video playback request; the video platform is further configured to forward the second video playback request to the video security platform; the video security platform is further configured to determine, based on the pipeline information of the IP pipeline, the The target video playback permission of the SIM card user corresponding to the pipeline information of the IP pipeline; when the SIM card user has the target video playback permission, generate digital watermark information based on the pipeline information of the IP pipeline; and send the said video to the video platform Digital watermark information; the video platform is also used to add the digital watermark information to the target video, encode and encrypt it, and send the encoded and encrypted video to the client; the client is also used to The encoded and encrypted video is decrypted and played.
  • the client host has a SIMKey; the video security platform is also used to: determine the SIMKey card user information and digital certificate information; bind the SIMKey card user information and the digital certificate information. Association relationship; the client is also configured to use the digital certificate information to decrypt and play the encoded and encrypted video.
  • a computer-readable storage medium on which a computer program is stored.
  • the computer program is executed by a processor, the method of any of the above embodiments is implemented.
  • a communication device including: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform any of the above embodiments via executing the executable instructions Methods.
  • Figure 1 schematically shows one of the schematic flow charts of a video playback method according to an embodiment of the present disclosure.
  • FIG. 2 schematically shows a flowchart of a digital certificate transmission process in SIMKey according to an embodiment of the present disclosure.
  • Figure 3 schematically shows the second schematic flowchart of a video playback method according to an embodiment of the present disclosure.
  • Figure 4 schematically shows a resulting block diagram of a video playback platform according to one embodiment of the present disclosure.
  • Figure 5 schematically shows a system architecture diagram of a video playback system according to an embodiment of the present disclosure.
  • Figure 6 schematically illustrates an exemplary communications device block diagram according to one embodiment of the present disclosure.
  • Example embodiments will now be described more fully with reference to the accompanying drawings.
  • Example embodiments may, however, be embodied in various forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concepts of the example embodiments.
  • the described features, structures or characteristics may be combined in any suitable manner in one or more embodiments.
  • numerous specific details are provided to provide a thorough understanding of embodiments of the disclosure.
  • those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced without one or more of the specific details being omitted, or other methods, components, devices, steps, etc. may be adopted.
  • well-known technical solutions have not been shown or described in detail to avoid obscuring aspects of the disclosure.
  • a video playback method may include the following steps S110-S140.
  • Step S110 in response to receiving the first video playback request sent by the client, query the target service permissions of the client host corresponding to the SIM card user, so that if the SIM card user has the target service permissions, the client host and the video platform Establish IP pipes between them.
  • the first video play request may be generated by the user's operation on the front-end page, for example, the user clicks to play the video, etc.
  • the first video playback request may include identification information of the video to be played, industry Service type information (such as video service, voice service, ring back tone service, etc.), service number information, etc., may also include request time, requesting user information (such as user identification information, user account information, user name information, etc.), this example No restrictions.
  • the user information corresponding to the SIM card of the client host can be queried in the information database through the requesting user information carried in the first video playback request.
  • the SIM card user information may include the user type of the SIM card, user identification, Information such as services activated by the user determines whether the SIM card user has activated the video service (target service). When the SIM card user activates the video service (target service), an IP pipeline is established between the client host and the video platform.
  • the IP (Internet Protocol) pipeline refers to a communication channel established in the IP network.
  • an IP pipe can be formed by establishing a VXLAN (Virtual eXtensible Local Area Network) tunnel in the IP network.
  • VXLAN is one of the NVO3 (Network Virtualization over Layer 3) standard technologies defined by IETF (The Internet Engineering Task Force, International Internet Engineering Task Force). It uses the L2over L4 (MAC-in-UDP) message encapsulation mode to combine the two Layer 2 packets are encapsulated using Layer 3 protocols, which enables the Layer 2 network to be expanded within the Layer 3 range, while meeting the needs of large Layer 2 virtual migration and multi-tenancy in the data center.
  • L2over L4 MAC-in-UDP
  • the VXLAN tunnel is used to transmit VXLAN encapsulated packets. It is a virtual channel established between two VTEPs (VXLAN Tunnel Endpoints, VXLAN tunnel endpoints).
  • VTEP is the edge device of the VXLAN network and is the starting point and the starting point of the VXLAN tunnel. end.
  • the starting point and end point of the VXLAN tunnel are the client host and video platform.
  • other methods can also be used to establish IP pipes, and this example does not limit this.
  • Step S120 In response to the second video playback request sent by the client to the video platform through the IP pipe, determine the target video playback permission of the SIM card user corresponding to the pipe information of the IP pipe according to the pipe information of the IP pipe.
  • the broadband access management system will allocate an IP address for the client to access the video platform.
  • the client is triggered to send a second video playback request to the video platform.
  • the second video playback request is a video playback request initiated after the IP pipe is established.
  • it may also include pipe information of the IP pipe (such as IP pipe ID).
  • it may also include the first All or part of the information contained in the video request, such as identification information of the video to be played, requesting user information, etc. This example does not limit this.
  • the SIM card user information can be determined based on the pipe information of the IP pipe, and then whether the SIM card user has the playback permission for the requested target video is queried in the information database.
  • the user's target video playback permission is determined.
  • Step S130 When the SIM card user has the target video playback permission, digital watermark information is generated based on the pipeline information of the IP pipeline.
  • the pipeline information of the IP pipeline may include IP pipeline identification information, IP pipeline number, two endpoint information of the IP pipeline, IP pipeline establishment time, end time and other information, and may also include other information related to the IP pipeline. information, this example does not limit this.
  • digital watermark information can be generated for the SIM card user's current video playback request.
  • the digital watermark information can be generated based on the pipeline information of the IP pipeline.
  • a series of numbers or serial numbers For example, a random number or a random serial number can be generated based on the IP pipeline ID, or certain rules can be used to generate digital watermark information.
  • the IP pipeline ID can be hashed to generate digital watermark information, or it can be It is other custom or existing mapping rules, which are not limited in this example.
  • Step S140 Send digital watermark information to the video platform, so that the video platform adds digital watermark information to the target video, encodes and encrypts it, and decrypts and plays the encoded and encrypted video through the client.
  • the digital watermark information can be added to the target video in a customized manner or in an existing way of adding digital watermarks.
  • the digital watermark information can be added to the target video in a layer manner.
  • the video data is encoded and encrypted, and then decrypted and played through the client.
  • the played video has digital watermark information to facilitate tracking of video remakes.
  • an IP pipeline is established between the client host and the video platform, and in response to the client sending to the video platform through the IP pipeline
  • the second video playback request determines the target video playback permission of the SIM card user corresponding to the pipeline information of the IP pipeline; when the SIM card user has the target video playback permission, generates digital watermark information based on the pipeline information of the IP pipeline; and adds it to the target video Digital watermark information.
  • the pipeline information of the IP pipeline is added to the target video through digital watermarks, so that the reproduced video has a digital watermark, so that video tracking can be realized based on the digital watermark information, and the remake user information can be determined, thereby reducing the causes of such incidents to a certain extent.
  • the video acquisition process in the IP network is realized by establishing IP pipelines, allowing network operators to track the actual geographical location of the target video player through the access gateway and achieve precise positioning of the target video player.
  • the pipeline information of the IP pipeline is IP pipeline identification information
  • generating digital watermark information based on the pipeline information of the IP pipeline includes the following steps:
  • the first step is to generate the corresponding random number based on the IP pipeline identification information.
  • a random number with a fixed number of bits (such as 16 or 32) can be generated according to the IP pipe ID.
  • the corresponding relationship between the IP pipe ID and the random number can be recorded so that the video remake player can be located during the subsequent video tracking process.
  • the second step is to use random numbers as digital watermark information.
  • the random number can be sent to the video platform as digital watermark information, and the video platform can superimpose the random number as a layer in the decoded video to be played (target video).
  • the digital watermark information is presented as part of the target video during playback.
  • the method further includes: receiving an IP pipeline establishment notification message sent by the broadband access management system.
  • the IP pipeline establishment notification message is used to indicate that the IP pipeline establishment is completed.
  • the IP pipeline establishment notification message includes IP Pipeline information for the pipe.
  • the broadband access management system can send the IP pipeline related information to the video security platform for storage.
  • the IP pipeline establishment notification message can include the IP pipeline related information.
  • the IP pipeline related information can Including pipeline information of the IP pipeline, such as IP pipeline identification information, IP pipeline establishment time, etc., and may also include target video identification information, user ID, user IP address, user access gateway information (such as the actual geographical location of the access gateway or/and Access gateway identification information), etc., may also include other information, such as IP pipeline status information (such as existence or removal), which is not limited in this example.
  • IP pipeline related information can be recorded as video CDR (Call Detail Record (Call Detail Record).
  • the client host has a SIMKey; the method also includes the following steps S210-S250.
  • Step S210 determine the SIMKey card user information and digital certificate information.
  • the user can be a SIMKey user
  • the video security platform can determine the SIMKey card user information and digital certificate information by querying SIMKey.
  • Step S220 Bind the association between the SIMKey card user information and the digital certificate information.
  • the user information associated with the SIMKey and the digital certificate information can be bound in advance on the video security platform, so that the SIMKey card user information can determine the corresponding digital certificate information.
  • Step S230 Determine corresponding SIMKey card user information based on the pipe information of the IP pipe.
  • the IP pipeline is established based on the SIMKey card user's first video playback request, and the two are in one-to-one correspondence. Therefore, the SIMKey card user information can be determined through the pipeline information of the IP pipeline.
  • Step S240 Determine the digital certificate information corresponding to the SIMKey card user information based on the association relationship.
  • the digital certificate information corresponding to the SIMKey card user information can be determined based on the bound association relationship.
  • Step S250 Send the digital certificate information to the video platform, so that the video platform generates a symmetric key based on the digital certificate information to encrypt the encoded video.
  • the digital certificate information can be used as a video key to encrypt the encoded video, and then the encrypted video stream is returned to the client through the IP pipe.
  • the client uses the digital certificate in the SIMKey as the user's private key to encrypt the video. Decrypted playback can prevent the video from being maliciously attacked or intercepted, ensuring the security of the online video playback process.
  • the method further includes: receiving an IP pipe removal notification message sent by the broadband access management system, where the IP pipe removal notification message is used to indicate that the IP pipe removal is completed,
  • the IP pipe removal notification message includes pipe information of the IP pipe.
  • the broadband access management system dismantles the IP pipeline established for the target video and notifies the video security platform.
  • the IP pipe removal notification message may include IP pipe identification information and may also include other IP pipe related information, such as removal time, etc. This example does not limit this.
  • the video security platform receives the IP pipe removal notification message, it can update the information in the video CDR, for example, update the status of the IP pipe from the existing status to the demolition status.
  • This disclosure establishes an IP pipeline according to the first video playback request, and immediately dismantles the IP pipeline after the video playback is completed, realizing the construction and disassembly of IP pipelines. Every time the user accesses a video content, a new pipeline is created, and after the video is played, a new pipeline is created. The removal of IP pipelines will not affect the IP network.
  • the specific video playback process of the present disclosure may include the following steps S301-S318.
  • Step S301 The client triggers a video playback operation, and the client sends a first video playback request to the broadband access management system.
  • Step S302 The broadband access management system forwards the first video playback request to the video security platform.
  • Step S303 The video security platform performs an authentication on the first video playback request.
  • the primary authentication may be to query the video service permissions of the SIMKey card user to determine whether the SIM card user has the video service permissions. If so, go to step S303, otherwise a no permission reminder will be returned.
  • Step S304 The video security platform returns an authentication result to the broadband access management system.
  • Step S305 When the authentication is passed, the broadband access management system establishes an IP pipe based on the first video playback request.
  • Step S306 The broadband access management system notifies the video security platform of the IP pipe-related information, so that the video security platform stores the IP pipe-related information to facilitate subsequent tracking of video playback.
  • Step S307 The broadband access management system allocates an IP address to the client according to the IP pipe and sends pipe information of the IP pipe.
  • Step S308 The client sends a second video playback request to the video platform through the IP pipe.
  • Step S309 The video platform forwards the second video playback request to the video security platform for secondary authentication.
  • secondary authentication refers to determining whether the SIMKey card user corresponding to the pipe information of the IP pipe has the target video playback permission.
  • the corresponding SIMKey card user information can be determined based on the pipeline information of the IP pipeline, and then the target video playback permission can be determined based on the SIMKey card user information.
  • Step S310 The video security platform generates digital watermark information based on the pipeline information of the IP pipeline for the request that the secondary authentication passes.
  • Step S311 the video security platform returns the digital watermark information and secondary authentication results to the video platform.
  • Step S312 The video security platform determines the digital certificate information corresponding to the current second video playback request based on the association between the bound SIMKey card user information and the digital certificate information, and returns the digital certificate information to the video platform.
  • the association in this example is bound in advance on the video security platform.
  • Step S313 The video platform adds digital watermark information to the target video and encodes it.
  • Step S314 The video platform uses the digital certificate information and symmetric key to encrypt the encoded video.
  • Step S315 the video platform reports the symmetric key to the key management system.
  • Step S316 The video platform sends the encrypted video to the client through the IP pipe.
  • Step S317 The client obtains the symmetric key from the key management system.
  • the symmetric key is obtained through the user's private key and key exchange algorithm. Existing key exchange algorithms can be used and will not be described again here.
  • Step S318 The client uses the digital certificate information and symmetric key in SIMKey to decrypt and play the encrypted video.
  • This disclosure establishes an IP pipeline between the client host and the video platform when the SIMkey card user has the target business permissions; determines the target video playback permissions of the corresponding SIM card user based on the pipeline information of the IP pipeline; when the SIMkey card user It has the permission to play the target video and generates digital watermark information based on the pipeline information of the IP pipeline; adds digital watermark information to the target video, encodes and encrypts it, and transmits the encrypted video to the client through the IP pipeline, and the client further obtains the video through the digital certificate of SIMkey.
  • Video key for decryption and playback This disclosure can conduct subsequent tracing after the network surveillance video is reproduced during playback, thereby improving the security of the network surveillance video.
  • this disclosure is aimed at the situation where USBkey is used as the user's private key and a communication tunnel is established through VPN (virtual private networks, virtual private network) in related technologies. Since the VPN uses a private network address, it is difficult for the video platform to track the video player's identity. A matter of actual geographical location. On the other hand, for related technologies, although generally Video encryption protects the security of the video during transmission and storage, but there is still a risk of the video being copied and spread during playback.
  • this disclosure uses SIMKey-based IP pipelines to realize the creation of new IP pipelines on fixed broadband and mobile broadband through the broadband access management system of telecom operators (i.e., IP core network). Since the IP pipeline is located in IP network, allowing telecom operators to record the actual geographical location of both ends of the pipeline in real time. For example, the location of the video player can be determined by determining the actual geographical location of the access gateway.
  • This disclosure aims at another aspect of the above problems, generating digital watermark information through IP pipeline information, and adding digital watermark information to the target video, so that the played video contains digital watermark information, that is, superimposing the user information of the video player onto the video , so that the reproduced video can be tracked.
  • this disclosure can, on the one hand, correspond to IP pipelines, SIMKey card users and digital certificates, thereby achieving accurate tracking of video players.
  • digital certificates can be used to encrypt and decrypt videos, and the security of the video playback process can be improved through digital certificates.
  • the present disclosure can be applied to scenarios such as video surveillance, video networking, or video cloud.
  • the present disclosure can provide users with highly secure and traceable video services through the IP pipeline of telecom operators; it can further enhance the value of the IP service network through the binding of IP services and video services.
  • this example embodiment also provides a video security platform 400;
  • the video security platform 400 may include: a first authentication module 410, a second authentication module 420, a generating module 430 and a sending module 440;
  • the authentication module 410 is configured to, in response to receiving the first video playback request sent by the client, query the target service permissions of the client host corresponding to the SIM card user, so that if the SIM card user has the target service permissions, the client An IP pipe is established between the end host and the video platform;
  • the IP pipe is a communication channel established in the IP network;
  • the second authentication module 420 is configured to respond to the second video playback request sent by the client to the video platform through the IP pipe , according to the pipeline information of the IP pipeline, determine the target video playback permission of the SIM card user corresponding to the target IP address;
  • the generation module 430 is configured to generate a digital watermark based on the pipeline information of the IP pipeline when the SIM card user has the target video playback permission.
  • Information sending module 440 is
  • the pipeline information of the IP pipeline is IP pipeline identification information
  • the generation module 430 is also configured to: generate corresponding random numbers according to the IP pipeline identification information; and use the random numbers as digital watermark information.
  • the sending module 440 is also configured to: send the random number to the video platform, so that the video platform superimposes the random number as a layer on the target video, and the target video is the decoded video to be played.
  • the video security platform 400 further includes: a receiving module.
  • the receiving module is configured to receive an IP pipeline establishment notification message sent by the broadband access management system after the IP pipeline is established.
  • the IP pipeline establishment notification message is To indicate completion of IP pipe establishment, the IP pipe establishment notification message includes pipe information of the IP pipe.
  • the client host has SIMKey;
  • the video security platform 400 also includes: a first determination module and a binding module, the first determination module is configured to determine SIMKey card user information and digital certificate information; binding The module is configured to bind the association between SIMKey card user information and digital certificate information.
  • the video security platform 400 further includes: a second determination module and a third determination module.
  • the second determination module is configured to determine the corresponding SIMKey card user information according to the pipeline information of the IP pipeline; the third determination module The determination module is configured to determine the digital certificate information corresponding to the SIMKey card user information based on the association relationship;
  • the sending module 440 is also configured to send digital certificate information to the video platform, so that the video platform encrypts the encoded video according to the digital certificate information.
  • the receiving module is further configured to: after the client decrypts and plays the encoded and encrypted video, receive an IP pipeline removal notification message sent by the broadband access management system, and the IP pipeline removal notification message is used to Indicates that the IP pipe removal is completed, and the IP pipe removal notification message includes the pipe information of the IP pipe.
  • this example embodiment also provides a video playback system 500.
  • the system 500 includes a client 510, a broadband access management system 520, a video platform 530 and a video security platform 540, where:
  • the client 510 is used to send the first video playback request to the video platform; the video platform 530 is used to forward the first video playback request to the video security platform; the video security platform 540 is used to respond to receiving the first video playback request sent by the client.
  • Video playback request query the client host corresponding to the target service permissions of the SIM card user, and send the query results to the broadband access management system; the broadband access management system 520 is used to perform the video playback when the SIM card user has the target service permissions.
  • the client 510 is also used to send a second video playback request to the video platform through the IP pipe; the video platform 530 is also used to Forward the second video playback request to the video security platform; the video security platform 540 is also used to determine the target video playback permission of the SIM card user corresponding to the pipe information of the IP pipe according to the pipe information of the IP pipe; when the SIM card user has The target video playback permission generates digital watermark information based on the pipeline information of the IP pipeline; sends the digital watermark information to the video platform; the video platform 530 is also used to add digital watermark information to the target video, encode and encrypt it, and encode and encrypt the video Sent to the client; the client 510 is also used to decrypt and play the encoded and encrypted video.
  • the system 500 also includes a key management system 550.
  • the key management system 550 is configured to receive the symmetric key reported by the video platform; and respond to the key acquisition request sent by the client. , sending the requested symmetric key to the client so that the client can decrypt the encoded and encrypted video.
  • the client host has a SIMKey; the video security platform is also used to: determine the SIMKey card user information and digital certificate information; bind the SIMKey card user information and the digital certificate information. The association between certificate information; the client is also configured to use the digital certificate information to decrypt and play the encoded and encrypted video.
  • the client can be installed on a user terminal with SIMKey.
  • the terminal includes but is not limited to mobile phones, computers, intelligent voice interaction devices, smart home appliances, vehicle-mounted terminals, etc., such as smart phones, tablets, and laptops. , computers and other electronic devices that can realize video playback, this example is not limited to this.
  • the broadband access management system, video platform, video security platform, and key management system can be physical servers, cloud servers, virtual servers, etc. respectively. This example does not limit this.
  • the present disclosure also provides a computer-readable medium.
  • the computer-readable medium may be included in the device described in the above embodiments; it may also exist separately without being assembled into the device.
  • the above computer-readable medium carries one or more programs. When the above one or more programs are executed by a device, the device implements the method in the following embodiments. For example, the device can implement the various steps shown in Figures 1 to 3, etc.
  • the computer-readable medium shown in the present disclosure may be a computer-readable signal medium or a computer-readable medium. machine-readable storage medium or any combination of the above two.
  • the computer-readable storage medium may be, for example, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or any combination thereof. More specific examples of computer readable storage media may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard drive, random access memory (RAM), read only memory (ROM), removable Programmd read-only memory (EPROM or flash memory), fiber optics, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above.
  • a computer-readable storage medium may be any tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device.
  • a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code therein. Such propagated data signals may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above.
  • a computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device .
  • Program code embodied on a computer-readable medium may be transmitted using any suitable medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the foregoing.
  • a device capable of implementing the above method is also provided.
  • a device capable of implementing the above method.
  • aspects of the present disclosure may be implemented as systems, methods, or program products. Therefore, various aspects of the present disclosure may be embodied in the following forms, namely: a complete hardware embodiment, a complete software embodiment (including firmware, microcode, etc.), or an embodiment combining hardware and software aspects, which may be collectively referred to herein as "Circuit", "Module” or "System”.
  • FIG. 6 is a schematic structural diagram of a communication device provided by an embodiment of the present disclosure.
  • the communication device 600 includes a processor 610 , a memory 620 , a transceiver 630 and a communication bus 640 .
  • the processor 610 is connected to the memory 620 and the transceiver 630.
  • the processor 610 may be connected to the memory 620 and the transceiver 630 through a communication bus 640.
  • the processor 610 is configured to support the communication device to perform corresponding functions in the video playback methods in Figures 1-3.
  • the processor 610 can be a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), a hardware chip, or any combination thereof.
  • CPU Central Processing Unit
  • NP Network Processor
  • the above-mentioned hardware chip can be an application-specific integrated circuit (Application-Specific Integrated Circuit, ASIC), a programmable logic device (Programmable Logic Device, PLD) or a combination thereof.
  • ASIC Application-Specific Integrated Circuit
  • PLD programmable logic device
  • the above-mentioned PLD can be a complex programmable logic device (Complex Programmable Logic Device, CPLD), a field-programmable gate array (Field-Programmable Gate Array, FPGA), a general array logic (Generic Array Logic, GAL) or any combination thereof.
  • the memory 620 is used to store program codes and the like.
  • the memory 620 may include volatile memory (VolatileMemory, VM), such as random access memory (Random Access Memory, RAM); the memory 620 may also include non-volatile memory (Non-Volatile Memory, NVM), such as read-only memory. (Read-Only Memory, ROM), flash memory (flash memory), hard disk (Hard Disk Drive, HDD) or solid-state drive (Solid-State Drive, SSD); the memory 620 may also include a combination of the above types of memory.
  • volatile memory VolatileMemory, VM
  • RAM random access memory
  • NVM non-volatile Memory
  • NVM non-volatile Memory
  • read-only memory Read-Only Memory
  • flash memory flash memory
  • HDD Hard Disk Drive
  • SSD solid-state drive
  • the transceiver 630 is used to receive or transmit data.
  • the processor 610 can call the above program code to perform the following operations:
  • IP pipeline is established between the IP pipeline and the IP pipeline.
  • the IP pipeline is a communication channel established in the IP network; in response to the second video playback request sent by the client to the video platform through the IP pipeline, the IP pipeline is determined according to the pipeline information of the IP pipeline.
  • the digital watermark information is encoded and encrypted to decrypt and play the encoded and encrypted video through the client.
  • the pipeline information of the IP pipeline is IP pipeline identification information.
  • the above-mentioned processor 610 can also generate digital watermark information based on the pipeline information of the IP pipeline and perform the following operations:
  • processor 610 can also perform the following operations:
  • IP pipeline establishment notification message sent by the broadband access management system is received.
  • the IP pipeline establishment notification message is used to indicate that the IP pipeline establishment is completed.
  • the IP pipeline establishment notification message includes pipeline information of the IP pipeline.
  • processor 610 can also perform the following operations:
  • processor 610 can also perform the following operations:
  • the above-mentioned processor 610 can also perform the following operations: after the client decrypts and plays the encoded and encrypted video, receive an IP pipe removal notification message sent by the broadband access management system.
  • the IP pipe removal notification message is used to indicate the IP
  • the pipeline removal is completed, and the IP pipeline removal notification message includes the pipeline information of the IP pipeline.
  • each operation may also correspond to the corresponding description with reference to the method embodiments shown in FIGS. 1-3; the above-mentioned processor 610 may also cooperate with the transceiver 630 to perform other operations in the above-mentioned method embodiments.
  • the example embodiments described here can be implemented by software, or can be implemented by software combined with necessary hardware. Therefore, the technical solution according to the embodiment of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , including a number of instructions to cause a device to perform a method according to an embodiment of the present disclosure.
  • a non-volatile storage medium which can be a CD-ROM, U disk, mobile hard disk, etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Databases & Information Systems (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)

Abstract

一种视频播放方法，包括：在SIMkey卡用户具有目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道(S110)；根据IP管道的管道信息，确定对应的SIMkey卡用户的目标视频播放权限(S120)；当SIMkey卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息(S130)；对目标视频添加数字水印信息并编码和加密，并通过IP管道给客户端传输加密视频，客户端通过SIMkey的数字证书进一步获取该视频密钥，进行解密播放(S140)。本公开可以在网络监控视频在播放过程中被翻拍后，进行事后追查，提高网络监控视频的安全性。 (图1)

Description

视频播放方法和***、视频安全平台、通信设备
相关申请的交叉引用
本公开要求于2022年08月12日提交的申请号为202210970479.6、名称为“视频播放方法和***、视频安全平台、通信设备”的中国专利申请的优先权，该中国专利申请的全部内容通过引用全部并入全文。
技术领域
本公开涉及视频监控技术领域，具体而言，涉及一种视频播放方法和***、视频安全平台、通信设备。
背景技术
随着网络视频监控的发展，公共安全、企业私网、家庭监控等场景的视频监控对安全要求非常高，需要采用如视频加密、防篡改等手段进行视频安全保护。
但是，仍然存在用户通过合法终端播放监控视频，再通过翻拍等手段进行视频二次传播的情况，由于缺乏有效的追踪手段，严重影响各类监控视频的安全，对监控视频的安全性带来了极大的威胁。
需要说明的是，在上述背景技术部分公开的信息仅用于加强对本公开的背景的理解，因此可以包括不构成对本领域普通技术人员已知的现有技术的信息。
发明内容
根据本公开的第一方面，提供了一种视频播放方法，所述方法包括：响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在所述SIM卡用户具有所述目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道，所述IP管道为建立在IP网络中的通信通道；响应于客户端通过所述IP管道向视频平台发送的第二视频播放请求，根据所述IP管道的管道信息，确定与所述IP管道的管道信息对应的SIM卡用户的目标视频播放权限；当所述SIM卡用户具有目标视频播放权限，根据所述IP管道的管道信息生成数字水印信息；向视频平台发送所述数字水印信息，以使视频平台对所述目标视频添加所述数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
可选地，所述IP管道的管道信息为IP管道标识信息，所述根据所述IP管道的管道信息生成数字水印信息，包括：根据所述IP管道标识信息生成对应的随机数；将所述随机数作为所述数字水印信息。
所述向视频平台发送所述数字水印信息，以使视频平台对所述目标视频添加所述数字水印信息，包括：向视频平台发送所述随机数，以使视频平台将所述随机数作为图层叠加在所述目标视频上，所述目标视频为解码后的待播放视频。
可选地，在所述IP管道建立之后，所述方法还包括：接收宽带接入管理***发送的IP管道建立通知消息，所述IP管道建立通知消息用于指示所述IP管道建立完成，所述IP 管道建立通知消息包括所述IP管道的管道信息。
可选地，所述客户端主机具有SIMKey；所述方法还包括：确定所述SIMKey卡用户信息和数字证书信息；绑定所述SIMKey卡用户信息与所述数字证书信息之间的关联关系。
可选地，所述方法还包括：根据所述IP管道的管道信息，确定相应的SIMKey卡用户信息；根据所述关联关系，确定该SIMKey卡用户信息对应的数字证书信息；向视频平台发送所述数字证书信息，以使视频平台根据所述数字证书信息对编码后视频进行加密。
可选地，在客户端对编码加密后视频进行解密播放之后，所述方法还包括：接收宽带接入管理***发送的IP管道拆除通知消息，所述IP管道拆除通知消息用于指示所述IP管道拆除完成，所述IP管道拆除通知消息包括所述IP管道的管道信息。
根据本公开的第二方面，提供了一种视频安全平台，所述平台包括：第一鉴权模块、第二鉴权模块、生成模块和发送模块；第一鉴权模块，被配置为响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在所述SIM卡用户具有所述目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道；所述IP管道为建立在IP网络中的通信通道；第二鉴权模块，被配置为响应于客户端通过所述IP管道向视频平台发送的第二视频播放请求，根据所述IP管道的管道信息，确定与所述IP管道的管道信息对应的SIM卡用户的目标视频播放权限；生成模块，被配置为当所述SIM卡用户具有目标视频播放权限，根据所述IP管道的管道信息生成数字水印信息；发送模块，被配置为向视频平台发送所述数字水印信息，以使视频平台对所述目标视频添加所述数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
根据本公开的第三方面，提供一种视频播放***，所述***包括客户端、宽带接入管理***、视频平台和视频安全平台，其中：所述客户端，用于向所述视频平台发送第一视频播放请求；所述视频平台，用于转发所述第一视频播放请求给所述视频安全平台；所述视频安全平台，用于响应于接收到客户端发送的所述第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，并向所述宽带接入管理***发送查询结果；所述宽带接入管理***，用于在所述SIM卡用户具有所述目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道，并向客户端发送与所述IP管道的管道信息；所述客户端，还用于通过所述IP管道向视频平台发送第二视频播放请求；所述视频平台，还用于将所述第二视频播放请求转发至所述视频安全平台；所述视频安全平台，还用于根据所述IP管道的管道信息，确定与所述IP管道的管道信息对应的SIM卡用户的目标视频播放权限；当所述SIM卡用户具有目标视频播放权限，根据所述IP管道的管道信息生成数字水印信息；并向所述视频平台发送所述数字水印信息；所述视频平台，还用于对所述目标视频添加所述数字水印信息并编码和加密，并将编码加密后视频发送给所述客户端；所述客户端，还用于对所述编码加密后视频进行解密播放。
可选地，所述客户端主机具有SIMKey；所述视频安全平台还用于：确定所述SIMKey卡用户信息和数字证书信息；绑定所述SIMKey卡用户信息与所述数字证书信息之间的关联关系；所述客户端，还用于利用所述数字证书信息对所述编码加密后视频进行解密播放。
根据本公开的第四方面，提供一种计算机可读存储介质，其上存储有计算机程序，计算机程序被处理器执行时实现上述任一实施例的方法。
根据本公开的第五方面，提供一种通信设备，包括：处理器；以及存储器，用于存储处理器的可执行指令；其中，处理器配置为经由执行可执行指令来执行上述任一实施例的方法。
附图说明
此处的附图被并入说明书中并构成本说明书的一部分，示出了符合本公开的实施例，并与说明书一起用于解释本公开的原理。显而易见地，下面描述中的附图仅仅是本公开的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1示意性示出了根据本公开的一个实施例的视频播放方法流程示意图之一。
图2示意性示出了根据本公开的一个实施例的SIMKey中数字证书的传输过程的流程示意图。
图3示意性示出了根据本公开的一个实施例的视频播放方法流程示意图之二。
图4示意性示出了根据本公开的一个实施例的视频播放平台的结果框图。
图5示意性示出了根据本公开的一个实施例的视频播放***的***架构图。
图6示意性示出了根据本公开的一个实施例的示例性通信设备框图。
具体实施方式
现在将参考附图更全面地描述示例实施方式。然而，示例实施方式能够以多种形式实施，且不应被理解为限于在此阐述的范例；相反，提供这些实施方式使得本公开将更加全面和完整，并将示例实施方式的构思全面地传达给本领域的技术人员。所描述的特征、结构或特性可以以任何合适的方式结合在一个或更多实施方式中。在下面的描述中，提供许多具体细节从而给出对本公开的实施方式的充分理解。然而，本领域技术人员将意识到，可以实践本公开的技术方案而省略特定细节中的一个或更多，或者可以采用其它的方法、组元、装置、步骤等。在其它情况下，不详细示出或描述公知技术方案以避免喧宾夺主而使得本公开的各方面变得模糊。
此外，附图仅为本公开的示意性图解，并非一定是按比例绘制。图中相同的附图标记表示相同或类似的部分，因而将省略对它们的重复描述。附图中所示的一些方框图是功能实体，不一定必须与物理或逻辑上独立的实体相对应。可以采用软件形式来实现这些功能实体，或在一个或多个硬件模块或集成电路中实现这些功能实体，或在不同网络和/或处理器装置和/或微控制器装置中实现这些功能实体。
参考图1所示，本公开提供的一种示例实施方式的视频播放方法可以包括以下步骤S110-S140。
步骤S110，响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在SIM卡用户具有目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道。
在本示例实施方式中，第一视频播放请求可以通过用户在前端页面的操作而生成，例如，用户点击播放视频的操作等。第一视频播放请求可以包括待播放视频的标识信息、业 务类型信息(如视频业务、语音业务、彩铃业务等)、业务编号信息等，还可以包括请求时间、请求用户信息(如用户标识信息、用户账号信息、用户名称信息等)，本示例对此不做限定。
在本示例实施方式中，可以通过第一视频播放请求中携带的请求用户信息，在信息库中查询客户端主机对应SIM卡用户信息，SIM卡用户信息可以包括SIM卡的用户类型、用户标识、用户开通的业务等信息，确定该SIM卡用户是否开通视频业务(目标业务)，在SIM卡用户开通视频业务(目标业务)的情况下，在客户端主机与视频平台之间建立IP管道。
在本示例实施方式中，IP(Internet Protocol，互联网协议)管道是指建立在IP网络中的通信通道。示例性地，可以通过在IP网络中建立VXLAN(Virtual eXtensible Local Area Network，虚拟扩展局域网)隧道形成IP管道。VXLAN是由IETF(The Internet Engineering Task Force，国际互联网工程任务组)定义的NVO3(Network Virtualization over Layer 3)标准技术之一，采用L2over L4(MAC-in-UDP)的报文封装模式，将二层报文用三层协议进行封装，可实现二层网络在三层范围内进行扩展，同时满足数据中心大二层虚拟迁移和多租户的需求。
VXLAN隧道是用来传输经过VXLAN封装的报文的，是建立在两个VTEP(VXLAN Tunnel Endpoints，VXLAN隧道端点)之间的一条虚拟通道，VTEP是VXLAN网络的边缘设备，是VXLAN隧道的起点和终点。本示例中的VXLAN隧道的起点和终点为客户端主机、视频平台。本示例中也可以采用其他方式建立IP管道，本示例对此不做限定。
步骤S120，响应于客户端通过IP管道向视频平台发送的第二视频播放请求，根据IP管道的管道信息，确定与IP管道的管道信息对应的SIM卡用户的目标视频播放权限。
在本示例实施方式中，在IP管道建立之后，宽带接入管理***会为客户端分配访问视频平台的IP地址。在接收到该IP地址时会触发客户端向视频平台发送第二视频播放请求。第二视频播放请求是基于IP管道建立之后发起的视频播放请求，其除了可以包括分配的访问IP地址之外，还可以包括IP管道的管道信息(如IP管道ID)，此外还可以包括第一视频请求所包含的全部或部分信息，例如待播放视频标识信息、请求用户信息等，本示例对此不做限定。
在本示例实施方式中，根据IP管道的管道信息可以确定SIM卡用户信息，进而在信息库中查询该SIM卡用户是否具有请求的目标视频的播放权限。在本示例中，通过建立IP管道，通过IP管道的管道信息与SIM卡用户之间的一一对应关系，确定用户的目标视频播放权限。
步骤S130，当SIM卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息。
在本示例实施方式中，IP管道的管道信息可以包括IP管道标识信息、IP管道编号、IP管道的两个端点信息、IP管道建立时间、结束时间等信息，还可以包括其他与IP管道相关的信息，本示例对此不做限定。
在本示例实施方式中，当SIM卡用户具有目标视频播放权限，可以为该SIM卡用户当前的视频播放请求生成数字水印信息。数字水印信息可以是根据IP管道的管道信息生 成的一串数字或序列号，例如可以根据IP管道ID生成随机数或随机序列号，也可以利用一定规则生成数字水印信息，例如，将IP管道ID利用哈希变换生成数字水印信息，也可以是其他自定义的或现有的映射规则，本示例对此不做限定。
步骤S140，向视频平台发送数字水印信息，以使视频平台对目标视频添加数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
在本示例实施方式中，可以将数字水印信息以自定义方式或现有添加数字水印的方式加入目标视频中，例如可以以图层的方式加入目标视频中。添加数字水印信息之后对视频数据进行编码、加密，再通过客户端解密播放，播放的视频带有数字水印信息，以便于对视频的翻拍行为进行追踪。
本公开实施例提供的通信网络视频播放方法中，在SIM卡用户具有目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道，响应于客户端通过IP管道向视频平台发送的第二视频播放请求，确定与IP管道的管道信息对应的SIM卡用户的目标视频播放权限；当SIM卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息；并在目标视频添加数字水印信息。一方面，将IP管道的管道信息通过数字水印添加进目标视频，使得翻拍的视频具有数字水印，从而可以根据数字水印信息实现视频追踪，确定翻拍用户信息，进而在一定程度上减少此类事件引起的监控视频泄露问题，提高网络监控视频的安全性。另一方面，通过建立IP管道实现了在IP网络中的视频获取过程，使得网络运营商能够通过接入网关来追踪目标视频播放者的实际地理位置，实现目标视频播放者的精确定位。
在一些实施例中，IP管道的管道信息为IP管道标识信息，根据IP管道的管道信息生成数字水印信息，包括以下步骤：
第一步，根据IP管道标识信息生成对应的随机数。
在本示例实施方式中，可以根据IP管道ID对应产生固定位数(如16或32)位的随机数。可以记录IP管道ID与随机数的对应关系，以便在后续视频追踪过程中，定位视频翻拍播放者。
第二步，将随机数作为数字水印信息。
在本示例实施方式中，可以将随机数作为数字水印信息发送给视频平台，视频平台可以将随机数作为图层叠加在解码后的待播放视频中(目标视频)。这样数字水印信息作为目标视频的一部分，在播放过程中呈现。
在一些实施例中，在IP管道建立之后，方法还包括：接收宽带接入管理***发送的IP管道建立通知消息，IP管道建立通知消息用于指示IP管道建立完成，IP管道建立通知消息包括IP管道的管道信息。
在本示例实施方式中，在IP管道建立完成之后，宽带接入管理***可以将IP管道相关信息发送给视频安全平台进行存储，IP管道建立通知消息可以包括IP管道相关信息，IP管道相关信息可以包括IP管道的管道信息，如IP管道标识信息、IP管道建立时间等，还可以包括目标视频标识信息、用户ID、用户IP地址、用户接入网关信息(如接入网关实际地理位置或/和接入网关标识信息)等，还可以包括其他信息，如IP管道状态信息(如存在或拆除)，本示例对此不做限定。可以将IP管道相关信息以视频CDR(Call Detail  Record，呼叫详细记录)的形式进行存储。
在一些实施例中，参考图2，客户端主机具有SIMKey；方法还包括以下步骤S210-S250。
步骤S210，确定SIMKey卡用户信息和数字证书信息。
在本示例实施方式中，用户可以为SIMKey用户，则视频安全平台可以通过查询SIMKey，确定SIMKey卡用户信息和数字证书信息。
步骤S220，绑定SIMKey卡用户信息与数字证书信息之间的关联关系。
在本示例实施方式中，可以将SIMKey中关联的用户信息与数字证书信息预先在视频安全平台进行绑定，以便于SIMKey卡用户信息确定对应数字证书信息。
步骤S230，根据IP管道的管道信息，确定相应的SIMKey卡用户信息。
在本示例实施方式中，IP管道是基于SIMKey卡用户的第一视频播放请求建立的，两者是一一对应的，故可以通过IP管道的管道信息确定SIMKey卡用户信息。
步骤S240，根据关联关系，确定该SIMKey卡用户信息对应的数字证书信息。
在本示例实施方式中，可以根据绑定的关联关系，确定SIMKey卡用户信息对应的数字证书信息。
步骤S250，向视频平台发送数字证书信息，以使视频平台根据数字证书信息生成对称密钥对编码后视频进行加密。
在本示例实施方式中，数字证书信息可以作为视频密钥对编码后的视频进行加密，再将加密后视频流通过IP管道返回客户端，客户端通过SIMKey中的数字证书作为用户私钥对视频进行解密播放，可以避免视频被恶意攻击或截取，保证网络视频播放过程的安全性。
在一些实施例中，在客户端对编码加密后视频进行解密播放之后，方法还包括：接收宽带接入管理***发送的IP管道拆除通知消息，IP管道拆除通知消息用于指示IP管道拆除完成，IP管道拆除通知消息包括IP管道的管道信息。
在本示例实施方式中，在客户端请求的目标视频播放结束之后，宽带接入管理***对针对该目标视频建立的IP管道进行拆除，并通知视频安全平台。IP管道拆除通知消息可以包括IP管道标识信息、还可以包括其他IP管道相关信息，如拆除时间等，本示例对此不做限定。视频安全平台接收到IP管道拆除通知消息可以对视频CDR中的信息进行更新，例如对IP管道的状态进行更新，由存在状态更新为拆除状态。
本公开通过根据第一视频播放请求建立IP管道，在视频播放结束之后，立马拆除该IP管道，实现了IP管道的随建随拆，用户每访问一个视频内容都新建一个管道，播放完视频则IP管道拆除，不影响IP网络。
在一些实施例中，参考图3，本公开的视频播放具体过程可以包括以下步骤S301-S318。
步骤S301，客户端触发视频播放操作，客户端向宽带接入管理***发送第一视频播放请求。
步骤S302，宽带接入管理***将第一视频播放请求转发给视频安全平台。
步骤S303，视频安全平台针对该第一视频播放请求进行一次鉴权。
本示例中，一次鉴权可以是查询SIMKey卡用户的视频业务权限，确定该SIM卡用户是否具有视频业务权限，若是，则转至步骤S303，否则返回无权限提醒。
步骤S304，视频安全平台向宽带接入管理***返回一次鉴权结果。
步骤S305，当一次鉴权通过时，宽带接入管理***基于该第一视频播放请求建立IP管道。
步骤S306，宽带接入管理***将IP管道相关信息通知视频安全平台，以使视频安全平台存储IP管道相关信息，便于后续视频播放的追踪。
步骤S307，宽带接入管理***根据IP管道向客户端分配IP地址、发送IP管道的管道信息。
步骤S308，客户端通过IP管道向视频平台发送第二视频播放请求。
步骤S309，视频平台转发第二视频播放请求给视频安全平台进行二次鉴权。
本示例中，二次鉴权是指确定与IP管道的管道信息对应的SIMKey卡用户是否具有目标视频播放权限。可以根据IP管道的管道信息确定对应SIMKey卡用户信息，再根据SIMKey卡用户信息，确定其目标视频播放权限。
步骤S310，视频安全平台对二次鉴权通过的请求，根据IP管道的管道信息生成数字水印信息。
步骤S311，视频安全平台将数字水印信息和二次鉴权结果返回给视频平台。
步骤S312，视频安全平台根据绑定的SIMKey卡用户信息与数字证书信息的关联关系，确定当前第二视频播放请求对应的数字证书信息，并将该数字证书信息返回给视频平台。本示例中的关联关系是在视频安全平台提前绑定的。
步骤S313，视频平台对目标视频添加数字水印信息并编码。
步骤S314，视频平台利用数字证书信息和对称密钥对编码后视频进行加密。
步骤S315，视频平台将该对称密钥上报给密钥管理***。
步骤S316，视频平台通过IP管道将加密视频发送给客户端。
步骤S317，客户端从密钥管理***获取对称密钥。本示例中，通过用户私钥和密钥交换算法获取对称密钥。可以采用现有的密钥交换算法，此处不再赘述。
步骤S318，客户端利用SIMKey中的数字证书信息和对称密钥对加密视频进行解密并播放。
上述实施例中的各个步骤的顺序只是示例性的，可以根据需要对步骤的顺序进行相应调整。上述实施例中各个步骤的详细介绍可以参照前述实施例中的相应描述，此处不再赘述。
本公开在SIMkey卡用户具有目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道；根据IP管道的管道信息，确定对应的SIM卡用户的目标视频播放权限；当SIMkey卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息；对目标视频添加数字水印信息并编码和加密，并通过IP管道给客户端传输加密视频，客户端通过SIMkey的数字证书进一步获取该视频密钥，进行解密播放。本公开可以在网络监控视频在播放过程中被翻拍后，进行事后追查，提高网络监控视频的安全性。
本公开一方面针对相关技术中，采用USBkey作为用户私钥，并通过VPN(virtual private networks，虚拟专用网络)建立通信隧道的情况，由于VPN使用私网地址，造成视频平台难以追踪视频播放者的实际地理位置的问题。另一方面，针对相关技术中，虽然通 过视频加密保护了视频在传输、存储过程的安全性，但仍存在视频播放过程中，被翻拍传播的风险。
本公开针对上述一方面的问题，采用基于SIMKey的IP管道，通过电信运营商的宽带接入管理***(即IP核心网)，实现在固定宽带、移动宽带上新建IP管道，由于该IP管道位于IP网络中，从而使电信运营商可以实时记录该管道两端的实际地理位置。例如，可以通过确定接入网关的实际地理位置确定视频播放者的位置。
本公开针对以上问题中的另一方面，通过IP管道信息生成数字水印信息，并对目标视频添加数字水印信息，以使播放的视频中包含数字水印信息，即将视频播放者的用户信息叠加到视频中，从而使翻拍的视频可被追踪。此外，本公开通过将SIMKey卡用户与数字证书绑定，一方面可以将IP管道与SIMKey卡用户、数字证书对应，实现视频播放者的准确追踪。另一方面可以利用数字证书对视频进行加密解密过程，通过数字证书提高视频播放过程的安全性。
本公开可以应用于视频监控、视联网或视频云等场景。示例性地，本公开可以通过电信运营商的IP管道，为用户提供高安全、可跟踪的视频服务；可以通过IP业务与视频业务的绑定，进一步提升IP业务网的价值。
参见图4，本示例实施方式中还提供了一种视频安全平台400；视频安全平台400可以包括：第一鉴权模块410、第二鉴权模块420、生成模块430和发送模块440；第一鉴权模块410，被配置为响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在SIM卡用户具有目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道；IP管道为建立在IP网络中的通信通道；第二鉴权模块420，被配置为响应于客户端通过IP管道向视频平台发送的第二视频播放请求，根据IP管道的管道信息，确定与目标IP地址对应的SIM卡用户的目标视频播放权限；生成模块430，被配置为当SIM卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息；发送模块440，被配置为向视频平台发送数字水印信息，以使视频平台对目标视频添加数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
在本公开的一个实施例中，IP管道的管道信息为IP管道标识信息，生成模块430，还被配置为：根据IP管道标识信息生成对应的随机数；将随机数作为数字水印信息。
发送模块440还被配置为：向视频平台发送随机数，以使视频平台将随机数作为图层叠加在目标视频上，目标视频为解码后的待播放视频。
在本公开的一个实施例中，视频安全平台400还包括：接收模块，接收模块被配置为在IP管道建立之后，接收宽带接入管理***发送的IP管道建立通知消息，IP管道建立通知消息用于指示IP管道建立完成，IP管道建立通知消息包括IP管道的管道信息。
在本公开的一个实施例中，客户端主机具有SIMKey；视频安全平台400还包括：第一确定模块和绑定模块，第一确定模块被配置为确定SIMKey卡用户信息和数字证书信息；绑定模块被配置为绑定SIMKey卡用户信息与数字证书信息之间的关联关系。
在本公开的一个实施例中，视频安全平台400还包括：第二确定模块和第三确定模块，第二确定模块被配置为根据IP管道的管道信息，确定相应的SIMKey卡用户信息；第三确定模块被配置为根据关联关系，确定该SIMKey卡用户信息对应的数字证书信息； 发送模块440还被配置为向视频平台发送数字证书信息，以使视频平台根据数字证书信息对编码后视频进行加密。
在本公开的一个实施例中，接收模块还被配置为：在客户端对编码加密后视频进行解密播放之后，接收宽带接入管理***发送的IP管道拆除通知消息，IP管道拆除通知消息用于指示IP管道拆除完成，IP管道拆除通知消息包括IP管道的管道信息。
上述实施例中的视频安全平台中涉及的各个模块/单元的具体细节已经在对应的视频播放方法中进行了详细的描述，因此此处不再赘述。
参见图5，本示例实施方式中还提供了一种视频播放***500，***500包括客户端510、宽带接入管理***520、视频平台530和视频安全平台540，其中：
客户端510，用于向视频平台发送第一视频播放请求；视频平台530，用于转发第一视频播放请求给视频安全平台；视频安全平台540，用于响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，并向宽带接入管理***发送查询结果；宽带接入管理***520，用于在SIM卡用户具有目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道，并向客户端发送IP管道的管道信息；客户端510，还用于通过IP管道向视频平台发送第二视频播放请求；视频平台530，还用于将第二视频播放请求转发至视频安全平台；视频安全平台540，还用于根据IP管道的管道信息，确定与IP管道的管道信息对应的SIM卡用户的目标视频播放权限；当SIM卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息；并向视频平台发送数字水印信息；视频平台530，还用于对目标视频添加数字水印信息并编码和加密，并将编码加密后视频发送给客户端；客户端510，还用于对编码加密后视频进行解密播放。
在本公开的一个实施例中，参考图5，***500还包括密钥管理***550，密钥管理***550用于接收视频平台上报的对称密钥；并响应于客户端发送的密钥获取请求，向客户端发送请求的对称密钥，以使客户端对编码加密后视频进行解密。
在本公开的一个实施例中，所述客户端主机具有SIMKey；所述视频安全平台还用于：确定所述SIMKey卡用户信息和数字证书信息；绑定所述SIMKey卡用户信息与所述数字证书信息之间的关联关系；所述客户端，还用于利用所述数字证书信息对所述编码加密后视频进行解密播放。
在以上实施例中，客户端可以安装于具有SIMKey的用户终端上，该终端包括但不限于手机、电脑、智能语音交互设备、智能家电、车载终端等，如可以是智能手机、平板、笔记本电脑、计算机等任意能够实现视频播放的电子设备，本示例对此不做限定。宽带接入管理***、视频平台、视频安全平台和密钥管理***分别可以是物理服务器或者云端服务器、虚拟服务器等，本示例对此不做限定。
作为另一方面，本公开还提供了一种计算机可读介质，该计算机可读介质可以是上述实施例中描述的设备中所包含的；也可以是单独存在，而未装配入该设备中。上述计算机可读介质承载有一个或者多个程序，当上述一个或者多个程序被一个该设备执行时，使得该设备实现如下述实施例中的方法。例如，设备可以实现如图1-图3所示的各个步骤等。
需要说明的是，本公开所示的计算机可读介质可以是计算机可读信号介质或者计算 机可读存储介质或者是上述两者的任意组合。计算机可读存储介质例如可以是——但不限于——电、磁、光、电磁、红外线、或半导体的***、装置或器件，或者任意以上的组合。计算机可读存储介质的更具体的例子可以包括但不限于：具有一个或多个导线的电连接、便携式计算机磁盘、硬盘、随机访问存储器(RAM)、只读存储器(ROM)、可擦式可编程只读存储器(EPROM或闪存)、光纤、便携式紧凑磁盘只读存储器(CD-ROM)、光存储器件、磁存储器件、或者上述的任意合适的组合。在本公开中，计算机可读存储介质可以是任何包含或存储程序的有形介质，该程序可以被指令执行***、装置或者器件使用或者与其结合使用。而在本公开中，计算机可读的信号介质可以包括在基带中或者作为载波一部分传播的数据信号，其中承载了计算机可读的程序代码。这种传播的数据信号可以采用多种形式，包括但不限于电磁信号、光信号或上述的任意合适的组合。计算机可读的信号介质还可以是计算机可读存储介质以外的任何计算机可读介质，该计算机可读介质可以发送、传播或者传输用于由指令执行***、装置或者器件使用或者与其结合使用的程序。计算机可读介质上包含的程序代码可以用任何适当的介质传输，包括但不限于：无线、电线、光缆、RF等等，或者上述的任意合适的组合。
此外，在本公开的示例性实施例中，还提供了一种能够实现上述方法的设备。所属技术领域的技术人员能够理解，本公开的各个方面可以实现为***、方法或程序产品。因此，本公开的各个方面可以具体实现为以下形式，即：完全的硬件实施例、完全的软件实施例(包括固件、微代码等)，或硬件和软件方面结合的实施例，这里可以统称为“电路”、“模块”或“***”。
参见图6，图6是本公开实施例提供的一种通信设备的结构示意图。如图6所示，该通信设备600包括处理器610、存储器620、收发器630以及通信总线640。处理器610连接到存储器620和收发器630，例如处理器610可以通过通信总线640连接到存储器620和收发器630。处理器610被配置为支持该通信设备执行图1-图3中视频播放方法中相应的功能。该处理器610可以是中央处理器(Central Processing Unit，CPU)，网络处理器(Network Processor，NP)，硬件芯片或者其任意组合。上述硬件芯片可以是专用集成电路(Application-Specific Integrated Circuit，ASIC)，可编程逻辑器件(Programmable Logic Device，PLD)或其组合。上述PLD可以是复杂可编程逻辑器件(Complex Programmable Logic Device，CPLD)，现场可编程逻辑门阵列(Field-Programmable Gate Array，FPGA)，通用阵列逻辑(Generic Array Logic，GAL)或其任意组合。存储器620用于存储程序代码等。存储器620可以包括易失性存储器(VolatileMemory，VM)，例如随机存取存储器(Random Access Memory，RAM)；存储器620也可以包括非易失性存储器(Non-Volatile Memory，NVM)，例如只读存储器(Read-Only Memory，ROM)，快闪存储器(flash memory)，硬盘(Hard Disk Drive，HDD)或固态硬盘(Solid-State Drive，SSD)；存储器620还可以包括上述种类的存储器的组合。
该收发器630用于接收或发送数据。
处理器610可以调用上述程序代码以执行以下操作：
响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在SIM卡用户具有目标业务权限的情况下，在客户端主机与视频平台 之间建立互联网协议IP管道，IP管道为建立在IP网络中的通信通道；响应于客户端通过IP管道向视频平台发送的第二视频播放请求，根据IP管道的管道信息，确定与IP管道的管道信息对应的SIM卡用户的目标视频播放权限；当SIM卡用户具有目标视频播放权限，根据IP管道的管道信息生成数字水印信息；向视频平台发送数字水印信息，以使视频平台对目标视频添加数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
可选的，IP管道的管道信息为IP管道标识信息，上述处理器610还可以根据IP管道的管道信息生成数字水印信息，执行以下操作：
根据IP管道标识信息生成对应的随机数；将随机数作为数字水印信息；向视频平台发送随机数，以使视频平台将随机数作为图层叠加在目标视频上，目标视频为解码后的待播放视频。
可选的，上述处理器610还可以执行以下操作：
在IP管道建立之后，接收宽带接入管理***发送的IP管道建立通知消息，IP管道建立通知消息用于指示IP管道建立完成，IP管道建立通知消息包括IP管道的管道信息。
可选的，上述处理器610还可以执行以下操作：
确定SIMKey卡用户信息和数字证书信息；绑定SIMKey卡用户信息与数字证书信息之间的关联关系。
可选地，上述处理器610还可以执行以下操作：
根据IP管道的管道信息，确定相应的SIMKey卡用户信息；根据关联关系，确定该SIMKey卡用户信息对应的数字证书信息；向视频平台发送数字证书信息，以使视频平台根据数字证书信息对编码后视频进行加密。
可选地，上述处理器610还可以执行以下操作：在客户端对编码加密后视频进行解密播放之后，接收宽带接入管理***发送的IP管道拆除通知消息，IP管道拆除通知消息用于指示IP管道拆除完成，IP管道拆除通知消息包括IP管道的管道信息。
需要说明的是，各个操作的实现还可以对应参照图1-图3所示的方法实施例的相应描述；上述处理器610还可以与收发器630配合执行上述方法实施例中的其他操作。
通过以上的实施例的描述，本领域的技术人员易于理解，这里描述的示例实施例可以通过软件实现，也可以通过软件结合必要的硬件的方式来实现。因此，根据本公开实施例的技术方案可以以软件产品的形式体现出来，该软件产品可以存储在一个非易失性存储介质(可以是CD-ROM，U盘，移动硬盘等)中或网络上，包括若干指令以使得一台设备执行根据本公开实施例的方法。
此外，上述附图仅是根据本公开示例性实施例的方法所包括的处理的示意性说明，而不是限制目的。易于理解，上述附图所示的处理并不表明或限制这些处理的时间顺序。另外，也易于理解，这些处理可以是例如在多个模块中同步或异步执行的。
需要说明的是，尽管在附图中以特定顺序描述了本公开中方法的各个步骤，但是，这并非要求或者暗示必须按照该特定顺序来执行这些步骤，或是必须执行全部所示的步骤才能实现期望的结果。附加的或备选的，可以省略某些步骤，将多个步骤合并为一个步骤执行，以及/或者将一个步骤分解为多个步骤执行等，均应视为本公开的一部分。
应可理解的是，本说明书公开和限定的本公开延伸到文中和/或附图中提到或明显的两个或两个以上单独特征的所有可替代组合。所有这些不同的组合构成本公开的多个可替代方面。本说明书的实施方式说明了已知用于实现本公开的最佳方式，并且将使本领域技术人员能够利用本公开。

Claims (10)

  1. 一种视频播放方法，所述方法包括：
    响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在所述SIM卡用户具有所述目标业务权限的情况下，在客户端主机与视频平台之间建立互联网协议IP管道，所述IP管道为建立在IP网络中的通信通道；
    响应于客户端通过所述IP管道向视频平台发送的第二视频播放请求，根据所述IP管道的管道信息，确定与所述IP管道的管道信息对应的SIM卡用户的目标视频播放权限；
    当所述SIM卡用户具有目标视频播放权限，根据所述IP管道的管道信息生成数字水印信息；
    向视频平台发送所述数字水印信息，以使视频平台对所述目标视频添加所述数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
  2. 根据权利要求1所述的方法，其中，所述IP管道的管道信息为IP管道标识信息，所述根据所述IP管道的管道信息生成数字水印信息，包括：
    根据所述IP管道标识信息生成对应的随机数；
    将所述随机数作为所述数字水印信息；
    所述向视频平台发送所述数字水印信息，以使视频平台对所述目标视频添加所述数字水印信息，包括：
    向视频平台发送所述随机数，以使视频平台将所述随机数作为图层叠加在所述目标视频上，所述目标视频为解码后的待播放视频。
  3. 根据权利要求1所述的方法，其中，在所述IP管道建立之后，所述方法还包括：
    接收宽带接入管理***发送的IP管道建立通知消息，所述IP管道建立通知消息用于指示所述IP管道建立完成，所述IP管道建立通知消息包括所述IP管道的管道信息。
  4. 根据权利要求1所述的方法，其中，所述客户端主机具有SIMKey；所述方法还包括：
    确定所述SIMKey卡用户信息和数字证书信息；
    绑定所述SIMKey卡用户信息与所述数字证书信息之间的关联关系。
  5. 根据权利要求4所述的方法，其中，所述方法还包括：
    根据所述IP管道的管道信息，确定相应的SIMKey卡用户信息；
    根据所述关联关系，确定该SIMKey卡用户信息对应的数字证书信息；
    向视频平台发送所述数字证书信息，以使视频平台根据所述数字证书信息对编码后视频进行加密。
  6. 根据权利要求1或3所述的方法，其中，在客户端对编码加密后视频进行解密播放之后，所述方法还包括：
    接收宽带接入管理***发送的IP管道拆除通知消息，所述IP管道拆除通知消息用于指示所述IP管道拆除完成，所述IP管道拆除通知消息包括所述IP管道的管道信息。
  7. 一种视频安全平台，所述平台包括：
    第一鉴权模块，被配置为响应于接收到客户端发送的第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，以在所述SIM卡用户具有所述目标业务权限的情 况下，在客户端主机与视频平台之间建立IP管道；所述IP管道为建立在IP网络中的通信通道；
    第二鉴权模块，被配置为响应于客户端通过所述IP管道向视频平台发送的第二视频播放请求，根据所述IP管道的管道信息，确定与所述IP管道的管道信息对应的SIM卡用户的目标视频播放权限；
    生成模块，被配置为当所述SIM卡用户具有目标视频播放权限，根据所述IP管道的管道信息生成数字水印信息；
    发送模块，被配置为向视频平台发送所述数字水印信息，以使视频平台对所述目标视频添加所述数字水印信息并编码和加密，以通过客户端对编码加密后视频进行解密播放。
  8. 一种视频播放***，所述***包括客户端、宽带接入管理***、视频平台和视频安全平台，其中：
    所述客户端，用于向所述视频平台发送第一视频播放请求；
    所述视频平台，用于转发所述第一视频播放请求给所述视频安全平台；
    所述视频安全平台，用于响应于接收到客户端发送的所述第一视频播放请求，查询客户端主机对应SIM卡用户的目标业务权限，并向所述宽带接入管理***发送查询结果；
    所述宽带接入管理***，用于在所述SIM卡用户具有所述目标业务权限的情况下，在客户端主机与视频平台之间建立IP管道，并向客户端发送所述IP管道的管道信息；
    所述客户端，还用于通过所述IP管道向视频平台发送第二视频播放请求；
    所述视频平台，还用于将所述第二视频播放请求转发至所述视频安全平台；
    所述视频安全平台，还用于根据所述IP管道的管道信息，确定与所述IP管道的管道信息对应的SIM卡用户的目标视频播放权限；当所述SIM卡用户具有目标视频播放权限，根据所述IP管道的管道信息生成数字水印信息；并向所述视频平台发送所述数字水印信息；
    所述视频平台，还用于对所述目标视频添加所述数字水印信息并编码和加密，并将编码加密后视频发送给所述客户端；
    所述客户端，还用于对所述编码加密后视频进行解密播放。
  9. 根据权利要求8所述的***，其中，所述客户端主机具有SIMKey；所述视频安全平台还用于：
    确定所述SIMKey卡用户信息和数字证书信息；
    绑定所述SIMKey卡用户信息与所述数字证书信息之间的关联关系；
    所述客户端，还用于利用所述数字证书信息对所述编码加密后视频进行解密播放。
  10. 一种通信设备，包括处理器；以及
    存储器，用于存储处理器的可执行指令；其中，处理器配置为经由执行可执行指令来执行权利要求1-6任一项所述的方法。
PCT/CN2023/106411 2022-08-12 2023-07-07 视频播放方法和***、视频安全平台、通信设备 WO2024032289A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210970479.6 2022-08-12
CN202210970479.6A CN115334356B (zh) 2022-08-12 2022-08-12 视频播放方法和***、视频安全平台、通信设备

Publications (1)

Publication Number Publication Date
WO2024032289A1 true WO2024032289A1 (zh) 2024-02-15

Family

ID=83922955

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/106411 WO2024032289A1 (zh) 2022-08-12 2023-07-07 视频播放方法和***、视频安全平台、通信设备

Country Status (2)

Country Link
CN (1) CN115334356B (zh)
WO (1) WO2024032289A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115334356B (zh) * 2022-08-12 2024-02-23 中国电信股份有限公司 视频播放方法和***、视频安全平台、通信设备

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080276309A1 (en) * 2006-07-06 2008-11-06 Edelman Lance F System and Method for Securing Software Applications
US20130219166A1 (en) * 2012-02-20 2013-08-22 Motorola Mobility, Inc. Hardware based identity manager
CN107734584A (zh) * 2017-09-30 2018-02-23 广东欧珀移动通信有限公司 网络连接切换的方法和装置、计算机设备、可读存储介质
CN108322469A (zh) * 2018-02-05 2018-07-24 北京百度网讯科技有限公司 信息处理***、方法和装置
CN109657429A (zh) * 2018-09-27 2019-04-19 深圳壹账通智能科技有限公司 视频资源管理方法、设备、***及计算机可读存储介质
CN110996137A (zh) * 2019-12-05 2020-04-10 浙江大华技术股份有限公司 一种视频处理方法及装置
CN111083530A (zh) * 2019-12-30 2020-04-28 广东南方新媒体股份有限公司 一种互联网播控平台的drm集成方法、***、装置和存储介质
CN115334356A (zh) * 2022-08-12 2022-11-11 中国电信股份有限公司 视频播放方法和***、视频安全平台、通信设备

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9654360B1 (en) * 2016-02-29 2017-05-16 Wowza Media Systems, LLC Coordinating analytics between media player and server
CN106961614B (zh) * 2017-02-22 2020-04-21 北京奇艺世纪科技有限公司 一种加密视频网络播放的方法和***
CN110197241A (zh) * 2018-02-24 2019-09-03 南京百利通信息技术有限责任公司 基于4g/5g网络和二维码扫描识别的记录***及方法
CN110267115B (zh) * 2019-06-17 2022-04-01 东软集团股份有限公司 一种视频安全控制方法、装置、设备及介质
CN112333559A (zh) * 2020-10-29 2021-02-05 重庆紫光华山智安科技有限公司 数据处理方法和装置、服务器及存储介质

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080276309A1 (en) * 2006-07-06 2008-11-06 Edelman Lance F System and Method for Securing Software Applications
US20130219166A1 (en) * 2012-02-20 2013-08-22 Motorola Mobility, Inc. Hardware based identity manager
CN107734584A (zh) * 2017-09-30 2018-02-23 广东欧珀移动通信有限公司 网络连接切换的方法和装置、计算机设备、可读存储介质
CN108322469A (zh) * 2018-02-05 2018-07-24 北京百度网讯科技有限公司 信息处理***、方法和装置
CN109657429A (zh) * 2018-09-27 2019-04-19 深圳壹账通智能科技有限公司 视频资源管理方法、设备、***及计算机可读存储介质
CN110996137A (zh) * 2019-12-05 2020-04-10 浙江大华技术股份有限公司 一种视频处理方法及装置
CN111083530A (zh) * 2019-12-30 2020-04-28 广东南方新媒体股份有限公司 一种互联网播控平台的drm集成方法、***、装置和存储介质
CN115334356A (zh) * 2022-08-12 2022-11-11 中国电信股份有限公司 视频播放方法和***、视频安全平台、通信设备

Also Published As

Publication number Publication date
CN115334356A (zh) 2022-11-11
CN115334356B (zh) 2024-02-23

Similar Documents

Publication Publication Date Title
CN110971415B (zh) 一种天地一体化空间信息网络匿名接入认证方法及***
US10826704B2 (en) Blockchain key storage on SIM devices
RU2344554C2 (ru) Способ межобъектного соединения, устройство и система для защиты содержимого
CN101268651B (zh) 用于流式多媒体内容的权限管理***
WO2017114123A1 (zh) 一种密钥配置方法及密钥管理中心、网元
US20150264724A1 (en) Method and system of establishing wireless communication connection
CN109981633B (zh) 访问服务器的方法、设备及计算机可读存储介质
CN101496327A (zh) 用于流式多媒体内容的权限管理***
CN110177099B (zh) 基于非对称加密技术的数据交换方法、发送终端和介质
EP3479540A1 (en) Multi-hop secure content routing based on cryptographic partial blind signatures and embedded terms
JP2019514314A (ja) 暗号化メッセージを送受信するために動的公開鍵インフラストラクチャを用いる方法、システム、及び媒体
WO2024032289A1 (zh) 视频播放方法和***、视频安全平台、通信设备
WO2023241176A1 (zh) 通信方法、装置、设备、存储介质及程序产品
CN111193755B (zh) 数据访问、数据加密方法及数据加密与访问***
CN101501724A (zh) 用于流式多媒体内容的权限管理***
CN111181944B (zh) 通信***及信息发布方法、装置、介质、设备
CN114866964B (zh) 基于邻近服务的消息传输方法、装置、电子设备及介质
CN112866981B (zh) 一种签约数据的管理方法、装置
CN104243452A (zh) 一种云计算访问控制方法及***
KR20080080152A (ko) 이동 유닛 인증 방법
CN115022850A (zh) 一种d2d通信的认证方法、装置、***、电子设备及介质
CN114095277A (zh) 配电网安全通信方法、安全接入设备及可读存储介质
CN111901335B (zh) 基于中台的区块链数据传输管理方法及***
WO2022041151A1 (zh) 设备验证方法、设备和云端
WO2023087930A1 (zh) 一种设备身份的认证方法、装置、电子设备及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23851514

Country of ref document: EP

Kind code of ref document: A1