WO2017193949A1

WO2017193949A1 - Code stream tampering monitoring method and device and communication system

Info

Publication number: WO2017193949A1
Application number: PCT/CN2017/083868
Authority: WO
Inventors: 陈正江; 刘志军; 杨斌; 贺镇海; 王雨
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-05-11
Filing date: 2017-05-11
Publication date: 2017-11-16
Also published as: CN107370712A

Abstract

Disclosed are a code stream tampering monitoring method and device and a communication system. The method comprises: generating signature information according to a source live broadcast code stream; and generating verification information according to an end live broadcast code stream; comparing the signature information and the verification information, and outputting a comparison result; and outputting a monitoring result according to the comparison result. By means of the implementation of the present application, the tamper-proofing monitoring of a live broadcast code stream based on a digital signature mechanism can be achieved, and there is no need to deploy a dedicated DRM system, thereby solving the problem in the relevant technology that a DRM system needs to be deployed to realize tamper-resistant monitoring.

Description

Code stream tampering monitoring method, device and communication system

Technical field

The present application relates to the field of communications, for example, to a code stream tampering monitoring method, apparatus, and communication system.

Background technique

The live broadcast service is provided through a media server, and the user receives the live stream in the server through a personal terminal to watch the live broadcast. However, in the current network environment, the media server exposed to the live broadcast service provided by the public on the public network and the live broadcast stream sent by the user have high security risks in the network environment. Since the live stream is transmitted on the public network, there will be an attacker. Illegal tampering with the content of the live stream, allowing users to view the illegal content, which is not what the service provider wants to provide to the user.

In order to protect the live stream of the media server from being tampered with, the user is guaranteed to watch the correct live program and provide better service for the user. At the same time, in order to protect the legitimate rights and interests of the operator, the anti-tampering technology of the live stream is now the major Vendors and operators are committed to research and implementation. In order to prevent this from happening in the related technologies, DRM (Digital Rights Management) system is deployed in the system to defend against live streaming. Illegal tampering. FIG. 1 shows a schematic structural diagram of a related tamper-proof system. As shown in FIG. 1 , the entire tamper-resistant system is divided into a DRM server and a client agent. In related technologies, the DRM system can implement basic tamper-proof functions. The deployment of the DRM system is relatively complicated. The DRM front-end server is connected in series between the live broadcast source and the CDN (Content Delivery Network), which increases the service nodes that may be faulty. At the same time, the system side and the terminal side need to cooperate to implement the system. Operators generally do not deploy DRM systems.

Aiming at the above problems, a code stream tampering monitoring method is proposed to solve the problem that the related art needs to deploy a DRM system to implement tamper-proof monitoring, which is a technical problem to be solved by those skilled in the art.

Summary of the invention

The present disclosure provides a code stream tampering monitoring method, apparatus, and communication system to solve the problem that the related art needs to deploy a DRM system to implement tamper-proof monitoring.

The present disclosure provides a code stream tampering monitoring method, including:

Generating signature information according to the source live stream; and generating verification information according to the live stream;

Comparing signature information and verification information, and outputting comparison results;

The monitoring result is output based on the comparison result.

The generating the signature information according to the source live broadcast code stream may include: acquiring the source live broadcast code stream, calculating the source live broadcast code stream by using a predetermined algorithm, and generating the signature information;

The generating the verification information according to the live broadcast code stream may include: acquiring the end live broadcast code stream, calculating the end live broadcast code stream by using the predetermined algorithm, and generating the verification information.

Acquiring the source live stream may include: obtaining a copy of the live stream from the live stream of the live stream, and/or the content distribution network node, and/or the content distribution network transcoding node, as the source live stream.

Obtaining the live broadcast stream may include: obtaining the live broadcast received by the destination terminal from the destination terminal of the live stream, and/or the routing device of the multicast group to which the destination terminal belongs, and/or other devices of the multicast group to which the destination terminal belongs. A copy of the code stream is used as the end live stream.

The generating the signature information may include: using a predetermined algorithm to encrypt and store the data content of the source live stream, and generating the signature information; generating the verification information comprises: using a predetermined algorithm to encrypt and store the data content of the end live stream to generate the verification information.

The data content may include at least one of video content, a source IP address, and a transmission path.

The outputting the monitoring result according to the comparison result may include: if the comparison result is that the signature information and the verification information are the same, the monitoring result that the live stream is not falsified is output; if the comparison result is that the signature information is different from the verification information, the output live stream is tampered with Monitoring results and reporting.

The present disclosure provides a code stream tampering monitoring apparatus, including:

a signature module configured to generate signature information according to a source live stream;

The verification module is configured to generate verification information according to the terminal live stream; compare the signature information and the verification information, and output a comparison result;

The monitoring module is configured to output the monitoring result according to the comparison result.

The signing module may be configured to acquire the source live broadcast code stream, calculate the source live broadcast code stream by using a predetermined algorithm, and generate the signature information;

The verification module may be configured to acquire the end live broadcast code stream, calculate the end live broadcast code stream by using the predetermined algorithm, and generate the verification information.

The signature module can be configured to obtain a copy of the live stream from the live broadcast source of the live stream, and/or the content distribution network central node, and/or the content distribution network transcoding node, as the source live stream.

The verification module may be configured to obtain the live stream received by the destination terminal from the destination terminal of the live stream, and/or the routing device of the multicast group to which the destination terminal belongs, and/or other devices of the multicast group to which the destination terminal belongs. A copy of the live stream as the end.

The signature module may be configured to encrypt and store the data content of the source live stream by using a predetermined algorithm to generate signature information; the verification module is configured to encrypt and store the data content of the end live stream using a predetermined algorithm to generate verification information.

The monitoring module may be configured to output a monitoring result that the live stream is not tampered if the comparison result is the same as the signature information; if the comparison result is different from the signature information, the monitoring result of the live stream being tampered is output. And reported.

The present disclosure provides a communication system including the code stream tampering monitoring apparatus provided by the present disclosure.

Embodiments of the present disclosure also provide a non-transitory computer readable storage medium storing computer executable instructions arranged to perform the above method.

An embodiment of the present disclosure further provides an electronic device, including:

At least one processor;

a memory communicatively coupled to the at least one processor; wherein

The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to cause the at least one processor to perform the method described above.

Advantages of the disclosure:

The present disclosure provides a code stream tampering monitoring method. At the source end, a source live stream is obtained, a predetermined algorithm is used to calculate a source live stream, and signature information is generated. At the user terminal, the end live stream is obtained, and a predetermined algorithm is used to calculate the end. Live stream, generate verification information; compare signature information and verification information, output comparison results, and output monitoring results according to comparison results; The monitoring of the live stream of the name mechanism does not require the deployment of a dedicated DRM system, and solves the problem that the related technology needs to deploy a DRM system to achieve tamper-proof monitoring.

BRIEF abstract

1 is a schematic structural view of a related tamper-proof system;

2 is a schematic structural diagram of a code stream tampering monitoring apparatus according to a first embodiment of the present disclosure;

FIG. 3 is a flowchart of a code stream tampering monitoring method according to a second embodiment of the present disclosure;

4 is a schematic diagram of a communication system according to a third embodiment of the present disclosure;

FIG. 5 is another schematic diagram of a communication system according to a third embodiment of the present disclosure; FIG.

6 is a flowchart of a code stream tampering monitoring method according to a third embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present disclosure.

detailed description

The technical solutions in the embodiments of the present disclosure are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present disclosure. It is obvious that the described embodiments are only a part of the embodiments of the present disclosure, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present disclosure without departing from the inventive scope are the scope of the disclosure.

The present disclosure will now be explained by way of embodiments with reference to the accompanying drawings.

First embodiment:

2 is a schematic structural diagram of a code stream tampering monitoring apparatus according to a first embodiment of the present disclosure. As shown in FIG. 2, in the embodiment, the code stream tampering monitoring apparatus provided by the present disclosure includes:

The signature module 11 is configured to obtain a source live stream and calculate a source live stream by using a predetermined algorithm to generate signature information.

The verification module 12 is configured to acquire the end live stream, calculate a terminal live stream by using a predetermined algorithm, generate verification information, compare the signature information and the verification information, and output a comparison result;

The monitoring module 13 is configured to output a monitoring result according to the comparison result.

In practical applications, the predetermined algorithm includes, but is not limited to, an encryption algorithm such as an ECC (Error Correcting Code) encryption algorithm, an MD5 (Message-Digest Algorithm 5) encryption algorithm, and an encryption algorithm. The end-end live stream is calculated and processed to prevent the calculated data from being illegally attacked and falsified, thereby losing the verification function.

In some embodiments, the signature module 11 in the above embodiment is configured to obtain a copy of the live stream from the live stream of the live stream, and/or the content distribution network central node, and/or the content distribution network transcoding node. , as the source live stream. In an actual application, the signature module 11 can be implemented in the form of a server, so that the signature module 11 can directly communicate with the live broadcast source, and/or the content distribution network central node, and/or the content distribution network transcoding node to obtain the need. Replica data, of course, the signature module 11 can also be configured as part of the device in the form of a live broadcast source, and/or a content distribution network central node, and/or a content distribution network transcoding node, etc. to obtain the required data.

In some embodiments, the verification module 12 in the above embodiment is configured to be the destination terminal from the live stream, and/or the routing device of the multicast group to which the destination terminal belongs, and/or other devices of the multicast group to which the destination terminal belongs. Obtaining a copy of the live stream that is received by the destination terminal as a live broadcast stream. In an actual application, the verification module 12 may be implemented in the form of a server, such that the verification module 12 can directly communicate with the destination terminal, and/or the routing device of the multicast group to which the destination terminal belongs, and/or the multicast group to which the destination terminal belongs. The other device communicates to obtain the required copy data. Of course, it may also be used as a part of the device, which is set in the destination terminal, and/or the routing device to which the destination terminal belongs, and/or other devices to which the destination terminal belongs. And so on to get the data you need.

In some embodiments, the signature module 11 in the above embodiment is configured to encrypt and store the data content of the source live stream using a predetermined algorithm to generate signature information; the verification module 12 is configured to use the predetermined algorithm to stream the end stream. The data content is encrypted and stored to generate verification information.

In some embodiments, the data content in the above embodiment includes at least one of video content, a source IP address, and a transmission path. The transmission path refers to the node identifier that the video code stream passes during the transmission process. If the video code stream is tampered with, it is necessary to tamper with the data content through some nodes/devices that are not in the transmission path, and the verification of the transmission path can be performed. Quickly judge whether the data has been tampered with. The video content generally includes a video picture and audio. The source IP address is the source address of the video stream. When the user is interested in the content of the video stream, the source IP address can be viewed according to the source IP address. The two contents are generally The main object of tampering, by comparing them, can quickly determine whether the data has been tampered with.

In some embodiments, the monitoring module 13 in the above embodiment is configured to compare the results as a signature. If the information is the same as the verification information, the monitoring result of the live stream is not falsified. If the comparison result is different from the verification information, the monitoring result of the live stream is falsified and reported.

Correspondingly, the present disclosure provides a communication system including the code stream tampering monitoring apparatus provided by the present disclosure.

Second embodiment:

3 is a flowchart of a code stream tampering monitoring method according to a second embodiment of the present disclosure. As shown in FIG. 3, in the embodiment, the code stream tampering monitoring method provided by the present disclosure includes:

S301: Acquire a source live stream, and calculate a source live stream by using a predetermined algorithm to generate signature information.

S302: Acquire a live broadcast stream, calculate a terminal live stream by using a predetermined algorithm, generate verification information, compare the signature information and the verification information, and output a comparison result;

S303: Output a monitoring result according to the comparison result.

In some embodiments, the obtaining the source live stream of the foregoing embodiment includes: obtaining a live stream from the live stream of the live stream, and/or the content distribution network node, and/or the content distribution network transcoding node. A copy, as the source live stream.

In some embodiments, the acquiring the live broadcast stream in the foregoing embodiment includes: a destination terminal from the live stream, and/or a routing device of the multicast group to which the destination terminal belongs, and/or other multicast group to which the destination terminal belongs. The device obtains a copy of the live stream received by the destination terminal as a live broadcast stream.

In some embodiments, the generating the signature information in the foregoing embodiment includes: using a predetermined algorithm to encrypt and store the data content of the source live stream, and generating the signature information; and generating the verification information includes: using the predetermined algorithm to the data of the terminal live stream The content is encrypted and stored to generate verification information.

In some embodiments, the data content in the above embodiment includes at least one of video content, a source IP address, and a transmission path.

In some embodiments, the outputting the monitoring result according to the comparison result in the foregoing embodiment includes: if the comparison result is that the signature information is the same as the verification information, outputting a monitoring result that the live stream is not tampered; if the comparison result is signature information and verification If the information is different, the monitoring result of the live stream is tampered with and reported.

Third embodiment:

The present disclosure will now be described in conjunction with an application scenario.

In this embodiment, in the absence of a DRM system, a method for preventing tampering of a live stream can be effectively monitored in time. In this embodiment, based on the absence of the DRM system, a live code stream tamper-proof monitoring system and method based on a digital signature mechanism is proposed.

As shown in FIG. 4 and FIG. 5, the system includes:

The live stream code signing server is configured to implement the function of the signing module 11 in the above, and is configured to receive the live source code stream and output the signature information of the live stream.

The live monitoring server is configured to implement the function of the verification module 12 in the above, and receives the signature information of the live stream and the live stream. If the live stream is found to be tampered with, the alarm is reported to the management server.

The management server is configured to implement the functions of the monitoring module 13 above, and may be responsible for the management of the live stream tamper-resistant system and the monitoring of the running status of the device.

4 and FIG. 5 are schematic diagrams showing two structures of the live code stream tamper-proof system in the present disclosure. In the architecture, the management server, the live source server, the media server (content distribution system), the live stream code signature server, the live stream monitoring server, the user client and the like are included. The management server, the live stream code signature server, and the live stream monitoring server are newly added network elements. The live stream code signature server receives the live source code stream and outputs the signature information of the live stream. The live monitoring server receives the signature information of the live stream and the live stream. If the live stream is found to be tampered with, the alarm is reported to the management server. The management server may be responsible for the management of the live stream code anti-tampering system and the monitoring of the running status of the device. The live source server provides a source server for the content provider to provide a live media stream to the service provider. The media server can provide a live broadcast service for the user.

In the actual application, there are two deployment modes, as shown in Figure 4 and Figure 5. Although the two tamper-proof methods have different deployment methods, the workflow is the same. The following two embodiments are used in conjunction with Figure 6. The live stream of the deployment mode is described in the tamper-proof monitoring process.

As shown in FIG. 6, the tamper-proof monitoring method provided in this embodiment includes:

S601. The management server sends signature policy information (including but not limited to which channels need to be signed, etc.) to the live stream code signature server.

S602. The live stream code signature server receives the live stream source or the CDN center/transcode node media code stream according to the policy information, and summarizes the data content of the code stream according to a predetermined algorithm (including but not limited to an ECC encryption algorithm, an MD5 encryption algorithm, etc.). / Encryption calculation, output the signature information of the live stream.

S603. The management server sends monitoring policy information (including but not limited to which channels need to be monitored, etc.) to the live monitoring server.

S604. The live monitoring server obtains the live media code stream obtained by the terminal and the signature information sent by the live stream code signature server according to the monitoring policy information, and performs the code stream according to a predetermined algorithm (including but not limited to an ECC encryption algorithm, an MD5 encryption algorithm, etc.). The data content and the like are subjected to digest/encryption calculation, output verification information, and comparison signature information and verification information to determine whether the live stream is tampered with.

S605: If the live broadcast monitoring server finds that the live stream is tampered with, the alarm is reported to the management server.

In summary, the method of the embodiment can implement the monitoring of the live code stream tampering based on the digital signature mechanism.

Embodiments of the present disclosure also provide a non-transitory computer readable storage medium storing computer executable instructions arranged to perform the method of any of the above embodiments.

The embodiment of the present disclosure further provides a schematic structural diagram of an electronic device. Referring to FIG. 7, the electronic device includes:

At least one processor 70, which is exemplified by a processor 70 in FIG. 7; and a memory 71, may further include a communication interface 72 and a bus 73. The processor 70, the communication interface 72, and the memory 71 can complete communication with each other through the bus 73. Communication interface 72 can be used for information transfer. Processor 70 can invoke logic instructions in memory 71 to perform the methods of the above-described embodiments.

In addition, the logic instructions in the memory 71 described above may be implemented in the form of a software functional unit and sold or used as a stand-alone product, and may be stored in a computer readable storage medium.

The memory 71 is a computer readable storage medium, and can be used to store a software program, a computer executable program, a program instruction/module corresponding to the method in the embodiment of the present disclosure. The processor 70 executes the function application and the data processing by running the software program, the instruction and the module stored in the memory 71, that is, the code stream tampering monitoring method in the above method embodiment.

The memory 71 may include a storage program area and a storage data area, wherein the storage program area may store operations The system, the application required for at least one function; the storage data area can store data created according to the use of the terminal device, and the like. Further, the memory 71 may include a high speed random access memory, and may also include a nonvolatile memory.

The technical solution of the embodiments of the present disclosure may be embodied in the form of a software product stored in a storage medium, including one or more instructions for causing a computer device (which may be a personal computer, a server, or a network) The device or the like) performs all or part of the steps of the method described in the embodiments of the present disclosure. The foregoing storage medium may be a non-transitory storage medium, including: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like. A medium that can store program code, or a transitory storage medium.

In summary, through the implementation of the present disclosure, at least the following beneficial effects exist:

The present disclosure provides a code stream tampering monitoring method. At the source end, a source live stream is obtained, a predetermined algorithm is used to calculate a source live stream, and signature information is generated. At the user terminal, the end live stream is obtained, and a predetermined algorithm is used to calculate the end. The live stream is generated, the verification information is generated, the signature information and the verification information are compared, the comparison result is output, and the monitoring result is output according to the comparison result; thus, the monitoring of the live code stream tampering based on the digital signature mechanism can be realized, and the dedicated DRM system does not need to be deployed. It solves the problem that related technologies need to deploy DRM system to achieve tamper-proof monitoring.

The above is only the embodiment of the present disclosure, and is not intended to limit the present disclosure in any way. Any simple modification, equivalent change, combination or modification of the above embodiment according to the technical essence of the present disclosure still belongs to the present disclosure. The scope of protection of the technical solution.

Industrial applicability

The code stream tampering monitoring method, device and communication system provided by the present application can realize the monitoring of the live code stream tampering based on the digital signature mechanism, and does not need to deploy a dedicated DRM system, and solves the related technology that needs to deploy the DRM system to achieve tamper resistance. Monitoring problems.

Claims

A code stream tampering monitoring method includes:

Generating signature information according to the source live stream; and generating verification information according to the live stream;

Comparing the signature information and the verification information, and outputting a comparison result;

The monitoring result is output according to the comparison result.
The method of claim 1 wherein

The generating the signature information according to the source live broadcast code stream includes: acquiring the source live broadcast code stream, calculating the source live broadcast code stream by using a predetermined algorithm, and generating the signature information;

The generating the verification information according to the live broadcast code stream includes: acquiring the end live broadcast code stream, calculating the end live broadcast code stream by using the predetermined algorithm, and generating the verification information.
The method of claim 2, wherein the obtaining the source live stream comprises: obtaining the said source from a live stream of the live stream, and/or a content distribution network central node, and/or a content distribution network transcoding node A copy of the live stream is used as the source live stream.
The method of claim 2, wherein the obtaining the end live stream comprises: a destination terminal from the live stream, and/or a routing device of the multicast group to which the destination terminal belongs, and/or the destination terminal The other device of the multicast group acquires a copy of the live stream that is received by the destination terminal as the end live stream.
The method of any one of claims 2 to 4, wherein the generating the signature information comprises: encrypting and storing the data content of the source live broadcast code stream by using the predetermined algorithm, and generating the signature information; Generating the verification information includes: encrypting and storing the data content of the terminal live stream by using the predetermined algorithm, and generating the verification information.
The method of claim 5, wherein the data content comprises at least one of video content, a source IP address, and a transmission path.
The method of claim 1, wherein the outputting the monitoring result according to the comparison result comprises: if the comparison result is that the signature information is the same as the verification information, outputting a monitoring result that the live stream is not tampered; if comparing The result is that the signature information is different from the verification information, and the monitoring result of the live stream is falsified is output and reported.
A code stream tampering monitoring device includes:

a signature module configured to generate signature information according to a source live stream;

The verification module is configured to generate verification information according to the terminal live stream; compare the signature information and the verification information, and output a comparison result;

The monitoring module is configured to output a monitoring result according to the comparison result.
The device of claim 8 wherein

The signing module is configured to acquire the source live broadcast code stream, calculate the source live broadcast code stream by using a predetermined algorithm, and generate the signature information;

The verification module is configured to acquire the end live broadcast code stream, calculate the end live broadcast code stream by using the predetermined algorithm, and generate the verification information.
The apparatus of claim 9, wherein the signature module is configured to obtain the live broadcast code from a live broadcast source of a live stream, and/or a content distribution network hub node, and/or a content distribution network transcoding node A copy of the stream, as the source live stream.
The apparatus of claim 9, wherein the verification module is configured to be from a destination terminal of a live stream, and/or a routing device of a multicast group to which the destination terminal belongs, and/or a group to which the destination terminal belongs The other device of the broadcast group obtains a copy of the live stream that is received by the destination terminal as the end live stream.
The apparatus according to any one of claims 9 to 11, wherein the signature module is configured to encrypt and store data content of the source live stream of the source using the predetermined algorithm to generate the signature information; The verification module is configured to encrypt and store the data content of the end live stream using the predetermined algorithm to generate the verification information.
The apparatus of claim 12, wherein the data content comprises at least one of video content, a source IP address, and a transmission path.
The apparatus according to claim 8, wherein the monitoring module is configured to output, if the comparison result is that the signature information is the same as the verification information, output a monitoring result that the live stream is not tampered; if the comparison result is When the signature information is different from the verification information, the monitoring result of the live stream is falsified and outputted.
A communication system comprising the code stream tampering monitoring device according to any one of claims 8 to 14.
A non-transitory computer readable storage medium storing computer executable instructions arranged to perform the method of any of claims 1-7.