CN102663293B

CN102663293B - Protection method and protection device for video devices of computer

Info

Publication number: CN102663293B
Application number: CN201210086720.5A
Authority: CN
Inventors: 秦光远; 范纪鍠
Original assignee: Beijing Qihoo Technology Co Ltd; Qizhi Software Beijing Co Ltd
Current assignee: Beijing Qizhi Business Consulting Co ltd; Beijing Qihoo Technology Co Ltd; 360 Digital Security Technology Group Co Ltd
Priority date: 2012-03-28
Filing date: 2012-03-28
Publication date: 2015-04-01
Anticipated expiration: 2032-03-28
Also published as: CN102663293A

Abstract

The invention provides a protection method and a protection device for video devices of a computer, and relates to the technical field of computers. During processing procedure of the protection device, any request message packet of an application process is not subjected to forced interruption; only video data of a request packet with video stream data is replaced by replacement data having the same format of video, communication between the application process and the video devices are not interrupted in a forced and violent manner, a normal interaction protocol between the application process and the video devices is not broken either, the video devices cannot be considered as being damaged and cannot be accessed again by the application process, and the application process can access the video devices again without being rebooted. In addition, a user terminal is prompted to select whether to allow interruption or not after the video stream data of the video devices is acquired by the protection device, so that false positives can be avoided.

Description

A kind of computer video equipment protection method and device

Technical field

The application relates to field of computer technology, particularly relates to a kind of computer video equipment protection method and device.

Background technology

Along with the development of Internet technology, in internet, user can carry out video interactive by video equipment (such as camera) with other users, and in internet, many application programs all can open video equipment, obtain the video information of user side.In use, if a user does not note the management to video equipment, in internet, other users probably obtain this user and to be unwilling disclosed video information, especially for hacker, are easy to just control by operated from a distance the video information that video equipment obtains user side.

In prior art; resist technology for video privacy is the process using windows kernel HOOK technical intercept to open camera; namely when there being process to open user terminal video equipment; the request message that current process sends to user terminal video equipment is blocked by the HOOK function CreateFile function of core A PI and DeviceIoControl function; namely hook up, and eject prompting frame wait for user process.In this process, once CreateFile and the DeviceIoControl function of refusal HOOK, namely user is long-time does not process ejection prompting frame or selects to block, described process cannot open video equipment again, because violence blocked the communication between application process and video equipment, destroy agreement normally mutual between application process and video equipment, video equipment damages and cannot video device access again to cause this application process to be thought, must restart this process can again with video equipment communication.

Summary of the invention

Technical problems to be solved in this application are to provide a kind of computer video equipment protection method and device, make can not to produce process in protection user video information and think that video equipment damages and situation about cannot again access.

In order to solve the problem, this application discloses a kind of computer video equipment protecting equipment, comprising: video flowing filtration drive and monitoring module;

Described video flowing filtration drive comprises control module and physical drives object module;

Described physical drives object module is used for:

After obtaining video flowing parameter information corresponding to video equipment, described video flowing parameter information is sent to monitoring module;

After reading video stream data, application process identification information corresponding for video stream data is sent to monitoring module;

Described video stream data is replaced with described replacement data;

Described control module is used for:

Described video flowing parameter information and application process identification information are sent to monitoring module;

Described monitoring module is used for:

Receive application process identification information and the video flowing parameter information of the transmission of described control module;

Replacement data is sent to described physical drives object module according to video flowing parameter information;

Described application process whether is allowed to use video equipment according to described application process identification information prompting user side;

When allowing described application process to read video stream data, monitoring module notifies that described physical drives object module stops replacing.

Preferably, in described physical drives object module, after obtaining video flowing parameter information corresponding to video equipment, described video flowing parameter information is sent to monitoring module; After reading video stream data, comprise when application process identification information corresponding for application process is sent to monitoring module:

After application process obtains video flowing parameter information corresponding to video equipment by the physical drives object module in video flowing filtration drive, described video flowing parameter information is sent to monitoring module;

After application process reads video stream data by the physical drives object module in video flowing filtration drive, application process identification information corresponding for described video stream data is sent to monitoring module.

Preferably, in described physical drives object module, after application process reads video stream data by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

When application process reads the first frame video stream data by the physical drives object module in video flowing filtration drive, application process identification information corresponding for described video stream data is sent to monitoring module;

Or, when application process reads N frame video stream data by the physical drives object module in video flowing filtration drive, wherein N > 1, application process identification information corresponding for described video stream data is sent to monitoring module, and each byte in the every frame video stream data before N frame is treated to the data different from described video stream data;

Or, when described physical drives object module can not resolve described video flowing, the data of described video flowing are replaced into zero and send to application process.

Preferably, in described physical drives object module, after application process obtains video flowing parameter information corresponding to video equipment by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

When the video flowing parameter information that the physical drives object module acquisition video equipment that application process is passed through in video flowing filtration drive is corresponding, described video flowing parameter information is sent to monitoring module;

Or, after application process reads video stream data by the physical drives object module in video flowing filtration drive, described video flowing parameter information is sent to monitoring module.

Preferably, in described monitoring module, comprise when replacement data being sent to described physical drives object module according to video flowing parameter information:

When receiving video flowing parameter information, replacement data is sent to described physical drives object module by control module; Described replacement data is the replacement data corresponding with video flowing parameter information;

And/or, when receiving application process identification information, replacement data is sent to described physical drives object module by control module; Described replacement data is the replacement data corresponding with video flowing parameter information.

The first preset source replacement data is converted to the replacement data corresponding with video flowing parameter information, and replacement data is sent to described physical drives object module; The described replacement data corresponding with video flowing parameter information is the replacement data identical with the data type that video equipment exports, and described first source replacement data comprises image data to be converted.

The data selected by user side carry out as monitoring module the first source replacement data of processing.

Preferably, described monitoring module also for:

Send pause instruction to described physical drives object module, control described physical drives object module from present frame, follow-up every frame video stream data is replaced with the current data sending to application process;

And/or, send and block instruction to described physical drives object module, control described physical drives object module from present frame, follow-up every frame video stream data is replaced with replacement data;

And/or, send and recover instruction to described physical drives object module, control described physical drives object module and stop described video stream data being replaced with described replacement data and/or stopping described follow-up every frame video stream data to replace with the current data sending to application process.

Preferably, described control module comprises monitor filter; Described monitor filter is created in the control module by described monitoring module, and described application process identification information and video flowing parameter information will send to monitoring module by described monitor filter.

Preferably, in described physical drives object module, according to described replacement data, comprise when described video stream data is replaced with described replacement data:

After application process reads video stream data by the physical drives object module in video flowing filtration drive, judge whether described monitoring module creates monitor filter in the control module; If so, then adjusting described physical drives object module is the first alternative patterns, for described video stream data is replaced with described replacement data;

And/or, when monitoring module receives application process identification information corresponding to described video stream data, replacement instruction is sent to described physical drives object module by described monitor filter, adjusting described physical drives object module is the second alternative patterns, for described video stream data is replaced with described replacement data.

Preferably, in described physical drives object module, comprise when application process obtains video flowing parameter information corresponding to video equipment by physical drives object module in video flowing filtration drive:

Described physical drives object module obtains described video flowing parameter information by the message in analyzing IP R_MJ_CREATE function.

Preferably, in described physical drives object module, comprise when application process reads video stream data by the physical drives object module in video flowing filtration drive:

Described physical drives object module is by having judged whether that to the IOCTL_KS_READ_STREAM message analysis in IPR_MJ_DEVICE_CONTROL function application process reads video flowing by physical drives object module;

If so, then obtain current application process identity information, application process identification information corresponding for described video stream data is sent to monitoring module.

Preferably, load described video flowing filtration drive according to system registry, and in described video flowing filtration drive, create control module and the physical drives object module for video equipment.

Accordingly, disclosed herein as well is a kind of computer video equipment protection method, comprising:

Obtain the video flowing parameter information that video equipment is corresponding;

Replacement data is sent to described physical drives object module according to video flowing parameter information by described monitoring module;

Described video stream data is replaced with described replacement data according to described replacement data by described physical drives object module;

Whether described monitoring module allows described application process to read video stream data according to described application process identification information prompting user side; When allowing described application process to read video stream data, monitoring module notifies that described physical drives object module stops replacing.

Preferably, obtain the video flowing parameter information that video equipment is corresponding, and after reading video stream data, application process identification information corresponding for video stream data be sent to monitoring module and comprise:

Preferably, after application process reads video stream data by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

Or, when application process reads N frame video stream data by the physical drives object module in video flowing filtration drive, wherein N > 1, application process identification information corresponding for described video stream data is sent to monitoring module, and each byte in the every frame video stream data before N frame is treated to the data different from described video stream data.

Preferably, after application process obtains video flowing parameter information corresponding to video equipment by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

Or, after application process reads video stream data by the physical drives object module in video flowing filtration drive, described video flowing parameter information is sent to monitoring module;

Preferably, comprise when replacement data being sent to described physical drives object module according to video flowing parameter information:

When receiving video flowing parameter information, replacement data is sent to described physical drives object module by control module;

And/or, when receiving application process identification information, replacement data is sent to described physical drives object module by control module.

Preferably, also comprise:

Send pause instruction to described physical drives object module by described monitoring module, control described physical drives object module from present frame, follow-up every frame video stream data is replaced with the current data sending to application process;

And/or, sent by described monitoring module and block instruction to described physical drives object module, control described physical drives object module from present frame, follow-up every frame video stream data is replaced with replacement data;

And/or, sent by described monitoring module and recover instruction to described physical drives object module, control described physical drives object module and stop described video stream data being replaced with described replacement data and/or stopping described follow-up every frame video stream data to replace with the current data sending to application process.

Preferably, described application process identification information and video flowing parameter information send to monitoring module by monitor filter; Described monitor filter is created in the control module by described monitoring module.

Preferably, according to described replacement data, comprise when described video stream data is replaced with described replacement data:

Preferably, comprise when application process obtains video flowing parameter information corresponding to video equipment by physical drives object module in video flowing filtration drive:

Preferably, comprise when application process reads video stream data by the physical drives object module in video flowing filtration drive:

Preferably, also comprise: load filtration drive according to system registry, and in described filtration drive, create control module and the physical drives object module for video equipment.

Compared with prior art, the application comprises following advantage:

The application creates control module and the physical drives object module for actual video equipment in filtration drive, and described control module receives the replacement data that monitoring module sends, and forwards the replacement data that monitoring module sends to physical drives object module, the application utilizes above-mentioned physical drives object module that the video flowing of video equipment is replaced with the replacement data identical with video stream data type and returns to application process, in the processing procedure of the application, for any one request message bag of application process, all block less than carrying out by force, for the request bag with video stream data, just the video data in request bag is replaced with the replacement data with video same format, both the communication between the blocking-up application process of violence by force and video equipment had not been had, also agreement normally mutual between application process and video equipment can not be destroyed, this application process can not be caused to think, and video equipment damages and cannot video device access again, this application process need not be restarted and can again be accessed described video equipment, in addition, in this application, be after getting the video stream data of video equipment, reresent user side select whether to allow to block, the situation of wrong report can not be caused.

Accompanying drawing explanation

Fig. 1 is the structural representation of a kind of computer video equipment protecting equipment of the application;

Fig. 2 is the schematic flow sheet of a kind of computer video equipment protection method of the application.

Embodiment

For enabling above-mentioned purpose, the feature and advantage of the application more become apparent, below in conjunction with the drawings and specific embodiments, the application is described in further detail.

In windows system, if be provided with filtration drive, then the message that the message of all access physical devices and physical device return all needs through filtration drive.The application with the addition of one deck video flowing filtration drive under the mechanism of windows filtration drive, in so can driving crossing video flowing filtration, the message mutual with video equipment is processed, the message loop of application process need not be blocked, and the message loop of process directly directly need not be blocked by HOOK function, thus destroy normal communications protocol between application process and video equipment, avoid the situation that after blocking, application program cannot be opened again, make application process repeatedly can carry out normal video device access.

With reference to Fig. 1, it illustrates the structural representation of a kind of computer video equipment protecting equipment of the application, comprising:

Video flowing filtration drive 110 and monitoring module 120; Described video flowing filtration drive comprises control module 111 and physical drives object module 112;

Described physical drives object module 112 for:

According to described replacement data, described video stream data is replaced with described replacement data;

Described control module 111 for:

Described monitoring module 120 for:

In this application, first system can load video flowing filtration drive, namely loads described video flowing filtration drive according to system registry, and in described video flowing filtration drive, create control module and the physical drives object module for video equipment.

In reality, need the video flowing filtration drive (Imaging devices) that will load for video equipment (such as camera device), and in described filtration drive, create control module and the device object for video equipment.Generally, the loading of described filtration drive loads when system starts, and namely loads according to system registry, and the position when filtration drive of the application loads in system registry comprises:

“HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\UpperFilters”

Create and start service entry, by this driving service random start (wherein, " CamFilter ", for starting service entry title, can modify according to actual conditions)

Start service entry registration table path:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CamFilter]

″Type″＝dword：00000001

″Start″＝dword：00000001

After loading filtration drive, corresponding physical drives object module can be created for the video equipment of each reality in filtration drive, also can create a control module for receiving instruction and the data of monitoring module.

In addition, when monitoring module starts, can open the control module in video flowing filtration drive, register a monitor filter in the control module simultaneously, namely described control module comprises monitor filter; Described monitor filter is created in the control module by described monitoring module, and described application process identification information and video flowing parameter information send to monitoring module by described monitor filter.

After monitoring module starts, first monitoring module can send an IPR_MJ_CREATE request bag to filtration drive by MJ_CREATE function, first filtration drive can judge after receiving this request bag that whether the handle of the device object in this request bag is the handle of preset control module, and the handle of described control module is the title of described control module; If so, be then sent to control module and open control module, namely open preset device object handle, and create the filtrator of a null attribute; Then monitoring module sends a steering order again and the filtrator of this null attribute is registered as monitor filter, in reality, registration described in the application is that monitoring module sends IRP (the I/O request packet) request of monitoring and hung up by control module, wait for the relevant information that physical drives object module sends, such as video flowing parameter information and the application process identification information etc. needing use video equipment.

Wherein, in described physical drives object module, after obtaining video flowing parameter information corresponding to video equipment, described video flowing parameter information is sent to monitoring module; After reading video stream data, comprise when application process identification information corresponding for application process is sent to monitoring module:

After getting video flowing parameter information, the opportunity specifically described video flowing parameter information being sent to monitoring module can according to circumstances be selected.Such as, after getting video flowing parameter information, the opportunity immediately described video flowing parameter information being sent to monitoring module can according to circumstances be selected; Or after getting video flowing parameter information, first be stored in driven object module, then, after application process reads video stream data by the physical drives object module in video flowing filtration drive, the application process identification information corresponding with video stream data is sent to monitoring module together.

Preferably, in described physical drives object module, after application process reads video stream data by the physical drives object module in video flowing filtration drive, generally can comprise when described video flowing parameter information is sent to monitoring module:

(1), when application process reads the first frame video stream data by the physical drives object module in video flowing filtration drive, application process identification information corresponding for described video stream data is sent to monitoring module.

Or, (2) when application process reads N frame video stream data by the physical drives object module in video flowing filtration drive, wherein N > 1, application process identification information corresponding for described video stream data is sent to monitoring module, and each byte in the every frame video stream data before N frame is treated to the data different from described video stream data.

In reality, for the every frame video stream data before N frame, also the partial bytes in every frame video stream data can be treated to the data different from described video stream data.For concrete processing mode, the application is not limited it, when ensureing that application process receives described video stream data, and cannot display video equipment true picture.

Or the data of described video flowing, when described physical drives object module can not resolve described video flowing, are replaced into zero and send to application process by (3).

Such as, when the video that video equipment sends flows to the 10th frame, when application process reads the 10th frame, again application process identification information is sent to monitoring module.Generally, be sent to monitoring module by the monitor filter in control module.

Wherein, described physical drives object module is by having judged whether that to the IOCTL_KS_READ_STREAM message analysis in IPR_MJ_DEVICE_CONTROL function application process reads video flowing by physical drives object module;

In reality, before physical drives object module receives the replacement data of monitoring module transmission, possibly in time the video stream data of current for application process reading cannot be replaced with replacement data, namely video flowing parameter information is received at monitoring module, again the first preset source replacement data is treated to the second time point that replacement data is sent to physical drives object module, and there is time delay between the very first time point that physical drives object module needs to carry out replacing, because described very first time point generally wants Zao than described second time point, wherein, further very first time point is time point when physical drives object module reads the first frame or N frame video stream data, second time point is the time point that physical drives module receives described replacement data.So now, when replacement data position can be arrived physical drives object module by physical drives object module, the video stream data that application process reads is treated to the data different from described video stream data, then returns to application process.Such as, the video stream data that application process reads is treated to 0, is treated to the situation such as 1.

Preferably, in described physical drives object module, after application process obtains video flowing parameter information corresponding to video equipment by the physical drives object module in video flowing filtration drive, can comprise when described video flowing parameter information is sent to monitoring module:

(1) when the video flowing parameter information that the physical drives object module acquisition video equipment that application process is passed through in video flowing filtration drive is corresponding, described video flowing parameter information is sent to monitoring module.

Or described video flowing parameter information, after application process reads video stream data by the physical drives object module in video flowing filtration drive, is sent to monitoring module by (2).

Generally, first application process can carry out the opening action of video equipment, carries out the video flowing parameter information that timing acquisition video equipment is tied up in a Connect operation.

Described video flowing parameter information comprises the size (size) of wide, each the frame picture of video of height of the compressed format of video flowing, video, the byte number etc. shared by each pixel.For often kind of application process, may there is difference in its video flowing parameter information obtained, and the height of video that such as application process A obtains is wide be 360*480, and the height of the video of application process B acquisition wide be 600*800; Also than the format information difference that application process obtains, such as form YUY2 form, MJPG form, RGB32 form, I420 form etc.Therefore, corresponding different application process may its video flowing parameter information difference obtained.

So, now, physical drives object module can send the monitor filter in monitoring module when getting video flowing parameter information by it, then is sent to monitoring module by monitor filter.

Or first it is tackled in physical drives object module, when application process reads video stream data, be sent to monitor filter together with application process information, then be sent to monitoring module by monitor filter.Now, it is aforementioned after application process reads video stream data by the physical drives object module in video flowing filtration drive, when described video flowing parameter information is sent to monitoring module, video flowing parameter information corresponding for described video stream data and application process identification information can be sent to monitoring module.

Wherein, described physical drives object module obtains described video flowing parameter information by the message in analyzing IP R_MJ_CREATE function.

Wherein, in described monitoring module, comprise when replacement data being sent to described physical drives object module according to video flowing parameter information:

The first preset source replacement data is converted to the replacement data corresponding with video flowing parameter information, and replacement data is sent to described physical drives object module.The described replacement data corresponding with video flowing parameter information is the replacement data identical with the data type that video equipment exports, and described first source replacement data comprises image data to be converted.

Because the video flowing parameter information that different application programs reads may be different, so namely, need monitoring module according to video flowing parameter information, the first preset source replacement data is converted to the replacement data identical with the data type that video equipment exports, and then replacement data is sent to described physical drives object module by monitoring module (being generally by the monitor filter in monitoring module).

User can customize formatted datas such as selecting picture as the first source replacement data, and namely user can select picture base map by default according to oneself demand, and when physical drives module is replaced, what be shown to user side is this acquiescence base map.The video stream data read by application process replace with by described base map as camera peep-proof paste, the soft lid using described map as camera, protection video privacy is not spied upon.

In described monitoring module, comprise when replacement data being sent to described physical drives object module according to video flowing parameter information:

Preferably, described monitoring module also for:

Namely monitoring module can realize to current video stream by FX Module the operation of blocking-up and time-out etc. at any time.FX Module is a part for monitoring module, and it can realize sending relevant instruction to driving to driving registered filter.

To realize the pause function to video flowing, namely when driving receives pause instruction, present frame is preserved, and all video flowing frame data after these data are replaced, with the function of video pause.

Block function replaces with by the data of each frame the replacement data that we issue physical drives object module.

Restore funcitons, namely when sending recovery instruction, stops above data to replace, or stops pause function.

Preferably, described physical drives object module also for:

When described physical drives object module can not resolve described video flowing, the data of described video flowing are replaced into zero and send to application process.

With reference to Fig. 2, show the schematic flow sheet of a kind of computer video equipment protection method of the application, comprising:

Step 210, obtains the video flowing parameter information that video equipment is corresponding.

In reality, this step comprises: after the physical drives object module in application process video flowing filtration drive obtains video flowing parameter information corresponding to video equipment, described video flowing parameter information is sent to monitoring module.

In practice, also comprise:

Step 180, loads filtration drive according to system registry, and in described filtration drive, creates control module and the physical drives object module for video equipment.

In reality, need the filtration drive (Imaging devices) that will load for video equipment (such as camera device).Generally, the loading of described filtration drive loads when system starts, and namely loads according to system registry, and the position when filtration drive of the application loads in system registry comprises:

“HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\UpperFilters

”

Start service entry registration table path:

[HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services CamFilter] (wherein " CamFilter " is for starting service entry title, can modify according to actual conditions)

″Type″＝dword：00000001

″Start″＝dword：00000001

After loading filtration drive, corresponding physical drives object module being created for the video equipment of each reality in filtration drive, also creating a control module controls physical drives object module instruction and data for receiving monitoring module.

In addition in practice, also comprised before step 210:

Step 190, starts monitoring module.

Step 200, opens order by monitoring module transmission and opens described control module to video flowing filtration drive, and create monitor filter in described control module.

Namely after monitoring module wraps video flowing filtration drive by MJ_CREATE function transmission IPR, first video flowing filtration drive can open control module according to the handle of instruction and corresponding control module in this IPR bag, and control module can create the filtrator of a null attribute simultaneously; Then monitoring module sends an instruction creating monitor filter is again monitor filter by the filter creation of this null attribute.

After startup monitoring module, monitoring module manipulates by sending in instruction and data to described control module.Generally, monitoring module is manipulated to control module process by sending controling instruction.

After monitoring module starts, first monitoring module can send an IPR_MJ_CREATE request bag to filtration drive by MJ_CREATE function, first filtration drive can judge after receiving this request bag that whether the handle of the device object in this request bag is the handle of preset control module, if it is be sent to control module and open control module, namely open preset device object handle, and create the filtrator of a null attribute; Then monitoring module sends a steering order again and the filtrator of this null attribute is registered as monitor filter.In reality, registration described in the application is that monitoring module sends IRP (I/Orequest packet) request of monitoring and hung up by control module, wait for the relevant information that physical drives object module sends, such as video flowing parameter information and the application process identification information etc. needing use video equipment.

After the physical drives object module in application process video flowing filtration drive obtains video flowing parameter information corresponding to video equipment, described video flowing parameter information is sent to monitoring module.

Wherein, described video flowing parameter information comprises the size (size) of wide, each the frame picture of video of height of the compressed format of video flowing, video, the byte number etc. shared by each pixel.For often kind of application process, may difference be there is in its video flowing parameter information obtained, the height of the video that such as application process A obtains is wide is 360*480, and the height of video that application process B obtains wide be 600*800, also than the format information difference that application process obtains, such as form YUY2 form, MJPG form, RGB32 form, I420 form etc.Therefore, corresponding different application process may its video flowing parameter information difference obtained.

Step S211, when the video flowing parameter information that the physical drives object module acquisition video equipment that application process is passed through in video flowing filtration drive is corresponding, is sent to monitoring module by described video flowing parameter information.

Namely video equipment is being opened in application process by IPR_MJ_CREATE function, such as during camera device, the video flowing parameter information of process access camera device can be obtained in IPR_MJ_CREATE function, this information comprises 3 GUID items, be respectively majortype, subtype, formattype, also comprise a VIDEOINFOHEADER structure.In reality, opening video equipment in application process by IPR_MJ_CREATE function, get when carrying out a Connect operation binding, its code can be as follows:

Hr=m_pGraph-> Connect (m_pCameraOutput, m_pGrabberInput); // application program now obtains Video stream information

hr＝m_pGraph-＞Connect(m_pGrabberOutput，m_pNullInputPin)。

So when application process is when opening video equipment and getting video flowing parameter information by IPR_MJ_CREATE, described video flowing parameter information can be sent to monitoring module.In practice, when physical drives object module gets video flowing parameter information, first video flowing parameter information is sent to control module, then is sent to monitoring module by control module.

In this step, after getting video flowing parameter information, the opportunity specifically described video flowing parameter information being sent to monitoring module can according to circumstances be selected.Such as, after getting video flowing parameter information, the opportunity immediately described video flowing parameter information being sent to monitoring module can according to circumstances be selected; Or after getting video flowing parameter information, first be stored in driven object module, then, after application process reads video stream data by the physical drives object module in video flowing filtration drive, the application process identification information corresponding with video stream data is sent to monitoring module together.

Or step S212, after application process reads video stream data by the physical drives object module in video flowing filtration drive, is sent to monitoring module by described video flowing parameter information.

In this step, after application process gets video flowing parameter information by the above-mentioned message in IPR_MJ_CREATE function, be retained in physical drives object module, after application process reads video stream data by the physical drives object module in video flowing filtration drive, more described video flowing parameter information is sent to monitoring module.

Step 220, after reading video stream data, is sent to monitoring module by application process identification information corresponding for video stream data.

In reality, this step comprises: after application process reads video stream data by the physical drives object module in video flowing filtration drive, application process identification information corresponding for described video stream data is sent to monitoring module.

Wherein, described physical drives object module is by having judged whether that to the IOCTL_KS_READ_STREAM message analysis in IPR_MJ_DEVICE_CONTROL function application process reads video flowing by physical drives object module.If so, then obtain current application process identity information, application process identification information corresponding for described video stream data is sent to monitoring module.

After application process reads video stream data by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

Step S221, when application process reads the first frame video stream data by the physical drives object module in video flowing filtration drive, sends to monitoring module by application process identification information corresponding for described video stream data.

Described physical drives object module passes through in IPR_MJ_DEVICE_CONTROL function, IOCTL_KS_READ_STREAM message monitor, when there being process to read the first frame data of physical equipment, obtain ID and the fullpath thereof of current process, if the registered monitoring of watchdog routine drives, then activate as active interception pattern.

Or, step S221, when application process reads N frame video stream data by the physical drives object module in video flowing filtration drive, wherein N > 1, application process identification information corresponding for described video stream data is sent to monitoring module, and each byte in the every frame video stream data before N frame is treated to the data different from described video stream data.

Or the data of described video flowing, when described physical drives object module can not resolve described video flowing, are replaced into zero and send to application process by step S223.

Described physical drives object module passes through in IPR_MJ_DEVICE_CONTROL function, IOCTL_KS_READ_STREAM message monitor, when there being process to read the N frame data of physical equipment, obtain ID and the fullpath thereof of current process, if the registered monitoring of watchdog routine drives, then activate as active interception pattern.For the data before N frame data, be then treated to the data different from described video stream data and returned to application process.Such as, the video stream data that application process reads is treated to 0, is treated to the situation such as 1.

Wherein, when abovementioned steps S212 performs, in this step, then application process identification information corresponding for described video stream data and video flowing parameter information are being sent to monitoring module.

Namely a switch can be set when application process obtains video flowing by IPR_MJ_CREATE function, when getting video flowing parameter information, open this switch and preserving the information received, such as video flowing parameter information.When the process of getting obtains the first frame video stream data or N frame video stream data, switch will cut out, and no longer preserve the information that it receives.When the FileOjbect of the monitoring module that this application process is opened closes, again open this switch.

In reality, before physical drives object module receives the replacement data of monitoring module transmission, possibly in time the video stream data of current for application process reading cannot be replaced with replacement data, namely video flowing parameter information is received at monitoring module, again the first preset source replacement data is treated to the second time point that replacement data is sent to physical drives object module, and there is time delay between the very first time point that physical drives object module needs to carry out replacing, because very first time point is general more Zao than the second time point.So now, when replacement data position can be arrived physical drives object module by physical drives object module, the video stream data that application process reads is treated to the data different from described video stream data, then returns to application process.Such as, the video stream data that application process reads is treated to 0, is treated to the situation such as 1.

Step 230, replacement data is sent to described physical drives object module according to video flowing parameter information by described monitoring module.

Wherein, first the first preset source replacement data can be converted to the replacement data corresponding with video flowing parameter information by this step, and replacement data is sent to described physical drives object module.The described replacement data corresponding with video flowing parameter information is the replacement data identical with the data type that video equipment exports, and described first source replacement data comprises image data to be converted.

Namely user can customize formatted datas such as selecting picture as the first source replacement data.

Step S231, when receiving video flowing parameter information, is sent to described physical drives object module by replacement data by control module.

In this step, namely when monitoring module receives video flowing parameter information, be sent to described physical drives object module by replacement data by control module, be stored in the configuration file in physical drives object module.

And/or step S232, when receiving application process identification information, is sent to described physical drives object module by replacement data by control module.

Because as previously mentioned described, video flowing parameter information sends to the opportunity of monitoring module, or sends to the opportunity of monitoring module Zao than application process, or sends simultaneously.If so during the opportunity of the opportunity of monitoring module receiver, video stream parameter information early than application process, first can deposit in monitoring module, when wait-receiving mode is to the identification information of application process, then replacement data is sent to described physical drives object module by control module.

In addition, if current application process just opens video equipment, and do not read video stream data when just exiting, can notify that monitoring module deletes the video flowing parameter information of current storage, avoid the use affecting subsequent processes.

In above-mentioned steps, described application process identification information and video flowing parameter information send to monitoring module by monitor filter; Described monitor filter is created in the control module by described monitoring module.

Step 240, described video stream data is replaced with described replacement data according to described replacement data by described physical drives object module.

After application process reads video flowing, such as read the first frame video flowing, or during N frame video flowing, by the call back function ReadStream_Rountine arranged in IOCTL_KS_READ_STREAM, the video stream data that application process reads is replaced with replacement data.

According to described replacement data, comprise when described video stream data is replaced with described replacement data:

Step S241, after application process reads video stream data by the physical drives object module in video flowing filtration drive, judges whether described monitoring module creates monitor filter in the control module; If so, then adjusting described physical drives object module is the first alternative patterns, for described video stream data is replaced with described replacement data.

After monitoring module runs, physical drives module can be set for active monitoring mode, when there being process to open camera device, drive active interception before the interception instruction not receiving monitoring module, then by original video stream data modification, as video stream data is replaced with replacement data, or as reset by video flowing, its example code is as follows:

In the call back function of ReadStream_Rountine, due to the existence of active monitoring mode, this process is before the selection not obtaining user is let pass, and cannot read the data of each frame, its example code is as follows:

And/or, step S241, when monitoring module receives application process identification information corresponding to described video stream data, replacement instruction is sent to described physical drives object module by described monitor filter, adjusting described physical drives object module is the second alternative patterns, for described video stream data is replaced with described replacement data.

The replacement instruction that described physical drives module also can send according to monitoring module is in real time adjusted to alternative patterns.

Step 250, whether described monitoring module allows described application process to read video stream data according to described application process identification information prompting user side; When allowing described application process to read video stream data, monitoring module notifies that described physical drives object module stops replacing.

When not allowing described application process to use video equipment, described physical drives object module maintains current alternative patterns.

In addition, the application also comprises:

Namely monitoring module can realize to current video stream by FX Module the operation of blocking-up and time-out etc. at any time.FX Module is a part for monitoring module, and it can realize sending relevant instruction to driving to driving registered filter.Such as realize the pause function to video flowing, namely when physical drives object module receives pause instruction, present frame is preserved, and all video flowing frame data after these data are replaced, with the function of video pause.Such as realize the block function to video flowing, the video stream data by each frame replaces with the replacement data that monitoring module issues driving.Such as realize restore funcitons at any time, namely when sending recovery instruction, stopping described data to replace or stopping suspending action.

In addition, after monitoring module gets Video parameter information and application process identification information, also can according to the white list allowing application process to read video stream data, application process identification information is mated with the application process identification information in described white list, if matched, described application process is then allowed to use described video equipment, if do not matched, then preset source replacement data can be converted to the replacement data identical with the data type that video equipment exports and the replacement data after described conversion and replacement instruction are sent to physical drives object module by control module, video flowing is read by physical drives object module when there being application process, every frame video data of the video flowing that video equipment sends by described physical drives object module replaces with described replacement data, and described replacement data is sent to application process.

In addition, in conjunction with not allowing the blacklist using video equipment, can be mated by application process identification information with blacklist, if matched, then directly selection does not allow respective application process to use video equipment, and video flowing is replaced with corresponding replacement data yet.

Or, application process identification information is mated with white list, blacklist simultaneously, if all do not matched, then points out user to select whether to allow current application process to use video equipment.

For system embodiment, due to itself and embodiment of the method basic simlarity, so description is fairly simple, relevant part illustrates see the part of embodiment of the method.

Each embodiment in this instructions all adopts the mode of going forward one by one to describe, and what each embodiment stressed is the difference with other embodiments, between each embodiment identical similar part mutually see.

The application can be used in numerous general or special purpose computing system environment or configuration.Such as: personal computer, server computer, handheld device or portable set, laptop device, multicomputer system, system, set top box, programmable consumer-elcetronics devices, network PC, small-size computer, mainframe computer, the distributed computing environment comprising above any system or equipment etc. based on microprocessor.

The application can describe in the general context of computer executable instructions, such as program module.Usually, program module comprises the routine, program, object, assembly, data structure etc. that perform particular task or realize particular abstract data type.Also can put into practice the application in a distributed computing environment, in these distributed computing environment, be executed the task by the remote processing devices be connected by communication network.In a distributed computing environment, program module can be arranged in the local and remote computer-readable storage medium comprising memory device.

A kind of computer video equipment protection method above the application provided and device, be described in detail, apply specific case herein to set forth the principle of the application and embodiment, the explanation of above embodiment is just for helping method and the core concept thereof of understanding the application; Meanwhile, for one of ordinary skill in the art, according to the thought of the application, all will change in specific embodiments and applications, in sum, this description should not be construed as the restriction to the application.

Claims

1. a computer video equipment protecting equipment, comprising: video flowing filtration drive and monitoring module; It is characterized in that, comprising:

Described physical drives object module is used for:

Described video stream data is replaced with replacement data, specifically comprises: the video stream data that application process reads is replaced with described replacement data; Wherein, described replacement data is sent by monitoring module;

Described control module is used for:

Described monitoring module is used for:

Replacement data is sent to described physical drives object module according to video flowing parameter information, specifically comprise: the first source replacement data that User Defined is selected is converted to the replacement data corresponding with video flowing parameter information, and replacement data is sent to described physical drives object module;

2. device according to claim 1, is characterized in that, in described physical drives object module, after obtaining video flowing parameter information corresponding to video equipment, described video flowing parameter information is sent to monitoring module; After reading video stream data, comprise when application process identification information corresponding for application process is sent to monitoring module:

3. device according to claim 1, it is characterized in that, in described physical drives object module, after application process reads video stream data by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

Or, when application process reads N frame video stream data by the physical drives object module in video flowing filtration drive, wherein N>1, application process identification information corresponding for described video stream data is sent to monitoring module, and each byte in the every frame video stream data before N frame is treated to the data different from described video stream data;

4. the device according to claim 1 or 3, it is characterized in that, in described physical drives object module, after application process obtains video flowing parameter information corresponding to video equipment by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

5. device according to claim 4, is characterized in that, in described monitoring module, comprises when replacement data being sent to described physical drives object module according to video flowing parameter information:

6. device according to claim 5, is characterized in that, in described monitoring module, comprises when replacement data being sent to described physical drives object module according to video flowing parameter information:

7. device according to claim 1, is characterized in that, described monitoring module also for:

8. device according to claim 1, is characterized in that:

Described control module comprises monitor filter; Described monitor filter is created in the control module by described monitoring module, and described application process identification information and video flowing parameter information will send to monitoring module by described monitor filter.

9. device according to claim 1, is characterized in that, in described physical drives object module, according to described replacement data, comprises when described video stream data is replaced with described replacement data:

10. device according to claim 1, is characterized in that, in described physical drives object module, comprises when application process obtains video flowing parameter information corresponding to video equipment by physical drives object module in video flowing filtration drive:

11. devices according to claim 1, is characterized in that, in described physical drives object module, comprise when application process reads video stream data by the physical drives object module in video flowing filtration drive:

12. devices according to claim 1, is characterized in that:

Load described video flowing filtration drive according to system registry, and in described video flowing filtration drive, create control module and the physical drives object module for video equipment.

13. 1 kinds of computer video equipment protection methods, is characterized in that, comprising:

Replacement data is sent to physical drives object module according to video flowing parameter information by described monitoring module, specifically comprise: the first source replacement data that User Defined is selected is converted to the replacement data corresponding with video flowing parameter information, and replacement data is sent to described physical drives object module;

Described video stream data is replaced with described replacement data according to described replacement data by described physical drives object module, specifically comprises: the video stream data that application process reads is replaced with described replacement data;

14. methods according to claim 13, is characterized in that, obtain the video flowing parameter information that video equipment is corresponding, and after reading video stream data, application process identification information corresponding for video stream data are sent to monitoring module and comprise:

15. methods according to claim 13, is characterized in that, after application process reads video stream data by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

Or, when application process reads N frame video stream data by the physical drives object module in video flowing filtration drive, wherein N>1, application process identification information corresponding for described video stream data is sent to monitoring module, and each byte in the every frame video stream data before N frame is treated to the data different from described video stream data.

16. methods according to claim 13 or 15, it is characterized in that, after application process obtains video flowing parameter information corresponding to video equipment by the physical drives object module in video flowing filtration drive, comprise when described video flowing parameter information is sent to monitoring module:

17. methods according to claim 16, is characterized in that, comprise when replacement data being sent to described physical drives object module according to video flowing parameter information:

18. methods according to claim 13, is characterized in that, comprise when replacement data being sent to described physical drives object module according to video flowing parameter information:

19. methods according to claim 13, is characterized in that, also comprise:

20. methods according to claim 13, is characterized in that:

Described application process identification information and video flowing parameter information send to monitoring module by monitor filter; Described monitor filter is created in the control module by described monitoring module.

21. methods according to claim 13, is characterized in that, according to described replacement data, comprise when described video stream data is replaced with described replacement data:

22. methods according to claim 13, is characterized in that, comprise when application process obtains video flowing parameter information corresponding to video equipment by physical drives object module in video flowing filtration drive:

23. methods according to claim 13, is characterized in that, comprise when application process reads video stream data by the physical drives object module in video flowing filtration drive:

24. methods according to claim 13, is characterized in that, also comprise:

Load filtration drive according to system registry, and in described filtration drive, create control module and the physical drives object module for video equipment.