CN110650107A - Data processing method, device and system - Google Patents

Abstract

The application provides a data processing method and a device thereof, wherein the method comprises the following steps: acquiring the version number of an encryption suite used by target video source equipment; when the version of the encryption suite used by the target video source equipment is matched with the version of the encryption suite in the video management server, generating a key and sending the key to the target video source equipment; and when receiving the encrypted video data sent by the target video source equipment, decrypting the encrypted video data according to the key, the encryption algorithm and the encryption grade which are included in the encryption suite used by the target video source equipment. The method can improve the flexibility of the encryption algorithm and effectively control the resource consumption brought by the encryption of the video data.

Description

Data processing method, device and system

Technical Field

The present application relates to network communication technologies, and in particular, to a data processing method, apparatus, and system.

Background

With the widespread of multimedia information technology, the importance of video information security is more and more emphasized. Conventional video data is protected by permission setting, but the video data in network transmission cannot be protected, and the video data can be acquired in the transmission process. In order to prevent the video data from being leaked, the encryption algorithm is used for encrypting the video data in a video source, which is a main technology in the aspect of video data security at present.

However, practice shows that the related video data encryption scheme has the problems of single fixed encryption algorithm and large resource consumption.

Disclosure of Invention

In view of this, the present application provides a data processing method, device and system.

Specifically, the method is realized through the following technical scheme:

according to a first aspect of embodiments of the present application, there is provided a data processing method, including:

acquiring the version number of an encryption suite used by target video source equipment; wherein the version number of the encryption suite is used for uniquely identifying the encryption suite; the encryption suite comprises an encryption algorithm and encryption grades, and different encryption grades correspond to different video data encryption modes;

when the version of the encryption suite used by the target video source equipment is matched with the version of the encryption suite in the video management server, generating a key and sending the key to the target video source equipment;

when receiving encrypted video data sent by the target video source equipment, decrypting the encrypted video data according to the secret key, an encryption algorithm and an encryption grade which are included in an encryption suite used by the target video source equipment; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment.

Optionally, after obtaining the version number of the encryption suite used by the target video source device, the method further includes:

when the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server, selecting a target encryption suite matched with the encryption level of the target video source device from the encryption suites in the video management server, and generating a key;

sending the target encryption suite and the key to the target video source device;

when encrypted video data sent by the target video source equipment are received, decrypting the encrypted video data according to the secret key, the encryption algorithm and the encryption grade included in the target encryption suite; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the target video source equipment using the target encryption suite.

Optionally, the method further includes:

and updating the encryption suite in the video management server at regular time.

Optionally, the version number of the encryption suite is used for uniquely identifying the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

According to a second aspect of embodiments of the present application, there is provided a data processing method, including:

when a video request message sent by a video management server is received, reporting the version number of an encryption suite used by the video source equipment to the video management server;

when a key sent by the video management server is received, encrypting the video data sent to the video management server according to the key, an encryption algorithm and an encryption grade included in an encryption suite used by the video source equipment; the key is sent by the video management server when judging that the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment; different encryption levels correspond to different video data encryption modes;

and sending the encrypted video data to the video management server.

Optionally, the method further includes:

when a key and a target encryption suite sent by the video management server are received, replacing the encryption suite used by the video source equipment with the target encryption suite; the key and the target encryption suite are sent by the video management server when judging that the version of the encryption suite used by the video source equipment is not matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment;

encrypting the video data sent to the video management server according to the secret key, the encryption algorithm and the encryption grade included by the target encryption suite;

and sending the encrypted video data to the video management server.

Optionally, the encrypting the video data sent to the video management server according to the key, the encryption algorithm, and the encryption level includes:

determining a target video element to be encrypted according to the encryption level;

and encrypting the target video element in the video data sent to the video management server by using an encryption algorithm and a key.

Optionally, for the same video data, the proportion of the target video element in the video data is positively correlated with the encryption level; and the target video element is a video element to be encrypted in the video data.

Optionally, the correspondence between the encryption level and the target video element includes:

when the encryption level is a first level, the target video element is the specified part I frame data in the video data;

when the encryption level is the second level, the target video element is all I frame data in the video data;

when the encryption level is the third level, the target video element is the entire video data.

Optionally, the version number of the encryption suite is used for uniquely identifying the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

According to a third aspect of the embodiments of the present application, there is provided a data processing apparatus applied to a video management server, the apparatus including:

the device comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring the version number of an encryption suite used by target video source equipment; wherein the version number of the encryption suite is used for identifying the encryption suite; the encryption suite comprises an encryption algorithm and encryption grades, and different encryption grades correspond to different video data encryption modes;

an encryption suite management unit, configured to determine whether a version of an encryption suite used by the target video source device matches a version of an encryption suite in the video management server;

a key management unit for generating a key;

a sending unit, configured to send the key to the target video source device;

the decryption unit is used for decrypting the encrypted video data according to the key, the encryption algorithm and the encryption grade which are included in the encryption suite used by the target video source equipment when the encrypted video data sent by the target video source equipment are received; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment.

Optionally, the encryption suite management unit is further configured to select, when the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server, one target encryption suite that matches the encryption level of the target video source device from the encryption suites in the video management server;

the sending unit is further configured to send the target encryption suite and the key to the target video source device;

the decryption unit is further configured to decrypt the encrypted video data according to the key, the encryption algorithm included in the target encryption suite, and the encryption grade when receiving the encrypted video data sent by the target video source device; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the target video source equipment using the target encryption suite.

Optionally, the encryption suite management unit is further configured to update the encryption suite in the video management server at regular time.

Optionally, the version number of the encryption suite is used for uniquely identifying the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

According to a fourth aspect of the embodiments of the present application, there is provided a data processing apparatus applied to a video source device, the apparatus including:

the receiving unit is used for receiving a video request message sent by the video management server;

a sending unit, configured to report, to the video management server, a version number of an encryption suite used by the video source device;

the receiving unit is further configured to receive a key sent by the video management server;

the encryption unit is used for encrypting the video data sent to the video management server according to the key, the encryption algorithm and the encryption grade included in the encryption suite used by the video source equipment when the receiving unit receives the key sent by the video management server; the key is sent by the video management server when judging that the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment; different encryption level algorithms correspond to different video data encryption modes;

the sending unit is further configured to send the encrypted video data to the video management server.

Optionally, the encryption unit is further configured to replace an encryption suite used by the video source device with a target encryption suite when the receiving unit receives the key and the target encryption suite sent by the video management server; the key and the target encryption suite are sent by the video management server when judging that the version of the encryption suite used by the video source equipment is not matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment;

the encryption unit is further used for encrypting the video data sent to the video management server according to the secret key, the encryption algorithm and the encryption grade included by the target encryption suite;

the sending unit is further configured to send the encrypted video data to the video management server.

Optionally, the encryption unit is specifically configured to determine a target video element to be encrypted according to an encryption level; and encrypting the target video element in the video data sent to the video management server by using an encryption algorithm and a key.

Optionally, for the same video data, the proportion of the target video element in the video data is positively correlated with the encryption level; and the target video element is a video element to be encrypted in the video data.

Optionally, the correspondence between the encryption level and the target video element includes:

when the encryption level is a first level, the target video element is the specified part I frame data in the video data;

when the encryption level is the second level, the target video element is all I frame data in the video data;

when the encryption level is the third level, the target video element is the entire video data.

Optionally, the version number of the encryption suite is used for uniquely identifying the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

According to a fifth aspect of embodiments of the present application, there is provided a data processing system, comprising a video source device and a video management server; wherein:

the video source device is used for reporting the version number of an encryption suite used by the video source device to the video management server when receiving a video request message sent by the video management server;

the video management server is used for generating a key when the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server, and sending the key to the video source equipment;

the video source device is further configured to encrypt the video data sent to the video management server according to the key, an encryption algorithm included in an encryption suite used by the video source device, and an encryption level;

the video source equipment is also used for sending the encrypted video data to the video management server;

and the video management server is also used for decrypting the encrypted video data according to the key, the encryption algorithm and the encryption grade which are included in the encryption suite used by the target video source equipment.

The data processing method of the embodiment of the application obtains the version number of the encryption suite used by the target video source equipment through the video management server, generates the key when the version of the encryption suite used by the target video source equipment is matched with the version of the encryption suite in the video management server, and sends the key to the target video source equipment, so that the target video source equipment encrypts the video data sent to the video management server according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment, and further decrypts the encrypted video data according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment when receiving the encrypted video data sent by the target video source equipment, because the encryption algorithms used by different video source equipment can be different, the flexibility of an encryption algorithm is improved, and the safety of video data is further improved; in addition, by setting various different encryption levels, the video source equipment with different encryption levels can correspond to different video data encryption modes, so that the flexibility of the video data encryption modes is improved, and the resource consumption caused by video data encryption is effectively controlled.

Drawings

FIG. 1 is an architectural diagram illustrating a data processing system according to an exemplary embodiment of the present application;

FIG. 2 is a flow chart illustrating a method of data processing according to an exemplary embodiment of the present application;

FIG. 3 is a flow chart illustrating a method of data processing according to an exemplary embodiment of the present application;

FIG. 4 is a flow chart of a method of data processing shown in yet another exemplary embodiment of the present application;

FIG. 5 is a flow chart of a method of data processing shown in yet another exemplary embodiment of the present application;

FIG. 6 is a block diagram of a data processing apparatus according to an exemplary embodiment of the present application;

fig. 7 is a schematic structural diagram of a data processing apparatus according to another exemplary embodiment of the present application.

Detailed Description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present application, as detailed in the appended claims.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in this application and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

In order to make those skilled in the art better understand the technical solution provided by the embodiments of the present application, a brief description is given below of a system architecture to which the technical solution provided by the embodiments of the present application is applicable.

Referring to fig. 1, which is a schematic structural diagram of a data processing system provided in an embodiment of the present application, as shown in fig. 1, the data processing system may include a video management server (also referred to as a video service center device) and a video source device, where the video management server is a device capable of acquiring video data through a Network, such as an NVR (Network video recorder); the video source device is a device capable of acquiring video data and transmitting the video data through a network, such as an IPC (Internet Protocol Camera).

In the network architecture shown in fig. 1, a plurality of encryption suites are configured in the video management server, wherein the encryption suites may include an encryption algorithm and an encryption level, and the encryption suites are identified by the version number of the encryption suites.

The video management server can manage the encryption suite in the video source device, when the video management server needs to acquire video data from the video source device, it needs to be ensured that the version of the encryption suite in the video source device matches the version of the encryption suite in the video management server, otherwise (that is, the version of the encryption suite of the video source device does not match the version of the encryption suite in the video management server), the video management server needs to update the encryption suite of the video source device (which may also be called encryption suite upgrade), so that the version of the encryption suite in the video source device matches the version of the encryption suite in the video management server.

After determining that the version of the encryption suite in the video source device matches the version of the encryption suite in the video management server, the video source device may encrypt the video data transmitted to the video management server according to a key generated by the video management server in real time, an encryption algorithm in the encryption suite, and an encryption class, and transmit the encrypted video data to the video management server.

When the video management server receives the encrypted video data sent by the video source device, the encrypted video data can be decrypted according to the key corresponding to the video source device, the encryption algorithm included in the encryption suite and the encryption grade.

In the embodiment of the present application, the encryption level algorithm is used to indicate an encryption manner of video data, that is, video elements (such as I frame data, all video data, and the like) that need to be encrypted in the video data, and different encryption levels correspond to different encryption manners of the video data.

The video source device can be divided into a plurality of encryption levels, different encryption levels correspond to different video data encryption modes, and video elements to be encrypted of the video source devices with different encryption levels are different.

For example, when the video source device leaves the factory, the video source device may be classified into encryption classes according to the hardware performance and the actual usage scenario of the video source device. For example, hardware performance is general and a usage scenario has a high requirement on real-time performance, and it may be classified as a class of devices with a low encryption level. The devices with higher hardware performance and higher requirements on security of the use scene can be classified into a class with higher encryption level.

Preferably, the higher the level of encryption, the more video elements need to be encrypted.

For example, assume that three encryption levels can be preset: a first level, a second level, and a third level (the encryption levels of the first level to the third level gradually increase), wherein:

the video elements needing to be encrypted corresponding to the first level are specified part I frame data in the video data;

the video elements needing to be encrypted corresponding to the second level are all I frame data in the video data;

the video elements required to be encrypted corresponding to the third level are all video data.

It should be appreciated that the number of encryption levels is not limited to three; for example, two encryptions, etc., four encryption levels, or four or more encryption levels may be set in advance.

Further, the correspondence relationship of the encryption level and the video element that needs to be encrypted is also not limited to the description in the above example; for example, when two encryption levels are preset, the video elements to be encrypted corresponding to the first level may be key frames of the video data, and the video elements to be encrypted corresponding to the second level may be all the video data.

In order to make the aforementioned objects, features and advantages of the embodiments of the present application more comprehensible, embodiments of the present application are described in detail below with reference to the accompanying drawings.

Referring to fig. 2, a flow chart of a data processing method provided in an embodiment of the present application is shown, where the data processing method may be applied to a video management server in a network architecture shown in fig. 1, and as shown in fig. 2, the data processing method may include the following steps:

and step S200, acquiring the version number of the encryption suite used by the target video source equipment.

In the embodiment of the present application, a target video source device does not refer to a fixed video source device, but any video source device connected to a video management server via a network exists, and the following description is not repeated.

In the embodiment of the present application, in order to ensure that the version of the encryption suite used by the video source device matches the version of the encryption suite in the video management server, before video data is acquired from the target video source device, the video management server may first acquire the version number of the encryption suite used by the target video source device, so that the video management server may determine whether the version of the encryption suite used by the target video source device matches the version of the encryption suite in the video management server according to the version number of the encryption suite used by the target video source device.

Optionally, the version number of the encryption suite is used for uniquely identifying the encryption suite, and the encryption algorithm included in the encryption suite is a symmetric encryption algorithm.

In one embodiment of the present application, the determining, by the video management server, whether the version of the encryption suite used by the target video source device matches the version of the encryption suite in the video management server may include:

the video management server inquires the version number of an encryption suite in the video management server according to the version number of the encryption suite used by the target video source equipment, and if the video management server has the encryption suite of which the version number is the same as that of the encryption suite used by the target video source equipment, the version of the encryption suite used by the target video source equipment is determined to be matched with that of the encryption suite in the video management server; otherwise, it is determined that the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server.

For example, if 20 encryption suites are configured in the video management server, and the version numbers are 1 to 20 in sequence, when the version number of the encryption suite used by the target video source device, which is acquired by the video management server, is any one of 1 to 20, the video management server may determine that the version of the encryption suite used by the target video source device matches the version of the encryption suite in the video management server; otherwise, the video management server may determine that the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server.

Step S210, when the version of the encryption suite used by the target video source device matches the version of the encryption suite in the video management server, generating a key, and sending the key to the target video source device.

In this embodiment, when the video management server determines that the version of the encryption suite used by the target video source device matches the version of the encryption suite in the video management server, the video management server may generate a key and send the key to the target video source device.

When receiving the key sent by the video management server, the target video source device may encrypt the video data sent to the video management server according to the key, an encryption algorithm and an encryption level included in an encryption suite used by the target video source device, and specific implementation thereof may refer to relevant description in the method flow shown in fig. 3, which is not described herein again in this embodiment of the present application.

It should be noted that, in this embodiment of the application, in order to ensure that the video management server can use a correct key and an encryption suite to decrypt encrypted video data sent by the target video source device in the subsequent process, after the video management server generates the key, the key used by the target video source device and a version number of the encryption suite need to be saved.

For example, the video management server may save the key, along with the version number of the encryption suite used by the target video source device, in a session attribute of the video management server and the target video source device.

Step S220, when receiving the encrypted video data sent by the target video source device, decrypting the encrypted video data according to the key corresponding to the target video source device, the encryption algorithm and the encryption level included in the encryption suite used by the target video source device.

In this embodiment of the application, when the video management server receives the encrypted video data sent by the target source device, the video management server may decrypt the encrypted video data according to the key generated in step S210, the encryption algorithm included in the encryption suite used by the target video source device, and the encryption level.

In one example, for any encrypted video data received by the video management server, the proportion of the encrypted part in the encrypted video data in the whole encrypted video data is positively correlated with the encryption level.

For example, assume that three encryption levels can be preset: a first level, a second level, and a third level (the encryption levels of the first level to the third level gradually increase), wherein:

the encrypted part in the encrypted video data corresponding to the first level is the appointed part I frame data in the encrypted video data;

the encrypted part in the encrypted video data corresponding to the second level is all I frame data in the encrypted video data;

the encrypted portion of the encrypted video data corresponding to the third level is the entire video data of the encrypted video data.

In one embodiment of this application, after obtaining the version number of the encryption suite used by the target video source device, the method may further include:

when the version of the encryption suite used by the target video source equipment is not matched with the version of the encryption suite in the video management server, selecting one target encryption suite matched with the encryption level of the target video source equipment from the encryption suites in the video management server, and generating a key;

sending the target encryption suite and the key to target video source equipment so that the target video source equipment encrypts the video data sent to the video management server according to the key, an encryption algorithm and an encryption grade included in the target encryption suite;

and when receiving the encrypted video data sent by the target video source equipment, decrypting the encrypted video data according to the key, the encryption algorithm and the encryption grade included in the target encryption suite.

In this embodiment, when the video management server determines that the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server, the video management server may update the encryption suite used by the target video source device, and at this time, the video management server may select one encryption suite (referred to herein as a target encryption suite) from the encryption suites in the video management server that matches the encryption level of the target video source device according to the encryption level of the target video source device.

It should be noted that when there are multiple encryption suites in the video management server that match the encryption level of the target video source device, a random selection or other strategy may be adopted to select one as the target encryption suite.

Further, in this embodiment, in order to ensure that the video management server can assign an encryption suite to the target video source device that matches the encryption level of the target video source device, the video management server needs to be able to know the encryption level of the target video source device.

In an example, the video management server may pre-record an encryption level of each video source device (for example, record a correspondence between a device identifier of a video source device and the encryption level), and further, when the video management server needs to obtain video data of a certain video source device, the encryption level of the video source device may be determined according to the device identifier of the video source device.

In another example, when the video management server obtains the version number of the encryption suite used by the video source device, the encryption level of the video source device may also be obtained. The video management server may obtain a version number of an encryption suite used by the video source device and obtain a timing relationship between two operations of the encryption level of the video source device, which are not limited.

For example, the version number of the encryption suite used by the video source device may be obtained first, and then the encryption level of the video source device may be obtained (for example, when it is determined that the version of the encryption suite used by the video source device is not matched with the version of the encryption suite in the video management server, the encryption level of the video source device is obtained); or, the encryption grade of the video source equipment can be obtained first, and then the version number of the encryption suite used by the video source equipment is obtained; or, the version number of the encryption suite used by the video source device and the encryption level of the video source device may also be obtained at the same time.

In this embodiment, after the video management server determines the target encryption suite, the target encryption suite and the real-time generated key may be sent to the target video source device, and the target video source device encrypts the video data sent to the video management server according to the key and the target encryption suite.

In order to ensure that the video management server in the subsequent process can decrypt the encrypted video data sent by the target video source device by using the correct key and the encryption suite, the video management server determines the target encryption suite and needs to store the key used by the target video source device and the version number of the target encryption suite after generating the key.

For example, the video management server may save the key, along with the version number of the target encryption suite, in a session attribute of the video management server and the target video source device.

In this embodiment, when the video management server receives encrypted video data sent by the target video source device, the video management server may decrypt the encrypted video data according to the key sent to the target video source device and the encryption algorithm and encryption level included in the target encryption suite.

Further, in one embodiment of the present application, the video management server may further update the encryption suite in the video management server at regular time, and further, when the video management server determines that the version of the encryption suite used by the video source device is inconsistent with the version of the updated encryption suite in the video management server, the video management server may update the encryption suite used by the video source device, that is, by updating the encryption suite in the video management server, the encryption suite used by each video source device is updated.

For example, the video management server may maintain an encryption algorithm library, and when the encryption suite needs to be updated, the video management server may randomly select a part of algorithms from the encryption algorithm library, replace the part of algorithms with the encryption algorithms in the existing encryption suite, and update the version number of the encryption suite, thereby implementing the update of the encryption suite.

Referring to fig. 3, a flow chart of a data processing method provided in the embodiment of the present application is shown, where the data processing method may be applied to any video source device in the network architecture shown in fig. 1, and as shown in fig. 3, the data processing method may include the following steps:

for convenience of description, the execution subject of steps S300 to S320 is taken as an example of the target video source device hereinafter.

And step S300, when receiving a video request message sent by the video management server, reporting the version number of the encryption suite used by the video source equipment to the video management server.

In this embodiment, when the target video source device needs to transmit video data to the video management server, for example, when the target video source device receives a video request message sent by the video management server, the target video source device may report the video source device to the video management server

It should be noted that, in the embodiment of the present application, the encryption suite initially used by the target video source device may be configured in the target video source device according to the encryption level of the target video source device when the target video source device leaves a factory; or, the video management server may distribute the video data when the target video source device transmits the video data to the video management server for the first time, and in this implementation, when the target video source device transmits the video data to the video management server for the first time, the reported version number of the encryption suite used by the target video source device is null.

In this embodiment of the application, after receiving the version number of the encryption suite reported by the target video source device, the video management server may determine whether the version of the encryption suite of the target video source device matches with the version of the encryption suite in the video management server, and perform corresponding processing according to a matching result, and specific implementation thereof may refer to relevant description in the method flow shown in fig. 2, which is not described herein again in this embodiment of the application.

And S310, when the key sent by the video management server is received, encrypting the video data sent to the video management server according to the key, the encryption algorithm and the encryption level included in the encryption suite used by the video source equipment.

In this embodiment of the application, when a target video source device receives a key sent by a video management server (that is, the video management server sends the key to the target video source device, but does not send an encryption suite, that is, the version of the encryption suite used by the target video source device matches the version of the encryption suite in the video management server), the target video source device may encrypt video data sent to the video management server according to the key, an encryption algorithm and encryption class included in the encryption suite used by the target video source device.

Optionally, the encryption algorithm included in the encryption suite is a symmetric encryption algorithm.

In one embodiment of the present application, the encrypting the video data sent to the video management server according to the key, the encryption algorithm included in the encryption suite used by the video source device, and the encryption level may include:

determining a target video element to be encrypted according to an encryption level included in an encryption suite used by video source equipment;

and encrypting the target video element in the video data sent to the video management server by using the key and an encryption algorithm contained in an encryption suite used by the video source equipment.

In this embodiment, the target video source device may determine the video element to be encrypted (referred to herein as the target video element) according to an encryption level algorithm included in an encryption suite used by the target video source device.

In this embodiment, after the target video source device determines the target video element, the target video element in the video data sent to the video management server may be encrypted according to an encryption algorithm included in an encryption suite used by the target video source device and a key sent by the video management server.

In one example, for the same video data, the proportion of the target video element in the video data is positively correlated with the encryption level.

For example, assume that three encryption levels can be preset: a first level, a second level, and a third level (the encryption levels of the first level to the third level gradually increase), wherein:

the target video element corresponding to the first grade is appointed part I frame data in the video data;

the target video elements corresponding to the second level are all I frame data in the video data;

the target video elements corresponding to the third level are all video data.

For example, assuming that the encryption level of the target video source device is the second level, the target video element is all I frame data in the video data, and further, the target video source device may encrypt all I frame data in the video data sent to the video management server according to an encryption algorithm included in an encryption suite used by the target video source device and a key sent by the video management server.

And step S320, sending the encrypted video data to a video management server.

In this embodiment, after the target video source device encrypts the video data sent to the video management server in the manner in step S310, the encrypted video data may be sent to the video management server.

The processing flow when the video management server receives the encrypted video data may refer to the related description in the method flow shown in fig. 2, and details of the embodiment of the present application are not repeated here.

In an embodiment of the present application, after reporting the version number of the encryption suite used by the video source device to the video management server, the method may further include:

when a key and a target encryption suite sent by a video management server are received, replacing the encryption suite used by video source equipment with the target encryption suite; the key and the target encryption suite are sent by the video management server when judging that the version of the encryption suite used by the video source equipment is not matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment;

encrypting the video data sent to the video management server according to the secret key, the encryption algorithm and the encryption grade included by the target encryption suite;

and sending the encrypted video data to a video management server.

In this embodiment, when the target video source device receives the key and the target encryption suite sent by the video management server (i.e., the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server), the target video source device may replace the encryption suite used by the target video source device with the target encryption suite.

For a specific processing flow of the video management server sending the key and the target encryption suite to the target video source device, reference may be made to related description in the method flow shown in fig. 2, which is not described herein again in this embodiment of the present application.

In this embodiment, the target video source device may encrypt the video data sent to the video management server according to the key sent by the video management server, the encryption algorithm included in the target encryption suite, and the encryption level, and send the encrypted data to the video management server, and specific implementation of this embodiment may refer to relevant descriptions in step S310 and step S320, which is not described herein again in this embodiment.

It can be seen that in the method flows shown in fig. 2 and fig. 3, by configuring a plurality of encryption suites in the video management server, the encryption suites used by different video source devices may be different, and correspondingly, the encryption algorithms used by different video source devices may also be different, so that the flexibility of the encryption algorithms is improved, and further, the security of the video data is improved; in addition, the video source equipment with different encryption levels corresponds to different video data encryption range modes by setting the encryption level algorithm corresponding to multiple different encryption levels, so that the flexibility of the video data encryption mode range is improved, and the resource consumption caused by video data encryption is effectively controlled.

In order to enable those skilled in the art to better understand the technical solutions provided in the embodiments of the present application, the technical solutions provided in the embodiments of the present application are described below with reference to specific scenarios.

The following description will take the above encryption algorithm as a symmetric encryption algorithm, and the encryption level in the encryption suite is represented by an encryption level algorithm as an example.

Embodiment one, scene that version of encryption suite used by video source device matches version of encryption suite in video management server

Referring to fig. 4, a schematic flow chart of a data processing method according to an embodiment of the present application is shown in fig. 4, where the data processing method may include:

step S400, the video management server sends a video request message to the video source equipment.

In the embodiment of the application, when the video management server needs to acquire the video data of the video source device, the version number of the encryption suite used by the video source device can be acquired first.

In this embodiment, the video management server may trigger the video source device to report the version number of the encryption suite used by the video source device by sending a video request message to the video source device.

Step S410, the video source device sends the version number of the encryption suite used by the video source device to the video management server.

Step S420, the video management server determines that the version of the encryption suite used by the video source device matches the version of the encryption suite in the video management server, and records the version number of the encryption suite used by the video source device into the session attribute with the video source device.

Step S430, the video management server generates a key used for the current video data transmission, and records the key in the session attribute with the video source device.

Step S440, the video management server sends the generated key to the video source device.

Step S450, the video source device records the key sent by the video management server into the session attribute with the video management server.

When the video source device receives the key sent by the video management server, the video source device can also send a key interaction completion notification message to the video management server.

Step S460, the video management server sends the video request message to the video source device again.

Step S470, the video source device establishes a video transmission link with the video management server.

Step S480, the video source device determines the video element to be encrypted according to the encryption level algorithm included in the encryption suite used by the video source device, and encrypts the video element to be encrypted in the video data according to the key recorded in the session attribute and the symmetric encryption algorithm included in the encryption suite used by the video source device.

Step S490, the video source device sends the encrypted video data to the video management server.

Step S4100, the video management server decrypts the encrypted video data according to the version number and the key of the encryption suite recorded in the session attribute.

The video management server can query the corresponding encryption suite according to the version number of the encryption suite recorded in the session attribute, determine the video elements encrypted in the encrypted video data according to an encryption level algorithm included in the encryption suite, and further decrypt the video elements encrypted in the encrypted video data according to a secret key recorded in the session attribute and a symmetric encryption algorithm included in the encryption suite.

Second embodiment, scenario where version of encryption suite used by video source device does not match version of encryption suite in video management server

Referring to fig. 5, a schematic flow chart of a data processing method according to an embodiment of the present application is shown in fig. 5, where the data processing method may include:

step S500, the video management server sends a video request message to the video source equipment.

Step S510, the video source device sends the version number of the encryption suite used by the video source device to the video management server.

Step S520, the video management server determines that the version of the encryption suite used by the video source device does not match the version of the encryption suite in the video management server, selects a target encryption suite with the video source device from the encryption suites in the video management server, generates a key, and records the target encryption suite and the key in a session attribute with the video source device.

Step S530, the video management server sends the target encryption suite and the key to the video source device.

And step S540, the video source equipment replaces the encryption suite used by the video source equipment with the target encryption suite, and records the key sent by the video management server into the session attribute of the video management server.

Step S550, the video management server sends the video request message to the video source device again.

And step S560, the video source equipment and the video management server establish a video transmission link.

Step S570, the video source device determines the video element to be encrypted according to the encryption level algorithm included in the target encryption suite, and encrypts the video element to be encrypted in the video data according to the key recorded in the session attribute and the symmetric encryption algorithm included in the target encryption suite.

Step S580, the video source device sends the encrypted video data to the video management server.

Step S590, the video management server decrypts the encrypted video data according to the version number and the key of the encryption suite recorded in the session attribute.

In the embodiment of the application, the version number of the encryption suite used by the target video source equipment is obtained through the video management server, when the version of the encryption suite used by the target video source equipment is matched with the version of the encryption suite in the video management server, a key is generated and sent to the target video source equipment, so that the target video source equipment encrypts the video data sent to the video management server according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment, and further, when the encrypted video data sent by the target video source equipment is received, the encrypted video data is decrypted according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment, and as the encryption algorithms used by different video source equipment can be different, the flexibility of the encryption algorithm is improved, the safety of the video data is further improved; in addition, by setting various different encryption levels, the video source equipment with different encryption levels can correspond to different video data encryption modes, so that the flexibility of the video data encryption modes is improved, and the resource consumption caused by video data encryption is effectively controlled.

The methods provided herein are described above. The following describes the apparatus provided in the present application:

referring to fig. 6, a schematic structural diagram of a data processing apparatus provided in an embodiment of the present application is shown, where the data processing apparatus may be applied to a video management server in the foregoing method embodiment, and as shown in fig. 6, the data processing apparatus may include:

an obtaining unit 610, configured to obtain a version number of an encryption suite used by a target video source device; wherein the version number of the encryption suite is used for identifying the encryption suite; the encryption suite comprises an encryption algorithm and encryption grades, and different encryption grades correspond to different video data encryption modes;

an encryption suite management unit 620, configured to determine whether a version of an encryption suite used by the target video source device matches a version of an encryption suite in the video management server;

a key management unit 630 for generating a key;

a sending unit 640, configured to send the key to the target video source device;

a decryption unit 650, configured to, when receiving encrypted video data sent by the target video source device, decrypt the encrypted video data according to the key, an encryption algorithm included in an encryption suite used by the target video source device, and an encryption level; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment.

In an optional embodiment, the encryption suite management unit 630 is further configured to select a target encryption suite matching the encryption level of the target video source device from the encryption suites in the video management server when the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server;

the sending unit 640 is further configured to send the target encryption suite and the key to the target video source device;

the decryption unit 650 is further configured to, when receiving encrypted video data sent by the target video source device, decrypt the encrypted video data according to the key, the encryption algorithm included in the target encryption suite, and the encryption level; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the target video source equipment using the target encryption suite.

In an optional embodiment, the encryption suite management unit 630 is further configured to update the encryption suite in the video management server periodically.

In an alternative embodiment, the version number of the encryption suite is used to uniquely identify the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

Referring to fig. 7, a schematic structural diagram of a data processing apparatus according to an embodiment of the present application is provided, where the data processing apparatus may be applied to a video source device in the foregoing method embodiment, and as shown in fig. 7, the data processing apparatus may include:

a receiving unit 710 for receiving a video request message sent by the video management server

A sending unit 720, configured to report, to the video management server, a version number of an encryption suite used by the video source device;

the receiving unit 710 is further configured to receive a key sent by the video management server;

an encryption unit 730, configured to, when the receiving unit 710 receives the key sent by the video management server, encrypt the video data sent to the video management server according to the key, an encryption algorithm included in an encryption suite used by the video source device, and an encryption level; the key is sent by the video management server when judging that the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment; different encryption level algorithms correspond to different video data encryption modes;

the sending unit 720 is further configured to send the encrypted video data to the video management server.

In an optional embodiment, the encryption unit 730 is further configured to replace an encryption suite used by the video source device with a target encryption suite when the receiving unit 710 receives a key and the target encryption suite sent by the video management server; the key and the target encryption suite are sent by the video management server when judging that the version of the encryption suite used by the video source equipment is not matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment;

the encryption unit 730 is further configured to encrypt the video data sent to the video management server according to the key, the encryption algorithm included in the target encryption suite, and the encryption level;

the sending unit 720 is further configured to send the encrypted video data to the video management server.

In an optional implementation manner, the encryption unit 720 is specifically configured to determine, according to an encryption level, a target video element that needs to be encrypted; and encrypting the target video element in the video data sent to the video management server by using an encryption algorithm and a key.

In an alternative embodiment, for the same video data, the proportion of the target video element in the video data is positively correlated with the encryption level; and the target video element is a video element to be encrypted in the video data.

In an optional implementation manner, the correspondence between the encryption level and the target video element includes:

when the encryption level is a first level, the target video element is the specified part I frame data in the video data;

when the encryption level is the second level, the target video element is all I frame data in the video data;

when the encryption level is the third level, the target video element is the entire video data.

In an alternative embodiment, the version number of the encryption suite is used to uniquely identify the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

The above description is only exemplary of the present application and should not be taken as limiting the present application, as any modification, equivalent replacement, or improvement made within the spirit and principle of the present application should be included in the scope of protection of the present application.

Claims (21)

1. A data processing method, comprising:

acquiring the version number of an encryption suite used by target video source equipment; wherein the version number of the encryption suite is used for identifying the encryption suite; the encryption suite comprises an encryption algorithm and encryption grades, and different encryption grades correspond to different video data encryption modes;

when the version of the encryption suite used by the target video source equipment is matched with the version of the encryption suite in the video management server, generating a key and sending the key to the target video source equipment;

when receiving encrypted video data sent by the target video source equipment, decrypting the encrypted video data according to the secret key, an encryption algorithm and an encryption grade which are included in an encryption suite used by the target video source equipment; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment.

2. The method of claim 1, wherein after obtaining the version number of the encryption suite used by the target video source device, the method further comprises:

when the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server, selecting a target encryption suite matched with the encryption level of the target video source device from the encryption suites in the video management server, and generating a key;

sending the target encryption suite and the key to the target video source device;

when encrypted video data sent by the target video source equipment are received, decrypting the encrypted video data according to the secret key, the encryption algorithm and the encryption grade included in the target encryption suite; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the target video source equipment using the target encryption suite.

3. The method according to claim 1 or 2, characterized in that the method further comprises:

and updating the encryption suite in the video management server at regular time.

4. The method of claim 3, wherein the version number of the encryption suite is used to uniquely identify the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

5. A data processing method, comprising:

when a video request message sent by a video management server is received, reporting the version number of an encryption suite used by the video source equipment to the video management server;

when a key sent by the video management server is received, encrypting the video data sent to the video management server according to the key, an encryption algorithm and an encryption grade included in an encryption suite used by the video source equipment; the key is sent by the video management server when judging that the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment; different encryption levels correspond to different video data encryption modes;

and sending the encrypted video data to the video management server.

6. The method of claim 5, further comprising:

when a key and a target encryption suite sent by the video management server are received, replacing the encryption suite used by the video source equipment with the target encryption suite; the key and the target encryption suite are sent by the video management server when judging that the version of the encryption suite used by the video source equipment is not matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment;

encrypting the video data sent to the video management server according to the secret key, the encryption algorithm and the encryption grade included by the target encryption suite;

and sending the encrypted video data to the video management server.

7. The method according to claim 5 or 6, wherein the encrypting the video data sent to the video management server according to the key, the encryption algorithm and the encryption level comprises:

determining a target video element to be encrypted according to the encryption level;

and encrypting the target video element in the video data sent to the video management server by using an encryption algorithm and a key.

8. The method according to claim 7, wherein, for the same video data, the proportion of the target video element in the video data is positively correlated with the encryption level; and the target video element is a video element to be encrypted in the video data.

9. The method of claim 8, wherein the corresponding relationship between the encryption level and the target video element comprises:

when the encryption level is a first level, the target video element is the specified part I frame data in the video data;

when the encryption level is the second level, the target video element is all I frame data in the video data;

when the encryption level is the third level, the target video element is the entire video data.

10. The method according to claim 5 or 6, wherein the version number of the encryption suite is used to uniquely identify the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

11. A data processing apparatus applied to a video management server, the apparatus comprising:

the device comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring the version number of an encryption suite used by target video source equipment; wherein the version number of the encryption suite is used for identifying the encryption suite; the encryption suite comprises an encryption algorithm and encryption grades, and different encryption grades correspond to different video data encryption modes;

an encryption suite management unit, configured to determine whether a version of an encryption suite used by the target video source device matches a version of an encryption suite in the video management server;

a key management unit for generating a key;

a sending unit, configured to send the key to the target video source device;

the decryption unit is used for decrypting the encrypted video data according to the key, the encryption algorithm and the encryption grade which are included in the encryption suite used by the target video source equipment when the encrypted video data sent by the target video source equipment are received; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the encryption suite used by the target video source equipment.

12. The apparatus of claim 11,

the encryption suite management unit is further configured to select a target encryption suite matching the encryption level of the target video source device from the encryption suites in the video management server when the version of the encryption suite used by the target video source device does not match the version of the encryption suite in the video management server;

the sending unit is further configured to send the target encryption suite and the key to the target video source device;

the decryption unit is further configured to decrypt the encrypted video data according to the key, the encryption algorithm included in the target encryption suite, and the encryption grade when receiving the encrypted video data sent by the target video source device; and the encrypted video data is obtained by encrypting the video data sent to the video management server by the target video source equipment according to the key, the encryption algorithm and the encryption grade in the target video source equipment using the target encryption suite.

13. The apparatus of claim 11 or 12,

the encryption suite management unit is further configured to update the encryption suite in the video management server at regular time.

14. The apparatus according to claim 11 or 12, wherein the version number of the encryption suite is used to uniquely identify the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

15. A data processing apparatus, for use in a video source device, the apparatus comprising:

the receiving unit is used for receiving a video request message sent by the video management server;

a sending unit, configured to report, to the video management server, a version number of an encryption suite used by the video source device;

the receiving unit is further configured to receive a key sent by the video management server;

the encryption unit is used for encrypting the video data sent to the video management server according to the key, the encryption algorithm and the encryption grade included in the encryption suite used by the video source equipment when the receiving unit receives the key sent by the video management server; the key is sent by the video management server when judging that the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment; different encryption level algorithms correspond to different video data encryption modes;

the sending unit is further configured to send the encrypted video data to the video management server.

16. The apparatus of claim 15,

the encryption unit is further configured to replace an encryption suite used by the video source device with a target encryption suite when the receiving unit receives the key and the target encryption suite sent by the video management server; the key and the target encryption suite are sent by the video management server when judging that the version of the encryption suite used by the video source equipment is not matched with the version of the encryption suite in the video management server according to the version number of the encryption suite used by the video source equipment;

the encryption unit is further used for encrypting the video data sent to the video management server according to the secret key, the encryption algorithm and the encryption grade included by the target encryption suite;

the sending unit is further configured to send the encrypted video data to the video management server.

17. The apparatus of claim 15 or 16,

the encryption unit is specifically used for determining a target video element to be encrypted according to an encryption level; and encrypting the target video element in the video data sent to the video management server by using an encryption algorithm and a key.

18. The apparatus according to claim 17, wherein for the same video data, the ratio of the target video element in the video data is positively correlated with the encryption level; and the target video element is a video element to be encrypted in the video data.

19. The apparatus of claim 17, wherein the correspondence between encryption levels and target video elements comprises:

when the encryption level is a first level, the target video element is the specified part I frame data in the video data;

when the encryption level is the second level, the target video element is all I frame data in the video data;

when the encryption level is the third level, the target video element is the entire video data.

20. The apparatus according to claim 15 or 16, wherein the version number of the encryption suite is used to uniquely identify the encryption suite;

the encryption algorithm is a symmetric encryption algorithm.

21. A data processing system is characterized by comprising a video source device and a video management server; wherein:

the video source device is used for reporting the version number of an encryption suite used by the video source device to the video management server when receiving a video request message sent by the video management server;

the video management server is used for generating a key when the version of the encryption suite used by the video source equipment is matched with the version of the encryption suite in the video management server, and sending the key to the video source equipment;

the video source device is further configured to encrypt the video data sent to the video management server according to the key, an encryption algorithm included in an encryption suite used by the video source device, and an encryption level;

the video source equipment is also used for sending the encrypted video data to the video management server;

and the video management server is also used for decrypting the encrypted video data according to the key, the encryption algorithm and the encryption grade which are included in the encryption suite used by the target video source equipment.

Images