CN116318814A - Audio and video safety control method applied to collaborative office platform - Google Patents

Audio and video safety control method applied to collaborative office platform Download PDF

Info

Publication number
CN116318814A
CN116318814A CN202211706587.9A CN202211706587A CN116318814A CN 116318814 A CN116318814 A CN 116318814A CN 202211706587 A CN202211706587 A CN 202211706587A CN 116318814 A CN116318814 A CN 116318814A
Authority
CN
China
Prior art keywords
shared
information
media
user
server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202211706587.9A
Other languages
Chinese (zh)
Other versions
CN116318814B (en
Inventor
刘启贤
范慧莉
黄帆
孙昕
赵永丰
杨岩
史秀鹏
车颖
李裕康
郭莹
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Institute of Space Research Mechanical and Electricity
Original Assignee
Beijing Institute of Space Research Mechanical and Electricity
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Institute of Space Research Mechanical and Electricity filed Critical Beijing Institute of Space Research Mechanical and Electricity
Priority to CN202211706587.9A priority Critical patent/CN116318814B/en
Publication of CN116318814A publication Critical patent/CN116318814A/en
Application granted granted Critical
Publication of CN116318814B publication Critical patent/CN116318814B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/12Avoiding congestion; Recovering from congestion
    • H04L47/125Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00Television systems
    • H04N7/14Systems for two-way working
    • H04N7/15Conference systems

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The invention discloses an audio and video safety control method applied to a collaborative office platform, which comprises the following steps: requesting a meeting according to the designated meeting participants and the meeting security level, wherein the designated meeting participants are not lower than the meeting security level; before the user enters the conference, verifying the user so that the participating users belong to appointed participating persons; setting the security level of the media information to be shared, wherein the security level of the media information to be shared is not higher than the conference security level; and uploading the media information to be shared to a server, wherein the server is used for forwarding the media information to be shared to the client of the appointed participants, and the appointed participants are in the knowledge range of the media information to be shared. According to the method, the whole life cycle of each information element in the product flowing in the system is controlled to meet the relevant standard according to the relevant standard of the secret-related information system.

Description

Audio and video safety control method applied to collaborative office platform
Technical Field
The application relates to the technical field of computer application, in particular to an audio and video security control method applied to a collaborative office platform.
Background
The space model development is an extremely complex system engineering, project teams relate to related various personnel across professions, departments and units, and a large number of conference activities, collaborative work and other modes are generally adopted when the organization coordination work, the key technology communication, the design review, the collaborative development and other works are carried out. With the increase of space navigation product development tasks year by year, the increase of product technology difficulty, the cooperation of cross factories and cross departments is more frequent, the efficiency of the traditional scientific research activity mode of gathering personnel for face-to-face discussion and work is lower, the information transmission mode also increases the communication cost, and the traditional scientific research work mode with lower informatization degree can not meet the current task situation demands.
With the high-speed development of networks and information technologies, online working modes are becoming more popular, an easy, convenient, efficient and real communication and communication experience is provided for people based on an internet plus mode of information sharing, and a plurality of collaborative office products are provided in the subdivision fields of document storage, document collaboration and knowledge management, online conferences and the like. However, these cooperative office products are all oriented to the internet environment rather than the secret-related network environment, and for the secret-related military industry, especially for the aerospace military enterprises involving high-precision technology, the increasing urgent demand of online cooperative office platforms is mainly contradictory with the lack of security measures. The method is urgently needed to ensure that the information content can be transmitted while providing the convenience of cooperative office work, so that the method can meet the requirements of safety and confidentiality in the military industry, and also meets the requirements of integrated development and safety protection of aerospace enterprises, and really realizes cost reduction and synergy of the information technology for the enterprises.
Disclosure of Invention
The existing audio-video collaborative office product cannot meet the requirement of the confidential network environment on the information system, and the method disclosed by the invention controls the whole life cycle of each information element in the product flowing in the system to meet the relevant standard according to the relevant standard of the confidential information system.
In a first aspect, a media information sharing method is provided, including:
requesting a meeting according to a designated meeting participant and a meeting security level, wherein the security level of the designated meeting participant is not lower than the meeting security level;
before a user enters a conference, verifying the user so that the participating users belong to the appointed participating person;
setting the security level of the media information to be shared, wherein the security level of the media information to be shared is not higher than the conference security level;
uploading the media information to be shared to a server, wherein the server is used for forwarding the media information to be shared to a client of the appointed meeting person, and the appointed meeting person is in the knowledge range of the media information to be shared.
With reference to the first aspect, in certain implementation manners of the first aspect, the method further includes:
transmitting user identity information, equipment information used by a user access platform and an authorization certificate to a server;
and establishing connection with the server.
With reference to the first aspect, in some implementations of the first aspect, the establishing a connection with the server specifically includes:
the server determines a media service address, wherein the media service address is an address for uploading the media information to be shared to the server, or the media service address is an address for forwarding the media information to be shared to the server.
With reference to the first aspect, in certain implementation manners of the first aspect, the user authentication specifically includes:
it is verified whether the conference is within the open time.
With reference to the first aspect, in certain implementation manners of the first aspect, the user authentication specifically includes:
and verifying whether the user belongs to the appointed meeting staff.
With reference to the first aspect, in certain implementation manners of the first aspect, the user authentication specifically includes:
and verifying whether the user's participation level is not lower than the conference level.
With reference to the first aspect, in some implementation manners of the first aspect, the forwarding, by the server, the media information to be shared specifically includes:
the server identifies conference information, media information and coding mode information in the media information to be shared.
With reference to the first aspect, in some implementation manners of the first aspect, the forwarding, by the server, the media information to be shared specifically includes:
and the media service central cluster sends the media information to be shared to a media edge service, and the media edge service forwards the media information to the user terminal.
In a second aspect, there is provided a collaboration office platform comprising:
the management module is used for realizing the online conference of collaborative office and the audio and video communication function in the conference, and simultaneously managing the user and the authority setting;
the client is used for checking and checking the access control right of the file according to the application, approval flow and other information elements in the management module when the local file is shared through the shared desktop;
the server is used for receiving and processing various requests of the client and completing the operation required by the management module;
the security confidentiality module comprises three-member management, security control, log and security audit and is used for realizing the three-member management of the system, the security identification of various information elements of the system, the encryption transmission of various information elements of the system, and the verification of the security and the control of the information transmission range when a user sends and receives various information elements.
With reference to the second aspect, in certain implementation manners of the second aspect, the collaboration office platform is configured to perform a method as described in any one of implementation manners of the first aspect.
Compared with the prior art, the scheme provided by the application at least comprises the following beneficial technical effects:
the invention realizes the online audio-video conference with the security function of the collaborative office platform through the combination of the B/S and the C/S, provides a more convenient way for online collaborative design and on-site production following, greatly shortens the period of technical discussion of designers and the round trip time of subsequent on-site investigation in collaborative design work, and improves the collaborative work efficiency of each design and assembly formula. Meanwhile, the security level is marked on stream media information elements, users and the like of the product, and the transmission range of secret information and data transmission based on https are controlled by combining the security level mark of each element and the user authority setting, so that the collaborative office platform is ensured to meet the national security and confidentiality management requirements. The online system office platform based on the invention provides a new choice for online training, the training content can be synchronously operated, the training effect is improved, the participation range of the organization-level conference on the space and the number of people is widened, the coverage rate of the traditional conference is obviously improved, and the spirit of the conference is accurately transmitted at the first time.
Drawings
Fig. 1 is a flowchart of an audio/video security control method applied to a collaborative office platform.
Detailed Description
The present application is described in further detail below with reference to the drawings and specific examples.
The invention relates to an audio and video security control method applied to a collaborative office platform, which establishes a precise secret relation between information elements of a product and a user, adopts a B/S architecture and an HTML5 component based on a streaming media technology, and checks whether a secret class and a data transmission range are matched at a data sending end and a data receiving end according to the secret requirement of a secret-related information system so as to achieve cross-region and cross-organization online collaborative office.
The invention relates to an audio and video security control method applied to a collaborative office platform. And the server is used for receiving and processing various requests of the client/browser and completing the operation required by the management module. And the client controls various meeting behaviors of the user according to the security level of the user and the information element and other meeting information when the user participates in the online meeting through the online system office platform. The management module comprises conference management, whiteboard management, audio and video management, user management and authority management, and is used for realizing other functions such as online conference of collaborative office, audio and video communication in the conference and the like, and simultaneously managing user and authority setting. The security module comprises three-member management, security control, log and security audit, and is used for realizing the security identification of various information elements of the system, the encryption transmission of the various information elements of the system, and the verification of the security and the control of the information transmission range when the user sends and receives the various information elements.
The platform information elements mainly comprise media stream data such as audio streams, video streams and the like, the security module marks the various information elements around the security level and the range, and the access and operation range is strictly controlled by checking the security level adaptation degree of the information elements and the user, so that high-security low-pass is prevented. The security and privacy module and the client together record various operation logs of the user when using the media stream, and record and alarm against illegal operations.
The security protection of the information elements in the system is realized through the security module and other modules, so that the collaborative office platform can meet the requirements of relevant standards on the security application system, and can be applied to the security office places.
Fig. 1 is a flowchart of an audio/video security control method applied to a collaborative office platform.
1) And the user can access the collaboration platform during the effective connection period, check the conference calendar and create an online conference room.
2) The user can enter the meeting authentication, the meeting can be accessed only in the reserved meeting time, and when the user enters the meeting, the server can verify the compliance of the user identity again, wherein the compliance comprises whether the meeting is in the open time, whether the user is in a meeting list or not and whether the user joining security level is higher than the meeting security level, all information meets the requirements, and any information verification can not pass the meeting rejection of the user.
3) The user initiates media operations such as audio and video in the established online conference room, firstly, the security level of the information elements to be transmitted is set, secondly, the data transmission is set and sent to part of users in the user list, namely the knowledge range of the information elements, and after the setting is completed, the candidate address of the media service to be connected is acquired to initiate media connection.
4) And the receiving user terminal performs data transmission through the optimal media service candidate address acquired by the connecting gateway server. The user side information is identified in the media service by exchanging data transmission signaling connected with the media service, wherein the signaling contains conference information, media information and coding mode information, and the data format of audio and video data transmission is standardized.
5) The receiving user again checks whether the current user security level matches the media data security level. And checking whether the current user is in the knowledge range of the current data transmission. If the two types of the media service connection are in accordance with each other, continuing to complete the signaling exchange, if one type of the media service connection is not in accordance with the two types of the media service connection, stopping the process, and closing the media service connection.
6) After the exchange signaling is completed, the user end can transmit audio and video data through the media service, the transmission data direction is bidirectional, and the received audio and video data stream sent by the media service can be sent to the media service, and the local audio and video data stream can be sent to the media service.
7) And forwarding the media stream of the user side to a media service central cluster, dispatching the media stream by the central cluster, distributing the video stream to a media edge service, and forwarding the video stream to a user terminal by the edge service to realize the self-adaptive load balancing of the media service. In some embodiments, the media data streams are reasonably distributed through a load balancing strategy based on a polling algorithm, so that the end user obtains a smooth experience.
8) The media service central cluster processes all ongoing conferences on the collaboration platform simultaneously, the audio and video data streams of a plurality of conferences are scheduled by the central cluster, and when the media edge service is forwarded to a user receiving end, information such as conference numbers, conference secret classes, user participation secret classes and the like can be checked again to ensure that the requirements of safety and confidentiality are met.
9) Any link of media stream data forwarding is interrupted, re-authentication is completed through the steps 4-6, and new media stream data is retransmitted in the manner of the steps 7-8. After the recovery of step 4-8 is completed, the user receiving end can continue to watch the audio and video data stream.
10 When the user initiating the media stream stops media operations such as audio and video, the server end closes the media service connection, and the transmission of the current media stream data is completed.
The method is suitable for domestic operating systems and domestic databases, so that the collaborative office platform based on the method has wider adaptable software and hardware environments.
A security method of an information system is realized based on an information element security level, a user security level and an information element knowledge range. According to the standard of the secret-related application system, the most core high-secret low-visit operation behavior possibly causing secret leakage risk is gripped, various information elements of the platform are classified and the knowledge range is set, the precise secret relation between all the information elements in the platform and users is constructed through the secret class and the knowledge range, the browser plug-in technology used by the traditional online voice video is abandoned, the technical architecture of signaling and multimedia channel transmission and browser coding and decoding is adopted, the safe and reliable propagation of voice and video on a network is ensured, and invasion and interception are prevented.
The SRT and RTMP content distribution plug flow mixed architecture is adopted, the advantages are achieved, the operation of a user end is simple and convenient due to the SRT mode on the media data of the audio and video, the user experience is ensured, and the concurrent number of simultaneous online users is improved. The RTMP content distribution mode is combined with the client access control, so that the data generated in the use process of the collaborative office platform and the transmission process thereof all meet the security requirement, and the disclosure is prevented.
The media service cluster based on RTMP ensures that when a large number of users use, media resources are timely and accurately scheduled and media data are distributed according to the access control strategy, the information elements and the secret matching relation among the users, all user terminals can receive and transmit reliable media data and give consideration to fluency, meanwhile, the key information of a conference is ensured to be verified during data forwarding, and the data safety and the user use experience are improved.
While the invention has been described in terms of the preferred embodiment, it is not intended to limit the invention, but it will be apparent to those skilled in the art that variations and modifications can be made without departing from the spirit and scope of the invention, and therefore the scope of the invention is defined in the appended claims.

Claims (10)

1. A method for sharing media information, comprising:
requesting a meeting according to a designated meeting participant and a meeting security level, wherein the security level of the designated meeting participant is not lower than the meeting security level;
before a user enters a conference, verifying the user so that the participating users belong to the appointed participating person;
setting the security level of the media information to be shared, wherein the security level of the media information to be shared is not higher than the conference security level;
uploading the media information to be shared to a server, wherein the server is used for forwarding the media information to be shared to a client of the appointed meeting person, and the appointed meeting person is in the knowledge range of the media information to be shared.
2. The method according to claim 1, wherein the method further comprises:
transmitting user identity information, equipment information used by a user access platform and an authorization certificate to a server;
and establishing connection with the server.
3. The method of claim 2, wherein the establishing a connection with the server specifically includes:
the server determines a media service address, wherein the media service address is an address for uploading the media information to be shared to the server, or the media service address is an address for forwarding the media information to be shared to the server.
4. The method according to claim 1, wherein the user authentication specifically comprises:
it is verified whether the conference is within the open time.
5. The method according to claim 1, wherein the user authentication specifically comprises:
and verifying whether the user belongs to the appointed meeting staff.
6. The method according to claim 1, wherein the user authentication specifically comprises:
and verifying whether the user's participation level is not lower than the conference level.
7. The method of claim 1, wherein the forwarding the media information to be shared by the server specifically includes:
the server identifies conference information, media information and coding mode information in the media information to be shared.
8. The method of claim 1, wherein the forwarding the media information to be shared by the server specifically includes:
and the media service central cluster sends the media information to be shared to a media edge service, and the media edge service forwards the media information to the user terminal.
9. A collaboration office platform, the collaboration office platform comprising:
the management module is used for realizing the online conference of collaborative office and the audio and video communication function in the conference, and simultaneously managing the user and the authority setting;
the client is used for checking and checking the access control right of the file according to the application, approval flow and other information elements in the management module when the local file is shared through the shared desktop;
the server is used for receiving and processing various requests of the client and completing the operation required by the management module;
the security confidentiality module comprises three-member management, security control, log and security audit and is used for realizing the three-member management of the system, the security identification of various information elements of the system, the encryption transmission of various information elements of the system, and the verification of the security and the control of the information transmission range when a user sends and receives various information elements.
10. A collaboration platform as claimed in claim 9 wherein the collaboration platform is for performing the method of any of claims 1 to 8.
CN202211706587.9A 2022-12-29 2022-12-29 Audio and video safety control method applied to collaborative office platform Active CN116318814B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211706587.9A CN116318814B (en) 2022-12-29 2022-12-29 Audio and video safety control method applied to collaborative office platform

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211706587.9A CN116318814B (en) 2022-12-29 2022-12-29 Audio and video safety control method applied to collaborative office platform

Publications (2)

Publication Number Publication Date
CN116318814A true CN116318814A (en) 2023-06-23
CN116318814B CN116318814B (en) 2024-08-30

Family

ID=86796651

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211706587.9A Active CN116318814B (en) 2022-12-29 2022-12-29 Audio and video safety control method applied to collaborative office platform

Country Status (1)

Country Link
CN (1) CN116318814B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117395081A (en) * 2023-12-08 2024-01-12 南通极粟设计服务有限公司 Audio and video safety control method for collaborative office platform

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1770857A (en) * 2004-10-27 2006-05-10 梁松 Interactive voice video conference system based on multi communication platform
CN110012260A (en) * 2019-03-18 2019-07-12 苏州科达科技股份有限公司 A kind of video conference content guard method, device, equipment and system
CN111935443A (en) * 2020-10-12 2020-11-13 融智通科技(北京)股份有限公司 Method and device for sharing instant messaging tool in real-time live broadcast of video conference
CN112581103A (en) * 2020-12-31 2021-03-30 苏州盛德隆智能科技有限公司 Safety online conference management method
CN115001860A (en) * 2022-07-20 2022-09-02 广州市保伦电子有限公司 Safety management system for paperless digital conference
CN115348110A (en) * 2022-10-18 2022-11-15 华能信息技术有限公司 Server-side data security management method of video conference system
CN116248422A (en) * 2022-12-29 2023-06-09 北京空间机电研究所 Shared desktop security control method applied to collaborative office system

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1770857A (en) * 2004-10-27 2006-05-10 梁松 Interactive voice video conference system based on multi communication platform
CN110012260A (en) * 2019-03-18 2019-07-12 苏州科达科技股份有限公司 A kind of video conference content guard method, device, equipment and system
CN111935443A (en) * 2020-10-12 2020-11-13 融智通科技(北京)股份有限公司 Method and device for sharing instant messaging tool in real-time live broadcast of video conference
CN112581103A (en) * 2020-12-31 2021-03-30 苏州盛德隆智能科技有限公司 Safety online conference management method
CN115001860A (en) * 2022-07-20 2022-09-02 广州市保伦电子有限公司 Safety management system for paperless digital conference
CN115348110A (en) * 2022-10-18 2022-11-15 华能信息技术有限公司 Server-side data security management method of video conference system
CN116248422A (en) * 2022-12-29 2023-06-09 北京空间机电研究所 Shared desktop security control method applied to collaborative office system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
杨博、黄程、宋维、林萌: "多媒体资源管理模式的探索与研究", 《航天工业管理》, 31 December 2019 (2019-12-31), pages 43 - 46 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117395081A (en) * 2023-12-08 2024-01-12 南通极粟设计服务有限公司 Audio and video safety control method for collaborative office platform
CN117395081B (en) * 2023-12-08 2024-02-20 南通极粟设计服务有限公司 Audio and video safety control method for collaborative office platform

Also Published As

Publication number Publication date
CN116318814B (en) 2024-08-30

Similar Documents

Publication Publication Date Title
US7398295B2 (en) Virtual lobby for data conferencing
US8578465B2 (en) Token-based control of permitted sub-sessions for online collaborative computing sessions
US20070038701A1 (en) Conferencing system
CN103493465B (en) Authorized user participates in the meeting of carrying out by communication network
CN106993151A (en) A kind of Videoconference Management System and method
CN109410053B (en) Education service transaction supervision full life cycle management method based on alliance chain technology
US8321508B2 (en) Controlling collaboration participation
US20020082907A1 (en) Method for conducting a shareholders meeting with remote participation using a network
CN108242013A (en) Transaction monitoring and managing method, equipment and computer readable storage medium based on block chain
CN205408020U (en) Teleconferencing system
CN116318814B (en) Audio and video safety control method applied to collaborative office platform
CN112235528B (en) Network high definition video conference integrated management system
CN101547096B (en) Net-meeting system and management method thereof based on digital certificate
CN101442500A (en) Control method for multipartite voice interaction, share and decentralization of display content
CN102067112A (en) Federated uptake throttling
CN108966216A (en) A kind of method of mobile communication and device applied to power distribution network
CN101583021A (en) Monitoring device used in video conferencing monitoring system
CN116248422B (en) Shared desktop security control method applied to collaborative office system
CN114285680A (en) Team cooperative communication method and system applied to network target range
CN104283771B (en) The IM user collaboratives means of communication and system for mobile terminal
EP1070402B1 (en) Improvements with regard to security in data conferences
CN109951672A (en) A kind of video conference terminal system and method
CN105187374A (en) Method accessing secret account number through one account number
CN112968824B (en) Chat group establishing method and system with encrypted identity
KR20020065091A (en) System of multipoint conference

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant