TW202220449A - Method and system of video encryption - Google Patents

Abstract

The present invention discloses a method of video encryption, including: obtaining an original video and encrypting the original video, to generate an encrypted video and a license key corresponding to the encrypted video, on the first electronic device; sending the encrypted video and the license key to the first video streaming application and a license client respectively; sending the encrypted video to the second video streaming application on the second electronic device via a video streaming server through the first video streaming application, and sending the license key to a license plugin on the second electronic device via a license server through the license client.

Description

Video encryption method and system

The present invention relates to an encryption method and system, in particular to a method and system for encrypting video information.

In recent years, there have been numerous cases of video cameras being monitored by malicious persons from remote locations, or video being maliciously captured during network packet transmission. Especially during the severe special infectious pneumonia epidemic in 2019, many people use the free version of the video conferencing application Zoom in business and daily life. As a result, malicious actors have widely exploited the app's security holes to share passwords over the Internet. This malicious intrusion, known as "Zoom bombing", may lead to unrelated and unfamiliar users entering the conference during the video conference, interfering with the conference, and forcing the ongoing conference to be interrupted .

When videoconferencing applications transmit video images, some basic encryption mechanisms are used. Usually, the manufacturer of the video conferencing application or other third-party manufacturer acts as a service provider. When the image packets are transmitted, they will pass through a video streaming platform or server located in the cloud provided by these service providers. Since these service providers master the source codes of these encryption mechanisms, it is still difficult to ensure that the image packets are captured and decoded by malicious persons during the above-mentioned transmission process.

In view of this, there is a need for a method for encrypting video, which can overcome the concern that the encryption mechanism of the prior art is easy to be cracked.

An embodiment of the present invention provides a method for encrypting video, including: obtaining, on a first electronic device, original video, and encrypting the original video to generate encrypted video and a license key corresponding to the encrypted video ; Send the encrypted video and the license key to the first video streaming application and the license client respectively; through the first video streaming application, send the encrypted video through a video streaming server to The second video streaming application on the second electronic device, and through the license client, send the license key to the license plugin on the second electronic device through the license server (license server) ).

In some embodiments, the above-mentioned video encryption method further includes: replacing a license key through an encryption module at regular intervals, wherein the replaced license key corresponds to the encrypted video in the time interval ; in response to the license key being replaced, through the first video streaming application, the encrypted video in the period of time is sent to the second video streaming application on the second electronic device via the video streaming server, And through the license client, the replaced license key is sent to the license plug-in program on the second electronic device through the license server.

In some embodiments, the above-mentioned video encryption method further includes: in response to the second video streaming application receiving a request to join the conference from the third electronic device, confirming through a license plug-in whether it has received the request from the third electronic device The license key of the device; if the license key from the third electronic device is received, the request to join the conference is accepted; if the license key from the third electronic device is not received, the request to join the conference is rejected.

An embodiment of the present invention provides a system for video encryption, including: an encryption module installed on a first electronic device; a license client installed on the first electronic device; a license plugin ), set on the second electronic device; wherein, the encryption module obtains an original video, and encrypts the original video to generate encrypted video and a license key corresponding to the encrypted video; the encryption module will The encrypted video and the license key are respectively sent to the first video streaming application and the license client; the first video streaming application sends the encrypted video to the second electronic device on the second electronic device via the video streaming server The video streaming application; and the license client send the license key to the license plugin on the second electronic device via the license server.

In some embodiments, the encryption module in the above-mentioned video encryption system replaces the license key at intervals, wherein the replaced license key corresponds to the encrypted video in the time interval; in response to the license key The key is replaced, the first video streaming application sends the encrypted video within the time interval to the second video streaming application on the second electronic device via the video streaming server, and the license client will be replaced The latter license key is sent to the license plug-in program on the second electronic device via the license server.

In some embodiments, in response to the second video streaming application receiving a request to join the meeting from the third electronic device, the license plug-in in the above-mentioned video encryption system confirms whether a request from the third electronic device is received the license key from the third electronic device; if the license key is received from the third electronic device, the license plug-in accepts the request to join the meeting; if the license key is not received from the third electronic device, the license plug-in rejects Join meeting request.

FIG. 1 is a schematic diagram of a video conference application scenario 100 . As shown in FIG. 1 , in the video conference application scenario 100 , the first electronic device 101 and the second electronic device 102 represent electronic devices respectively used by two conference participants. The camera module 103 and the first video streaming application 104 are installed on the first electronic device 101 , and the second video streaming application 105 is installed on the second electronic device 102 . A video streaming server 106 is communicatively connected to the first electronic device 101 and the second electronic device 102 via the Internet.

The camera module 103 can be, for example, any video camera or webcam with a camera function, but the present invention is not limited thereto. In a video conference application scenario, the camera module 103 is used to capture images and voices of conference participants. It should be noted that although in the embodiment shown in FIG. 1, the camera module 103 is disposed in the first electronic device 101 (eg, a built-in camera lens on a notebook computer), in other embodiments , the photographing module 103 may not be disposed in the first electronic device, but be connected to the first electronic device through a wired or wireless manner, so as to send the captured image and sound to the first electronic device.

The first video streaming application 104 and the second video streaming application 105 can be, for example, any remote video conferencing applications based on cloud computing, such as Zoom, Skype, TeamViewer, etc., which are installed in the operating system. Inventions are not limited to this. This remote video conferencing application uses video streaming technology to transmit video data in the form of packets to a remote device in real time via the Internet.

The video streaming server 106 can be, for example, any server that has computing capability and provides services by using the network as a medium, but the present invention is not limited thereto. The role of the video streaming server 106 in the application situation of the video conference mainly includes serving as a route server to correctly distribute and transmit the video packets from the source end to the destination end. The video streaming server 106 may be provided by a service provider, such as a manufacturer of video conferencing applications, or other third-party vendors.

As shown in FIG. 1, in the video conference application scenario 100, the first electronic device 101 as the source captures the video and audio of the conference participants through the camera module 103, and then sends the video including the above video and audio to the first electronic device 101. Video streaming application 104 . The first video streaming application 104 then sends the video to the second video streaming application 105 on the second electronic device via the video streaming server 106 in the form of packets.

As shown in FIG. 1, any point on the path of the entire packet transmission between the first video streaming application 104 and the second video streaming application 105 may be invaded by malicious persons, causing the packets to be compromised. stolen by malicious people. Even if the service provider provides basic encryption mechanisms, since the service provider has the source codes of these encryption mechanisms, it is still difficult to ensure that the image packets are captured and decoded by malicious persons when passing through the video streaming server 106 .

FIG. 2A is a schematic diagram of an improved video conference application scenario 200 according to an embodiment of the present invention. FIG. 2B is a flowchart of a video encryption method M10 used in the improved video conference application scenario 200 according to an embodiment of the present invention. Please refer to FIG. 2A and FIG. 2B in conjunction with each other for better understanding of the embodiments of the present invention. As shown in FIG. 2A , compared with the video conference application scenario 100 in FIG. 1 , in the improved video conference application scenario 200 , an encryption module 201 and a license set on the first electronic device 101 are added. The license client 202 , the license plug-in program 204 and the license server 203 are provided on the second electronic device 102 . As shown in FIG. 2B, the method M10 includes steps S11-S13.

The encryption module 201 may be implemented in a firmware or a driver, for example, but the present invention is not limited thereto. The role of the encryption module 201 in the application situation of the video conference mainly includes the hardware layer encryption of a video, so that the encrypted encrypted video must be decoded through its corresponding license key (license Key), otherwise cannot be interpreted. For example, if there is no corresponding license key to decode the encrypted video, the encrypted video will just be a string of meaningless garbled characters. The algorithm used by the encryption module 201 can be any conventional encryption algorithm, such as AES 128, AES 256, DRM, etc., and the present invention is not limited thereto.

The license client 202 may be software installed in the operating system on which the first electronic device 100 runs. The role of the license client 202 in the application scenario of the video conference mainly includes serving as a window for transmitting the license key, and sending the license key corresponding to the encrypted video to the remote device.

The license plug-in 204 may be installed in the operating system of the second electronic device 200 and associated with a plug-in of the second video streaming application 105 . Its role in the application context of the video conference mainly includes receiving the license key from the first electronic device 101 and decoding the encrypted video using the received license key.

The license server 203 can be, for example, any server that has computing capability and provides services by using the network as a medium, and the present invention is not limited thereto. The role of the license server 203 in the application scenario of the video conference mainly includes acting as a routing server to correctly distribute and transmit the license key from the source end to the destination end.

According to an embodiment of the present invention, in step S11 in FIG. 2B, the encryption module 201 obtains the original video 205 captured by the camera module 103 (as shown in FIG. 2A ), and encrypts the original video 205 to An encrypted video 206 and a license key 207 corresponding to the encrypted video 206 are generated. Then, it progresses to step S12.

In step S12, the encryption module 201 sends the encrypted video 206 and the license key 207 to the first video streaming application 104 and the license client 202 respectively (as shown in FIG. 2A). Then, it progresses to step S13.

In step S13, the first video streaming application 104 sends the encrypted video 206 to the second video streaming application 105 via the video streaming server 106 (as shown in FIG. 2A ); the license client 202 sends the license The key 207 is sent to the license plug-in 204 via the license server 203 (as shown in FIG. 2A). Afterwards, the license plug-in 204 can use the received license key 207 to decode the encrypted video 206 .

In the improved video conferencing application scenario 200 described above, the encrypted video 206 and the license key 207 from the first electronic device 101 are transmitted to the second electronic device 102 through different paths. Specifically, the encrypted video 206 is transmitted to the second video application 105 through the first video streaming application 104 through the video streaming server 106; the license key 207 is transmitted through the license client 202, Via the license server 203, it is transmitted to the license plug-in 204. In this way, the risk of both the encrypted video and the license key being stolen by a malicious person at the same time is dispersed, thereby reducing the possibility of the video being obtained and monitored by a malicious person. For example, even if the encrypted video 206 is stolen by a malicious person during transmission between the first video streaming application 104 and the second video streaming application 105, if the malicious person does not obtain the license key 207, the encrypted video 206 will only be a string of unreadable garbled characters for the malicious person.

FIG. 3 is a flowchart of another video encryption method M20 according to a preferred embodiment of the present invention. As shown in FIG. 3 , compared with the method M10 in FIG. 2B , the method M20 includes steps S14 and S15 after the step S13 .

According to this preferred embodiment, in step S14, the encryption module 201 replaces the license key at intervals, wherein the replaced license key corresponds to the encrypted video in the time interval. For example, as shown in Table 1 below, assuming that the encryption module 201 changes the license key every 10 seconds, the first license key, the second Three license keys..., corresponding to the encrypted video between 0-10 seconds from the start time of the video, the encrypted video between the 10-20 second, the encrypted video between the 20-30... analogy. Then, it progresses to step S15. [Table I] first license key Encrypted video between seconds 0-10 second license key Encrypted video between 10-20 seconds third license key Encrypted video between 20-30 seconds …(So on and so forth) …(So on and so forth)

In step S15, in response to the license key being replaced, the first video streaming application 104 sends the encrypted video within the time interval to the second video streaming application 105 via the video streaming server 106, and the license The client 202 sends the replaced license key to the license plug-in 204 via the license server 203 . For example, the license plug-in 204 will first use the first license key, to decode the encrypted video between seconds 0-10, then use the second license key to decode the encrypted video between seconds 10-20, use the third license key to decode the encrypted video between seconds 20-30 Encrypted video between is decoded...and so on.

In the application scenario of the above preferred embodiment, since the license keys are constantly replaced, even if a malicious person steals one of the license keys, there must be a specific time corresponding to the license key. Only the video in the interval can be decoded. For example, a malicious person needs to obtain the second license key and the encrypted video between the 10th and 20th second in order to decode the encrypted video between the 10th and 20th second. If you only get the second license key and the encrypted video between seconds 0-10, it cannot be decoded. This further reduces the likelihood of the video being completely compromised.

FIG. 4 is a flowchart of a video encryption method M30 according to another preferred embodiment of the present invention. As shown in FIG. 4, the method M30 includes steps S21-S23. In step S21, in response to the second video streaming application 105 receiving the request to join the conference from the third electronic device, the license plug-in 204 confirms whether the license key 207 is received from the third electronic device. If the license plug-in 204 has received the license key 207 from the third electronic device, step S22 is executed, that is, the request to join the meeting from the third electronic device is accepted; if the license plug-in 204 has not received the request from the third electronic device If the license key 207 of the third electronic device is used, step S23 is executed, that is, the request to join the conference from the third electronic device is rejected.

In the application scenario of the above-mentioned another preferred embodiment, if the user of the third electronic device is a normal participant, the manner in which the third electronic device generates and sends the license key 207 is the same as that shown in FIG. 2 . The manner in which an electronic device 101 generates and transmits the license key 207 is basically the same, and will not be repeated here.

In the application scenario of the above-mentioned another preferred embodiment, since the license plug-in 204 only allows the request to join the conference sent by the user who has the license key, when a malicious person invades the first electronic device 101 and the second electronic device 101 If the malicious person does not possess the correct license key (ie the license key 207 ), the license plug-in 204 will be used for communication between the electronic devices 102 , trying to steal video packets or even interfering with the conference. block, so that they cannot enter. In this way, the information security of the video conference is further improved.

The serial numbers in this specification and the scope of the patent application, such as "first", "second", etc., are only for convenience of description, and there is no sequential relationship between them.

The above paragraphs use multiple levels of description. Obviously, the teachings herein can be implemented in a variety of ways, and any particular architecture or functionality disclosed in the examples is merely a representative case. Based on the teachings herein, anyone skilled in the art should understand that each aspect disclosed herein may be implemented independently or two or more aspects may be implemented in combination.

Although the present disclosure has been disclosed above with examples, it is not intended to limit the present disclosure. Anyone who is familiar with the art can make some changes and modifications without departing from the spirit and scope of the present disclosure. Therefore, the protection scope of the invention is The scope of the patent application attached herewith shall prevail.

100: Traditional video conference application scenarios 101: The first electronic device 102: Second electronic device 103: Photography Module 104: First Video Streaming App 105: Second Video Streaming App 106: Video Streaming Server 200: Improved video conferencing application scenarios 201: Encryption Module 202: License Client 203: License Server 204: License Plugin 205: Raw Video 206: Encrypted Video 207: License key M10: Methods S11-S13: Steps M20: Methods S14-S15: Steps M30: Method S21-S23: Steps

The present disclosure will be better understood from the following description of exemplary embodiments in conjunction with the accompanying drawings. In addition, it should be understood that, in the flowcharts of the present disclosure, the order of execution of various blocks may be changed, and/or certain blocks may be changed, omitted, or combined. FIG. 1 is a schematic diagram of a video conference application scenario 100 . FIG. 2A is a schematic diagram of an improved video conference application scenario 200 according to an embodiment of the present invention. FIG. 2B is a flowchart of a video encryption method M10 used in the improved video conference application scenario 200 according to an embodiment of the present invention. FIG. 3 is a flowchart of another video encryption method M20 according to a preferred embodiment of the present invention. FIG. 4 is a flowchart of a video encryption method M30 according to another preferred embodiment of the present invention.

101: The first electronic device

102: Second electronic device

103: Photography Module

104: First Video Streaming App

105: Second Video Streaming App

106: Video Streaming Server

200: Improved video conferencing application scenarios

201: Encryption Module

202: License Client

203: License Server

204: License Plugin

205: Raw Video

206: Encrypted Video

207: License key

Claims (6)

A method of video encryption, comprising: obtaining an original video on the first electronic device, and encrypting the original video to generate an encrypted video and a license key corresponding to the encrypted video; sending the encrypted video and the license key to the first video streaming application and a license client, respectively; through the first video streaming application, send the encrypted video to a second video streaming application on the second electronic device through a video streaming server, and through the license client, send the license fee The key is sent to a license plugin on the second electronic device via a license server. If the method for video encryption of claim 1, it further includes: At intervals, the license key is replaced by the encryption module, wherein the replaced license key corresponds to the encrypted video in the time interval; In response to the license key being replaced, through the first video streaming application, the encrypted video within the time interval is sent to the second video on the second electronic device via the video streaming server The streaming application, and through the license client, send the replaced license key to the license plug-in on the second electronic device via the license server. If the method for video encryption of claim 1, it further includes: In response to the second video streaming application receiving a request to join the conference from the third electronic device, confirming through the license plug-in whether the license key from the third electronic device has been received; If the license key is received from the third electronic device, accept the request to join the conference; If the license key from the third electronic device is not received, the request to join the conference is rejected. A system for video encryption, including: an encryption module, disposed on the first electronic device; a license client (license client), set on the first electronic device; a license plugin, installed on the second electronic device; Wherein, the encryption module obtains an original video, and encrypts the original video to generate an encrypted video and a license key corresponding to the encrypted video; The encryption module sends the encrypted video and the license key to the first video streaming application and the license client, respectively; the first video streaming application sends the encrypted video to the second video streaming application on the second electronic device via a video streaming server; and The license client sends the license key to a license plugin on the second electronic device via a license server. The video encryption system of claim 4, wherein the encryption module replaces the license key at intervals, wherein the replaced license key corresponds to the encrypted video within the time interval; In response to the license key being replaced, the first video streaming application sends the encrypted video within the time interval to the second video stream on the second electronic device via the video streaming server The application and the license client send the replaced license key to the license plug-in on the second electronic device via the license server. The system for video encryption of claim 5, wherein in response to the second video streaming application receiving a request to join a conference from the third electronic device, the license plug-in confirms whether a request from the third electronic device is received the license key; If the license key is received from the third electronic device, the license plug-in accepts the request to join the conference; If the license key is not received from the third electronic device, the license plug-in rejects the request to join the conference.

Images