WO2010072179A1

WO2010072179A1 - Method and device for encrypted recording and decrypted displaying network multimedia conference

Info

Publication number: WO2010072179A1
Application number: PCT/CN2009/076098
Authority: WO
Inventors: 汪红星
Original assignee: 华为技术有限公司
Priority date: 2008-12-26
Filing date: 2009-12-26
Publication date: 2010-07-01
Also published as: CN101547196B; CN101547196A

Abstract

The embodiment of the present invention provides a method and a device for encrypted recording network multimedia conference, and a method and a device for decrypted displaying network multimedia conference. The invention relates to the network multimedia field and is invented to solve the problem that the recording content of the network multimedia real-time conference may be illegitimately used. In the embodiment of the present invention, before the beginning of the network multimedia conference or during the course of the conference the user sets to record the content of the conference and sets the key, encrypts the recording content of the conference using the key. And during the course of the conference or after the ending of the conference, the user can replay the recorded conference content according to the pre-set key. The embodiment of the invention can be applied in the network multimedia conference system.

Description

Encrypted recording and decryption playing method and device for network multimedia conference

This application claims priority to Chinese Patent Application No. 200810188925.8, entitled "Encrypted Recording and Decryption Playback Method and Device for Network Multimedia Conference" on December 26, 2008, the entire contents of which are hereby incorporated by reference. Combined in this application.

Technical field

The present invention relates to the field of network multimedia, and in particular, to an encrypted recording method, apparatus, and decryption playing method and apparatus for a network multimedia conference.

Background technique

As the scale of production and operation of enterprises expands, it is often necessary to hold cross-regional multi-party communication meetings to improve work efficiency. At this time, a network multimedia audio conference system or a frequency conference system will be used. In audio conferences, conference participants generally use fixed or mobile phone terminals. In video conferences, conference participants generally use dedicated video conference terminals.

The conference system consists of conference participants, conference controllers, and conference mixers. Generally, the conference service operator concentrates on deploying the network multimedia system. The conference participants only use the conference service, and hand over the equipment maintenance and operation of the conference system to the operator. This reduces the cost of using a network multimedia system.

Some important conferences need to be recorded for subsequent archiving and processing, but network multimedia conferencing systems often do not support local storage and recording, but instead record the conference process through the conference mixer, and store the recorded data in a clear text format on the file server. on.

However, in the process of recording the content of the conference, the content of the conference of the enterprise is recorded in the equipment of the conference operator, and the conference participants do not take any security measures, so the conference recording may be improperly used. Summary of the invention

In order to prevent the recording content of the network multimedia conference from being improperly used, the embodiment of the present invention adopts the following technical solutions:

In one aspect, an embodiment of the present invention provides an encrypted recording method for network multimedia.

An encrypted recording method for a network multimedia conference, comprising:

Recording a network multimedia conference;

Encrypt the recording of the above meeting.

In one aspect, an embodiment of the present invention provides a method for decrypting and playing a network multimedia conference.

A method for decrypting and playing a network multimedia conference, comprising:

Decrypt the encrypted conference content;

Play the decrypted meeting content.

In one aspect, an embodiment of the present invention provides an encrypted recording device for a network multimedia conference.

An encrypted recording device for a network multimedia conference, comprising:

a recording module, configured to record network multimedia real-time content;

An encryption module for encrypting the above-mentioned conference recording.

In another aspect, an embodiment of the present invention provides a decryption and playback device for a network multimedia conference.

A decryption and playback device for a network multimedia conference, comprising:

a decryption module, configured to decrypt the encrypted content after the encrypted recording;

The playing module is configured to play the decrypted content.

In the embodiment of the present invention, before the start of the network multimedia real-time conference or during the conference, the user sets the recording of the conference content and sets the key, and encrypts the recorded content of the conference by using the key; After the end, the user can replay the recorded meeting content according to the set key. The embodiment of the present invention encrypts the recorded content of the conference, and only knows according to the key. The content of the meeting, thereby solving the problem that the recorded content of the network multimedia real-time conference may be improperly used.

DRAWINGS

1 is a flowchart of a method for encrypting and recording a network multimedia conference according to an embodiment of the present invention; FIG. 1 is a flowchart of a method for recording a network multimedia according to an embodiment of the present invention; FIG. 4 is a schematic diagram of a media file based on I SO according to an embodiment of the present invention; FIG. 5 is a flowchart of a method for decrypting and playing a network multimedia conference according to an embodiment of the present invention; FIG. 6 is a flowchart of a method for decrypting a conference content after encryption and recording according to an embodiment of the present invention; FIG. 7 is a flowchart of a method for playing a decrypted content after decryption according to an embodiment of the present invention;

8 is a block diagram of an encrypted recording device of a network multimedia conference according to an embodiment of the present invention;

FIG. 9 is a block diagram of a decryption and playback device for a network multimedia conference according to an embodiment of the present invention.

detailed description

In order to prevent the recording content of the network multimedia conference from being improperly used, an embodiment of the present invention provides an encrypted recording method of network multimedia.

As shown in FIG. 1, the encrypted recording method includes two steps of 101 and 102:

101. Record the network multimedia meaning. As shown in FIG. 2, 101 specifically includes four steps of 1011, 1012, 1013, and 1014:

1011. The controller creates a network resource required for the recording and requests the network mixer to allocate the network endpoint.

In the IMS (IP Mul t imedia Subsystem, Network Multimedia System) architecture, the conference controller is separated from the conference mixer, and the conference controller and the conference mixer are connected through the Mp interface, and the Mp interface is followed. H248 agreement. Before the meeting starts, the user logs in to the conference terminal or passes Web interface, ready for real-time network multimedia. At the beginning of the test, the application server notifies the conference controller to create the network resources required for the conference recording, and then the conference controller sends a command through the Mp interface to request the network mixer to allocate the network endpoint.

1012. The right mixer allocates network endpoints.

1013. The controller starts the conference recording.

After the network endpoint is assigned, the application server notifies the controller to initiate recording of the content.

1014. The right mixer records the meaning content into the file on the network endpoint.

The conference controller sends a Mod command of the H248 protocol to request the conference mixer to record the conference content to the file on the network endpoint just assigned, and store it in the plaintext form on the file server, and carry the notification in the Mod command of the H248 protocol. Recorded signal, recording signal including recording duration, recording content

ID and recording end button.

102. Encrypt the above-mentioned recording content. As shown in FIG. 3, 102 specifically includes two steps of 1021 and 1022:

1021. Obtain the key set by the user.

In the prior art, the conference controller sends a Mod command of the H248 protocol to request the conference mixer to record the conference content into the file on the assigned network endpoint, and store the recorded file in plaintext to the file server. The Mod command only carries the signal for notification recording. The H248 protocol is defined as follows:

Package Name: AAS recording package

Package-ID: aas rec (0x0035)

The recorded signals are as follows:

S i gna l Name: Play Record

Si gna l ID: playrec (0x0002)

The main parameters of the signal are as follows: Signal parameter note

Record Length Timer (rlt, 0x0008) recording duration

Recording Identifier (rid, 0x0009) Recording ID

End Input Key (eik, 0x0010) Record end button

In this way, the recording of the meeting may be improperly used by someone other than the meeting participant. In the embodiment of the present invention, the Mp interface protocol between the conference controller and the conference mixer is extended, and the conference controller carries the encryption algorithm and the key input by the user in the Mod command while issuing the recording signal. The expanded recording signals are as follows:

File Encrypt ion Record Package

Package ID: FER

Version: 1

Extends: aasrec vers ion 1 Si nal Name: Play Record

Signal ID: playrec (0x0002), the recording signal is extended by one parameter as follows:

Parameter Name: Encrypt ion Type

Parameter ID: Enc Type (0x0011)

De s c r i p t i on: indicates the type of encryption algorithm needed for recording

Type: Octet string

Optional: Yes

Default: None

Parameter Name: Encrypt ion Parameter ID: Enc Key (0x0012)

De s c r i p t i on: indicates the encryption key required for recording

Type: Octet s tr ing (SIZE (0. . 65535) )

Opt iona l: Yes

Defaul t: None

In this way, the key for completing the recording content encryption is specified in the recording signal sent by the conference controller. 1022: Encrypt the conference recording content by using the above key.

The recording of the conference can be encrypted according to the key specified in the recording signal. There are two ways to encrypt meeting recordings:

1. Record the content of the conference. After the recording is finished, generate a clear text recording file. The specified encryption algorithm is invoked by using the above key to encrypt the full text of the plaintext file.

2. Encrypt only the audio and video data of the conference recording content, and use the above-mentioned key to invoke the specified encryption algorithm to encrypt the audio and video data. The recording file itself is not encrypted as a whole, and the control information of the media file is not encrypted. Audio and video data can be decrypted for playback.

The files generated after the conference recording include WAV files and files evolved based on the ISO base media file format (hereinafter referred to as ISO files).

(1) The basic unit of the WAV file is Chunk WAV file includes data block (Data Chunk) and format block (Fmt Chunk), Data Chunk is used to store sampled audio data, and Fmt Chunk is used to store codec and sample. Rate and other information. The Data Chunk format is as follows:

Typedef s truct {

ID chunk ID (number of the block);

Long chunk Size (block size);

Uns igned char waveform Da ta []; } Da ta Chunk;

Encrypting audio data is to encrypt Data Chunk's content domain waveform Data. The encryption method can be selected in the following three ways:

Method 1: Encrypted recording is performed in real time according to each sampled data. For sampling according to frames (for example, G.729, sampling with 20ms), this encryption method can be used for real-time encryption because the number of samples per second is small.

Method 2: Perform encrypted recording in real time at regular intervals. For example, G.711 can encrypt each 20ms of sampled data (including 20 samples of data in 20ms when it is 8KHz). This method can be compared to mode 1 Effectively control the number of real-time encryption and control the overhead of the encryption algorithm to achieve real-time encryption and decryption.

Method 3: Encrypt the audio data in the entire waveform Data at the end of the recording. (2) For files evolved based on the ISO base media file format, such as 3GP, Qui ckTime, MPEG, the basic format is shown in Figure 4. It can be seen that the ISO file consists of a series of objects (BOX), which can also be called boxes. There are two most important BOX in the ISO file: Movie Box (moov) for storing media control information and Media Data Box (mdat) for storing media audio and video data.

Encrypting the audio and video data of the content is to encrypt the content of mda t. The encryption method can be selected as follows:

Method 1: Encrypted recording is performed in real time according to each sampled data. When the number of samples per second is small, real-time encryption can be implemented by using this encryption method.

Method 2: Perform real-time encrypted recording according to the trunk mode. The trunk mode is to encrypt multiple samples as a whole, and the whole is encrypted. The decryption is also performed in a trunk unit. This method can effectively control the number of real-time encryption and control encryption. The overhead of the algorithm, thus realizing real-time encryption and decryption. Method 3: After the recording is finished, the content in the entire mda t is encrypted.

This completes the encrypted recording process of the network multimedia real-time content.

The embodiment of the invention further provides a method for decrypting and playing a network multimedia.

As shown in FIG. 5, the method for decrypting playback includes two steps of 501, 502:

501. Decrypt the content of the conference after the encrypted recording. As shown in FIG. 6, 501 specifically includes two steps of 5011 and 5012.

5011. Obtain a key set by the user.

In the prior art, when the conference recording file needs to be played, the conference controller sends a Mod command to the right mixer through the Mp interface, and the Mod command only carries a signal for notifying the playback of the recorded content. The H248 protocol is defined as follows:

Package Name: Advanced audio server base package

Package ID: aasb (0x0033)

The signals played are as follows:

Si na l Name: P lay

Si gna l ID: p lay (0x0001)

The main parameters of the signal are as follows:

In order for H.248 to support the decryption and playback of the conference recording content, it is necessary to extend the Mp interface, and the controller outputs the decryption algorithm and the key input by the user in the Mod command while the playback signal is being transmitted. The playback signal is as follows:

File Encryption Play Package

Package ID: FEP

Vers ion: 1

Extends: aasb vers ion 1

Signal Name: Play

Signal ID: play (0x0001)

Parameter Name: Encrypt ion Type

Parameter ID: Enc Type (0x0011)

De s c r i p t i on: indicates the type of decryption algorithm needed for playback

Type: Octet string

O tional: Yes

Default: None

Parameter Name: Encryption Key

Parameter ID: Enc Key (0x0012)

De s c r i p t i on: indicates the decryption key required for playback

Type: Octet string (SIZE (0..65535))

Optional: Yes

Default: None

This tells us the decryption algorithm and decryption key that are needed for decryption.

5012. Decrypt the encrypted conference recording content by using the obtained key. The recording of the conference can be decrypted according to the key specified in the playback signal. Since there are two ways to encrypt the recording of the conference, there are two ways to decrypt the recording of the conference:

1. Record the content of the conference. After the recording is finished, generate a clear text recording file. When encrypting, the full text of the plaintext file is encrypted by calling the specified encryption algorithm according to the specified key. In this way, when decrypting the playback, the full text needs to be decrypted and then played.

2. If the audio and video data of the conference recording content is only encrypted when encrypting, the recording file itself is not encrypted as a whole, and the control information of the media file is not encrypted. Then, the audio and video of the recording content of the conference are decrypted. Data decryption can be played.

The files generated after the conference recording include WAV files and ISO files.

Typedef s truct {

ID chunk ID (number of the block);

Long chunk Size (block size);

Uns igned char waveform Da ta [];

} Da ta Chunk:

Decrypting audio data is to decrypt Data Chunk's content domain waveform Data. There are 3 ways to encrypt. Correspondingly, the following three methods can be used for decryption:

Method 1: Encrypted recording is performed for each sampled data during encryption, and decrypted according to each sampled data.

Method 2: Encrypted recording at a fixed interval during encryption, and at a fixed interval during decryption Secret. For example, G.711 can encrypt the sampled data every 20ms (including 20 samples of data in 20ms when it is 8KHz), and decrypts the sampled data every 20ms as a whole when decrypting. Compared with mode 1, the number of real-time decryption can be effectively controlled, and the overhead of the decryption algorithm can be controlled, thereby realizing real-time decryption.

Method 3: When encrypting, the audio data in the entire waveform data is encrypted after the end of the recording, so that the decryption also needs to decrypt all the encrypted audio data after the end of the recording.

(2) For files evolved based on the ISO base media file format, such as 3GP, Qui ckTime, MPEG, the basic format is shown in Figure 4. It can be seen that the ISO file consists of a series of objects (BOX), which can also be called boxes. There are two most important BOX in the ISO file: Movie Box (moov) for storing media control information and Media Data Box (mdat) for storing media audio and video data.

Decrypting the audio and video data of the content is to decrypt the content of mda t. There are three ways to encrypt the content. Correspondingly, the following three methods can be used for decryption:

Method 2: When encrypting, perform real-time encrypted recording according to the trunk mode. The trunk mode is to encrypt multiple samples as a whole, and the decryption is also performed in a trunk unit, and multiple samples are decrypted as a whole. In this way, the number of real-time decryptions can be effectively controlled, and the overhead of the decryption algorithm can be controlled, thereby realizing real-time decryption.

Mode 3: Encryption encrypts the content of the entire mdat after the end of the recording, so that when decrypting, all the encrypted audio and video data needs to be decrypted after the recording is finished.

502. Play the decrypted conference content. As shown in FIG. 7, 502 specifically includes two steps of 5021, 5022: 5021. The conference controller creates a network resource required for playing the conference recording file and requests the conference mixer to allocate the network endpoint.

After the conference is in progress or after the conference ends, the user logs in to the conference terminal or through the web interface, prepares to replay the recorded conference content. The application server notifies the conference controller to create the network resources required for playing the conference recording file, and then the controller sends a command request to the network mixer through the Mp interface.

5022, the right mixer allocates network endpoints.

5023. The conference controller starts playback of the conference recording file.

After the network endpoint is assigned, the application server notifies the conference controller to initiate playback of the recorded file.

5024. The right mixer plays the recorded content to the network endpoint.

The conference controller sends the Mod command of the H248 protocol through the Mp interface, and requests the conference mixer to play the decrypted recording content to the network endpoint just allocated.

This completes the decryption and playback process of the network multimedia real-time content.

In the embodiment of the present invention, before the start of the network multimedia real-time conference or during the conference, the user sets the recording of the conference content and sets the key, and encrypts the recorded content of the conference by using the key; After the end, the user can replay the recorded meeting content according to the set key. In the embodiment of the present invention, the recorded content of the conference is encrypted, and only the key can be obtained according to the key, thereby solving the problem that the recorded content of the network multimedia real-time is improperly used. The embodiment of the invention further provides an encrypted recording device for a network multimedia conference.

As shown in Figure 8, the device includes:

The recording module 801 is configured to record the real-time content of the network multimedia;

The encryption module 802 is configured to encrypt the recorded content.

Before the start of ^yi, the user logs in to the terminal or through the web interface to prepare for network multimedia. Real-time meeting. The application server notifies the conference controller to create the network resources required for the conference recording, and then

The controller sends a command through the Mp interface to request the conference mixer to allocate network endpoints. After the conference mixer assigns a network endpoint, the application server notifies the controller that the recording of the conference content is initiated, and the conference mixer records the content on the assigned network endpoint into the file.

The encryption module 802 includes:

The key unit 803 is configured to acquire a key set by a user.

The conference controller sends a Mod command of the H248 protocol, and requests the conference mixer to record the conference content into the file on the allocated network endpoint. The Mod command carries the signal for notifying the recording, and the encryption algorithm and the user are specified in the recording signal. The key entered.

The encryption unit 804 is configured to encrypt the conference recording content according to the foregoing key.

In this way, the encrypted recording of the content of the network multimedia real-time conference can be completed by the device.

The embodiment of the invention further provides a network multimedia decryption and playback device.

As shown in Figure 9, the device includes:

The decryption module 01 is configured to decrypt the encrypted content after the encrypted recording;

The playing module 902 is configured to play the decrypted content.

The decryption module 901 includes: The key unit 903 is configured to acquire a key set by a user.

The conference controller sends a Mod command of the H248 protocol, and requests the conference mixer to record the conference content into the file on the allocated network endpoint. The Mod command carries the signal for notification playback, and the decryption algorithm and the user are specified in the playback signal. The decryption key entered.

The decryption unit 904 is configured to decrypt the encrypted conference recording content according to the above key. The encrypted conference recording can be decrypted according to the key specified in the playback signal. Since there are two ways to encrypt the recording of the conference, there are two ways to decrypt the recording of the conference:

After the conference is in progress or after the conference ends, the user logs in to the conference terminal or through the web interface, prepares to replay the recorded conference content. The application server notifies the conference controller to create the network resources required for playing the conference recording file, and then the controller sends a command through the Mp interface to request the network to allocate the network endpoint. After the conference mixer allocates the network endpoint, the application server notifies the conference controller to start the playback of the recorded file, and the conference controller sends a command through the Mp interface to request the conference mixer to play the decrypted recording to the network endpoint just assigned. on.

In this way, the decryption and playing of the network multimedia real-time content is completed by the device.

In the embodiment of the present invention, before the start of the network multimedia real-time conference or during the conference, the user sets the recording of the conference content and sets the key, and uses the key to add the recorded content of the conference. At the same time, after the conference is in progress or after the conference ends, the user can replay the recorded conference content according to the set key. The embodiment of the invention encrypts the recorded content of the conference, and only the key content can be obtained according to the key, thereby solving the problem that the recorded content of the network multimedia real-time meaning is improperly used.

The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

Rights request

A method for encrypting and recording a network multimedia conference, comprising:

Recording a network multimedia conference;

Encrypt the conference recording.

2. The method for encrypting a network multimedia conference according to claim 1, wherein the step of encrypting the recorded content comprises:

Obtain the key set by the user;

The content recorded is encrypted using the key.

The method for encrypting a network multimedia conference according to claim 2, wherein the step of encrypting the conference recording content by using the key comprises:

After the recording ends, a recording file is generated, and the recording file is encrypted by using the key; or the audio and video data of the conference recording content is encrypted.

The encryption recording method of the network multimedia conference according to claim 3, wherein the step of encrypting the audio and video data of the conference recording content comprises:

Performing real-time encrypted recording of the audio and video data of the conference recording according to each sampled data; or

Real-time encrypted recording of audio and video data of the recorded content at regular intervals; or

After the recording is finished, the audio and video data of the entire recording of the conference is encrypted.

5. A method for decrypting and playing a network multimedia conference, characterized in that it comprises:

Decrypt the encrypted conference content;

Play the decrypted ^ meaning content.

6. The method for decrypting and playing a network multimedia conference according to claim 5, wherein: The step of decrypting the encrypted recorded conference content includes:

Obtain the key set by the user;

The encrypted conference recording content is decrypted by using the key.

The decryption and playback method of the network multimedia conference according to claim 6, wherein the step of decrypting the encrypted conference recording content by using the key comprises:

After the recording ends, a recording file is generated, and the encrypted recording file is decrypted according to the key; or

The audio and video data of the encrypted conference recording content is decrypted according to the key.

The decryption and playback method of the network multimedia conference according to claim 7, wherein the step of decrypting the audio and video data of the encrypted conference recording content according to the key comprises:

Performing real-time decryption of the encrypted audio and video data according to each sampled data; or real-time decrypting the encrypted audio and video data at regular intervals; or

After the recording is finished, the encrypted audio and video data of the entire conference recording is decrypted.

9. An encrypted recording device for a network multimedia conference, comprising:

a recording module, configured to record network multimedia real-time content;

An encryption module, configured to encrypt the conference recording content.

The encryption recording device of the network multimedia conference according to claim 9, wherein the encryption module comprises:

a key unit, configured to acquire a key set by a user;

And an encryption unit, configured to encrypt the conference recording content according to the key.

11. A network multimedia decryption playback device, comprising:

a decryption module, configured to decrypt the encrypted content after the encrypted recording; The playing module is configured to play the decrypted content.

The decryption and playback device of the network multimedia device according to claim 11, wherein the decryption module comprises:

a key unit, configured to acquire a key set by a user;

And a decryption unit, configured to decrypt the encrypted conference recording content according to the key.