WO2016173228A1

WO2016173228A1 - Link establishment processing method, device and system

Info

Publication number: WO2016173228A1
Application number: PCT/CN2015/093431
Authority: WO
Inventors: 杨汉波
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-04-28
Filing date: 2015-10-30
Publication date: 2016-11-03
Also published as: CN106162246A

Abstract

Disclosed are a link establishment processing method, device and system. The method comprises: a streaming media server receiving a link establishment request message for requesting link establishment sent by a player, wherein the link establishment request message carries a one-time identifier for acquiring a streaming media resource in a predetermined time; the streaming media server judging whether the one-time identifier is valid; and under the condition where a judgement result is yes, the streaming media sever performing link establishment processing with the player according to the link establishment request message. Link establishment is performed by means of the method, thereby solving the problem in the related art that a link establishment mode between a streaming media server and a player cannot ensure that a user can only access an authorized streaming media resource, such that the user can only access the authorized streaming media resource.

Description

Chain building processing method, device and system

Technical field

The present invention relates to the field of communications, and in particular to a chain-building processing method, apparatus, and system.

Background technique

Users can watch TV dramas, movies, learning videos, etc. online on the browser of the computer. There is no need to install additional plug-ins, mainly because these browsers have built-in Flash plug-ins. At this time, the online streaming service is a Flash player as a client. The streaming media server serves as a communication and interaction process for the server. This is one of the common forms of streaming media services. With the popularity of smart phones such as smart phones and smart TVs, other forms of streaming media services are becoming more and more common.

For those free, highly-recognized streaming services, the anti-theft chain may not be mentioned, and for paid, private, and restricted streaming services, how to protect streaming media service resources from illegal access is very important.

FIG. 1 is a schematic diagram of a link-building process according to the related art. As shown in FIG. 1 , a real-time service address of a streaming media service is used to establish a link, and a Real Time Messaging Protocol (RTMP) is suitable for Flash and background interaction. Real-time messaging protocol, an open protocol developed for the audio, video, and data transfer between the Flash player and the server. This protocol does not buffer the video locally to the computer, effectively protecting resources, but without effective Anti-theft chain mechanism, links may be illegally obtained, access to links may also be quietly spread, or played without any restrictions, which will bring unnecessary losses.

The streaming anti-theft chain that is common in the prior art has the following solutions:

(1) Address confusion: You can use the agreed encryption and decryption (code) algorithm to encrypt the real address first, generate a string that others can't understand, pass it to the client's player, and then decrypt it (code) in the player.

(2) Perform business control on the application system. For example, if a user has not paid for it, he will not see the list of videos, and pay the fee to see it. But the play page can still see (via web source code analysis) the address of the real streaming service.

(3) For the online streaming service on the Web, the domain name identification of the access source: for example, the video posted by the A website, if it is quoted on the B website, it cannot be played, and the source of the website is judged.

The above-mentioned common streaming anti-theft chain technology has obvious shortcomings, which can only be used for simple prevention, and is easy for people who know technology slightly. For example, the decoding algorithm is easy to obtain. For example, if the webpage is loaded into the Flash player's swf file, the decoding algorithm can be obtained. As long as the real address of the streaming media is obtained (for example, the network capture packet is obtained), the accessible playback can be realized at any time. As long as one person spreads out through the network, others can leave the original webpage system without logging in. They only need to save the original webpage system as a static webpage for viewing. The identification of the source of the website domain name is also easy to crack, such as setting the same domain name in the local host file, but pointing to other website IP, that is, can achieve viewing.

The problem of establishing a link between a streaming media server and a player in the related art cannot guarantee that a user can only access a privileged streaming media resource, and an effective solution has not been proposed.

Summary of the invention

The embodiment of the invention provides a method, a device and a system for establishing a chain to solve at least the problem that the link establishment mode between the streaming media server and the player in the related art cannot ensure that the user can only access the authorized streaming media resource.

According to an aspect of the present invention, a method for establishing a link is provided, including: a streaming media server receiving a link establishment request message sent by a player for requesting to establish a link, wherein the link establishment request message carries a one-time identifier for obtaining a streaming media resource within a predetermined time; the streaming media server determining whether the one-time identifier is legal; and if the determination result is yes, the streaming media server according to the link establishment request message Chaining with the player.

Further, before the streaming media server receives the link establishment request message sent by the player for requesting to establish a link, the method includes: the streaming media server receiving an identifier request message sent by the network server, where the identifier The request message is sent by the network server after determining that the right to use the streaming media resource; the streaming media server generates the one-time identifier according to the identifier request message.

Further, after the streaming media server generates the one-time identifier according to the identifier request message, the method further includes: the streaming media server clearing a one-time identifier that is not used after a predetermined time; or The streaming server destroys the one-time identifier after use.

Further, after the streaming media server performs chaining processing with the player according to the link establishment request message, the method further includes: the streaming media server providing the streaming media resource to the player.

According to another aspect of the embodiments of the present invention, a link establishment processing method is provided, including: a player sends a link establishment request message for requesting to establish a link to a streaming media server, where the link establishment request message is carried a one-time identifier for obtaining a streaming media resource within a predetermined time; and when the streaming media server determines that the one-time identifier is legal, the player is configured according to the link establishment request message and the streaming media server Chain construction.

Further, before the player sends the link request message for requesting to establish a link, the method further includes: the player sending a request message carrying a streaming media resource ID to a network server, where And the request message is used to request to obtain a play address of the streaming media resource; and when the network server determines, according to the streaming media resource ID, that the authorized use of the streaming media resource, the player receives the a one-time identifier sent by the network server, where the one-time identifier is generated after the streaming media server receives the identifier request message sent by the network server.

Further, the receiving, by the player, the one-time identifier sent by the streaming media server comprises: receiving, by the network server, the one-time identifier in a streaming media resource address as a parameter by the network server One-time identification.

According to another aspect of the embodiments of the present invention, there is also provided a chain building processing apparatus, which is applied to a streaming media server, and a package The receiving module is configured to receive a link-building request message sent by the player for requesting to establish a link, where the link-building request message carries a one-time identifier for acquiring a streaming media resource within a predetermined time; The module is configured to determine whether the one-time identifier is legal; the first chain-building processing module is configured to perform chain-building processing with the player according to the link-building request message if the determination result is yes.

According to another aspect of the present invention, a chain-building processing apparatus is further provided, which is applied to a player, and includes: a sending module, configured to send a link request message for requesting to establish a link to a streaming media server, where The link-building request message carries a one-time identifier for acquiring the streaming media resource in a predetermined time; the second link-building processing module is configured to: when the streaming media server determines that the one-time identifier is legal And performing chaining processing with the streaming media server according to the link establishment request message.

According to still another aspect of the present invention, a chain-building processing system is provided, including: a player, configured to send, to a streaming media server, a link-building request message for requesting to establish a chain, wherein the chain-building request message The request message carries a one-time identifier for obtaining a streaming media resource within a predetermined time; the streaming media server is configured to receive a link establishment request message sent by the player for requesting to establish a chain; and determine the one-time identifier Whether it is legal; if the judgment result is YES, the chain construction process is performed with the player according to the link establishment request message.

Further, the system further includes: a network server, configured to receive a request message that is sent by the player and that carries a streaming media resource ID, where the request message is used to request to acquire a play address of the streaming media resource; Determining, according to the streaming media resource ID, whether the right to use the streaming media resource, and if the determination result is yes, sending an identifier request message for requesting to generate a one-time identifier to the streaming media server; receiving the stream And the one-time identifier generated by the media server after receiving the identifier request message, and sending the one-time identifier to the player as a parameter in a streaming media resource address.

According to the embodiment of the present invention, the streaming media server receives the link establishment request message sent by the player for requesting to establish a chain, wherein the link establishment request message carries a one-time for acquiring the streaming media resource within a predetermined time. And determining, by the streaming media server, whether the one-time identifier is legal; if the determination result is yes, the streaming media server performs chain-building processing with the player according to the chain-building request message, by using the foregoing manner The problem of establishing a link between the streaming media server and the player in the related art cannot ensure that the user can only access the authorized streaming media resource, so that the user can only access the authorized streaming media resource.

DRAWINGS

The drawings are intended to provide a further understanding of the embodiments of the present invention, and are intended to be a part of the present invention, and the description of the present invention is not intended to limit the invention. In the drawing:

1 is a schematic diagram of a chain-building process according to the related art;

2 is a flowchart 1 of a chain construction processing method according to an embodiment of the present invention;

3 is a second flowchart of a chain construction processing method according to an embodiment of the present invention;

4 is a structural block diagram 1 of a chain construction processing apparatus according to an embodiment of the present invention;

FIG. 5 is a second structural block diagram of a chain construction processing apparatus according to an embodiment of the present invention; FIG.

6 is a flow chart of a chain building processing method in accordance with a preferred embodiment of the present invention;

7 is a flow chart for verifying whether a user has authority, in accordance with a preferred embodiment of the present invention;

8 is a flow diagram of a time-delayed clean-up unused ticket in accordance with a preferred embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In the embodiment, a chain construction processing method is provided. FIG. 2 is a flowchart 1 of a chain construction processing method according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:

In step S202, the streaming media server receives a link-building request message sent by the player for requesting to establish a link, where the link-building request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

Step S204, the streaming media server determines whether the one-time identifier is legal;

Step S206: If the determination result is yes, the streaming media server performs chaining processing with the player according to the link establishment request message.

Through the above steps, the streaming media server solves the chaining between the streaming media server and the player in the related art by establishing a chain-building request message with a one-time identifier for obtaining the streaming media resource within a predetermined time. The method cannot guarantee that the user can only access the authorized streaming media resources, so that the user can only access the authorized streaming media resources.

The media server generates the one-time identifier by receiving the identifier request message sent by the network server, where the identifier request message is sent by the network server after determining that the network resource is authorized to use the network media resource; The streaming media server generates the one-time identifier according to the identifier request message. It should be noted that the above-mentioned one-time identifier may be in a plurality of forms, for example, may be a “Ticket”, which can be generally understood as a daily life. Movie tickets can only be used within the validity period, expired after use, and expired.

In order to ensure the timeliness of the above-mentioned one-time identifier, after the streaming server generates the one-time identifier according to the identifier request message, the streaming media server cleans up the one-time identifier that is not used after the predetermined time; or the streaming media server Destroy the one-time logo after use. For example, the streaming server can "clean up" the generated tickets that are out of date, and the cleaning period is short, because it will be used immediately after it is generated. It can be an increase timer, batch cleaning, such as cleaning every 1 minute.

Further, after the streaming server performs chaining processing with the player according to the link establishment request message, the streaming media server provides the streaming media resource to the player according to the completed link establishment.

The embodiment of the present invention further provides a chain construction processing method, and FIG. 3 is a chain construction processing method according to an embodiment of the present invention. Flowchart 2, as shown in Figure 3, the process includes the following steps:

Step S302, the player sends a link establishment request message for requesting to establish a chain to the streaming media server, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

Step S304: If the streaming media server determines that the one-time identifier is legal, the player performs chain-building processing with the streaming media server according to the link establishment request message.

The player may obtain the one-time identifier by sending a request message carrying the streaming media resource ID to the network server before the player sends the link request message for requesting to establish the link. The request message is used to request to obtain a play address of the streaming media resource. When the network server determines that the streaming media resource is authorized according to the streaming media resource ID, the player receives the one-time sending sent by the network server. And an identifier, wherein the one-time identifier is generated after the streaming server receives the identifier request message sent by the network server. The player can receive the incoming "backend web service address" parameter and request this address to get the real address of the streaming service.

In an optional embodiment, the player may receive the one-time identifier by using the network server as a parameter in the streaming media resource address.

The embodiment of the present invention further provides a chain-building processing device, which is applied to a streaming media server, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

4 is a block diagram showing the structure of a chain-building processing apparatus according to an embodiment of the present invention. As shown in FIG. 4, the apparatus includes:

The receiving module 42 is configured to receive a link establishment request message sent by the player for requesting to establish a link, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

The determining module 44 is configured to determine whether the one-time identifier is legal;

The first link building processing module 46 is configured to perform chaining processing with the player according to the link establishment request message if the determination result is YES.

The embodiment of the present invention further provides a chain-building processing device, which is applied to a player. FIG. 5 is a structural block diagram 2 of a chain-building processing device according to an embodiment of the present invention. As shown in FIG. 5, the device includes:

The sending module 52 is configured to send, to the streaming media server, a link establishment request message for requesting to establish a link, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

The second link processing module 54 is configured to perform chaining processing with the streaming media server according to the link establishment request message if the streaming media server determines that the one-time identifier is legal.

The embodiment of the present invention further provides a chain-building processing system, including: a player, configured to send a chain-building request message for requesting to establish a chain to a streaming media server, where the link-building request message carries Get the flow within the scheduled time a one-time identifier of the media resource; the streaming media server is configured to receive a link-building request message sent by the player for requesting to establish a link; and determine whether the one-time identifier is legal; if the judgment result is yes, according to the The link request message is chained to the player.

In an optional embodiment, the system further includes: a network server, configured to receive a request message that is sent by the player and that carries a streaming media resource ID, where the request message is used to request to obtain the streaming media resource. a play address; determining, according to the streaming media resource ID, whether the right to use the streaming media resource, and if the determination result is yes, sending an identifier request message for requesting to generate a one-time identifier to the streaming media server; receiving the streaming media The one-time identifier generated by the server after receiving the identifier request message, and the one-time identifier is sent to the player as a parameter in the streaming media resource address.

In another embodiment, software is also provided for performing the technical solutions described in the above embodiments and preferred embodiments.

In another embodiment, a storage medium is further provided, wherein the software includes the above-mentioned software, including but not limited to: an optical disk, a floppy disk, a hard disk, an erasable memory, and the like.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order. It is to be understood that the objects so used are interchangeable, where appropriate, so that the embodiments of the invention described herein can be carried out in a sequence other than those illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or units is not necessarily limited to Those steps or units may include other steps or units not explicitly listed or inherent to such processes, methods, products or devices.

For the above-mentioned problems in the related art, the following description uses a one-time identification as a "ticket" as an example, and further describes with a specific optional embodiment. The following optional embodiments combine the above-mentioned optional embodiments and their optional implementations. the way.

FIG. 6 is a flowchart of a chain building processing method according to a preferred embodiment of the present invention. As shown in FIG. 6, the method includes the following steps:

Step S602, the parameter incoming carrier (such as a browser) sends a "Background web service address" parameter to the player, and the address carries the streaming media resource ID, such as: srcFrom: http://xx.xx.xx.xx /v? Id=1234. It should be noted that the common incoming play address is the real play address of the streaming media server, and the optional embodiment is a Web service address.

In step S604, the player requests http://xx.xx.xx.xx/v from the web server. Id=1234, get the real address of the streaming media.

In step S606, the web service determines whether the user has the right to access the resource. Because the main responsibility of the streaming media server is streaming media on-demand, live broadcast, etc., the user's authority is mainly responsible for the business's Web system, and the authentication is handed over to the business's Web system.

Step S607, if there is no permission, return "Failed, no permission".

Step S608, if there is permission, continue to request a ticket (Ticket) from the streaming server. Because the streaming media finally has to verify the ticket, the ticket generation and verification are handed over to the streaming server, which is more reasonable and safe.

In step S610, the streaming service generates a ticket and stores the ticket to the streaming server.

In step S612, the streaming server returns the generated ticket (Ticket) to the web server.

Step S614, the web server returns a ticket parameter in the real streaming service address returned to the player. For example, the streaming service address of the rtmp protocol is rtmp://a.b.c.d/vod/mp4:sample.mp4? Ticket=zzzzz. Specifically, the storage ID path of the streaming media is found through the resource ID; the splicing protocol, the streaming media server IP, the port, the storage path, and the like are returned together with the parameter “Ticket”.

In step S616, the player and the streaming media server are chained, and the ticket is requested.

In step S618, the streaming media server verifies whether the ticket is legal, such as whether the time is within a valid range.

In step S619, if the ticket is illegal, the chain is refused.

In step S620, if it is legal, the ticket is destroyed, and the interaction continues according to the normal process. Tickets can only be used once to ensure security.

FIG. 7 is a flow chart for verifying whether a user has authority according to a preferred embodiment of the present invention. As shown in FIG. 7, the business web system is implemented, and includes the following steps:

Step S702, it is determined whether the passed parameter "streaming resource ID" is legal, and if the determination result is yes, step S704 is performed;

Step S704, it is determined whether the parameter is legal, if the determination result is yes, step S706 is performed; if the determination result is no, step S607 is performed;

Step S706, obtaining a user login ID from the user session;

In step S708, it is determined whether the current user has the right to access the streaming media resource. If the determination result is yes, step S710 is performed. It is required to determine whether the current user has the right to access the streaming media resource. The business is completed on its own, based on internal implementation.

In step S710, it is determined whether the user has the right to access. If the determination result is YES, the above-mentioned step S608 is executed. If the determination result is negative, the above-described step S607 is executed.

An unusual situation may arise where the streaming server creates a ticket but does not use it beyond the deadline. This kind of ticket (Ticket) is destroyed. The implementation method is: adding delay monitoring to each generated single ticket (Ticket), for example, after 1 minute delay, the ticket is still cleaned up immediately. FIG. 8 is a flow chart of delaying cleaning out expired unused tickets in accordance with a preferred embodiment of the present invention. FIG. 8 includes the following steps:

Step S802, generating a ticket (Ticket); it should be noted that the streaming media server needs to add a "Ticket Generation" service, and the ticket generation function must be requested by http, and the returned result may be a string. . The generated ticket (Ticket) can be saved to the memory. Moreover, it can only be called by the internal system and must not be provided externally. In order to enhance security and avoid being illegally invoked, some measures can be taken, such as: whitelisting the IP addresses of some Web services to determine whether the caller is in the whitelist.

Step S804, creating a delayed destruction listener;

Step S806, starting a delay destroying the listener, and starting the child thread;

Step S808, sleeping, waiting for the set time;

Step S810, it is determined whether the ticket is still, if the determination result is yes, step S812 is performed;

In step S812, the ticket is destroyed.

With this alternative embodiment, it is guaranteed that the user can only access resources that have permissions. Online streaming services for business operations are especially important. Because the published streaming media (such as live video, on-demand) is often controlled, that is, not everyone can see it, even if the user needs to pay to view. An effective anti-theft chain avoids risk and brings value.

The access rights to streaming media resources are delegated to the business's Web system to achieve at least two advantages: First, the business system and the streaming media server each perform their duties, giving the business system full flexibility and operability, and To avoid the bloat of the streaming media service business; Second, the security is further enhanced: the streaming media service often does not store the user data, and can not identify and control the user session (Session), and cannot determine whether the user currently accessing the streaming media service is Legitimate, whether it is logged in, online or quit, and the current solution is to request the web service to obtain the real streaming service address before playing. If the web service recognizes that the user's login session has expired, the user returns a failure. Avoid situations where the web system session has expired, but can continue to access streaming service resources.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

The foregoing embodiments of the present invention can be applied to the field of communication, and solve the problem that the link establishment manner between the streaming media server and the player in the related art cannot ensure that the user can only access the authorized streaming media resource, so that the user can only access the Permissions for streaming resources.

Claims

A method of building a chain, comprising:

The streaming media server receives a link establishment request message sent by the player for requesting to establish a link, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

Determining, by the streaming media server, whether the one-time identifier is legal;

If the determination result is yes, the streaming server performs chaining processing with the player according to the link establishment request message.
The method of claim 1, wherein before the streaming server receives the link request message sent by the player for requesting to establish a link, the method includes:

The streaming media server receives an identifier request message sent by the network server, where the identifier request message is sent by the network server after determining that the right to use the streaming media resource is determined;

The streaming media server generates the one-time identifier according to the identifier request message.
The method of claim 2, wherein after the streaming server generates the one-time identifier according to the identifier request message, the method further comprises:

The streaming server cleans up the one-time identifier that is not used after a predetermined time; or,

The streaming server destroys the one-time identifier after use.
The method according to claim 1, wherein after the streaming server performs chaining processing with the player according to the link establishment request message, the method further includes:

The streaming server provides the streaming media resource to the player.
A method of building a chain, comprising:

The player sends a link establishment request message for requesting to establish a link to the streaming media server, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

When the streaming media server determines that the one-time identifier is legal, the player performs chain-building processing with the streaming media server according to the link establishment request message.
The method of claim 5, wherein before the player sends the link request message for requesting to establish a link, the method further comprises:

The player sends a request message carrying a streaming media resource ID to the network server, where the request message is used to request to obtain a play address of the streaming media resource;

When the network server determines that the streaming media resource is authorized to use, according to the streaming media resource ID, the player receives the one-time identifier sent by the network server, where the one-time identifier is in the office The streaming media server generates after receiving the identifier request message sent by the network server.
The method of claim 6, wherein the receiving, by the player, the one-time identifier sent by the streaming media server comprises:

The player receives the one-time identifier by using the network server as a parameter in the streaming media resource address by the network server.
A chain-building processing device is applied to a streaming media server, including:

a receiving module, configured to receive a link establishment request message sent by the player for requesting to establish a link, where the link establishment request message carries a one-time identifier for acquiring a streaming media resource within a predetermined time;

a determining module, configured to determine whether the one-time identifier is legal;

The first link processing module is configured to perform chaining processing with the player according to the link establishment request message if the determination result is YES.
A chain-building processing device for a player, comprising:

The sending module is configured to send a link establishment request message for requesting to establish a chain to the streaming media server, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

The second link-building processing module is configured to perform a chain-building process with the streaming media server according to the link establishment request message if the streaming media server determines that the one-time identifier is legal.
A chain building processing system comprising:

a player, configured to send a link establishment request message for requesting to establish a chain to the streaming media server, where the link establishment request message carries a one-time identifier for acquiring the streaming media resource within a predetermined time;

a streaming media server, configured to receive a link establishment request message sent by the player for requesting to establish a link; determine whether the one-time identifier is legal; and if the judgment result is yes, according to the link establishment request message Chaining with the player.
The system of claim 10 wherein said system further comprises:

a network server, configured to receive a request message that is sent by the player and that carries a streaming media resource ID, where the request message is used to request to acquire a play address of the streaming media resource; and determine, according to the streaming media resource ID, Having the right to use the streaming media resource, if the determination result is yes, sending an identifier request message for requesting to generate a one-time identifier to the streaming media server; receiving the identifier request by the streaming media server And the one-time identifier generated after the message is sent to the player in a manner that the one-time identifier is used as a parameter in the streaming media resource address.