WO2017088396A1 - 视频服务提供方法、访问鉴权方法及服务器和系统 - Google Patents

视频服务提供方法、访问鉴权方法及服务器和系统 Download PDF

Info

Publication number
WO2017088396A1
WO2017088396A1 PCT/CN2016/083205 CN2016083205W WO2017088396A1 WO 2017088396 A1 WO2017088396 A1 WO 2017088396A1 CN 2016083205 W CN2016083205 W CN 2016083205W WO 2017088396 A1 WO2017088396 A1 WO 2017088396A1
Authority
WO
WIPO (PCT)
Prior art keywords
video
client
server
access request
authentication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/083205
Other languages
English (en)
French (fr)
Inventor
金宗锐
王栋浩
刘钧石
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Le Holdings Beijing Co Ltd
LeCloud Computing Co Ltd
Original Assignee
Le Holdings Beijing Co Ltd
LeCloud Computing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Le Holdings Beijing Co Ltd, LeCloud Computing Co Ltd filed Critical Le Holdings Beijing Co Ltd
Priority to US15/252,847 priority Critical patent/US20170155940A1/en
Publication of WO2017088396A1 publication Critical patent/WO2017088396A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/254—Management at additional data server, e.g. shopping server, rights management server
    • H04N21/2541—Rights Management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0892—Network architectures or network communication protocols for network security for authentication of entities by using authentication-authorization-accounting [AAA] servers or protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H04L67/563—Data redirection of data network streams
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/239—Interfacing the upstream path of the transmission network, e.g. prioritizing client content requests
    • H04N21/2393—Interfacing the upstream path of the transmission network, e.g. prioritizing client content requests involving handling client requests
    • H04N21/2396—Interfacing the upstream path of the transmission network, e.g. prioritizing client content requests involving handling client requests characterized by admission policies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25866—Management of end-user data
    • H04N21/25875—Management of end-user data involving end-user authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25866—Management of end-user data
    • H04N21/25883—Management of end-user data being end-user demographical data, e.g. age, family status or address
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/27—Server based end-user applications
    • H04N21/274—Storing end-user multimedia data in response to end-user request, e.g. network recorder
    • H04N21/2743—Video hosting of uploaded data from client
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/4508—Management of client data or end-user data
    • H04N21/4532—Management of client data or end-user data involving end-user characteristics, e.g. viewer profile, preferences
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management e.g. creating a master electronic programme guide from data received from the Internet and a Head-end or controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4627—Rights management associated to the content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/61—Network physical structure; Signal processing
    • H04N21/6106—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network
    • H04N21/6125—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network involving transmission via Internet
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/65—Transmission of management data between client and server
    • H04N21/658—Transmission by the client directed to the server
    • H04N21/6581—Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/55—Push-based network services

Definitions

  • the present invention relates to the field of Internet technologies, and in particular, to a video service providing method, an access authentication method, and a server and system.
  • video service providers provide various video services to their customers by uploading their own video resources to the video service provider's server and having access to their own video from the video service provider's server. Or video resources owned by the video service provider but not owned by the customer, the customer can access the video service provider's video through an offline agreement with the video service provider.
  • a video service provider for example, LeTV, or Youku, or Sohu
  • customers for example, Jingdong, Dangdang, Taobao, etc.
  • users ie, end users
  • Jingdong users want to browse a mobile phone in Jingdong When watching the video about the mobile phone, Jingdong directly sent a request to LeTV to access the video about the mobile phone.
  • LeTV will directly provide the requested video for playback;
  • the problem in the provision of video service is that when a user accesses a video service provider's video through a client, the access request packet sent may be crawled by a third party, and once captured by a third party, the third party may adopt The access request packet acquires the video stored in the video service provider's video server for free, which brings security risks to the video service provider's video server, and also causes the customer video to be pirated.
  • the method adopted by the prior art is to directly authenticate the access request information packet in the video server, but in this case, the client needs to upload the user information of all users to the video server of the video service provider, and The video server needs to provide authentication services for all the clients it serves. On the one hand, there is a hidden danger of the user information leakage of the customer, and on the other hand, the burden of the video server is increased.
  • the present invention provides a video service providing method, an access authentication method, and a server and system to solve the technical problem that the user information of the leaked customer is hidden in the prior art and the video server is overburdened.
  • a video service providing method including:
  • the video server receives the client access request
  • a video access authentication method including:
  • the client server receives the client access request forwarded by the video server;
  • a video server comprising:
  • An access request receiving module configured to receive a client access request
  • the access request forwarding module is configured to forward the access request to the client server of the client for authentication
  • An authentication feedback receiving module configured to receive authentication feedback fed back by the client server
  • the video push determination module is configured to determine whether to provide a video service based on at least the authentication feedback.
  • a client server comprising:
  • a forwarding access request receiving module configured to receive a client access request forwarded by the video server
  • An authentication feedback generating module configured to generate an authentication feedback according to a client access request
  • the authentication feedback sending module is configured to send the authentication feedback to the video server.
  • a video access system comprising the above-described video server and the above-described client server.
  • the video service providing method, the access authentication method, and the server and the system in the embodiment of the present invention when the video server receives the access request of the user, instead of directly verifying the access request directly on the server, the access is performed.
  • the request is forwarded to the client server of the client corresponding to the user for local verification. Then, if the video server performs verification, it does not need to store all the user information of the user of the client, which reduces the risk of leaking user information and reduces the video server. of Running burden.
  • FIG. 1 is a flowchart of an embodiment of a video service providing method according to the present invention.
  • FIG. 2 is a flowchart of another embodiment of a video service providing method according to the present invention.
  • FIG. 3 is a flowchart of an embodiment of a video access authentication method according to the present invention.
  • FIG. 4 is a schematic diagram of an embodiment of a video server of the present invention.
  • FIG. 5 is a schematic diagram of another embodiment of a video server of the present invention.
  • FIG. 6 is a schematic diagram of an embodiment of a client server of the present invention.
  • FIG. 7 is a block diagram of an embodiment of a video access system of the present invention.
  • the invention is applicable to a wide variety of general purpose or special purpose computing system environments or configurations.
  • program modules include routines, programs, objects, components, data structures, and the like that perform particular tasks or implement particular abstract data types.
  • program modules can also be in a distributed computing environment
  • tasks are performed by remote processing devices that are connected through a communication network.
  • program modules can be located in both local and remote computer storage media including storage devices.
  • a video service providing method includes:
  • the video server receives a client access request.
  • the video server forwards the access request to the client server of the client for authentication.
  • the video server receives the authentication feedback fed back by the client server.
  • the video server determines, according to the authentication feedback, whether to provide a video service.
  • the video server when receiving the access request of the user, the video server does not directly check the access request directly on the server, but forwards the access request to the client server of the client corresponding to the user for localization.
  • Verification because if the video server performs verification, all the user information of the user of the client needs to be stored, so that there is a danger of leaking user information on the one hand, and the running load of the video server is also increased on the other hand (because, the video server More than one customer is served.
  • the verification work is completed locally on the client server, which helps to maintain the confidentiality of the information of the user, and on the other hand, improves the efficiency of the verification and improves the efficiency.
  • User experience because, if the verification is done on the video server side, due to the huge amount of traffic, it will inevitably lead to check queuing, and long queue waiting for verification will adversely affect the real-time experience of user access).
  • the existing video service provider has a problem in that when a user accesses a video service provider's video through a client, the access request packet sent may be crawled by a third party, and once captured by a third party, The three parties can use the access request packet to obtain the video stored in the video service provider's video server for free, and bring it to the video service provider's video server.
  • the security risks and the piracy of the client video are also caused, and the present embodiment avoids the occurrence of the theft of the access request packet by the verification of the user information on the client server.
  • the forwarding of the access request to the client server of the client for authentication includes: the video server determines the domain name corresponding to the access request according to the access request; and the video server determines to send according to the correspondence between the pre-stored client server address and the domain name of the client server.
  • the authentication feedback includes authentication verification information corresponding to the service verification information.
  • the video server determines, according to the authentication feedback, whether to provide a video service, where the video server compares the service verification information and the authentication verification information.
  • the video server pushes video information corresponding to the access request to the client;
  • the comparison result indicates that the access request is an illegal request, the video server refuses to push Corresponding to the video information of the access request to the client;
  • the video server deletes the service verification information.
  • the service verification information is generated in the video server and generated in the client server according to the preset rule when receiving the access request of the user. After verifying the verification information and feeding back the authentication verification information to the video server for verification, the service verification information is deleted immediately, thereby realizing the validity of the feedback information sent by the client server to the video server.
  • the preset rule in this embodiment may be a preset mapping table or any other rule that makes the authentication check information and the service authentication information correspond one-to-one, so that when the authentication check information and the service authentication information are compared
  • the access request can be determined to be a legitimate request as long as the two are corresponding according to the preset rule.
  • the video server can number and store all its customers starting from 1, where the number is equivalent to the service check information, and the rule is set: when the number (ie, service check information) is n, the corresponding authentication The verification information is n 2 , and the comparison between the service verification information and the authentication verification information at the time of comparison is as long as the rule is satisfied between the two and the corresponding access request is a legal request; of course, the pre-preparation in this embodiment
  • the rule is not limited to the above example. You can define a simpler preset rule or define a more complex preset rule according to your needs. You can change the preset rule periodically according to your needs, and use the same rule for a long time to prevent packet capture. After mastering, capture the package.
  • the preset rule in this embodiment is stored in the client server and the video server, and is isolated from the outside world, the corresponding service verification information and authentication check information are also unique and cannot be obtained by the outside world.
  • the service verification information will be deleted directly. It also ensures that even if the feedback information fed back to the video server by the client server is captured, the video server has no corresponding information.
  • the service verification information invalidates the packet capture information, thereby avoiding the piracy of the video caused by the captured packet; in addition, the mechanism for generating the verification information in real time and deleting the service verification information in real time is lightened.
  • the storage burden of the video server also reduces the time required to select the correct service verification information during verification, thereby improving the user experience.
  • a video access authentication method including:
  • the client server receives a client access request forwarded by the video server.
  • the client server generates an authentication feedback according to the client access request.
  • the client server sends the authentication feedback to the video server.
  • the client server receives the client access request forwarded by the video server for verification, instead of directly verifying the access request directly on the video server, because if the video server performs verification, the client of the client needs to be stored. All the user information, on the one hand, there is the danger of leaking user information, on the other hand, the operational burden of the video server is also increased (because the video server serves more than one customer), and the verification work is performed by this embodiment.
  • the client server is completed locally, which helps to maintain the confidentiality of the information of its own users.
  • the existing video service provider has a problem in that when a user accesses a video service provider's video through a client, the access request packet sent may be crawled by a third party, and once captured by a third party, The three parties can use the access request packet to obtain the video stored in the video service provider's video server for free, which brings security risks to the video service provider's video server, and also causes the customer video to be pirated.
  • the manner avoids the occurrence of the theft of the access request packet by the verification of the user information on the client server.
  • the authentication feedback includes authentication verification information, and the authentication verification information corresponds to service verification information generated by the video server after receiving the client access request.
  • the service verification information is generated in the video server and generated in the client server according to the preset rule when receiving the access request of the user. After verifying the verification information and feeding back the authentication verification information to the video server for verification, the service verification information is deleted immediately, thereby realizing the validity of the feedback information sent by the client server to the video server.
  • the preset rule in this embodiment is stored in the client server and the video server, and is isolated from the outside world, the corresponding service verification information and authentication check information are also unique and cannot be obtained by the outside world.
  • the service verification information will be deleted directly. It also ensures that even if the feedback information fed back to the video server by the client server is captured, the video server has no corresponding information.
  • the service verification information invalidates the packet capture information, thereby avoiding the piracy of the video caused by the captured packet; in addition, the mechanism for generating the verification information in real time and deleting the service verification information in real time is lightened.
  • the storage burden of the video server also reduces the time required to select the correct service verification information during verification, thereby improving the user experience.
  • a related function module can be implemented by a hardware processor.
  • the present invention further provides a video server, including:
  • An access request receiving module configured to receive a client access request
  • An access request forwarding module configured to forward the access request to a client server of the client for authentication
  • An authentication feedback receiving module configured to receive authentication feedback fed back by the client server
  • the video push determination module is configured to determine whether to provide a video service according to at least the authentication feedback.
  • the video server when the access request receiving module receives the access request of the user, the video server does not directly check the access request directly on the server, but forwards the access request to the user through the access request forwarding module.
  • Local verification on the client server of the corresponding client because if the video server performs verification, all the user information of the user of the client needs to be stored, so that there is a danger of leaking user information on the one hand, and the video is also aggravated on the other hand.
  • the running load of the server (because the video server serves more than one customer), the verification work is done locally on the client server through the present embodiment, which helps the confidentiality of the information of the user on the one hand, and on the other hand Improve the efficiency of verification and improve the user experience (because, if the verification is done on the video server side, due to the huge amount of traffic, it will inevitably lead to check queuing, long queue waiting for verification, real-time access to users) Sexual experience has an adverse effect).
  • the video server is a server or a server cluster, and each module may be a separate server or a server cluster.
  • the interaction between the modules is represented by the interaction between the servers or server clusters corresponding to the modules.
  • the video server of this embodiment includes:
  • the video push determination server or the server cluster is configured to determine whether to provide a video service according to at least the authentication feedback.
  • the method further includes:
  • a service verification information generating module configured to generate service verification information after the access request receiving module receives the client access request
  • the authentication feedback receiving module is configured to receive authentication feedback, where the authentication feedback includes authentication verification information corresponding to the service verification information;
  • the video push determination module includes:
  • a comparison unit for comparing the service verification information and the authentication verification information
  • an execution unit for pushing the corresponding visit when the comparison result indicates that the access request is a legitimate request Asking the requested video information to the client, and when the comparison result indicates that the access request is an illegal request, refusing to push the video information corresponding to the access request to the client;
  • the service verification information deleting unit is configured to delete the verification information after the comparison unit completes the comparison.
  • the service verification information is generated in the video server and generated in the client server according to the preset rule when receiving the access request of the user. After verifying the verification information and feeding back the authentication verification information to the video server for verification, the service verification information is deleted immediately, thereby realizing the validity of the feedback information sent by the client server to the video server.
  • the service verification information generating module, the authentication feedback receiving module, and the video pushing determining module in this embodiment are respectively a server or a server cluster, wherein each module may be a separate server or a server cluster, and at this time, between the modules
  • the interaction is represented by the interaction between the server or server cluster corresponding to each module.
  • several of the plurality of modules described above may collectively form a server or cluster of servers.
  • the service verification information generation module and the authentication feedback receiving module together form a first server or a first server cluster
  • the video push determination module constitutes a second server or a second server cluster.
  • the video push determination module is a server or a server cluster, wherein each of the comparison unit, the execution unit, and the service verification information deletion unit may be a separate server or a server cluster.
  • the interaction between the above units is represented by the interaction between the servers or server clusters corresponding to the units.
  • the comparison unit, the execution unit, and the service verification information deletion unit together constitute a first server or a first server cluster.
  • the method includes:
  • a forwarding access request receiving module configured to receive a client access request forwarded by the video server
  • An authentication feedback generating module configured to generate an authentication feedback according to a client access request
  • the authentication feedback sending module is configured to send the authentication feedback to the video server.
  • the client server receives the client access request forwarded by the video server for verification, instead of directly verifying the access request directly on the video server, because if the video server performs verification, the client of the client needs to be stored. All user information, such a There is a danger of leaking user information, and on the other hand, the operational burden of the video server is increased (because the video server serves more than one customer).
  • the verification work is performed locally on the client server through the present embodiment. It helps to maintain the confidentiality of information of its own users. On the other hand, it improves the efficiency of verification and improves the user experience (because, if the verification is completed on the video server side, due to the huge amount of traffic, it will inevitably lead to verification queuing. Long queues waiting for verification will have an adverse effect on the real-time experience of user access).
  • the client server in this embodiment is a server or a server cluster, wherein each module may be a separate server or a server cluster.
  • the interaction between the modules is represented by a server or a server cluster corresponding to each module.
  • the plurality of servers or server clusters together constitute a client server of the present invention.
  • the client server in this embodiment includes:
  • the authentication feedback generation server or the server cluster is configured to generate an authentication feedback according to the client access request
  • the authentication feedback sending server or server cluster is used to send authentication feedback to the video server.
  • the authentication feedback generating module and the authentication feedback sending module jointly form a first server or a first server cluster
  • the forwarding access request receiving module constitutes a second server or a second server cluster.
  • the authentication feedback includes authentication verification information, and the authentication verification information corresponds to service verification information generated by the video server after receiving the client access request.
  • the present invention provides a video access system comprising the video server of any of the above embodiments and the client server of any of the above embodiments.
  • an architectural diagram of an embodiment of a video access system embodying the present invention includes: a client 710, a client server 720, and a video server 730, wherein the client 710 and the client server 720 and the video server 730, respectively.
  • the communication connection includes the following execution steps in the video access system of this embodiment:
  • the client 710 sends an access request to the video server 730.
  • the video server 730 receives the access request from the client 710 and executes: generating the service Verifying the information and forwarding the access request to the client server 720 for authentication;
  • the client server 720 After the client server 720 receives the access request from the video server 730, the authentication request is generated according to the access request of the client, and the authentication feedback is sent to the video server 730;
  • the video server 730 determines whether to provide a video service based at least on the authentication feedback.
  • the access request may be directly generated by the client, or may be fed back to the client after being generated by the client server.
  • the client's access request is generated by the client server and sent by the client server to the video server.
  • the client server 720 in this embodiment executes the video access authentication method as shown in FIG.
  • the video server 730 performs the video service providing method as shown in FIG. 1.
  • embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.
  • the present invention is directed to a method, apparatus (system), and computer program in accordance with an embodiment of the present invention.
  • the flow chart and/or block diagram of the product is described. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG.
  • These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device.
  • the computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device.
  • the apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.
  • These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device.
  • the instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Databases & Information Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Graphics (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)

Abstract

一种视频服务提供方法，包括：视频服务器接收客户端访问请求；转发访问请求至客户端的客户服务器进行鉴权；接收客户服务器反馈的鉴权反馈；至少根据鉴权反馈确定是否提供视频服务，此外，还提供一种视频访问鉴权方法、视频服务器、客户服务器和视频访问系统；解决了现有技术中存在泄漏客户的用户信息的安全隐患和视频服务器负担过重的技术问题。

Description

视频服务提供方法、访问鉴权方法及服务器和系统 技术领域
本发明涉及互联网技术领域，特别涉及一种视频服务提供方法、访问鉴权方法及服务器和系统。
背景技术
目前不同的视频服务提供商为其客户提供各种视频服务的方式为：客户将自己的视频资源上传到视频服务商的服务器上，并拥有从视频服务商的服务器上访问自己的视频的权限，或者视频服务提供商自己拥有但客户没有的视频资源，客户可以通过线下与视频服务提供商达成协议来访问视频服务提供商的视频。
客户获得访问视频服务提供商的服务器上的视频的访问权限后，可以向自己的用户授权访问视频服务提供商的服务器(视频服务器)上的视频，从而客户可以为自己的用户提供更优质的服务。例如，视频服务提供商(例如，乐视、或者优酷、或者搜狐)-客户(例如，京东、当当、淘宝等)-用户(即，终端用户)，当京东的用户在京东上浏览某手机时要看关于该手机的视频时，京东直接向乐视发出访问关于该手机的视频的请求，因为京东与乐视之间定有标准的协议，所以乐视会直接将被请求的视频提供给进行播放；现有的视频服务提供中存在的问题在于，在用户通过客户访问视频服务提供商的视频时，发送的访问请求信息包存在被第三方抓取的可能，一旦被第三方抓取，第三方就可以采用该访问请求信息包无偿的获取存储在视频服务提供商的视频服务器中的视频，给视频服务提供商的视频服务器带来安全隐患，同时也造成客户视频的盗播。
现有技术采用的方法为，在视频服务器中直接对访问请求信息包进行合法性的鉴权，但是，这种情况需要客户将自己所有用户的用户信息上传给视频服务提供商的视频服务器，并且视频服务器需要为所服务的所有的客户提供鉴权服务，这样一方面存在泄漏客户的用户信息安全隐患，另一方面也增加了视频服务器的负担。
发明内容
本发明提供一种视频服务提供方法、访问鉴权方法及服务器和系统，以解决现有技术中存在泄漏客户的用户信息的安全隐患和视频服务器负担过重的技术问题。
根据本发明的一个方面，提供了一种视频服务提供方法，包括：
视频服务器接收客户端访问请求；
转发访问请求至客户端的客户服务器进行鉴权；
接收客户服务器反馈的鉴权反馈；
至少根据鉴权反馈确定是否提供视频服务。
根据本发明的另一个方面，还提供了一种视频访问鉴权方法，包括：
客户服务器接收视频服务器转发的客户端访问请求；
根据客户端访问请求，生成鉴权反馈；
发送鉴权反馈至所述视频服务器。
根据本发明的一个方面，提供了一种视频服务器，其包括：
访问请求接收模块，用于接收客户端访问请求；
访问请求转发模块，用于转发访问请求至客户端的客户服务器进行鉴权；
鉴权反馈接收模块，用于接收客户服务器反馈的鉴权反馈；
视频推送判定模块，用于至少根据鉴权反馈确定是否提供视频服务。
根据本发明的一个方面，提供了一种客户服务器，包括：
转发访问请求接收模块，用于接收视频服务器转发的客户端访问请求；
鉴权反馈生成模块，用于根据客户端访问请求，生成鉴权反馈；
鉴权反馈发送模块，用于发送鉴权反馈至视频服务器。
根据本发明的一个方面，还提供了一种视频访问系统，其包括上述的视频服务器和上述的客户服务器。
本发明实施方式的视频服务提供方法、访问鉴权方法及服务器和系统，视频服务器在接收到用户的访问请求时，不是直接在本服务器上直接对访问请求进行校验，而是将所述访问请求转发到与用户对应的客户端的客户服务器上进行本地校验，那么，视频服务器进行校验的话就不需要存储客户端的用户的所有的用户信息，降低了泄漏用户信息的危险，减轻了视频服务器的 运行负担。
附图说明
为了更清楚地说明本发明实施例的技术方案，下面将对实施例描述中所需要使用的附图作一简单地介绍，显而易见地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1为本发明的视频服务提供方法的一实施方式的流程图；
图2为本发明的视频服务提供方法的另一实施方式的流程图；
图3为本发明的视频访问鉴权方法的一实施方式的流程图；
图4为本发明的视频服务器的一实施方式的示意图；
图5为本发明的视频服务器的另一实施方式的示意图；
图6为本发明的客户服务器的一实施方式的示意图；
图7为本发明的视频访问系统的一实施例的架构图。
具体实施方式
为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
需要说明的是，在不冲突的情况下，本申请中的实施方式及实施方式中的特征可以相互组合。
本发明可用于众多通用或专用的计算系统环境或配置中。例如：个人计算机、服务器计算机、手持设备或便携式设备、平板型设备、多处理器系统、基于微处理器的系统、置顶盒、可编程的消费电子设备、网络PC、小型计算机、大型计算机、包括以上任何系统或设备的分布式计算环境等等。
本发明可以在由计算机执行的计算机可执行指令的一般上下文中描述，例如程序模块。一般地，程序模块包括执行特定任务或实现特定抽象数据类型的例程、程序、对象、组件、数据结构等等。也可以在分布式计算环境中 实践本发明，在这些分布式计算环境中，由通过通信网络而被连接的远程处理设备来执行任务。在分布式计算环境中，程序模块可以位于包括存储设备在内的本地和远程计算机存储介质中。
最后，还需要说明的是，在本文中，诸如第一和第二等之类的关系术语仅仅用来将一个实体或者操作与另一个实体或操作区分开来，而不一定要求或者暗示这些实体或操作之间存在任何这种实际的关系或者顺序。而且，术语“包括”、“包含”，不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、物品或者设备所固有的要素。在没有更多限制的情况下，由语句“包括……”限定的要素，并不排除在包括所述要素的过程、方法、物品或者设备中还存在另外的相同要素。
如图1所示，本发明的一实施方式的视频服务提供方法，其包括：
S11、视频服务器接收客户端访问请求；
S12、视频服务器转发所述访问请求至所述客户端的客户服务器进行鉴权；
S13、视频服务器接收所述客户服务器反馈的鉴权反馈；
S14、视频服务器至少根据所述鉴权反馈确定是否提供视频服务。
本实施方式中，视频服务器在接收到用户的访问请求时，不是直接在本服务器上直接对访问请求进行校验，而是将所述访问请求转发到与用户对应的客户端的客户服务器上进行本地校验，因为如果在视频服务器进行校验的话就需要存储客户端的用户的所有的用户信息，这样一方面存在泄漏用户信息的危险，另一方面也加重了视频服务器的运行负担(因为，视频服务器所服务的客户不止一家)，通过本实施方式将校验的工作在客户服务器本地完成，一方面有助于对自身用户的信息的保密性，另一方面也提高了校验的效率，提升了用户体验(因为，校验在视频服务器端完成的话，由于业务量的巨大，必然会导致校验排队，长时间的排队等待校验，会对用户访问的实时性的体验上造成不良影响)。
此外，现有的视频服务提供中存在的问题在于，在用户通过客户访问视频服务提供商的视频时，发送的访问请求信息包存在被第三方抓取的可能，一旦被第三方抓取，第三方就可以采用该访问请求信息包无偿的获取存储在视频服务提供商的视频服务器中的视频，给视频服务提供商的视频服务器带 来安全隐患，同时也造成客户视频的盗播，而本实施方式通过在客户服务器的根据用户信息的校验避免了访问请求信息包被盗的发生。
本实施方式中转发访问请求至客户端的客户服务器进行鉴权，包括：视频服务器根据访问请求，确定访问请求所对应的域名；视频服务器根据预存的客户服务器地址及客户服务器的域名的对应关系确定发送访问请求的客户端所对应的客户服务器地址；视频服务器根据确定的客户服务器地址转发访问请求至客户服务器进行鉴权。
如图2所示，在一些实施方式中，还包括以下步骤：
S21、在所述视频服务器接收客户端访问请求后，生成服务校验信息；
S22、所述鉴权反馈包含与所述服务校验信息对应的鉴权校验信息；
S23、所述视频服务器至少根据所述鉴权反馈确定是否提供视频服务包括：视频服务器比较服务校验信息和鉴权校验信息；
S24、当比较结果表明所述访问请求为合法请求时，视频服务器推送相应于所述访问请求的视频信息至所述客户端；当比较结果表明所述访问请求为非法请求时，视频服务器拒绝推送相应于所述访问请求的视频信息至所述客户端；
S25、在所述比较完成后，视频服务器删除所述服务校验信息。
本实施方式中，通过在视频服务器与客户服务器之间定立预设规则的方法，根据该预设规则分别在接收到用户的访问请求时在视频服务器生成服务校验信息和在客户服务器生成相应的鉴权校验信息，并将鉴权校验信息反馈给视频服务器进行校验完成后，立即删除服务校验信息，从而实现了对客户服务器发送至视频服务器的反馈信息的有效性的保证。
本实施方式中的预设规则可以是一个预先设定的映射表格或者其它任何使得鉴权校验信息和服务鉴权信息一一对应的规则，这样当比较鉴权校验信息和服务鉴权信息时只要根据预设规则两者是相应的就可以判定访问请求为合法请求。例如，视频服务器可以对其所有的客户从1开始进行编号并存储，其中编号就相当于服务校验信息，并设定规则：当编号(即，服务校验信息)为n时相应的鉴权校验信息为n2，这时进行比较时服务校验信息和鉴权校验信息的比较时只要两者之间满足该规则及表明相应的访问请求为合法请求；当然本实施方式中的预设规则并不限于上述举例，可以根据需求自行定义更 加简单的预设规则或者定义计算更加复杂的预设规则，并且可以根据需求定期的更改该预设规则，以长期使用同一规则被防止抓包者掌握后进行抓包。
因为，本实施方式中的预设规则存储在了客户服务器和视频服务器中，与外界是隔绝的，所以，相应生成的服务校验信息和鉴权校验信息也是唯一的，外界无法获取的，另一方面，由于每一次视频服务器校验完成后都会直接将其服务校验信息删除，也保证了即使客户服务器反馈至视频服务器的反馈信息被抓包，但由于视频服务器中已经没有了相应的服务校验信息，而使得该抓包信息失效，从而避免了被抓包而造成的视频的盗播；此外，因为实时的生成校验信息并实时的删除服务校验信息的机制，从而减轻了视频服务器的存储负担，也减少了进行校验时选取正确的服务校验信息的时间，从而也提升了用户体验。
如图3所示，在一些实施方式中，提供了一种视频访问鉴权方法，包括：
S31、客户服务器接收视频服务器转发的客户端访问请求；
S32、客户服务器根据所述客户端访问请求，生成鉴权反馈；
S33、客户服务器发送所述鉴权反馈至所述视频服务器。
本实施方式中，客户服务器接收视频服务器转发的客户端访问请求进行校验，而不是直接在视频服务器上直接对访问请求进行校验，因为如果在视频服务器进行校验的话就需要存储客户端的用户的所有的用户信息，这样一方面存在泄漏用户信息的危险，另一方面也加重了视频服务器的运行负担(因为，视频服务器所服务的客户不止一家)，通过本实施方式将校验的工作在客户服务器本地完成，一方面有助于对自身用户的信息的保密性，另一方面也提高了校验的效率，提升了用户体验(因为，校验在视频服务器端完成的话，由于业务量的巨大，必然会导致校验排队，长时间的排队等待校验，会对用户访问的实时性的体验上造成不良影响)。
此外，现有的视频服务提供中存在的问题在于，在用户通过客户访问视频服务提供商的视频时，发送的访问请求信息包存在被第三方抓取的可能，一旦被第三方抓取，第三方就可以采用该访问请求信息包无偿的获取存储在视频服务提供商的视频服务器中的视频，给视频服务提供商的视频服务器带来安全隐患，同时也造成客户视频的盗播，而本实施方式通过在客户服务器的根据用户信息的校验避免了访问请求信息包被盗的发生。
在一些实施方式中，鉴权反馈包含鉴权校验信息，所述鉴权校验信息与所述视频服务器接收客户端访问请求后生成的服务校验信息对应。
本实施方式中，通过在视频服务器与客户服务器之间定立预设规则的方法，根据该预设规则分别在接收到用户的访问请求时在视频服务器生成服务校验信息和在客户服务器生成相应的鉴权校验信息，并将鉴权校验信息反馈给视频服务器进行校验完成后，立即删除服务校验信息，从而实现了对客户服务器发送至视频服务器的反馈信息的有效性的保证。
因为，本实施方式中的预设规则存储在了客户服务器和视频服务器中，与外界是隔绝的，所以，相应生成的服务校验信息和鉴权校验信息也是唯一的，外界无法获取的，另一方面，由于每一次视频服务器校验完成后都会直接将其服务校验信息删除，也保证了即使客户服务器反馈至视频服务器的反馈信息被抓包，但由于视频服务器中已经没有了相应的服务校验信息，而使得该抓包信息失效，从而避免了被抓包而造成的视频的盗播；此外，因为实时的生成校验信息并实时的删除服务校验信息的机制，从而减轻了视频服务器的存储负担，也减少了进行校验时选取正确的服务校验信息的时间，从而也提升了用户体验。
本发明实施方式中可以通过硬件处理器(hardware processor)来实现相关功能模块。
需要说明的是，对于前述的各方法实施例，为了简单描述，故将其都表述为一系列的动作合并，但是本领域技术人员应该知悉，本发明并不受所描述的动作顺序的限制，因为依据本发明，某些步骤可以采用其他顺序或者同时进行。其次，本领域技术人员也应该知悉，说明书中所描述的实施例均属于优选实施例，所涉及的动作和模块并不一定是本发明所必须的。
在上述实施例中，对各个实施例的描述都各有侧重，某个实施例中没有详述的部分，可以参见其他实施例的相关描述。
如图4所示，另一方面，本发明还提供一种视频服务器，其包括：
访问请求接收模块，用于接收客户端访问请求；
访问请求转发模块，用于转发所述访问请求至所述客户端的客户服务器进行鉴权；
鉴权反馈接收模块，用于接收所述客户服务器反馈的鉴权反馈；
视频推送判定模块，用于至少根据所述鉴权反馈确定是否提供视频服务。
本实施方式中，视频服务器通过访问请求接收模块接收到用户的访问请求时，不是直接在本服务器上直接对访问请求进行校验，而是通过访问请求转发模块将所述访问请求转发到与用户对应的客户端的客户服务器上进行本地校验，因为如果在视频服务器进行校验的话就需要存储客户端的用户的所有的用户信息，这样一方面存在泄漏用户信息的危险，另一方面也加重了视频服务器的运行负担(因为，视频服务器所服务的客户不止一家)，通过本实施方式将校验的工作在客户服务器本地完成，一方面有助于对自身用户的信息的保密性，另一方面也提高了校验的效率，提升了用户体验(因为，校验在视频服务器端完成的话，由于业务量的巨大，必然会导致校验排队，长时间的排队等待校验，会对用户访问的实时性的体验上造成不良影响)。
本实施例中视频服务器为一个服务器或者服务器集群，其中每个模块可以是单独的服务器或者服务器集群，此时，上述模块之间的交互表现为各模块所对应的服务器或者服务器集群之间的交互，所述多个服务器或服务器集群共同构成本发明的视频服务器。具体的，本实施例的视频服务器包括：
访问请求接收服务器或者服务器集群，用于接收客户端访问请求；
访问请求转发服务器或者服务器集群，用于转发所述访问请求至所述客户端的客户服务器进行鉴权；
鉴权反馈接收服务器或者服务器集群，用于接收所述客户服务器反馈的鉴权反馈；
视频推送判定服务器或者服务器集群，用于至少根据所述鉴权反馈确定是否提供视频服务。
如图5所示，在本发明的视频服务器的一些实施方式中，还包括：
服务校验信息生成模块，用于在访问请求接收模块接收客户端访问请求后，生成服务校验信息；
鉴权反馈接收模块，用于接收鉴权反馈，鉴权反馈包含与服务校验信息对应的鉴权校验信息；
视频推送判定模块包括：
-比较单元，用于比较服务校验信息和鉴权校验信息；
-执行单元，用于当比较结果表明访问请求为合法请求时，推送相应于访 问请求的视频信息至客户端，当比较结果表明访问请求为非法请求时，拒绝推送相应于访问请求的视频信息至客户端；
服务校验信息删除单元，用于在比较单元完成比较后删除校验信息。
本实施方式中，通过在视频服务器与客户服务器之间定立预设规则的方法，根据该预设规则分别在接收到用户的访问请求时在视频服务器生成服务校验信息和在客户服务器生成相应的鉴权校验信息，并将鉴权校验信息反馈给视频服务器进行校验完成后，立即删除服务校验信息，从而实现了对客户服务器发送至视频服务器的反馈信息的有效性的保证。
本实施例中的服务校验信息生成模块、鉴权反馈接收模块、视频推送判定模块分别为一个服务器或者服务器集群，其中每个模块可以是单独的服务器或者服务器集群，此时，上述模块之间的交互表现为各模块所对应的服务器或者服务器集群之间的交互。
在一种替代实施例中，可以是上述多个模块中的几个模块共同组成一个服务器或者服务器集群。例如：服务校验信息生成模块、鉴权反馈接收模块共同组成第一服务器或者第一服务器集群，视频推送判定模块构成第二服务器或者第二服务器集群。
在另一种替代实施例中，视频推送判定模块为一个服务器或者服务器集群，其中，比较单元、执行单元和服务校验信息删除单元中每个单元可以是单独的服务器或者服务器集群，此时，上述单元之间的交互表现为各单元所对应的服务器或者服务器集群之间的交互。
在又一种替代实施例中，可以是上述多个单元中的几个单元共同组成一个服务器或者服务器集群。例如：比较单元、执行单元和服务校验信息删除单元共同组成第一服务器或者第一服务器集群。
如图6所示，在本发明的客户服务器的一些实施方式中，包括：
转发访问请求接收模块，用于接收视频服务器转发的客户端访问请求；
鉴权反馈生成模块，用于根据客户端访问请求，生成鉴权反馈；
鉴权反馈发送模块，用于发送鉴权反馈至视频服务器。
本实施方式中，客户服务器接收视频服务器转发的客户端访问请求进行校验，而不是直接在视频服务器上直接对访问请求进行校验，因为如果在视频服务器进行校验的话就需要存储客户端的用户的所有的用户信息，这样一 方面存在泄漏用户信息的危险，另一方面也加重了视频服务器的运行负担(因为，视频服务器所服务的客户不止一家)，通过本实施方式将校验的工作在客户服务器本地完成，一方面有助于对自身用户的信息的保密性，另一方面也提高了校验的效率，提升了用户体验(因为，校验在视频服务器端完成的话，由于业务量的巨大，必然会导致校验排队，长时间的排队等待校验，会对用户访问的实时性的体验上造成不良影响)。
本实施例中的客户服务器为一个服务器或者服务器集群，其中每个模块可以是单独的服务器或者服务器集群，此时，上述模块之间的交互表现为各模块所对应的服务器或者服务器集群之间的交互，所述多个服务器或者服务器集群共同构成本发明所述的客户服务器。
具体地，本实施例中的客户服务器包括：
转发访问请求接收服务器或者服务器集群，用于接收视频服务器转发的客户端访问请求；
鉴权反馈生成服务器或者服务器集群，用于根据客户端访问请求，生成鉴权反馈；
鉴权反馈发送服务器或者服务器集群，用于发送鉴权反馈至视频服务器。
在一种替代实施例中，可以是上述多个模块中的几个模块共同组成一个服务器或者服务器集群。例如：鉴权反馈生成模块和鉴权反馈发送模块共同组成第一服务器或者第一服务器集群，转发访问请求接收模块构成第二服务器或者第二服务器集群。
在一些实施方式中，鉴权反馈包含鉴权校验信息，所述鉴权校验信息与所述视频服务器接收客户端访问请求后生成的服务校验信息对应。
另一方面，本发明还提供一种视频访问系统，其包括上述任一实施方式中的视频服务器和上述任一实施方式中的客户服务器。
如图7所示，为实施本发明的视频访问系统一实施例的架构图，其包括：客户端710,、客户服务器720、视频服务器730，其中客户端710和客户服务器720分别与视频服务器730通信连接，在本实施例的视频访问系统中包括以下执行步骤：
①、客户端710发送访问请求至视频服务器730；
②、视频服务器730接收到来自客户端710的访问请求后执行：生成服 务校验信息，并转发所述访问请求至所述客户服务器720进行鉴权；
③、客户服务器720接收到来自视频服务器730转发的所述访问请求后执行：根据所述客户端的访问请求生成鉴权反馈，并发送所述鉴权反馈至所述视频服务器730；
④、视频服务器730至少根据所述鉴权反馈确定是否提供视频服务。
本实施例中，访问请求可以是客户端直接生成的，也可以是客户服务器生成后反馈至客户端的。
在另一实施例中，客户端的访问请求是通过客户服务器生成并由客户服务器发送至视频服务器的。
本实施例中的客户服务器720执行如图3所示的视频访问鉴权方法。
视频服务器730执行如图1所示的视频服务提供方法。
以上所描述的方法实施例仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。本领域普通技术人员在不付出创造性的劳动的情况下，即可以理解并实施。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到各实施方式可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件。基于这样的理解，上述技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品可以存储在计算机可读存储介质中，如ROM/RAM、磁碟、光盘等，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行各个实施例或者实施例的某些部分所述的方法。
本领域内的技术人员应明白，本发明的实施方式可提供为方法、系统、或计算机程序产品。因此，本发明可采用完全硬件实施方式、完全软件实施方式、或结合软件和硬件方面的实施方式的形式。而且，本发明可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器和光学存储器等)上实施的计算机程序产品的形式。
本发明是参照根据本发明实施方式的方法、设备(系统)、和计算机程序 产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
最后应说明的是：以上实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施例技术方案的精神和范围。

Claims (9)

  1. 一种视频服务提供方法，包括：
    视频服务器接收客户端的访问请求；
    转发所述访问请求至所述客户端的客户服务器进行鉴权；
    接收所述客户服务器反馈的鉴权反馈；
    至少根据所述鉴权反馈确定是否提供视频服务。
  2. 根据权利要求1所述的视频服务提供方法，其特征在于，
    在所述接收客户端的访问请求后，生成服务校验信息；
    所述鉴权反馈包含与所述服务校验信息对应的鉴权校验信息；
    所述至少根据所述鉴权反馈确定是否提供视频服务包括：
    比较所述服务校验信息和所述鉴权校验信息；
    当比较结果表明所述访问请求为合法请求时，推送相应于所述访问请求的视频信息至所述客户端；当比较结果表明所述访问请求为非法请求时，拒绝推送相应于所述访问请求的视频信息至所述客户端；
    在所述比较完成后，删除所述服务校验信息。
  3. 一种视频访问鉴权方法，包括：
    客户服务器接收视频服务器转发的客户端的访问请求；
    根据所述客户端的访问请求，生成鉴权反馈；
    发送所述鉴权反馈至所述视频服务器。
  4. 根据权利要求3所述的视频访问鉴权方法，其特征在于，所述鉴权反馈包含鉴权校验信息，所述鉴权校验信息与所述视频服务器接收客户端访问请求后生成的服务校验信息对应。
  5. 一种视频服务器，其包括：
    访问请求接收模块，用于接收客户端访问请求；
    访问请求转发模块，用于转发所述访问请求至所述客户端的客户服务器 进行鉴权；
    鉴权反馈接收模块，用于接收所述客户服务器反馈的鉴权反馈；
    视频推送判定模块，用于至少根据所述鉴权反馈确定是否提供视频服务。
  6. 根据权利要求5所述的视频服务器，其特征在于，还包括：服务校验信息生成模块，用于在所述访问请求接收模块接收客户端访问请求后，生成服务校验信息；
    所述鉴权反馈接收模块用于接收所述鉴权反馈，所述鉴权反馈包含与所述服务校验信息对应的鉴权校验信息；
    所述视频推送判定模块包括：
    -比较单元，用于比较服务校验信息和鉴权校验信息；
    -执行单元，用于当比较结果表明所述访问请求为合法请求时，推送相应于所述访问请求的视频信息至所述客户端，当比较结果表明所述访问请求为非法请求时，拒绝推送相应于所述访问请求的视频信息至所述客户端；
    -服务校验信息删除单元，用于在比较单元完成比较后删除所述校验信息。
  7. 一种客户服务器，包括：
    转发访问请求接收模块，用于接收视频服务器转发的客户端访问请求；
    鉴权反馈生成模块，用于根据所述客户端访问请求，生成鉴权反馈；
    鉴权反馈发送模块，用于发送所述鉴权反馈至所述视频服务器。
  8. 根据权利要求7所述的客户服务器，其特征在于，所述鉴权反馈包含鉴权校验信息，所述鉴权校验信息与所述视频服务器接收客户端访问请求后生成的服务校验信息对应。
  9. 一种视频访问系统，其包括如权利要求5或6所述的视频服务器和权利要求7或8所述的客户服务器。
PCT/CN2016/083205 2015-11-27 2016-05-24 视频服务提供方法、访问鉴权方法及服务器和系统 Ceased WO2017088396A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/252,847 US20170155940A1 (en) 2015-11-27 2016-08-31 Method For Providing Video Service, Method For Access Authentication, Electronic Device And Non-Transitory Computer-Readable Storage Medium

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510850038.2A CN105897675A (zh) 2015-11-27 2015-11-27 视频服务提供方法、访问鉴权方法及服务器和系统
CN201510850038.2 2015-11-27

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/252,847 Continuation US20170155940A1 (en) 2015-11-27 2016-08-31 Method For Providing Video Service, Method For Access Authentication, Electronic Device And Non-Transitory Computer-Readable Storage Medium

Publications (1)

Publication Number Publication Date
WO2017088396A1 true WO2017088396A1 (zh) 2017-06-01

Family

ID=57002892

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/083205 Ceased WO2017088396A1 (zh) 2015-11-27 2016-05-24 视频服务提供方法、访问鉴权方法及服务器和系统

Country Status (3)

Country Link
US (1) US20170155940A1 (zh)
CN (1) CN105897675A (zh)
WO (1) WO2017088396A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114513680A (zh) * 2021-12-28 2022-05-17 上海瑞家信息技术有限公司 一种视频处理方法、设备、装置及存储介质

Families Citing this family (87)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8677377B2 (en) 2005-09-08 2014-03-18 Apple Inc. Method and apparatus for building an intelligent automated assistant
US9318108B2 (en) 2010-01-18 2016-04-19 Apple Inc. Intelligent automated assistant
US8977255B2 (en) 2007-04-03 2015-03-10 Apple Inc. Method and system for operating a multi-function portable electronic device using voice-activation
US8676904B2 (en) 2008-10-02 2014-03-18 Apple Inc. Electronic devices with voice command and contextual data processing capabilities
US10255566B2 (en) 2011-06-03 2019-04-09 Apple Inc. Generating and processing task items that represent tasks to perform
US10276170B2 (en) 2010-01-18 2019-04-30 Apple Inc. Intelligent automated assistant
US10057736B2 (en) 2011-06-03 2018-08-21 Apple Inc. Active transport based notifications
US10417037B2 (en) 2012-05-15 2019-09-17 Apple Inc. Systems and methods for integrating third party services with a digital assistant
DE112014000709B4 (de) 2013-02-07 2021-12-30 Apple Inc. Verfahren und vorrichtung zum betrieb eines sprachtriggers für einen digitalen assistenten
US10652394B2 (en) 2013-03-14 2020-05-12 Apple Inc. System and method for processing voicemail
US10748529B1 (en) 2013-03-15 2020-08-18 Apple Inc. Voice activated device for use with a voice-based digital assistant
US10176167B2 (en) 2013-06-09 2019-01-08 Apple Inc. System and method for inferring user intent from speech inputs
KR101959188B1 (ko) 2013-06-09 2019-07-02 애플 인크. 디지털 어시스턴트의 둘 이상의 인스턴스들에 걸친 대화 지속성을 가능하게 하기 위한 디바이스, 방법 및 그래픽 사용자 인터페이스
KR101749009B1 (ko) 2013-08-06 2017-06-19 애플 인크. 원격 디바이스로부터의 활동에 기초한 스마트 응답의 자동 활성화
WO2015184186A1 (en) 2014-05-30 2015-12-03 Apple Inc. Multi-command single utterance input method
US10170123B2 (en) 2014-05-30 2019-01-01 Apple Inc. Intelligent assistant for home automation
US9715875B2 (en) 2014-05-30 2017-07-25 Apple Inc. Reducing the need for manual start/end-pointing and trigger phrases
US9338493B2 (en) 2014-06-30 2016-05-10 Apple Inc. Intelligent automated assistant for TV user interactions
US9886953B2 (en) 2015-03-08 2018-02-06 Apple Inc. Virtual assistant activation
US9721566B2 (en) 2015-03-08 2017-08-01 Apple Inc. Competing devices responding to voice triggers
US10460227B2 (en) 2015-05-15 2019-10-29 Apple Inc. Virtual assistant in a communication session
US10200824B2 (en) 2015-05-27 2019-02-05 Apple Inc. Systems and methods for proactively identifying and surfacing relevant content on a touch-sensitive device
US20160378747A1 (en) 2015-06-29 2016-12-29 Apple Inc. Virtual assistant for media playback
US10747498B2 (en) 2015-09-08 2020-08-18 Apple Inc. Zero latency digital assistant
US10331312B2 (en) 2015-09-08 2019-06-25 Apple Inc. Intelligent automated assistant in a media environment
US10671428B2 (en) 2015-09-08 2020-06-02 Apple Inc. Distributed personal assistant
US10740384B2 (en) 2015-09-08 2020-08-11 Apple Inc. Intelligent automated assistant for media search and playback
US11587559B2 (en) 2015-09-30 2023-02-21 Apple Inc. Intelligent device identification
US10691473B2 (en) 2015-11-06 2020-06-23 Apple Inc. Intelligent automated assistant in a messaging environment
US10956666B2 (en) 2015-11-09 2021-03-23 Apple Inc. Unconventional virtual assistant interactions
US10223066B2 (en) 2015-12-23 2019-03-05 Apple Inc. Proactive assistance based on dialog communication between devices
US11227589B2 (en) 2016-06-06 2022-01-18 Apple Inc. Intelligent list reading
US12223282B2 (en) 2016-06-09 2025-02-11 Apple Inc. Intelligent automated assistant in a home environment
US10586535B2 (en) 2016-06-10 2020-03-10 Apple Inc. Intelligent digital assistant in a multi-tasking environment
DK201670540A1 (en) 2016-06-11 2018-01-08 Apple Inc Application integration with a digital assistant
DK179415B1 (en) 2016-06-11 2018-06-14 Apple Inc Intelligent device arbitration and control
US12197817B2 (en) 2016-06-11 2025-01-14 Apple Inc. Intelligent device arbitration and control
US11204787B2 (en) 2017-01-09 2021-12-21 Apple Inc. Application integration with a digital assistant
CN106911687B (zh) * 2017-02-20 2020-04-10 深圳国泰安教育技术有限公司 一种页面构建控制方法和装置
DK201770383A1 (en) 2017-05-09 2018-12-14 Apple Inc. USER INTERFACE FOR CORRECTING RECOGNITION ERRORS
US10726832B2 (en) 2017-05-11 2020-07-28 Apple Inc. Maintaining privacy of personal information
DK180048B1 (en) 2017-05-11 2020-02-04 Apple Inc. MAINTAINING THE DATA PROTECTION OF PERSONAL INFORMATION
DK179496B1 (en) 2017-05-12 2019-01-15 Apple Inc. USER-SPECIFIC Acoustic Models
DK201770428A1 (en) 2017-05-12 2019-02-18 Apple Inc. LOW-LATENCY INTELLIGENT AUTOMATED ASSISTANT
DK179745B1 (en) 2017-05-12 2019-05-01 Apple Inc. SYNCHRONIZATION AND TASK DELEGATION OF A DIGITAL ASSISTANT
DK201770411A1 (en) 2017-05-15 2018-12-20 Apple Inc. Multi-modal interfaces
DK179560B1 (en) 2017-05-16 2019-02-18 Apple Inc. FAR-FIELD EXTENSION FOR DIGITAL ASSISTANT SERVICES
US10303715B2 (en) 2017-05-16 2019-05-28 Apple Inc. Intelligent automated assistant for media exploration
US20180336892A1 (en) 2017-05-16 2018-11-22 Apple Inc. Detecting a trigger of a digital assistant
CN109389449B (zh) * 2017-08-08 2022-11-04 腾讯科技（深圳）有限公司 一种信息处理方法、服务器及存储介质
CN110366008B (zh) * 2018-03-26 2021-10-08 阿里巴巴（中国）有限公司 多媒体资源请求识别方法、装置及存储介质
US10818288B2 (en) 2018-03-26 2020-10-27 Apple Inc. Natural assistant interaction
US11145294B2 (en) 2018-05-07 2021-10-12 Apple Inc. Intelligent automated assistant for delivering content from user experiences
US10928918B2 (en) 2018-05-07 2021-02-23 Apple Inc. Raise to speak
DK179822B1 (da) 2018-06-01 2019-07-12 Apple Inc. Voice interaction at a primary device to access call functionality of a companion device
DK201870355A1 (en) 2018-06-01 2019-12-16 Apple Inc. VIRTUAL ASSISTANT OPERATION IN MULTI-DEVICE ENVIRONMENTS
US10892996B2 (en) 2018-06-01 2021-01-12 Apple Inc. Variable latency device coordination
DK180639B1 (en) 2018-06-01 2021-11-04 Apple Inc DISABILITY OF ATTENTION-ATTENTIVE VIRTUAL ASSISTANT
US11010561B2 (en) 2018-09-27 2021-05-18 Apple Inc. Sentiment prediction from textual data
US11462215B2 (en) 2018-09-28 2022-10-04 Apple Inc. Multi-modal inputs for voice commands
US11475898B2 (en) 2018-10-26 2022-10-18 Apple Inc. Low-latency multi-speaker speech recognition
US11638059B2 (en) 2019-01-04 2023-04-25 Apple Inc. Content playback on multiple devices
US11348573B2 (en) 2019-03-18 2022-05-31 Apple Inc. Multimodality in digital assistant systems
US11307752B2 (en) 2019-05-06 2022-04-19 Apple Inc. User configurable task triggers
US11475884B2 (en) 2019-05-06 2022-10-18 Apple Inc. Reducing digital assistant latency when a language is incorrectly determined
DK201970509A1 (en) 2019-05-06 2021-01-15 Apple Inc Spoken notifications
US11423908B2 (en) 2019-05-06 2022-08-23 Apple Inc. Interpreting spoken requests
US11140099B2 (en) 2019-05-21 2021-10-05 Apple Inc. Providing message response suggestions
US11496600B2 (en) 2019-05-31 2022-11-08 Apple Inc. Remote execution of machine-learned models
DK180129B1 (en) 2019-05-31 2020-06-02 Apple Inc. User activity shortcut suggestions
DK201970510A1 (en) 2019-05-31 2021-02-11 Apple Inc Voice identification in digital assistant systems
US11289073B2 (en) 2019-05-31 2022-03-29 Apple Inc. Device text to speech
US11227599B2 (en) 2019-06-01 2022-01-18 Apple Inc. Methods and user interfaces for voice-based control of electronic devices
US11360641B2 (en) 2019-06-01 2022-06-14 Apple Inc. Increasing the relevance of new available information
US11488406B2 (en) 2019-09-25 2022-11-01 Apple Inc. Text detection using global geometry estimators
CN111163336B (zh) * 2020-01-19 2021-07-27 北京字节跳动网络技术有限公司 视频资源推送方法、装置、电子设备及计算机可读介质
US11183193B1 (en) 2020-05-11 2021-11-23 Apple Inc. Digital assistant hardware abstraction
US12301635B2 (en) 2020-05-11 2025-05-13 Apple Inc. Digital assistant hardware abstraction
US11061543B1 (en) 2020-05-11 2021-07-13 Apple Inc. Providing relevant data items based on context
US11755276B2 (en) 2020-05-12 2023-09-12 Apple Inc. Reducing description length based on confidence
US11490204B2 (en) 2020-07-20 2022-11-01 Apple Inc. Multi-device audio adjustment coordination
US11438683B2 (en) 2020-07-21 2022-09-06 Apple Inc. User identification using headphones
CN114679418B (zh) * 2020-12-24 2025-12-19 中兴通讯股份有限公司 数据传输方法、电子设备和存储介质
CN112995718A (zh) * 2021-02-10 2021-06-18 北京奇艺世纪科技有限公司 一种视频播放方法及系统
US12021806B1 (en) 2021-09-21 2024-06-25 Apple Inc. Intelligent message delivery
CN114499981B (zh) * 2021-12-29 2025-02-11 中国电信股份有限公司 一种视频访问方法及装置
CN115665500B (zh) * 2022-10-19 2026-01-23 阿里巴巴（中国）有限公司 调度处理方法、装置、设备及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101202893A (zh) * 2007-06-27 2008-06-18 深圳市同洲电子股份有限公司 一种防止非授权用户获取服务的方法、系统及视频服务器
CN101729880A (zh) * 2009-12-14 2010-06-09 中国电信股份有限公司 基于sip的网络视频监控方法和系统
CN102571701A (zh) * 2010-12-16 2012-07-11 中国移动通信集团安徽有限公司 安全认证站点的访问方法、装置及系统
WO2013140193A1 (en) * 2012-03-22 2013-09-26 Magyar Tőketársaság Zártkörűen Működő Részvénytársaság Method and system for establishing secure online video connection

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7472423B2 (en) * 2002-03-27 2008-12-30 Tvworks, Llc Method and apparatus for anonymously tracking TV and internet usage
US9357247B2 (en) * 2008-11-24 2016-05-31 Time Warner Cable Enterprises Llc Apparatus and methods for content delivery and message exchange across multiple content delivery networks
CN102685086A (zh) * 2011-04-14 2012-09-19 天脉聚源(北京)传媒科技有限公司 一种文件访问方法和系统
CN102427520A (zh) * 2011-10-09 2012-04-25 中山乾宏通信科技有限公司 一种基于两层id结构的多路网络视频监控方法及系统
CN102802041B (zh) * 2012-08-06 2015-01-14 何建亿 支持多个实时动态数据源的智能流媒体服务器的实现方法
CN104468487B (zh) * 2013-09-23 2018-10-19 华为技术有限公司 通信认证方法及装置、终端设备

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101202893A (zh) * 2007-06-27 2008-06-18 深圳市同洲电子股份有限公司 一种防止非授权用户获取服务的方法、系统及视频服务器
CN101729880A (zh) * 2009-12-14 2010-06-09 中国电信股份有限公司 基于sip的网络视频监控方法和系统
CN102571701A (zh) * 2010-12-16 2012-07-11 中国移动通信集团安徽有限公司 安全认证站点的访问方法、装置及系统
WO2013140193A1 (en) * 2012-03-22 2013-09-26 Magyar Tőketársaság Zártkörűen Működő Részvénytársaság Method and system for establishing secure online video connection

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114513680A (zh) * 2021-12-28 2022-05-17 上海瑞家信息技术有限公司 一种视频处理方法、设备、装置及存储介质
CN114513680B (zh) * 2021-12-28 2023-04-28 上海瑞家信息技术有限公司 一种视频处理方法、设备、装置及存储介质

Also Published As

Publication number Publication date
CN105897675A (zh) 2016-08-24
US20170155940A1 (en) 2017-06-01

Similar Documents

Publication Publication Date Title
WO2017088396A1 (zh) 视频服务提供方法、访问鉴权方法及服务器和系统
US10148640B2 (en) Secured inter-application communication in mobile devices
CN105100034B (zh) 一种网络应用中访问功能的方法和设备
CN103795690B (zh) 一种云访问控制的方法、代理服务器和系统
US11522686B2 (en) Securing data using key agreement
CN103905395B (zh) 一种基于重定向的web访问控制方法及系统
JP2018507652A (ja) データの安全を確保するためのシステムおよび方法
US11368292B2 (en) Securing data with symmetric keys generated using inaccessible private keys
US9544317B2 (en) Identification of potential fraudulent website activity
JP6640869B2 (ja) スマートイメージを使用したフィッシング対策のための方法およびシステム
CN103037312A (zh) 消息推送方法及装置
WO2020024987A1 (zh) 一种认证方法、内容分发网络cdn和内容服务器
WO2015143855A1 (zh) 一种对数据资源进行访问的方法、装置和系统
JP2018514832A (ja) ＲＥＳＴ（Ｒｅｐｒｅｓｅｎｔａｔｉｏｎａｌ Ｓｔａｔｅ Ｔｒａｎｓｆｅｒ）準拠のクライアントを使用する異なる認証ドメインに位置するファイル・リポジトリ上での操作の実行
JP2025115404A (ja) 鍵共有を使用するデータのセキュア化
US10425224B1 (en) Identity confirmation using private keys
US10476855B1 (en) Identity confirmation using private keys
CN112199412A (zh) 基于区块链的支付账单处理方法和区块链账单处理系统
US20210374716A1 (en) System and method for link-initiated verification and validation of users
CN105307052A (zh) 一种视频请求处理方法及装置
US20210336795A1 (en) Hassh profiling mechanism
WO2017096886A1 (zh) 内容推送的方法、装置以及系统
CN114428967B (zh) 数据传输方法、装置、设备以及存储介质
US11924219B1 (en) Age assurance during an interactive query workflow
US20260058954A1 (en) Age assurance during an interactive query workflow

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16867624

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16867624

Country of ref document: EP

Kind code of ref document: A1