WO2017113610A1

WO2017113610A1 - Method, device, and system for streaming media encryption

Info

Publication number: WO2017113610A1
Application number: PCT/CN2016/084856
Authority: WO
Inventors: 杨自清; 周峰
Original assignee: 深圳Tcl数字技术有限公司
Priority date: 2015-12-30
Filing date: 2016-06-04
Publication date: 2017-07-06
Also published as: CN105635149A

Abstract

Disclosed in the present invention is a streaming media encryption method. The method comprises: a service terminal obtaining, according to an original streaming media file, metadata and media data; the service terminal encrypting, according to a preset encryption key and encryption information, the media data to obtain an encryption box; and the service terminal creating an encrypted streaming media file according to the format of the original streaming media file, the metadata and the encryption box. A device and a system for streaming media encryption are further disclosed in the present invention. The present invention reduces the encryption workload of the service terminal, improves the efficiency of the service terminal, and meanwhile realizes the successful encryption of the streaming media file without damaging the format of the original streaming media file, reducing the development cost of the client.

Description

Streaming media encryption method, device and system

Technical field

The present invention relates to the field of digital rights management, and in particular, to a streaming media encryption method, apparatus and system.

Background technique

Streaming media is also called streaming media. Streaming media technology allows users to download and play while not having to wait for all media content to be downloaded. This saves users' waiting time and storage space. Based on the rapid development of current computer technology and network technology, users using streaming media technology to view media content has become an important multimedia viewing channel. In order to protect their own interests and prevent illegal copying and dissemination of media content, content providers or copyright owners usually encrypt streaming media, and users can obtain media content after authorization, thereby realizing copyright protection for streaming media.

Currently, the encryption of streaming media mainly uses DRM (Digital Rights). Management, Digital Rights Management), used to control and restrict the use of streaming media. The mainstream DRM solutions include Microsoft (Microsoft) PlayReady, Google (Google) Widevine, and Samsung, Philips, Panasonic and other companies to form Marlin. Although the specific implementation methods are different, the current DRM solution has a common feature, which is to change the multimedia container format and increase the burden on the client.

For example, Microsoft uses ASF (Advanced Streaming) Format, advanced streaming format) Output streaming media files. An ASF file is a container, usually composed of three parts: Header Object, Data Object (Data Object) and index object (Index Object), where the file header object and the index object are metadata, and the data object is media data. PlayReady adds Protection System when encrypting ASF files Identifier Object to the ASF Header object, modifying the Stream in the metadata The Properties object indicates that each stream is encrypted, and payload extensions are added to store Samle. ID (sampling ID), and finally ASF The size (data size) and offsets (compensation) of the object (ASF object). This encryption method not only modifies the metadata of the ASF file, but also makes the original ASF file format unrecognizable. Also, since PlayReady encrypts each media in the media data Object (media object), that is, encrypting each video/audio samples, resulting in a large amount of encrypted data and a heavy workload.

When the client receives the modified file format (or container), on the one hand, in order to understand the reuse of the media content, it is necessary to modify the original demux (demultiplexing) module of the client to adapt to the new file format, which is greatly Added compatibility development work for the client demux module; on the other hand, the client must encrypt the video/audio one by one. The sample is decrypted, which seriously consumes the resources of the client and slows down the system process.

It can be seen that the existing streaming media encryption technology not only has a large amount of data encryption workload, but also the modification of the original file format or the container format destroys the format of the original file, resulting in a load on the client.

Summary of the invention

The main object of the present invention is to provide a streaming media encryption method, device and system, which aim to solve the technical problem that the existing streaming media encryption technology destroys the original file format and the data encryption workload is large.

To achieve the above objective, the present invention provides a streaming media encryption method, and the streaming media encryption method includes the following steps:

The server obtains metadata and media data according to the original media file;

The server encrypts the media data to obtain an encryption box according to a preset encryption key and encryption information;

The server creates a new encrypted streaming media file, writes the metadata to the encrypted streaming media file according to the format of the original media file, and writes the encrypted box as the media data into the encrypted streaming media file. The encryption of the original file of the streaming media is completed.

In an embodiment, the step of the server encrypting the media data to obtain an encryption box according to the preset encryption key and the encryption information includes:

The server divides the media data according to a preset data amount to obtain each data segment;

The server obtains an encryption key and encryption information of each piece of data according to a preset encryption key and encryption information;

And the server separately encrypts the data segments to obtain each encryption box according to the encryption key and the encryption information of each data segment.

In an embodiment, after the step of encrypting the data segments to obtain each encryption box according to the encryption key and the encryption information of each data segment, the method further includes:

The server determines whether the data segments have all been encrypted;

If the data segments are not all encrypted, proceed to the execution step: the server obtains the encryption key and the encryption information of each data segment according to the preset encryption key and the encryption information;

If the data segments have all been encrypted, proceed to the execution step: the server creates an encrypted streaming media file according to the format of the original media file, the metadata, and the encryption box.

In an embodiment, the step of the server determining whether the data segments have all been encrypted includes:

Determining, according to the remaining media data length, whether each of the data segments has been completely encrypted;

If the length of the remaining media data is zero, the server determines that the data segments have all been encrypted; if the remaining media data length is not zero, it is determined that the data segments are not all encrypted.

In an embodiment, the server creates a new encrypted streaming media file, writes the metadata to the encrypted streaming media file according to the format of the original streaming media file, and writes the encrypted box as media data. After the step of encrypting the streaming media file and completing the encryption of the original streaming media file, the method further includes:

The server issues the encrypted streaming media file to the client.

In addition, in order to achieve the above object, the present invention further provides a streaming media encryption device, where the streaming media encryption device includes:

An obtaining module, configured to obtain metadata and media data according to the original media file;

An encryption module, configured to encrypt the media data according to a preset encryption key and encryption information to obtain an encryption box;

a creating module, configured to create a new encrypted streaming media file, write the metadata into the encrypted streaming media file according to a format of the original media file, and write the encrypted box as the media data into the encrypted streaming media File, completing the encryption of the original streaming media file.

In an embodiment, the encryption module comprises:

a dividing unit, configured to divide the media data by a preset amount of data, to obtain each data segment;

a key unit, configured to acquire an encryption key and encryption information of each data segment according to a preset encryption key and encryption information;

And an encryption unit, configured to encrypt each of the data segments according to the encryption key and the encryption information of each data segment to obtain each encryption box.

In an embodiment, the encryption module further includes:

The determining unit is configured to determine whether the data segments have all been encrypted.

In an embodiment, the determining unit is further configured to:

In an embodiment, the streaming media encryption device further includes:

a publishing module, configured to publish the encrypted streaming media file to a client.

In addition, to achieve the above object, the present invention further provides a streaming media encryption system, where the streaming media encryption system includes a server and a client, where:

The server includes an obtaining module, an encryption module, a creating module, and a publishing module;

The client is configured to obtain an encrypted streaming media file from the server.

In an embodiment, the server is pre-configured with a decryption key, the decryption key is corresponding to the preset encryption key and the encrypted information, and the client is further configured to:

Acquiring the encrypted information of the encrypted box in the encrypted streaming media file, and acquiring the decryption key of the encrypted box from the server according to the encrypted information;

Decrypting the encryption box to obtain a data segment according to the decryption key;

Parsing the data segment to obtain media content, presenting the media content to a user.

A streaming media encryption method, device and system according to an embodiment of the present invention, the metadata of the original file of the streaming media is separated by the server, and the media data is encrypted to obtain the encryption box, and the metadata and the encryption box are The format of the original streaming file is written into the newly created encrypted streaming media file, and the encrypted streaming media file is consistent with the original streaming file format. At the same time, when encrypting the media data, the server does not need to encrypt each media data sample, which greatly reduces the encryption workload of the server and improves the efficiency of the server. The embodiment of the invention solves the technical problem that the streaming media encryption technology destroys the original file format and the data encryption workload is large, and realizes the successful encryption of the streaming media file without destroying the format of the original file of the streaming media, and reduces the workload of data encryption. The effect is remarkable, which effectively improves the efficiency of the server.

DRAWINGS

1 is a schematic flowchart of a first embodiment of a streaming media encryption method according to the present invention;

2 is a schematic diagram of functional modules of a first embodiment of a streaming media encryption device according to the present invention;

3 is a schematic block diagram of a first embodiment and a second embodiment of a streaming media encryption system according to the present invention;

4 is a schematic diagram of an encryption application scenario of an ASF streaming media file according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a format of an ASF streaming media file according to an embodiment of the present invention.

The implementation, functional features, and advantages of the present invention will be further described in conjunction with the embodiments.

detailed description

It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The present invention provides a solution. When encrypting media data, the server does not need to encrypt each media data sample, which greatly reduces the encryption workload of the server and improves the efficiency of the server. At the same time, the streaming media file is successfully encrypted without destroying the format of the original file of the streaming media, thereby avoiding the modification of the demultiplexing module by the client, and reducing the development cost of the client.

Referring to FIG. 1 , a first embodiment of a streaming media encryption method of the present invention provides a streaming media encryption method, where the streaming media encryption method includes:

Step S10: The server obtains metadata and media data according to the original media file.

In the embodiment of the present invention, the server separates the metadata of the original file of the streaming media from the media data, and only encrypts the media data, so that the obtained encrypted streaming media file format remains unchanged. Of course, in this embodiment, the server may also be another hardware device with an encryption function.

Specifically, as an implementation manner, first, the server obtains the original media file from the streaming media source. Streaming original files include metadata and media data.

The metadata is used to describe the original data of the streaming media, including the identification data, the file attribute data, the media attribute data, the index data, etc., and can be flexibly set according to actual needs; the media data includes the media content carried by the current streaming media original file. Data, such as graphics, images, audio, video, and more.

Then, the server parses the original media file to obtain metadata and media data.

Step S20: The server encrypts the media data to obtain an encryption box according to a preset encryption key and encryption information.

After obtaining the metadata and the media data, the server encrypts the media data according to the preset encryption key and the encrypted information to obtain an encryption box.

Specifically, as an implementation manner, first, the server divides the media data to obtain a data segment of the media data. The server can preset the amount of data, divide the media data according to the preset amount of data, and obtain a plurality of data segments with the same amount of data; the server can also preset the number of segments, and perform media data according to the preset number of segments. The data segments of the preset number are obtained, and the obtained data segments have the same amount of data; of course, the server can also divide the media data according to other preset rules to obtain data segments, which can be flexibly set according to actual needs. One data segment includes one or more media data samples, which can be set according to actual needs.

The server pre-sets the encryption key and encryption information of the data segment. The preset encryption information is the identification information of the encryption key, and is unique, and the encrypted information can be used to identify the encryption key used by the current data segment to be encrypted into the encrypted data. The server also pre-sets a decryption key corresponding to the encryption key, and the decryption key is used to decrypt the encrypted data of the encryption key. It should be noted that the encryption key and the corresponding decryption key share the same encryption information, that is, the encryption key, the decryption key and the encryption information have a one-to-one mapping relationship, and the server can obtain the corresponding encryption secret according to the encrypted information. Key and decryption key.

Then, the server allocates the encryption key and the encrypted information according to the obtained data segment. If all data segments are currently encrypted using the same encryption key, the server assigns the same encryption key and encryption information to all data segments; if the data segment is currently encrypted with a different encryption key, then The server allocates different encryption keys and encrypted information corresponding to the encryption key to different data segments.

Then, the data segments are separately encrypted according to the encryption key of the data segment.

For example, according to the sequence of playing time, the data segment obtained by the current server includes data segment 1, data segment 2, data segment 3, data segment n, and a total of n data segments.

The server encrypts the data segment 1 according to the encryption key of the data segment 1, and obtains the encrypted data 1.

Then, the server creates the encryption box 1, and fills the obtained encrypted data 1 and the encrypted information corresponding to the encryption key into the encryption box 1.

Then, the server obtains the related information data of the encryption box 1, and fills the information data into the encryption box 1, and completes the filling of the encryption box 1. The related information data of the encryption box 1 includes information such as the identification information of the encryption box 1, the data size of the encryption box 1, and the data size of the encrypted data 1, and can be flexibly set according to actual needs.

Thereby, the server obtains the encryption box 1 carrying the media data.

Then, the server encrypts the data segment 2, the data segment 3, and the data segment n, respectively, to obtain an encryption box 2, an encryption box 3, ... an encryption box n.

Thus, the server completes encryption of the media data to obtain an encryption box.

Step S30: The server creates an encrypted streaming media file according to the format of the original media file, the metadata, and the encryption box.

After the encryption of the media data is completed, the server creates an encrypted streaming media file according to the obtained metadata and the encryption box.

Specifically, as an implementation manner, first, the server creates a new encrypted streaming media file, and the newly created encrypted streaming media file has no specific file content.

Then, the server writes the obtained metadata to the encrypted streaming media file according to the format of the original file of the streaming media, so that the format of the metadata in the encrypted streaming media file and the format of the metadata in the original streaming file remain the same, for example, : Make the location of the metadata in the encrypted streaming file the same as the location of the metadata in the original streaming file. The ordering of the metadata and the encryption box in the encrypted streaming media file, and the ordering of the metadata and the media data in the original streaming file are consistent.

The server writes the obtained encrypted box as the media data to the encrypted streaming media file according to the format of the original file of the streaming media, so that the format of the encrypted box in the encrypted streaming media file is the same as the format of the media data in the original file of the streaming media. For example, the ordering of the metadata and the encryption box in the encrypted streaming media file, and the ordering of the metadata and the media data in the original streaming file are consistent.

Thereby, the encryption of the original stream file is completed, and the encrypted stream file is obtained. The obtained encrypted streaming media file has the same format as the original streaming media file. At the same time, since the server encrypts the media data in segments, there is no need to encrypt each media data sample in the media data, which greatly reduces the encryption workload of the server on the media data.

As another implementation manner, the server may pre-create an encrypted streaming media file, firstly writing the acquired metadata to the encrypted streaming media file according to the format of the original streaming media file, and then encrypting the media data. After obtaining the encryption box, the server sequentially writes the obtained encryption box to the encrypted streaming media file until all the media data is encrypted.

Thereby, the encryption of the original stream file is completed, and the encrypted stream file is obtained. The obtained encrypted streaming media file has the same format as the original streaming media file. At the same time, since the server encrypts the media data in segments, there is no need to encrypt each sample in the media data, which greatly reduces the encryption workload of the server on the media data.

Use the current application scenario as ASF (Advanced Streaming) Format, advanced streaming format) Encryption of streaming media files, for example.

Referring to FIG. 4, the server includes an encryption server, a streaming media content publishing server, and a license server. The client includes a control management module, a network download module, a decryption data module, a file format demultiplexing module, and a decoding presentation module.

First, the encryption server obtains the ASF streaming media file from the streaming media source, and the ASF streaming media file includes: a file header object (Header) Object), data object (Data Object) and index object (Index) Object), where the file header object and the index object are metadata, and the data object is media data. The encryption server parses the ASF streaming media file to obtain metadata and media data.

Then, the encryption server divides the data objects into data segments of the same size according to the preset amount of data.

Then, the encryption server acquires the preset encryption key and the encrypted information from the license server. Each piece of data can be encrypted with the same encryption key or encrypted with a different encryption key, which can be flexibly set according to actual needs. The encryption server encrypts the data segments according to the obtained encryption key to obtain a corresponding encryption box.

The encryption server creates an encrypted streaming media file. Referring to FIG. 5, according to the format of the ASF streaming media file, the file header object in the metadata is first written into the encrypted streaming media file, and then the obtained encryption box is written into the encrypted streaming media file, and finally Write the index object in the metadata to the encrypted streaming file.

Thereby, the encryption server completes the encryption of the ASF streaming media file, and obtains the encrypted streaming media file. The encryption server then pushes the obtained encrypted streaming media file to the streaming media content publishing server.

After receiving the encrypted streaming media file, the streaming media content publishing server issues the encrypted streaming media file to the network downloading module of the client.

When the user needs to obtain the encrypted streaming media file, the control management module coordinates the management network download module, the decryption data module, the file format demultiplexing module, and the decoding presentation module, obtains the encrypted streaming media file, decrypts it, and presents it to the user.

Specifically, first, the control network downloading module sends a request from the streaming media content publishing server to download the encrypted streaming media file. Then, the decrypted data module parses the obtained encrypted streaming media file to obtain an encrypted box.

The decryption data module acquires the encrypted information in the encryption box from the obtained encryption box, and transmits a permission request to the license server according to the obtained encrypted information, the permission request carrying the encrypted information.

After receiving the permission request sent by the decryption data module, the license server searches for the decryption key corresponding to the encrypted information according to the encrypted information carried by the permission request; then, the license server returns the decryption key to the decrypted data module.

After receiving the decryption key, the decryption data module decrypts the encrypted data in each encryption box according to the decryption key to obtain each piece of data of the media data.

Then, the file format demultiplexing module parses the obtained media data segments to obtain information such as each media data sampling and display time stamp.

Then, the decoding presentation module decodes the media data content according to the obtained media data sampling and display time stamp and the like, and presents the media content in the display screen of the client.

Thereby, encryption and decryption of the original streaming media file are realized.

The present embodiment separates the metadata and media data of the original file of the streaming media by the server, encrypts only the media data to obtain an encryption box, and writes the metadata and the encryption box to the newly created encrypted streaming media file according to the format of the original file of the streaming media. The encrypted streaming media file is consistent with the original streaming file format. At the same time, when encrypting the media data, the server does not need to encrypt each media data sample, which greatly reduces the encryption workload of the server and improves the efficiency of the server. The embodiment solves the technical problem that the streaming media encryption technology destroys the original file format and the data encryption workload is large, and realizes the successful encryption of the streaming media file without destroying the format of the original file of the streaming media, and reduces the workload of data encryption, and the effect Significantly, effectively improving the efficiency of the server.

Further, the second embodiment of the streaming media encryption method of the present invention provides a streaming media encryption method. Based on the first embodiment of the streaming media encryption method of the present invention, the step S20 includes:

Step S21: The server divides the media data according to a preset data amount to obtain each data segment.

After obtaining the media data of the original file of the streaming media, first, the server divides the media data by the same amount of data.

The preset data amount is the byte size of the data, and can be flexibly set according to the application scenario and the customer needs. For example, in order to ensure that the obtained media data is parsed, a more precise combination is presented to the user for the media content, and the amount of data can be set small; in order to improve the smoothness of the playback of the media content, the user can download faster, and the data volume can be set. Big. One data segment includes one or more media data samples, which can be set according to actual needs.

The server divides the media data into equal-sized segments to obtain each data segment. At the same time, the server records the starting position of each data segment in the original file of the streaming media.

Step S22: The server obtains an encryption key and encryption information of each data segment according to a preset encryption key and encryption information.

After obtaining each data segment, the server obtains the encryption key and the encryption information of each data segment according to the preset encryption key and the encryption information.

Specifically, as an implementation manner, the server is pre-configured with an encryption key and encrypted information. The preset encryption information is the identification information of the encryption key, and is unique, and the encrypted information can be used to identify the encryption key used by the current data segment to be encrypted into the encrypted data. The server also pre-sets a decryption key corresponding to the encryption key, and the decryption key is used to decrypt the encrypted data of the encryption key. It should be noted that the encryption key and the corresponding decryption key share the same encryption information, that is, the encryption key, the decryption key and the encryption information have a one-to-one mapping relationship, and the server can obtain the corresponding encryption secret according to the encrypted information. Key and decryption key.

Thus, the server obtains the encryption key and the encrypted information of each segment.

Step S23: The server end encrypts each data segment to obtain each encryption box according to the encryption key and the encryption information of each data segment.

After obtaining the encryption key and the encryption information of each data segment, the server encrypts each data segment to obtain each encryption box.

Specifically, as an implementation manner, the server constructs an encryption box, and the data structure of the encryption box is as shown in Table 1 below.

名称name	数据量The amount of data
Signature ID（签名标识）Signature ID	32bits（比特）32bits (bits)
Total size（总数据量）Total size	32bits32bits
Offset to origin file（对源文件的补偿）Offset to origin file (compensation for source files)	32bits32bits
DRM data length（DRM数据长度）DRM data length (DRM data length)	32bits32bits
DRM data（DRM数据）DRM data (DRM data)	--
Encrypted data length（加密数据长度）Encrypted data length	32bits32bits
Encrypted data（加密数据）Encrypted data	--

Table 1

Among them, Signature The ID is 32 bits, which is 4 bytes of fixed data, such as 0x05050303, used to identify the encryption box, and is the only indication of the entire encryption box.

Total size is 32 bits and is used to record the amount of data in the entire encryption box.

Offset to origin The file data volume is 32 bits, which is used to record the data offset of the encrypted data in the original file of the streaming media, that is, the starting position of the data segment carried by the current encryption box in the original file of the streaming media.

DRM Data is the encryption information corresponding to the encryption key used to encrypt the data in the current encryption box, and is used by the client to obtain the corresponding decryption key according to the information. DRM data The length of the data is 32 bits, which is used to record the data length of the DRM data, that is, the amount of data of the DRM data.

Encrypted Data is the encrypted data carried in the current encryption box, that is, the encrypted data fragment. Each encryption box carries an encrypted piece of data. Encrypted data The length of the data is 32 bits, which is used to record the data length of Encrypted data, that is, the amount of data of Encrypted data.

Then, the server can encrypt the data segments in sequence according to the playing time sequence of the data segments. The server gets the first data fragment, and then writes 0x05050303 to Signature. ID, used to identify the existence of the encryption box.

Then, the server writes the start position of the first data segment recorded in the original stream file to Offset to origin File.

Then, the server writes the encrypted information of the first data segment into DRM data; and obtains the data amount of the encrypted information, and writes the DRM data Length.

Then, the server encrypts the first data segment according to the encryption key of the first data segment to obtain encrypted data. The server will write the encrypted data to Encrypted Data; and get the amount of information of the encrypted data, write Encrypted data length.

Then, the server calculates the total amount of data of the current encryption box, and writes the obtained data amount to Total size.

Thus, the server completes the encryption of the first data segment to obtain the first encryption box.

Then, the server continues to construct the encryption box, and then encrypts the data segments in turn to obtain the corresponding encryption box.

In this embodiment, by encrypting the media data in segments, it is not necessary to encrypt each sample in the media data, which greatly reduces the encryption workload of the media data on the server side; and the server maintains the metadata retention of the original file of the streaming media. The same, only encrypts the media data, and realizes the encryption of the streaming media file without changing the original file format of the streaming media.

Further, the third embodiment of the streaming media encryption method of the present invention further provides a streaming media encryption method. Based on the second embodiment of the streaming media encryption method of the present invention, after the step S23, the method further includes:

Step S24, the server determines whether the data segments have all been encrypted; if the data segments are not all encrypted, the process proceeds to: S22; if the data segments have all been encrypted, Go to the execution step: S30.

In this embodiment, the server sequentially encrypts each data segment according to the encryption key and the encryption information of each data segment. The length of the media data of the original file of the streaming media is m, and the preset data amount of the divided data segment is k, and the server sequentially intercepts the data segment of length k from the media data to obtain an encrypted box.

As an implementation manner, after obtaining the encryption box, the server determines whether the current data segments have all been encrypted according to the remaining media data length; if the remaining media data length is zero, it determines that the current data segments have all been encrypted. If the remaining media data length is not zero, it is determined that the current data segments are not all encrypted.

If the current data segments are not all encrypted, the server continues to intercept the data segment of length k from the media data, obtains the encryption key and the encrypted information of the data segment, and encrypts the data segment. After the encryption box is obtained, it is judged again whether the current data segments have all been encrypted.

If all the current data segments have been completely encrypted, the server creates an encrypted streaming media file according to the format of the original media file, metadata, and each encryption box, and completes encryption of the original file of the streaming media.

In this embodiment, by determining whether each data segment has been completely encrypted, the data segment is prevented from being missed in the encryption process, and the integrity of the media data in the encrypted streaming media file is ensured.

Further, referring to FIG. 4, a fourth embodiment of the streaming media encryption method of the present invention provides a streaming media encryption method, a first embodiment, a second embodiment, or a third embodiment of the streaming media encryption method of the present invention. After the step, it also includes:

S40: The server issues the encrypted streaming media file to a client.

The server creates an encrypted streaming media file according to the format of the original media file, metadata, and each encryption box, and after encrypting the original file of the streaming media, the encrypted streaming media file is released to the client.

Specifically, as an implementation manner, if the current server obtains a plurality of original streaming media files from the streaming media source, the server may obtain the obtained multiple encrypted streaming media files after all the original streaming media files are encrypted. Unified packaging, release to the client. The client can download all encrypted streaming media files at one time.

As another implementation manner, if the current server obtains a plurality of original streaming media files from the streaming media source, the server may immediately obtain the obtained encrypted streaming media file to the client after completing the encryption of one original streaming media file. The end is released until the encryption and distribution of all the original streaming media files are completed. The client can download the encrypted streaming media file in sequence for decryption and playback, so that the user can view the media content online.

In this embodiment, the server actively releases the encrypted streaming media file to the client, so that the client can obtain the encrypted streaming media file in time, and decrypts the acquired encrypted streaming media file while continuing to download the subsequent encrypted streaming media file, thereby implementing streaming media. Online continuous playback of file content improves the user experience.

Referring to FIG. 2, a first embodiment of a streaming media encryption device of the present invention provides a streaming media encryption device, where the streaming media encryption device includes:

The obtaining module 10 is configured to obtain metadata and media data according to the original media file.

The encryption module 20 is configured to encrypt the media data according to a preset encryption key and encryption information to obtain an encryption box.

The creating module 30 is configured to create an encrypted streaming media file according to the format of the original streaming file, the metadata, and the encryption box.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference may be made to the first embodiment of the streaming media encryption method of the present invention described above.

The present embodiment separates the metadata of the original file of the streaming media and the media data, encrypts only the media data to obtain an encryption box, and writes the metadata and the encryption box into the newly created encrypted streaming media file according to the format of the original media of the streaming media, thereby realizing The encrypted streaming media file is consistent with the original streaming file format. At the same time, when encrypting the media data, the server does not need to encrypt each media data sample, which greatly reduces the encryption workload of the server and improves the efficiency of the server. The embodiment solves the technical problem that the streaming media encryption technology destroys the original file format and the data encryption workload is large, and realizes the successful encryption of the streaming media file without destroying the format of the original file of the streaming media, and reduces the workload of data encryption, and the effect Significantly, effectively improving the efficiency of the server.

Further, the second embodiment of the streaming media encryption device of the present invention provides a streaming media encryption device. Based on the first embodiment of the streaming media encryption device of the present invention, the encryption module 20 includes:

a dividing unit, configured to divide the media data by a preset amount of data to obtain each piece of data.

The secret key unit is configured to acquire the encryption key and the encryption information of each data segment according to the preset encryption key and the encryption information.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Referring to the second embodiment of the streaming media encryption method of the present invention described above.

In this embodiment, by encrypting the media data in segments, it is not necessary to encrypt each sample in the media data, thereby greatly reducing the encryption workload of the media data by the server; and maintaining the metadata of the original file of the streaming media remains unchanged. The media data is encrypted only, and the streaming media file is encrypted without changing the original file format of the streaming media.

Further, the third embodiment of the streaming media encryption device of the present invention further provides a streaming media encryption device. The encryption module 20 further includes:

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Referring to the third embodiment of the streaming media encryption method of the present invention described above.

Further, the fourth embodiment of the streaming media encryption device of the present invention provides a streaming media encryption device. The streaming media encryption device is based on the first embodiment, the second embodiment or the third embodiment of the streaming media encryption device of the present invention. Also includes:

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Referring to the fourth embodiment of the streaming media encryption method of the present invention described above.

In this embodiment, the encrypted streaming media file is actively distributed to the client, so that the client can obtain the encrypted streaming media file in time, and decrypt the acquired encrypted streaming media file while continuing to download the subsequent encrypted streaming media file, thereby realizing the streaming media file content. Online continuous playback enhances the user experience.

Referring to FIG. 3, a first embodiment of a streaming media encryption system of the present invention provides a streaming media encryption system, where the streaming media encryption system includes a server A and a client B, where:

The server A includes an obtaining module 10, an encryption module 20, a creating module 30, and a publishing module;

The client B is configured to obtain an encrypted streaming media file from the server A.

The streaming media encryption system includes a server A and a client B. The server A is used to encrypt the original stream file, and the obtained encrypted stream file is distributed to the client B. The client B is used to obtain the encrypted stream from the server A. Media files and present streaming content to users.

The server A includes an obtaining module 10, an encryption module 20, a creating module 30, and a publishing module.

Specifically, as an implementation manner, first, the server A obtains the original media file from the streaming media source. Then, server A obtains the metadata and media data from the original streaming file and keeps the metadata unchanged.

Then, the server A divides the obtained media data into data segments of equal size according to the preset data amount, and encrypts the data segments respectively to obtain corresponding encryption boxes.

Then, server A creates a new streaming media file as the encrypted streaming media file, and the newly created streaming media file format remains the same as the format of the original streaming media file. The server A keeps the metadata unchanged, writes it into the encrypted streaming media file, and writes the encrypted box as the media data into the encrypted streaming media file to complete the encryption of the original streaming media file.

Then, the server A releases the obtained encrypted streaming media file to the client B.

Client B downloads the encrypted streaming media file from server A according to the needs of the user.

Then, client B parses the obtained encrypted streaming media file to obtain each encryption box. Client B obtains the encrypted information of each encryption box, and sends a permission request to server A according to the encrypted information.

After the permission request is passed, the client B obtains the decryption key returned by the server A, decrypts the encrypted box, and decodes the obtained media data to present the media content to the user.

As another implementation manner, the server A obtains the original stream file from the streaming media source. Then, server A obtains the metadata and media data from the original streaming file and keeps the metadata unchanged.

Server A creates a new streaming file as an encrypted streaming file. The resulting metadata is then written to the encrypted streaming media file, keeping the metadata content unchanged. Moreover, the server A keeps the format of the metadata in the encrypted streaming media file unchanged in the original file of the streaming media. For example, the metadata is located in the file header in the original file of the streaming media, and the server writes the metadata to the encrypted stream. When the media file is in, the metadata remains in the header of the encrypted streaming file.

Then, the server A divides the obtained media data into data segments of equal size, and encrypts the data segments respectively to obtain corresponding encryption boxes. The server A sequentially writes the obtained encryption box into the encrypted streaming media file, and keeps the format of the encrypted box in the encrypted streaming media file in the same format as the media data in the original streaming file.

After the server A completes the encryption of all the data segments, and the obtained encryption boxes are all written into the encrypted streaming media file, the server completes the encryption of the original file of the streaming media.

In this embodiment, the encrypted original stream file and the original format of the streamed media are kept unchanged by the server, so that the format of the obtained media data is unchanged after the client obtains the encrypted streaming media file, and only needs to be obtained. The media data can be obtained by decrypting the encryption box, and the demultiplexing of the client data can be realized without adjusting the demultiplexing module of the client, thereby reducing the compatibility development workload of the client, and realizing the encryption security of the streaming media file. The cost of encryption system development is reduced.

Further, referring to FIG. 3, the second embodiment of the streaming media encryption system of the present invention provides a streaming media encryption system. Based on the first embodiment of the streaming media encryption system of the present invention shown in FIG. 3, the server A presets. There is a decryption key, the decryption key corresponds to the preset encryption key and the encrypted information, and the client B is further used,

Acquiring the encryption information of the encryption box in the encrypted streaming media file, acquiring the decryption key of the encryption box from the server according to the encryption information; and decrypting the encryption box according to the decryption key to obtain a data segment; Parsing the data segment to obtain media content, presenting the media content to a user.

Specifically, as an implementation manner, the server A pre-sets the decryption key of the original file of the streaming media, and the decryption key preset by the server A corresponds to the encryption key and the encrypted information of the preset original file of the streaming media. It can be understood that the server A pre-sets the encryption key, the decryption key and the encryption information of the original file of the streaming media, and the three correspond to each other. The encrypted information is the identification information of the encryption key and the decryption key, and the server A can obtain the corresponding encryption key and the decryption key according to the encrypted information. The data encrypted by the server A using the encryption key can be decrypted using the corresponding decryption key to obtain the original data.

After obtaining the encrypted streaming media file, client B parses the obtained encrypted streaming media file to obtain metadata and an encryption box. The metadata is used to obtain various information of the current streaming media original file.

The client B sequentially reads each encryption box in the encrypted streaming media file to obtain the encrypted information in the encryption and the encryption. Then, the client B will send a permission request to the server A according to the encrypted information, and obtain the decryption key corresponding to the encrypted information.

After receiving the permission request of the client B, the server A searches for the decryption key corresponding to the encrypted information, and returns the decryption key to the client B. In this embodiment, the preset client B has obtained the authorization of the server A, and can obtain the streaming media file issued by the server A.

The client B receives the decryption key returned by the server A, and decrypts the encrypted box carrying the current decrypted information, that is, decrypts the encrypted data carried in the encrypted box to obtain a data segment. Client B decrypts each encryption box carried in the encrypted streaming media file to obtain each data segment.

Then, client B parses each data segment of the media data to obtain information of each media data sample and associated display time stamp in each data segment.

Client B then decodes each media data sample to obtain media content. The client B presents the obtained media content to the client according to the information such as the display time stamp, for example, displaying the video on the display screen of the client B, controlling the output of the audio output module of the client B, and the like.

Thus, the streaming media encryption system implements encryption and decryption of streaming media files.

In this embodiment, the media data decrypted by the client B is a data segment, and a plurality of media data samples may be sampled in one data segment, thereby avoiding decryption of each media data sample, thereby reducing the decryption workload of the client B. At the same time, since the encrypted streaming media file format is the same as the original streaming file format, the client B can directly decrypt the encrypted box to obtain the media data. In this embodiment, when the streaming media file is encrypted, the format remains unchanged, and the encryption workload of the server and the decryption workload of the client are alleviated, and the efficiency of encryption and decryption of the streaming media file is improved.

The above is only an alternative embodiment of the present invention, and thus does not limit the scope of the invention, and the equivalent structure or equivalent process transformation made by using the specification and the drawings of the present invention, or directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims

A streaming media encryption method, characterized in that the streaming media encryption method comprises the following steps:

The server obtains metadata and media data according to the original media file;

The server encrypts the media data to obtain an encryption box according to a preset encryption key and encryption information;

The server creates a new encrypted streaming media file, writes the metadata to the encrypted streaming media file according to the format of the original media file, and writes the encrypted box as the media data into the encrypted streaming media file. The encryption of the original file of the streaming media is completed.
The streaming media encryption method according to claim 1, wherein the step of the server encrypting the media data to obtain an encryption box according to the preset encryption key and the encryption information comprises:

The server divides the media data according to a preset data amount to obtain each data segment;

The server obtains an encryption key and encryption information of each piece of data according to a preset encryption key and encryption information;

And the server separately encrypts the data segments to obtain each encryption box according to the encryption key and the encryption information of each data segment.
The streaming media encryption method according to claim 2, wherein said step of encrypting said each data segment to obtain each encryption box according to said encryption key and encryption information of said each data segment ,Also includes:

The server determines whether the data segments have all been encrypted;

If the data segments are not all encrypted, proceed to the execution step: the server obtains the encryption key and the encryption information of each data segment according to the preset encryption key and the encryption information;

If the data segments have all been encrypted, proceed to the execution step: the server creates an encrypted streaming media file according to the format of the original media file, the metadata, and the encryption box.
The streaming media encryption method according to claim 3, wherein the step of the server determining whether the data segments have all been encrypted comprises:

Determining, according to the remaining media data length, whether each of the data segments has been completely encrypted;

If the length of the remaining media data is zero, the server determines that the data segments have all been encrypted; if the remaining media data length is not zero, it is determined that the data segments are not all encrypted.
The streaming media encryption method according to claim 1, wherein the server creates a new encrypted streaming media file, and writes the metadata to the encrypted streaming media file according to the format of the original streaming media file. After the step of writing the encrypted data box as the media data to the encrypted streaming media file to complete the encryption of the original streaming media file, the method further includes:

The server issues the encrypted streaming media file to the client.
The streaming media encryption method according to claim 2, wherein the server creates a new encrypted streaming media file, and writes the metadata to the encrypted streaming media file according to the format of the original streaming media file. After the step of writing the encrypted data box as the media data to the encrypted streaming media file to complete the encryption of the original streaming media file, the method further includes:

The server issues the encrypted streaming media file to the client.
The streaming media encryption method according to claim 3, wherein the server creates a new encrypted streaming media file, and writes the metadata to the encrypted streaming media file according to the format of the original streaming media file. After the step of writing the encrypted data box as the media data to the encrypted streaming media file to complete the encryption of the original streaming media file, the method further includes:

The server issues the encrypted streaming media file to the client.
The streaming media encryption method according to claim 4, wherein the server creates a new encrypted streaming media file, and writes the metadata to the encrypted streaming media file according to the format of the original streaming media file. After the step of writing the encrypted data box as the media data to the encrypted streaming media file to complete the encryption of the original streaming media file, the method further includes:

The server issues the encrypted streaming media file to the client.
A streaming media encryption device, characterized in that the streaming media encryption device comprises:

An obtaining module, configured to obtain metadata and media data according to the original media file;

An encryption module, configured to encrypt the media data according to a preset encryption key and encryption information to obtain an encryption box;

a creating module, configured to create a new encrypted streaming media file, write the metadata into the encrypted streaming media file according to a format of the original media file, and write the encrypted box as the media data into the encrypted streaming media File, completing the encryption of the original streaming media file.
The streaming media encryption device of claim 9, wherein the encryption module comprises:

a dividing unit, configured to divide the media data by a preset amount of data, to obtain each data segment;

a key unit, configured to acquire an encryption key and encryption information of each data segment according to a preset encryption key and encryption information;

And an encryption unit, configured to encrypt each of the data segments according to the encryption key and the encryption information of each data segment to obtain each encryption box.
The streaming media encryption device of claim 10, wherein the encryption module further comprises:

The determining unit is configured to determine whether the data segments have all been encrypted.
The streaming media encryption device according to claim 11, wherein the determining unit is further configured to:

Determining, according to the remaining media data length, whether each of the data segments has been completely encrypted;

If the length of the remaining media data is zero, the server determines that the data segments have all been encrypted; if the remaining media data length is not zero, it is determined that the data segments are not all encrypted.
The streaming media encryption device of claim 9, wherein the streaming media encryption device further comprises:

a publishing module, configured to publish the encrypted streaming media file to a client.
The streaming media encryption device of claim 10, wherein the streaming media encryption device further comprises:

a publishing module, configured to publish the encrypted streaming media file to a client.
The streaming media encryption device of claim 11, wherein the streaming media encryption device further comprises:

a publishing module, configured to publish the encrypted streaming media file to a client.
The streaming media encryption device of claim 12, wherein the streaming media encryption device further comprises:

a publishing module, configured to publish the encrypted streaming media file to a client.
A streaming media encryption system, characterized in that the streaming media encryption system comprises a server and a client, wherein:

The server includes any of the devices of claims 9-16;

The client is configured to obtain an encrypted streaming media file from the server.
The streaming media encryption system according to claim 17, wherein the server is pre-configured with a decryption key, the decryption key corresponding to the preset encryption key and the encrypted information, the client Also used,

Acquiring the encrypted information of the encrypted box in the encrypted streaming media file, and acquiring the decryption key of the encrypted box from the server according to the encrypted information;

Decrypting the encryption box to obtain a data segment according to the decryption key;

Parsing the data segment to obtain media content, presenting the media content to a user.