WO2018001193A1 - Method, device and system for secure playback on internet protocol television channel - Google Patents

Abstract

Disclosed in the present invention are a method, a device and a system for secure playback on an Internet protocol television channel. The method comprises: digitally signing a received Internet protocol television (IPTV) code stream by using a transmission private key according to a predetermined algorithm, to generate a signature information stream; and transmitting the IPTV code stream and the signature information stream to a signature detection server, such that the signature detection server performs a detection check using a transmission public key. The signature information of the present invention uses a strong secure transmission with secret keys of two stages in an IPTV network, namely, the digital signature of the IPTV code stream and the digital signature of a public key certificate are generated using the secret keys of two different stages, achieving the secure and anti-tampering effects of IPTV live broadcasting as well as improved content security.

Description

Method, device and system for safely playing interactive network television channel Technical field

The present invention relates to the field of information security technologies, and in particular, to a method, device and system for securely playing an interactive network television channel.

Background technique

IPTV (Internet Protocol Television) is an innovative technology that uses broadband networks to integrate Internet, multimedia, and communication technologies to provide home users with a variety of interactive services, including digital TV. It can adapt well to the rapid development of today's networks and make full and effective use of network resources.

At present, IPTV has made new progress in integrating broadcast control platform, technical standards and operation mode construction, and user and market expansion. The industry has gradually entered a new stage of orderly and steady development. The IPTV integrated broadcast control platform system is increasingly perfect, the technology is continuously improved, the business content is more abundant, and the users have reached a considerable scale. Therefore, the security problem of IPTV has become an urgent problem to be solved. In the transmission process of the IPTV code stream, there are many risks, and the content of the code stream is easily falsified or replaced, which may cause non-authenticated content to be played at the terminal, which is not in conformity with the national security policy.

In the related art, DRM (Digital Rights Management) digital rights management and MD5 (Message Digest 5, message digest algorithm fifth edition) security detection technology are mainly used to protect streaming media transmission. Currently, DRM technology has not been widely used in domestic IPTV. And the cost is too high. The main principle of MD5 security detection is: the source end calculates the MD5 value by using the media data and the security key, and the peer end uses the same algorithm to calculate the received media data and the MD5 of the security key, and detects whether the media stream has been tampered by comparing the MD5 value. . However, a single security key cannot guarantee the security of encryption. The security key has the risk of being tampered with during transmission or other processes. The insecure key is likely to affect the security of the media stream.

Summary of the invention

The invention provides a method, device and system for safely playing interactive network television channels, In the case that the media data does not need to be modified, the security of the media stream in the transmission process at both ends can be ensured.

A method for securely playing an interactive network television channel is applied to a signature server, the method comprising:

Performing digital signature on the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

And transmitting the IPTV code stream and the signature information stream to the signature detection server, so that the signature detection server performs detection and verification by using the transmission public key.

Preferably, the method further comprises: obtaining a transmission private key.

Preferably, obtaining the transmission private key comprises:

The receiving private key transmitted by the key management server after being symmetrically encrypted by the data encryption standard DES.

Preferably, the predetermined algorithm comprises:

Elliptic curve ECC algorithm, RSA algorithm, digital signal algorithm DSA algorithm, DH algorithm.

Preferably, the received interactive network television IPTV code stream is digitally signed according to a predetermined algorithm by using a transmission private key, and generating the signature information stream includes:

The transmission private key is obtained by the DES symmetric decryption algorithm;

Calculating a digest value of the IPTV code stream;

Encrypting the digest using a predetermined algorithm and the transport private key;

Encapsulating the digest encryption information of the IPTV code stream to generate the signature information stream.

The embodiment of the invention further provides a method for securely playing an interactive network television channel, which is applied to a signature detection server, and the method includes:

The validity of the transmission public key is verified by a predetermined algorithm by using a digital signature of the transmission public key;

Performing signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted public key passed through verification;

The verified IPTV code stream is transmitted to the terminal to be played.

Preferably, the method further comprises: obtaining a transmission public key.

Preferably, obtaining the transmission public key comprises:

Receiving a transport public key delivered by the key management server through the certificate, where the certificate includes a signature of the transport public key and the root private key to transmit the public key.

Preferably, the predetermined algorithm comprises:

Elliptic curve ECC algorithm, RSA algorithm, digital signal algorithm DSA algorithm, DH algorithm.

Preferably, the method further includes: when the transmission public key verification fails and/or the legality verification fails, the IPTV code stream is alerted.

Preferably, the validity verification of the transmission public key by a predetermined algorithm by using a digital signature of the transmission public key comprises:

The validity of the transmission public key is verified by the root public key and the digital signature information of the transmission public key.

Preferably, performing signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted transmission public key comprises:

Extracting encrypted data from a signature structure of the IPTV code stream;

Calculating a digest value of the IPTV code stream;

Decrypting the digest value by using a predetermined algorithm and a transmission public key passed by the verification to obtain a digest value of the original IPTV code stream;

The calculated digest value is compared with the decrypted original digest value, and the verification is passed, otherwise the verification fails.

The present invention also provides an apparatus for securely playing an interactive network television channel, which is disposed on a signature server and includes:

The signature module is configured to digitally sign the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

The first transmission module is configured to transmit the IPTV code stream and the signature information stream to the signature detection server, so that the signature detection server performs detection and verification by using the transmission public key.

Preferably, the device further comprises: a first obtaining module, configured to obtain a transmission private key.

Preferably, the obtaining, by the first obtaining module, the transmission private key refers to:

The receiving private key transmitted by the key management server after being symmetrically encrypted by the data encryption standard DES.

Preferably, the signature module comprises:

a private key unit, configured to obtain a transport private key by using a DES symmetric decryption algorithm;

a digest unit, configured to calculate a digest value of the IPTV code stream;

An encryption unit configured to encrypt the digest using a predetermined algorithm and the transport private key;

And an encapsulating unit, configured to encapsulate digest encryption information of the IPTV code stream, to generate the signature information stream.

The embodiment of the present invention further provides an apparatus for securely playing an interactive network television channel, which is disposed on the signature detection server, and includes:

a first verification module, configured to perform validity verification on the transmission public key according to a predetermined algorithm by using a digital signature of the transmission public key;

a second verification module, configured to perform signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted transmission public key;

The second transmission module is configured to transmit the verified IPTV code stream to the terminal to be played.

Preferably, the device further comprises: a second obtaining module, configured to obtain a transmission public key.

Preferably, the obtaining, by the second obtaining module, the transmission public key refers to:

Receiving a transmission public key delivered by the key management server through the certificate, where the certificate includes a transmission public The signature of the key and root private key pair to transmit the public key.

Preferably, the apparatus further includes: an alarm module, configured to alert the IPTV code stream when the transmission public key verification fails and/or the legality verification fails.

Preferably, the first verification module uses the digital signature of the transmission public key to verify the legality of the transmission public key according to a predetermined algorithm:

The validity of the transmission public key is verified by the root public key and the digital signature information of the transmission public key.

Preferably, the second verification module comprises:

An extracting unit configured to extract encrypted data from a signature structure of the IPTV code stream;

a calculating unit, configured to calculate a digest value of the IPTV code stream;

a decryption unit, configured to decrypt the digest value by using a predetermined algorithm and a transmission public key that is verified to obtain a digest value of the original IPTV code stream;

The comparison unit is configured to compare the calculated digest value with the decrypted original digest value, and the verification is passed, otherwise the verification fails.

The embodiment of the invention further provides a system for securely playing an interactive network television channel, comprising: a signature server and a signature detection server.

The signature server digitally signs the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

The signature server transmits the IPTV code stream and the signature information stream to the signature detection server;

The signature detection server validates the validity of the transmission public key according to a predetermined algorithm by using a digital signature of the transmission public key;

The signature detection server uses the received signature information stream and the transmitted public key to verify the signature verification of the interactive network television IPTV code stream;

The signature detection server transmits the verified IPTV code stream to the terminal to be played.

Preferably, the system further includes: a key management server, the signature server receives a transmission private key issued by the key management server after being symmetrically encrypted by the data encryption standard DES, The signature detection server receives the transmission public key delivered by the key management server through the certificate, and the certificate includes a signature of the transmission public key and the root private key to transmit the public key.

The embodiment of the invention further provides a storage medium, wherein the storage medium comprises a stored program, wherein the program is executed to perform the above-mentioned method for securely playing the interactive network television channel on the signature server side.

The embodiment of the present invention further provides a storage medium, where the storage medium includes a stored program, wherein the program is executed to perform the above-mentioned interactive network television channel secure playing method applied to the signature detecting server side.

Compared with the prior art, the solution provided by the present invention overcomes the problem of insufficient security in the existing IPTV code stream security transmission technology, and the signature information uses a strong security transmission of a two-level key in the IPTV network, that is, an IPTV code stream. The digital signature of the digital signature and the public key certificate are generated using two different levels of keys, which achieves the IPTV live broadcast security tamper-proof effect, and the content security is effectively improved.

Other features and advantages of the invention will be set forth in the description which follows, The objectives and other advantages of the invention may be realized and obtained by means of the structure particularly pointed in the appended claims.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flowchart of a method for securely playing an interactive network television channel according to the present invention;

2 is a flowchart of a method for securely playing an interactive network television channel according to the present invention;

3 is a structure of an apparatus for securely playing an interactive network television channel according to the present invention schematic diagram;

4 is a schematic structural diagram of an apparatus for securely playing an interactive network television channel according to the present invention;

FIG. 5 is a schematic structural diagram of a system for securely playing an interactive network television channel according to the present invention; FIG.

6 is a security key management diagram of Embodiment 2 of the present invention;

7 is a schematic diagram of a digital signature process according to Embodiment 2 of the present invention;

8 is a schematic diagram of a signature verification process according to Embodiment 2 of the present invention;

FIG. 9 is a diagram of a signature information format according to Embodiment 2 of the present invention.

detailed description

The embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

The steps illustrated in the flowchart of the figures may be executed in a computer system such as a set of computer executable instructions. Also, although logical sequences are shown in the flowcharts, in some cases the steps shown or described may be performed in a different order than the ones described herein.

As shown in FIG. 1 , an embodiment of the present invention provides a method for securely playing an interactive network television channel, which is applied to a signature server, and the method includes:

Performing digital signature on the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

And transmitting the IPTV code stream and the signature information stream to the signature detection server, so that the signature detection server performs detection and verification by using the transmission public key.

Preferably, the method further comprises: obtaining a transmission private key.

Wherein, obtaining the transmission private key includes:

Received key management server transmitted through the data encryption standard DES symmetrically encrypted transmission Private key.

The predetermined algorithm includes: an elliptic curve ECC algorithm, an RSA algorithm, a digital signal algorithm DSA (Digital Signature Algorithm) algorithm, and a DH algorithm.

The received interactive network television IPTV code stream is digitally signed according to a predetermined algorithm by using a transmission private key, and generating the signature information flow includes:

The transmission private key is obtained by the DES symmetric decryption algorithm;

Calculating a digest value of the IPTV code stream;

Encrypting the digest using a predetermined algorithm and the transport private key;

Encapsulating the digest encryption information of the IPTV code stream to generate the signature information stream.

As shown in FIG. 2, an embodiment of the present invention further provides a method for securely playing an interactive network television channel, which is applied to a signature detection server, and the method includes:

The validity of the transmission public key is verified by a predetermined algorithm by using a digital signature of the transmission public key;

Performing signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted public key passed through verification;

The verified IPTV code stream is transmitted to the terminal to be played.

The two verifications in the embodiment of the present invention respectively verify the transmission public key required for decryption, and verify the IPTV code stream; first verify the validity of the transmission public key, and then use the legal transmission public key to verify the IPTV code stream. .

Preferably, the method further comprises: obtaining a transmission public key.

Wherein, obtaining the transmission public key includes:

Receiving a transport public key delivered by the key management server through the certificate, where the certificate includes a signature of the transport public key and the root private key to transmit the public key.

The predetermined algorithm includes: an elliptic curve ECC algorithm, an RSA algorithm, a digital signal algorithm DSA algorithm, and a DH algorithm.

Preferably, the method further includes: when the transmission public key verification fails and/or the legality verification fails, the IPTV code stream is alerted.

The legality verification of the transmission public key by using a digital signature of the transmission public key according to a predetermined algorithm includes:

The validity of the transmission public key is verified by the root public key and the digital signature information of the transmission public key.

The signature verification of the interactive network television IPTV code stream by using the received signature information stream and the transmitted transmission public key includes:

Extracting encrypted data from a signature structure of the IPTV code stream;

Calculating a digest value of the IPTV code stream;

Decrypting the digest value by using a predetermined algorithm and a transmission public key passed by the verification to obtain a digest value of the original IPTV code stream;

The calculated digest value is compared with the decrypted original digest value, and the verification is passed, otherwise the verification fails.

In the embodiment of the present invention, the IPTV code stream is transmitted by using a transmission private key according to a specific algorithm, and the media stream and the signature information are transmitted to the opposite end; the opposite end of the code stream and the signature information are verified by a specific algorithm using the transmission public key, and the verification is successfully played. IPTV code stream.

As shown in FIG. 3, an embodiment of the present invention provides an apparatus for securely playing an interactive network television channel, which is installed in a signature server, and includes:

The signature module is configured to digitally sign the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

The first transmission module is configured to transmit the IPTV code stream and the signature information stream to the signature detection server, so that the signature detection server performs detection and verification by using the transmission public key.

The device further includes: a first obtaining module configured to obtain a transmission private key.

The obtaining, by the first obtaining module, the transmission private key means:

The receiving private key transmitted by the key management server after being symmetrically encrypted by the data encryption standard DES.

The signature module includes:

a private key unit, configured to obtain a transport private key by using a DES symmetric decryption algorithm;

a digest unit, configured to calculate a digest value of the IPTV code stream;

An encryption unit configured to encrypt the digest using a predetermined algorithm and the transport private key;

And an encapsulating unit, configured to encapsulate digest encryption information of the IPTV code stream, to generate the signature information stream.

As shown in FIG. 4, an apparatus for securely playing an interactive network television channel according to an embodiment of the present invention is provided in a signature detection server, including:

a first verification module, configured to perform validity verification on the transmission public key according to a predetermined algorithm by using a digital signature of the transmission public key;

a second verification module, configured to perform signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted transmission public key;

The second transmission module is configured to transmit the verified IPTV code stream to the terminal to be played.

The device further includes: a second obtaining module configured to obtain a transmission public key.

The obtaining the public key by the second obtaining module refers to:

Receiving a transport public key delivered by the key management server through the certificate, where the certificate includes a signature of the transport public key and the root private key to transmit the public key.

The device further includes: an alarm module configured to alert the IPTV code stream when the transmission public key verification fails and/or the legality verification fails.

The first verification module uses the digital signature of the transmission public key to verify the legality of the transmission public key according to a predetermined algorithm:

The validity of the transmission public key is verified by the root public key and the digital signature information of the transmission public key.

The second verification module includes:

An extracting unit configured to extract encrypted data from a signature structure of the IPTV code stream;

a calculating unit, configured to calculate a digest value of the IPTV code stream;

a decryption unit, configured to decrypt the digest value by using a predetermined algorithm and a transmission public key that is verified to obtain a digest value of the original IPTV code stream;

The comparison unit is configured to compare the calculated digest value with the decrypted original digest value, and the verification is passed, otherwise the verification fails.

As shown in FIG. 5, a system for securely playing an interactive network television channel according to an embodiment of the present invention includes: a signature server and a signature detection server.

The signature server digitally signs the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

The signature server transmits the IPTV code stream and the signature information stream to the signature detection server;

The signature detection server validates the validity of the transmission public key according to a predetermined algorithm by using a digital signature of the transmission public key;

The signature detection server uses the received signature information stream and the transmitted public key to verify the signature verification of the interactive network television IPTV code stream;

The signature detection server transmits the verified IPTV code stream to the terminal to be played.

The system further includes: a key management server, the signature server receives a transmission private key that is sent by the key management server after being symmetrically encrypted by the data encryption standard DES, and the signature detection server receives the key management server and sends the certificate through the certificate. The transmission public key, the certificate includes a signature of the transmission public key and the root private key to transmit the public key.

The format of the transport public key certificate is:

Transfer public key

-----BEGIN SIGN-----

The signature of the root private key to the secure transmission public key

-----END SIGN-----

Embodiment 1

The method for safely broadcasting an IPTV channel according to the present invention includes the following steps:

In the first step, the source provides an IPTV media stream, such as an RTP stream output by the IPTV server;

In the second step, the signature server receives the RTP stream and signs it according to a specific algorithm. The signature information stream is strongly transmitted in the IPTV network using a two-level key, that is, the digital signature of the media stream and the digital signature of the public key certificate are used in two levels. Key generation; output RTP stream and signature information by unicast or multicast;

In the third step, the signature detection server receives the RTP stream and the signature information, performs signature verification according to a specific algorithm, and alerts the code stream that fails verification;

In the fourth step, the IPTV terminal plays the media stream that is verified by the IPTV terminal.

Embodiment 2

1. The signature object, the IPTV channel code stream in this embodiment is the media data encapsulated in the RTP (Real-time Transport Protocol) format, for example, the IPTV content provider outputs the TS (Transport Stream) through the encoder. Then, through the transcoding server, find the key frame output RTP stream.

2. As shown in FIG. 6, key management, this embodiment uses a strong secure transmission of a two-level key, and the digital signature of the IPTV stream and the digital signature of the public key certificate are generated using two different levels of keys, and the IPTV stream is generated. The digital signature uses the transport private key to verify the use of the transport public key. The transmission private key is symmetrically encrypted by the key management server and sent to the signature server by the DES, and the transmission public key is sent to the signature detection server in the form of a certificate (the certificate includes the secure transmission public key and the root private key to securely transmit the public key. Signature) When the signature detection server receives the secure transmission public key certificate and the root public key, it needs to use the root public key to verify the validity of the secure transmission public key.

3. As shown in FIG. 7 , the media digital signature, the signature server receives the media RTP stream, and uses the elliptic curve ECC algorithm to sign, because finally the media data is displayed in the terminal, so only the TS data is signed, the flow is as follows:

(1) Decrypt the secure transmission private key, and obtain the secure transmission private key through the DES symmetric decryption algorithm;

(2) extracting the media data, extracting the TS load from the RTP stream to prepare to start the signature;

(3) calculating a hash digest, and calculating a digest value for the media data;

(4) encrypting the message digest, encrypting the digest using an elliptic curve digital signature algorithm ECDSA and a secure transmission private key;

(5) encapsulating the encrypted information, and storing the encrypted information in the signature information structure t_SignPacketInfo{}, including the flag field, the algorithm index, the sampling step size, the sampling width, the signature length, the signature information, and the additional length;

4. Signature information transmission, according to different forms of media data and signature data transmission, is divided into two types: in-band transmission and out-of-band transmission;

a) In-band transmission is to put the media data and the corresponding signature information into the same RTP. Therefore, the RTP packet needs to be extended. The RFC3550 specification is extended according to the specification, and the P field is set to 1, at the end of the RTP packet. Perform an extended signature information structure.

b) Out-of-band transmission is to separately transmit media data and signature data, monitor the content of the transmission, and find that after the content has been tampered with, it can promptly alert and not modify the original media stream. The signature information is separately encapsulated into an RTP: the PT field is modified to 99, and the remaining RTP header data is consistent with the corresponding media RTP packet, and the signature information structure is placed in the payload.

5. As shown in FIG. 8 , the verification of the code stream signature is performed according to the difference of the signature transmission mode, and the deployment of the signature detection module is correspondingly distinguished;

a) In-band transmission, the terminal needs to integrate the signature verification module, receive the IPTV media stream, perform signature verification on an RTP-by-RT packet, and alarm the code stream that fails verification.

b) When the out-of-band transmission is performed, the signature detection server is separately deployed in front of the terminal, and the IPTV media stream and the signature information stream are received at the same time, and the IPTV source stream data is buffered. When the signature packet is received, according to the RTP packet header (Seq+Timestamp) and The RTP extension header searches for the source data packet of the IPTV, and then performs signature verification to alert the code stream source that fails verification; as shown in FIG. 9, the header is an RTP extension header, followed by the header of the signature information, and then Plus signature information.

The signature verification also uses the elliptic curve ECC algorithm. The flow is as follows:

(1) verifying the security transmission public key, verifying the validity of the transmission public key by using the root public key and the signature information of the transmission public key;

(2) extracting media data and encrypted data, extracting media data from the RTP, and extracting the encrypted data from the signature structure;

(3) Calculate the summary, calculate the digest value for the above media data, and the digest algorithm is selected from Table 1; the digest algorithm is implemented by calling the existing algorithm class in the open source Openssl library.

Table 1

(4) decrypting the encrypted data, decrypting the abstract by using an elliptic curve digital signature algorithm ECDSA and a secure transmission public key passed by the verification to obtain a digest value of the original media data;

(5) Verification summary, comparing the calculated digest value with the decrypted original media summary, and agreeing that the verification is passed, otherwise the verification fails;

6. The terminal plays, and the terminal plays the media data that has passed the verification, and the media data that does not meet the signature, that is, the verification fails, is refused to play.

While the embodiments of the present invention have been described above, the described embodiments are merely for the purpose of understanding the invention and are not intended to limit the invention. Any modification and variation in the form and details of the embodiments may be made by those skilled in the art without departing from the spirit and scope of the invention. The scope defined by the appended claims shall prevail.

Industrial applicability

In the secure broadcast process of the interactive network television channel in the embodiment of the present invention, the signature information is strongly transmitted in the IPTV network using two levels of keys, that is, the digital signature of the IPTV code stream and the digital signature of the public key certificate are used in two levels. The key generation achieves the IPTV live broadcast security anti-tamper effect, and the content security is effectively improved, thereby solving the problem of insufficient security in the existing IPTV code stream security transmission technology.

Claims (26)

1. A method for securely playing an interactive network television channel is applied to a signature server, the method comprising:

   Performing digital signature on the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

   And transmitting the IPTV code stream and the signature information stream to the signature detection server, so that the signature detection server performs detection and verification by using the transmission public key.
2. The method of claim 1 wherein the method further comprises: obtaining a transmission private key.
3. The method of claim 2 wherein obtaining the transmission private key comprises:

   The receiving private key transmitted by the key management server after being symmetrically encrypted by the data encryption standard DES.
4. The method of claim 1 wherein said predetermined algorithm comprises:

   Elliptic curve ECC algorithm, RSA algorithm, digital signal algorithm DSA algorithm, DH algorithm.
5. The method according to claim 1, wherein the received interactive network television IPTV code stream is digitally signed according to a predetermined algorithm by using a transmission private key, and generating the signature information stream comprises:

   The transmission private key is obtained by the DES symmetric decryption algorithm;

   Calculating a digest value of the IPTV code stream;

   Encrypting the digest using a predetermined algorithm and the transport private key;

   Encapsulating the digest encryption information of the IPTV code stream to generate the signature information stream.
6. A method for securely playing an interactive network television channel is applied to a signature detection server, and the method includes:

   The validity of the transmission public key is verified by a predetermined algorithm by using a digital signature of the transmission public key;

   Performing signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted public key passed through verification;

   The verified IPTV code stream is transmitted to the terminal to be played.
7. The method of claim 6 wherein said method further comprises: obtaining a transmission public key.
8. The method of claim 7, wherein obtaining the transmission public key comprises:

   Receiving a transport public key delivered by the key management server through the certificate, where the certificate includes a signature of the transport public key and the root private key to transmit the public key.
9. The method of claim 6 wherein said predetermined algorithm comprises:

   Elliptic curve ECC algorithm, RSA algorithm, digital signal algorithm DSA algorithm, DH algorithm.
10. The method according to claim 6, further comprising: alerting the IPTV code stream when the transmission public key verification fails and/or the legality verification fails.
11. The method according to claim 8, wherein the validity verification of the transmission public key by a predetermined algorithm by using a digital signature of the transmission public key comprises:

    The validity of the transmission public key is verified by the root public key and the digital signature information of the transmission public key.
12. The method of claim 6 wherein the received signature information is utilized The signature verification of the interactive network television IPTV code stream by the transmission and verification of the transmitted public key includes:

    Extracting encrypted data from a signature structure of the IPTV code stream;

    Calculating a digest value of the IPTV code stream;

    Decrypting the digest value by using a predetermined algorithm and a transmission public key passed by the verification to obtain a digest value of the original IPTV code stream;

    The calculated digest value is compared with the decrypted original digest value, and the verification is passed, otherwise the verification fails.
13. An apparatus for securely playing an interactive network television channel, disposed on a signature server, comprising:

    The signature module is configured to digitally sign the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

    The first transmission module is configured to transmit the IPTV code stream and the signature information stream to the signature detection server, so that the signature detection server performs detection and verification by using the transmission public key.
14. The apparatus of claim 13, further comprising: a first acquisition module configured to obtain a transmission private key.
15. The apparatus according to claim 14, wherein the obtaining, by the first acquisition module, the transmission private key means:

    The receiving private key transmitted by the key management server after being symmetrically encrypted by the data encryption standard DES.
16. The apparatus of claim 13 wherein said signature module comprises:

    a private key unit, configured to obtain a transport private key by using a DES symmetric decryption algorithm;

    a digest unit, configured to calculate a digest value of the IPTV code stream;

    An encryption unit configured to encrypt the digest using a predetermined algorithm and the transport private key;

    And an encapsulating unit, configured to encapsulate digest encryption information of the IPTV code stream, to generate the signature information stream.
17. A device for safely playing an interactive network television channel, which is disposed on a signature detection server, and includes:

    a first verification module, configured to perform validity verification on the transmission public key according to a predetermined algorithm by using a digital signature of the transmission public key;

    a second verification module, configured to perform signature verification on the interactive network television IPTV code stream by using the received signature information stream and the transmitted transmission public key;

    The second transmission module is configured to transmit the verified IPTV code stream to the terminal to be played.
18. The apparatus of claim 17, further comprising: a second acquisition module configured to obtain a transmission public key.
19. The apparatus of claim 18, wherein the obtaining, by the second acquisition module, the transmission of the public key means:

    Receiving a transport public key delivered by the key management server through the certificate, where the certificate includes a signature of the transport public key and the root private key to transmit the public key.
20. The apparatus according to claim 17, further comprising: an alarm module configured to: when the transmission public key verification fails and/or the legality verification fails, the IPTV code The flow is alarmed.
21. The apparatus according to claim 19, wherein the first verification module validates the transmission public key by a predetermined algorithm by using a digital signature of the transmission public key, which means:

    The validity of the transmission public key is verified by the root public key and the digital signature information of the transmission public key.
22. The apparatus of claim 17, wherein the second verification module comprises:

    An extracting unit configured to extract encrypted data from a signature structure of the IPTV code stream;

    a calculating unit, configured to calculate a digest value of the IPTV code stream;

    a decryption unit, configured to decrypt the digest value by using a predetermined algorithm and a transmission public key that is verified to obtain a digest value of the original IPTV code stream;

    The comparison unit is configured to compare the calculated digest value with the decrypted original digest value, and the verification is passed, otherwise the verification fails.
23. A system for safely playing an interactive network television channel, comprising: a signature server and a signature detection server;

    The signature server digitally signs the received interactive network television IPTV code stream by using a transmission private key according to a predetermined algorithm to generate a signature information stream;

    The signature server transmits the IPTV code stream and the signature information stream to the signature detection server;

    The signature detection server validates the validity of the transmission public key according to a predetermined algorithm by using a digital signature of the transmission public key;

    The signature detection server utilizes the received signature information stream and the transmission passed by the verification The key performs signature verification on the interactive network television IPTV code stream;

    The signature detection server transmits the verified IPTV code stream to the terminal to be played.
24. The system of claim 23, further comprising: a key management server, the signature server receiving a transmission private key issued by the key management server after being symmetrically encrypted by the data encryption standard DES, the signature detection server receiving the secret The key management server transmits a public key delivered by the certificate, and the certificate includes a signature of the transmission public key and the root private key to transmit the public key.
25. A storage medium, the storage medium comprising a stored program, wherein the program is executed to perform the method of any one of claims 1 to 5.
26. A storage medium, the storage medium comprising a stored program, wherein the program is executed to perform the method of any one of claims 6 to 12.

Images