WO2022000261A1

WO2022000261A1 - Method for starting and activating camera, camera and cradle head

Info

Publication number: WO2022000261A1
Application number: PCT/CN2020/099245
Authority: WO
Inventors: 马骏; 黄晶晶; 朱超; 范庆鹤
Original assignee: 深圳市大疆创新科技有限公司
Priority date: 2020-06-30
Filing date: 2020-06-30
Publication date: 2022-01-06
Also published as: CN113056726A

Abstract

A method for activating a camera, comprising: loading ciphertext of at least one target program of the camera, wherein the at least one target program comprises at least one among a system program and an application program; acquiring at least one first functional secret key; using the at least one first functional secret key to convert the ciphertext of the at least one target program to plaintext of the at least one target program; and performing, for each target program, the following operations: verifying, on the basis of the plaintext of the target program, whether the target program meets a program start condition; and starting the target program in response to a verification result indicating that the target program meets the program start condition. Embodiments of the present application may prevent a camera software system from being cracked and thus prevent a camera product from being illegally copied, counterfeited, assembled, and packaged for sale, or even prevent the camera product from being illegally used due to circumvention of activation and authorization processes.

Description

Method for starting and activating a camera, and a camera and a PTZ

technical field

The present application relates to the technical field of cameras, and in particular, to a startup method for a camera, an activation method for a camera, a camera, a PTZ, a server, a camera system, and a computer-readable Storage medium, a computer program product containing instructions.

Background technique

The existing camera software system is easy to be cracked, which makes the camera product very easy to be copied and counterfeited, or the camera can easily evade the activation and authorization process due to the tampering of the software system, so that the camera may be illegally activated, or the camera may be illegally activated. It is possible to obtain illegal camera products by means of , assembly, counterfeiting, etc.

SUMMARY OF THE INVENTION

The embodiments of the present application provide a method for starting and activating a camera, a camera, a gimbal, a camera system, and a server, which can prevent the camera software system from being cracked, thereby preventing camera products from being illegally copied, counterfeited, assembled and assembled. Sales and even avoid illegal use of camera products by circumventing the activation and authorization process.

In a first aspect, an embodiment of the present application provides a startup method for a camera, including: loading ciphertext of at least one target program of the camera, wherein the at least one target program includes a system program and an application program. at least one; obtain at least one first function key; use the at least one first function key to convert the ciphertext of the at least one target program into the plaintext of the at least one target program; for each target program, The following operations are performed: verifying whether the target program meets the program start condition based on the plaintext of the target program; and starting the target program in response to the verification result indicating that the target program meets the program start condition.

In a second aspect, an embodiment of the present application further provides a method for starting a camera, including: generating and storing at least one first function key; and sending the at least one first function key to the camera, so that The camera performs a camera activation operation based on the at least one first function key.

In a third aspect, an embodiment of the present application provides an activation method for a camera, including: acquiring an encrypted message from the camera for requesting to activate the camera; verifying the encrypted message; and The verification result of the encrypted message is used to determine whether to activate the camera.

In a fourth aspect, an embodiment of the present application provides a camera, where the camera includes a processor for: loading ciphertext of at least one target program of the camera, wherein the at least one target program includes a system program and an application at least one of the programs; obtain at least one first function key; use the at least one first function key to convert the ciphertext of the at least one target program into the plaintext of the at least one target program; for each The target program performs the following operations: verifying whether the target program meets the program start condition based on the plaintext of the target program; and starting the target program in response to the verification result indicating that the target program meets the program start condition.

In a fifth aspect, an embodiment of the present application provides a pan/tilt for use with a camera, including: a processor for generating and storing at least one first function key; and a message transmitter for sending the The camera sends the at least one first function key, so that the camera performs a camera startup operation based on the at least one first function key.

In a sixth aspect, an embodiment of the present application provides a server, including: a message receiver for acquiring an encrypted message from the camera for requesting activation of the camera; and a processor for processing the encrypted message verifying, and determining whether to activate the camera based on a result of the verification of the encrypted message.

In a seventh aspect, an embodiment of the present application provides a camera system, including: a camera according to any embodiment of the present application; and a pan/tilt according to any embodiment of the present application.

In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, including instructions, which, when executed on a computer, cause the computer to execute the method of any embodiment of the present application.

In a ninth aspect, an embodiment of the present application provides a computer program product including instructions, which, when the instructions are executed on a computer, cause the computer to execute the method of any one of the embodiments of the present application.

The embodiments of the present application provide a method for starting and activating a camera, a camera, a PTZ, a server, and a camera system. The security solution for encrypting and protecting the software system of the camera is adopted, and the software system is verified to be legal, complete, and non-existent. Restart the camera when it is tampered with, thereby preventing the camera software system from being cracked, thereby preventing camera products from being illegally copied, counterfeited, assembled and assembled for sale, and even preventing camera products from being illegally used due to circumvention of activation and authorization processes.

Description of drawings

FIG. 1 schematically shows a system architecture of a method for starting and activating a camera according to an embodiment of the present application;

FIG. 2 schematically shows a flowchart of a method for starting a camera according to an embodiment of the present application;

FIG. 3 schematically shows a flowchart of a startup method for a camera according to another embodiment of the present application;

FIG. 4 schematically shows a schematic diagram of a method for starting and activating a camera according to the present application;

FIG. 5 schematically shows a flowchart of a startup method for a camera according to another embodiment of the present application;

FIG. 6 schematically shows a flowchart of an activation method for a camera according to an embodiment of the present application;

7A to 7C schematically show a flowchart of a method for starting and activating a camera according to an embodiment of the present application;

FIG. 8 schematically shows a block diagram of a camera according to an embodiment of the present application.

detailed description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application.

The startup method for a camera and the camera provided by the embodiments of the present application can be applied to any application scenario that needs to start the camera (for example, the camera is started by loading system programs and applications for the first time, or programs (including system programs and/or application programs) are upgraded. Start the camera after the program is loaded for the first time, etc.). The startup method for the camera may be specifically performed by the camera on the camera side, and more specifically, may be performed by the processor of the camera. The starting method for the camera can be specifically executed by the PTZ on the PTZ side, and more specifically can be executed by the processor of the PTZ.

Likewise, the activation method for a camera provided by the embodiments of the present application can be applied to any application scenario where the camera needs to be activated (for example, the camera needs to be activated after starting the camera for the first time). On the server side, the activation method for the camera may be specifically executed by an activation server, and more specifically, may be executed by a processor of the activation server.

The system architecture of the method for starting and activating the camera provided by the embodiment of the present application may be as shown in FIG. 1 .

As shown in FIG. 1 , the system architecture 100 includes a firmware server 101 , a security server 102 , an activation server 103 and a camera system 104 . The camera system 104 includes a pan/tilt 1041 and a camera 1042 .

Specifically, the firmware server 101 is used to provide the camera 1042 with firmware such as system programs and/or application programs to be loaded when it is started for the first time, and to provide the camera 1042 with system programs and/or applications to be loaded when the camera 1042 starts up again after a program upgrade. firmware, etc.

The security server 102 is used to generate a core key, and inject the generated core key into the corresponding model of the PTZ. Among them, the core key is the bottom key of the camera product, which is used to generate the function key (including the activation key and the activation key) in order to realize the activation and activation of the camera. In other words, the core key is a product-level key, each product type can share a core key, and the function key is generated by adding the information of each camera with the core key as the seed.

The activation server 103 is configured to receive the activation request of the camera 1042, verify whether the camera 1042 meets the activation conditions, and then return an activation response to the camera 1042 according to the verification result.

The PTZ 1041 is used to generate function keys such as the activation key and the activation key of the camera 1042 according to the core key and the information of the camera 1042 itself. In addition, the PTZ 1041 is also used to acquire and save the status information of the camera 1042, and to receive the status query request of the camera 1042, to verify whether the camera 1042 is legal, and to return the status query result to the camera 1042 according to the verification result.

The camera 1042 can load the firmware from the firmware server 101 and obtain the activation key from the PTZ 1041 to perform the camera activation operation. In addition, the camera 1042 can also obtain an activation key from the PTZ 1041 and send an activation request to the activation server 103 to perform a camera activation operation.

It should be noted that FIG. 1 is only a schematic diagram of a system architecture suitable for this embodiment of the present application, and does not limit the topology of the system architecture.

The startup method for a camera provided by the embodiment of the present application can adopt a security scheme for encrypting and protect the software system of the camera, and start the camera after verifying that the software system is legal, complete, and has not been tampered with, thereby avoiding camera software The system can be easily cracked, thereby preventing camera products from being easily and illegally copied, counterfeited, assembled and assembled for sale, and even prevent camera products from being illegally used by circumventing the activation and authorization process.

It should be noted that the startup and activation methods for cameras provided in the embodiments of the present application can be used to perform secure startup and activation authentication for various types of camera products, so that the camera products can operate normally.

In addition, it should be noted that the startup and activation methods for cameras provided by the embodiments of the present application can be applied to the field of cameras, electronic devices with camera functions, and other fields. Specifically, in this embodiment of the present application, the camera may be any electronic device that can capture and record images, which is not limited in this application.

Some implementations of the embodiments of the present application will be described in detail below with reference to the accompanying drawings. The embodiments described below and features in the embodiments may be combined with each other without conflict.

The embodiment of the present application provides a startup method for a camera, which is applied to the camera side.

FIG. 2 schematically shows a flowchart of a method for starting a camera according to an embodiment of the present application. The execution body of this embodiment may be a camera, and specifically may be a processor of the camera. As shown in FIG. 2 , the method of this embodiment can be used, for example, in the scenario of starting the target program in the camera for the first time, or in the scenario of starting the target program in the camera for the first time after the program is upgraded, and the method can include, for example, operation S210 to operation S260.

In operation S210, the ciphertext of at least one target program of the camera is loaded, wherein the at least one target program includes at least one of a system program and an application program.

In operation S220, at least one first function key is obtained.

In operation S230, the ciphertext of the at least one target program is converted into the plaintext of the at least one target program by using the at least one first function key.

Operation S240, for each target program, the following operations S250 and S260 are performed.

In operation S250, it is verified whether the target program meets the program startup condition based on the plaintext of the target program.

In operation S260, the target program is started in response to the verification result indicating that the target program meets the program start condition.

Compared with the camera in the related art without the security solution related to the software system, the embodiment of the present application adds a security solution related to the software system of the camera. Specifically, part or all of the camera software system can be encrypted and stored in the firmware server 101 as shown in FIG. 1 , so that the camera can be used when loading.

Obviously, in the embodiment of the present application, by encrypting the camera software system, the camera software system can be prevented from being easily cracked, thereby preventing the camera software system from being copied, tampered, and replaced, thereby avoiding counterfeiting, assembly, and assembly. Camera products are illegally sold and used because they circumvent the activation and authorization process.

Specifically, in operation S210, in order to ensure the security of the camera software system, when encrypting the camera software system, the following schemes may be adopted: scheme 1, only the system program may be encrypted; or, scheme 2, only the application program (including encrypting all or Part of the application program); or, scheme 3, the system program and the application program can be encrypted at the same time (including encryption of all or part of the application program).

Correspondingly, when starting the camera, for scheme 1, operations S210 to S260 may be performed only when the system program of the camera is started; for scheme 2, the system program of the camera may be started first, and only the applications involving encryption of the camera are started. During the program, operations S210 to S260 are performed; for scheme 3, the camera system program can be started first, and then the camera application program, and operations S210 to S260 are performed when the camera system program and the encryption-related application program are started.

It can be understood that, in contrast, with the camera of solution 3, the software system is more difficult to be cracked, and thus the security is higher. Using the camera of solution 1 or solution 2, the software system is slightly less difficult to crack than solution 3, so the security is slightly lower. In different embodiments, the solution may be set according to actual requirements such as security, which is not limited in this application.

Specifically, in this embodiment of the present application, in operation S220, for example, at least one first function key may be obtained from a pan/tilt associated with the camera. It can be understood that in this embodiment of the present application, the pan/tilt associated with the camera and the camera itself are in a camera system. For example, referring back to FIG. 1 , the gimbal associated with camera 1042 is gimbal 1041 , where both camera 1042 and gimbal 1041 belong to camera system 104 .

In one embodiment, for the same camera, the encrypted system program and all encrypted application programs can share a startup key (the first function key) to decrypt and activate.

Or, in another embodiment, for the same camera, the encrypted system program and some programs in all encrypted application programs may share a startup key (the first function key) to decrypt and activate, And each of the remaining programs can individually share an activation key (the first function key) to decrypt and activate.

Or, in another embodiment, for the same camera, each of the programs (including the encrypted system program and all encrypted application programs) can each have an exclusive activation key (the first function key) ) to decrypt and start.

It can be understood that for the same camera, the greater the number of activation keys (first function keys) used by its software program, the more difficult the software program is to be cracked, and the higher its security performance; and vice versa.

Specifically, in this embodiment of the present application, in order to maximize the security of the camera software system, for example, a security server can generate a core key for each product model, so that all camera products under one product model can share one core key. For example, the PTZ can generate a key (the first function key) for each function software (target program) based on the core key corresponding to the product model of the camera in the camera system, and based on the camera's own information. ), so as to realize "one machine, one function and one secret key". Therefore, as a preferred embodiment, different function keys can correspond to different target programs, so as to realize "one machine, one function, one key", so as to ensure the safe startup of the camera to the greatest extent.

It can be understood that, in this embodiment of the present application, all software programs of the camera can share a first function key for encryption, but this solution is not very secure, which is equivalent to a first function key being cracked means that all Software programs may no longer be safe. In contrast, "one machine, one function, one key" is a better solution.

In addition, specifically, in the embodiment of the present application, in operation S220, in order to prevent the first function key from being leaked or hijacked during the transmission process, the channel for transmitting the first function key may also be encrypted first. , and then obtain at least one first function key from the PTZ associated with the camera through an encrypted channel.

In addition, in this embodiment of the present application, in order to prevent the first function key from being easily cracked, the PTZ can also generate an encryption function key based on the corresponding core key and the camera's own information through an encryption algorithm.

Specifically, in operation S220, the camera may obtain at least one encryption function key from the PTZ, wherein the at least one encryption function key is a key obtained by encrypting at least one of the aforementioned at least one first function key key. In other words, in this embodiment of the present application, all the first function keys may be encrypted, or only part of the first function keys may be encrypted. In contrast, encrypting all the first function keys is more secure.

In addition, in this embodiment of the present application, after the PTZ generates the first function key, it can be stored in the memory. Thus, in operation S220, the camera may acquire at least one first function key from the memory of the gimbal associated with the camera. Since the information stored in the memory is volatile after power failure, and any third party cannot read the information in the memory of the PTZ, the embodiment of the present application can prevent the leakage of the first function key.

In an embodiment of the present application, after operation S210 and operation S220, operation S230 may be performed first to decrypt the ciphertext of the corresponding system software by using each startup key (first function key), and then operation S250 may be performed Whether the camera can be started is verified based on the plaintext of the software program obtained after decryption, so that the safe start of the camera system software can be realized.

It should be noted that under normal circumstances, the camera software systems released to the firmware server are legal software that has not been maliciously tampered or replaced by third parties. Based on this, in operation S250, it can be verified based on the plaintext of the target program whether the target program is legal, whether it has not been maliciously tampered or replaced by a third party, and the like. After the verification result shows that the target program is legal and has not been maliciously tampered or replaced by a third party, operation S260 is performed, that is, the target program is started and run. This method can intercept illegal and tampered software from entering the camera main body. control system operation.

As an optional embodiment, the method may further include: for all target programs, first verifying whether the system program can be started, and then verifying whether the application program can be started after the system program is started.

Specifically, as shown in FIG. 3 , the method may include the following operations, for example.

In operation S310, the ciphertext of the system program of the camera is loaded.

In operation S320, a first function key for decrypting the ciphertext of the system program is obtained.

In operation S330, the ciphertext of the system program is converted into corresponding plaintext by using the first function key.

In operation S340, based on the plaintext of the system program, it is verified whether the system program complies with the program startup condition.

In operation S350, in response to the verification result indicating that the system program meets the program startup condition, the system program is started.

In operation S360, in response to the system program being started, the following operations S370 to S3110 are cyclically performed to sequentially start the encryption application program in the camera.

In operation S370, the ciphertext of an application program of the camera is loaded.

In operation S380, a first function key for decrypting the ciphertext of the application is obtained.

In operation S390, the ciphertext of the application is converted into corresponding plaintext by using the first function key.

Operation S3100, based on the plaintext of the application program, verify whether the application program meets the program startup condition.

In operation S3110, in response to the verification result indicating that the application complies with the program startup condition, the application is started.

It can be understood that there may be one or more of the above system programs and application programs, which are not limited in this application.

As an optional embodiment, the method may further include: in response to the startup of the application, sending a first encrypted message to the activation server based on the second function key, so as to request to activate the camera.

FIG. 4 schematically shows a schematic diagram of a method for starting and activating a camera according to the present application. As shown in FIG. 4 , the implementation principle of this method can be, for example, as follows: the security server 402 first generates a core key, and injects it into the pan/tilt 4041 in the camera system 404 through an encrypted channel. After the PTZ 4041 receives the core key from the security server 402, it can first process the core key through an encrypted communication algorithm, and then send it to the security storage module for storage. When the camera 4042 in the camera system 404 needs to be activated Or before this, the core key is read from the secure storage module, and the core key is processed through a key generation algorithm to generate at least one first function key and second function key, and the function Before the secret keys (including at least one first function key and the second function key) are sent to the camera 4042, these function keys are encrypted through an encrypted communication algorithm, and then sent to the camera 4042 through an encrypted channel. After the camera 4042 receives the encryption function key from the PTZ 4041, it first decrypts the encryption function key, and then verifies whether the system software can be started normally through the decrypted function key. In response to the verification of the system software, it is normal. Start the system software; then verify whether each application software can be started normally, and in response to the verification of the application software passing, for example, the camera activation process can be started. When activating the camera, the camera 4042 sends a first encrypted message to the activation server 403 based on the second function key through an encrypted activation algorithm to request activation of the camera, and receives an activation response from the activation server 403, and then determines whether to activate based on the activation response camera.

In the embodiment of the present application, in order to prevent illegally assembled and assembled camera products from being sold and used normally, the camera product and the activation server can be formed into a safe activation system, and the camera product in the user's hand needs to be activated and authenticated before it can be used normally. .

By encrypting the camera activation request through the embodiments of the present application, the camera can be activated safely, preventing the activation algorithm from being cracked, and preventing illegally assembled and assembled cameras from bypassing the activation process and being sold and used normally.

As an optional embodiment, in order to prevent the activation request from being leaked during transmission, for example, the first encrypted message may be sent to the activation server through an encrypted channel.

It can be understood that the information carried in the camera activation request can be used for secret key guessing. Therefore, once the camera activation request is leaked, the probability of the activation key being cracked will increase. As a security system, the less plaintext information is leaked, the higher the security of the entire system and the lower the possibility of being cracked. Based on the above considerations, in this embodiment of the present application, an encrypted channel is used to transmit the first encrypted message.

As an optional embodiment, for example, the method may further include: before sending the first encrypted message to the activation server, sending a second encrypted message to the pan/tilt associated with the camera and/or to a control device inside the camera, In order to request to query the status of the camera, when the query result indicates that the camera has not been activated, the activation process of the camera is started.

Specifically, in the present application, as an embodiment, the state information of the camera may be separately stored in the solidified memory of the PTZ. Or, as another embodiment, the state information of the camera may be separately stored in the camera's internal component (control device) that has the same computing power and safe storage capability as the PTZ. Or, as another embodiment, the state information of the camera may be stored in the gimbal and the camera internal component (control device) having the same computing power and safe storage capability as the gimbal. For example, the above-mentioned control device may include, but is not limited to, at least one of a lens controller, a battery controller, and an LCD drive controller.

In the embodiment of the present application, the following settings can be made, that is, each camera product can only perform an activation operation once. Specifically, the activation operation may be performed in the process of starting the camera for the first time, and the activation operation may not be performed in other cases. In this way, it is possible to first query whether the camera is currently in a state that has not been activated, and if the camera has not been activated, start the camera activation process.

It can be understood that encrypting the status query request can also realize the safe activation of the camera, which can prevent illegally assembled or assembled cameras from being sold and used normally.

As an optional embodiment, the second encrypted message may be sent to the PTZ through an encrypted channel to prevent the status query request from being leaked during transmission.

As an optional embodiment, the query result may be obtained from the PTZ through an encrypted channel to prevent the status query result from being leaked during transmission.

It is understandable that if the information such as status query request, status query result, various function keys (such as startup key and activation key) are leaked when transmitting information between a single camera and the gimbal, it will directly cause the camera to leak. Activation, secure boot and other function keys are leaked, and once the function keys such as secure boot and activation are leaked, other illegal camera products can disguise as the camera for disguised activation, or skip activation, skip secure boot, or even The encrypted firmware is decrypted and cracked. Therefore, the security of camera startup and activation is improved by transmitting information between the camera and the gimbal through an encrypted channel.

The embodiment of the present application also provides another startup method for a camera, which is applied to the PTZ side.

FIG. 5 schematically shows a flowchart of a startup method for a camera according to another embodiment of the present application. The execution body of this embodiment may be a PTZ, specifically a processor of the PTZ. As shown in FIG. 5 , the method of this embodiment can be used, for example, in the scenario of starting the target program in the camera for the first time, or in the scenario of starting the target program in the camera for the first time after the program is upgraded, and the method can include, for example, operation S510 and operation S520.

In operation S510, at least one first function key is generated and stored.

In operation S520, at least one first function key is sent to the camera, so that the camera performs a camera startup operation based on the at least one first function key.

As described in the foregoing embodiments of the present application, the camera software system can be encrypted to prevent the camera software system from being easily cracked, thereby preventing the camera software system from being copied, tampered with, and being replaced, thereby avoiding counterfeit, assembled and assembled cameras. Products are illegally sold and used because they circumvent the activation and authorization process.

It can be understood that copying means that the firmware of the camera is copied in plaintext. If the firmware plaintext is copied, the camera can be started directly bypassing the secure boot function, and even the plaintext firmware can be used to decompile, crack, and directly crack the security system of the entire camera, then secure boot and activation are completely meaningless. So the camera's software system (firmware) is encrypted and stored. However, when booting the camera, it needs to authenticate and perform boot operations based on the clear text firmware.

Based on this, in the embodiment of the present application, at least one first function key for decrypting the firmware ciphertext can be generated and stored by the PTZ, and the camera is provided with the corresponding first function key when the camera is started.

It should be noted that, in the embodiment of the present application, the solution for generating and saving the first function key by the PTZ is the same as or similar to that described in the foregoing embodiment, and details are not repeated here.

Through the embodiments of the present disclosure, a security algorithm for encrypting plaintext firmware and decrypting ciphertext firmware can be integrated through the PTZ to form a security center, without adding a special security chip. Moreover, the security algorithm can be implemented through autonomous, customizable, and flexibly replaceable security technologies, thereby achieving higher security. The autonomous, customizable, and flexibly replaceable camera security startup and activation solution can adapt to changes in the external environment and improve the difficulty of cracking, thus improving the security level of camera software systems and camera products, and improving the flexibility of camera product security solutions.

For example, by storing the function key in the PTZ, the encryption scheme can be flexibly adjusted to cope with the changing external environment. It can be understood that, for example, if a better, more secure, and lower performance-consuming encryption algorithm appears, the encryption algorithm used in this application can be flexibly replaced, that is, the new encryption algorithm is used to generate a new firmware ciphertext to upgrade the camera. Flexibility to adjust the purpose of the encryption scheme.

In addition, it should be noted that, in the embodiment of the present application, a security storage function, various function key derivation algorithms, and encrypted communication algorithms can be integrated in the PTZ, so as to realize a hardware security center with extremely high cracking difficulty, which is used for: storage The core secret key ensures that the core secret key will not be cracked; the function secret key such as the secure startup key and the activation secret key is exported to ensure that the function secret key will not flow out of the security center, and at the same time to ensure that various function secret key export algorithms are difficult to crack. In addition, function keys such as secure startup keys and activation keys are transmitted through encrypted channels to ensure that the function keys will not be leaked during transmission. In addition, correspondingly, an encrypted communication algorithm and an encrypted information verification algorithm are also integrated on the camera side, which are used to transmit the secure activation key and the activation key with the security center through encrypted communication.

As an optional embodiment, for example, the method may further include: encrypting at least one of the at least one first function key to generate and store the encrypted function key.

Specifically, the gimbal can encrypt part or all of the first function key through an encrypted communication algorithm, and the gimbal can store the first function key through a secure storage function, which can improve the difficulty of cracking and further improve the camera software system , The safety level of camera products.

As an optional embodiment, sending the at least one first function key to the camera may include, for example, sending the encrypted function key to the camera through an encrypted channel to prevent the encrypted function key from being leaked during transmission.

As an optional embodiment, sending the encrypted function key to the camera through an encrypted channel may include, for example: obtaining a first encrypted message from the camera for requesting to obtain the encrypted function key; performing verification; and sending the encrypted function key to the camera through an encrypted channel in response to the first encrypted message passing the verification. As a result, the function key can be prevented from being illegally hijacked.

As an optional embodiment, the method may further include, for example: acquiring and storing status information for the camera; acquiring a second encrypted message from the camera for requesting to query the camera status; verifying the second encrypted message; and In response to passing the verification of the second encrypted message, status information is sent to the camera, so that the camera can determine whether to start the camera activation process. It can be understood that the verification can prevent the camera state from being illegally stolen, thereby preventing the illegally assembled camera from being normally activated or bypassing the activation process and being used normally.

As an optional embodiment, sending the status information to the camera may include, for example, sending the status information to the camera through an encrypted channel, so as to prevent the camera status from being illegally intercepted.

As an optional embodiment, the state information is stored in the memory of the pan/tilt associated with the camera. Since the memory can solidify the stored information, the state information of the camera can be prevented from being lost after power failure.

As an optional embodiment, at least one first function key is stored in the memory of the PTZ associated with the camera.

Specifically, in this embodiment of the present application, after the PTZ generates the first function key, it can be stored in the memory. Thus, the camera can obtain at least one first function key from the memory of the gimbal associated with the camera. Since the information stored in the memory is volatile after power failure, and any third party cannot read the information in the memory of the PTZ, the embodiment of the present application can prevent the leakage of the first function key.

The embodiment of the present application also provides an activation method for a camera, which is applied to the activation server side.

FIG. 6 schematically shows a flowchart of an activation method for a camera according to an embodiment of the present application. The execution body of this embodiment may be an activation server, and specifically may be a processor of the activation server. As shown in FIG. 6 , the method of this embodiment may, for example, start the scene of the target program in the camera for the first time, and the method may include, for example, operations S610 to S630 .

In operation S610, an encrypted message from the camera for requesting activation of the camera is obtained.

In operation S620, the encrypted message is authenticated.

In operation S630, it is determined whether to activate the camera based on the verification result with respect to the encrypted message.

Specifically, in operation S620, it may be verified whether the identity of the camera is legal and whether the encrypted message is legal. After the verification is passed, a response message that allows activation is returned to the camera. If the verification fails, reject the active response message to the camera.

Through the embodiments of the present application, in response to the startup of the application program of the camera, the integrated encryption activation algorithm can be used to communicate with the activation service to complete the encryption activation process of the camera.

Hereinafter, the startup and activation method for a camera of the present application will be described in detail with a specific embodiment.

In one embodiment, as shown in FIGS. 7A to 7C , the flow of the camera startup and activation method may include the following operations.

The PTZ first performs operations S710 to S714.

Operate S710, the gimbal starts safely;

In operation S711, the gimbal extracts and saves the state information of the camera;

In operation S712, the PTZ generates the security startup key of the camera;

In operation S713, the PTZ initializes the encrypted transmission channel;

Operate S714, the gimbal controls the camera master to power on.

After the camera is powered on, the camera master performs operations S720 and S721.

Operate S720 to load the system launcher;

Operation S721 is to run the system starter.

After the system launcher is running, perform the following operations in conjunction with the gimbal to launch the camera's system application.

Operation S730, the system starter is initialized;

In operation S731, the encrypted communication of the system starter is initialized;

Operation S732, the system starter queries the camera status;

Operation S715, the PTZ encrypted message verification is passed;

In operation S716, the PTZ responds to the camera status query request;

Operation S733, the system launcher obtains and stores the state information of the camera in the memory;

In operation S734, the system launcher extracts the secure boot key and the activation key;

Operation S717, the PTZ encrypted message verification is passed;

In operation S718, the PTZ feeds back the secure startup key and the activation key;

Operation S735, the system launcher stores the secure boot key and the activation key to the memory;

Operation S736, the system launcher configures the secure activation key of the system program 1;

Operation S737, the system launcher loads the ciphertext firmware of the system program 1 into the memory;

In operation S738, the system launcher decrypts and verifies the ciphertext of the system program 1;

In operation S739, the system launcher starts the system program 1.

After System Program 1 is up and running, do the following to start System Program 2.

Operation S740, the system program 1 runs;

Operation S741, the system program 1 extracts the status information of the camera from the memory;

In operation S742, the system program 1 extracts the secure boot key of the system program 2 from the memory, and verifies it;

Operation S743, the system program 1 configures the secure startup key of the system program 2;

Operation S744, the system program 1 loads the system program 2 into the memory;

Operation S745, the system program 1 decrypts and verifies the system program 2;

Operation S746, the system program 1 starts the system program 2;

Operation S747, the system program 1 loads the activation key;

Operation S748, the system program 1 generates activation request information and sends it to the activation server for verification;

In operation S750, the activation server verifies the activation request;

Operate S751 to activate the server to verify the legitimacy of the camera;

In operation S752, the activation server responds to the activation request;

In operation S749, the system program 1 verifies the activation response and confirms the activation result.

In the above embodiment, the target program includes two system programs (ie, system program 1 and system program 2) and one application program (ie, activation program). It can be understood that the above embodiment is only a schematic example of the present application, which is not limited herein.

The embodiments of the present application also provide a camera for realizing safe startup and activation operations.

FIG. 8 schematically shows a block diagram of a camera according to an embodiment of the present application. As shown in FIG. 8 , the camera 800 may include, for example, a processor 810 and a memory 820 .

Specifically, the memory 820 is used to store instructions, and the processor 810 calls the instructions stored in the memory 820 to perform the following operations: load the ciphertext of at least one target program of the camera, where the at least one target program includes a system program and an application program At least one of; obtain at least one first function key; use at least one first function key to convert the ciphertext of at least one target program into the plaintext of at least one target program; for each target program, perform the following operations: Based on the plaintext of the target program, verify whether the target program meets the program start condition; and start the target program in response to the verification result indicating that the target program meets the program start condition.

As an optional embodiment, different function keys may correspond to different target software.

As an optional embodiment, the processor may also be configured to: for all target programs, first verify whether the system program can be started, and then verify whether the application program can be started after the system program is started.

As an optional embodiment, the camera may further include: a message transmitter, configured to send a first encrypted message to the activation server by the second function key to request activation of the camera in response to the activation of the application program.

As an optional embodiment, the message transmitter of the camera may also be configured to: send the first encrypted message to the activation server through an encrypted channel.

As an optional embodiment, the message sender of the camera may also be configured to: before sending the first encrypted message to the activation server, send a second message to the pan/tilt associated with the camera and/or to a control device inside the camera The encrypted message is used to request to query the status of the camera; and the processor is further used for starting the activation process of the camera when the query result indicates that the camera has not been activated.

As an optional embodiment, the message transmitter of the camera may also be configured to: send a second encrypted message to the PTZ through an encrypted channel.

As an optional embodiment, the camera may further include a message receiver. The message receiver is used to obtain query results from the PTZ through an encrypted channel.

As an optional embodiment, the camera may further include a message receiver. The message receiver is used for: obtaining at least one first function key from the PTZ associated with the camera.

As an optional embodiment, the message receiver of the camera may also be used to obtain at least one first function key from the PTZ through an encrypted channel.

As an optional embodiment, the message receiver of the camera is further configured to: obtain an encryption function key from the PTZ, wherein the encryption function key is used for encrypting at least one of the at least one first function key. obtained key.

As an optional embodiment, the message receiver of the camera may also be used for: acquiring at least one first function key from the memory of the PTZ.

It should be understood that the camera provided in this embodiment of the present application can be used to implement the technical solutions of the foregoing camera-side startup method for the camera, and its implementation principles and technical effects are similar to those of the method embodiments, which will not be repeated here.

The embodiments of the present application also provide a pan/tilt head, which is used in cooperation with the camera, so that the camera can be started and activated safely.

Specifically, the pan/tilt head may include a processor and a message transmitter. The processor may be configured to generate and store at least one first function key. The message transmitter of the gimbal can be configured to send at least one first function key to the camera, so that the camera can perform a camera startup operation based on the at least one first function key.

As an optional embodiment, the processor of the PTZ may also be configured to: encrypt at least one of the at least one first function key, so as to generate and store the encrypted function key.

As an optional embodiment, the message transmitter of the PTZ can also be used to: send the encrypted function key to the camera through an encrypted channel.

As an optional embodiment, the PTZ may further include: a message receiver, configured to obtain a first encrypted message from the camera for requesting to obtain the encrypted function key. The processor of the PTZ can also be used to authenticate the first encrypted message. The message transmitter of the PTZ can also be configured to send the encrypted function key to the camera through an encrypted channel in response to the first encrypted message being verified.

As an optional embodiment, the message receiver of the PTZ may also be configured to obtain status information for the camera and obtain a second encrypted message from the camera for requesting to query the camera status. The PTZ may further include: a memory for storing state information for the camera. The processor of the PTZ can also be used to authenticate the second encrypted message. The message transmitter of the gimbal can also be configured to send status information to the camera in response to the second encrypted message passing the verification, so that the camera can determine whether to start the camera activation process.

As an optional embodiment, the message transmitter of the PTZ can also be used to send status information to the camera through an encrypted channel.

As an optional embodiment, the PTZ may further include: a memory for storing at least one first function key.

It should be understood that the pan/tilt provided in the embodiments of the present application can be used to implement the technical solutions of the foregoing embodiments of the camera startup method on the pan/tilt side, and the implementation principles and technical effects thereof are similar to those of the method embodiments, which will not be repeated here. .

The embodiment of the present application also provides a server (activation server), which is used in cooperation with the camera, so that the camera can be activated. Specifically, the server may include, for example, a message receiver and a processor. The message receiver is used to obtain an encrypted message from the camera for requesting activation of the camera. The processor may be used to authenticate the encrypted message and determine whether to activate the camera based on the result of the authentication for the encrypted message.

It should be understood that the server provided in this embodiment of the present application can be used to execute the technical solution of the foregoing embodiment of the activation method for a camera on the server side, and its implementation principle and technical effect are similar to those of the method embodiment, and are not repeated here.

The embodiments of the present application also provide a camera system. The camera system may include the camera in any of the foregoing embodiments and the pan/tilt in any of the foregoing embodiments, which will not be repeated in this embodiment of the present application.

The embodiments of the present application further provide a computer-readable storage medium, including instructions, which, when run on a computer, enable the computer to execute any method of any of the embodiments of the present application, which are not described herein again.

The embodiments of the present application also provide a computer program product including instructions, when the instructions are run on the computer, the computer executes the method of any one of the embodiments of the present application, and details are not described herein again.

In the above-mentioned embodiments, it may be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented in software, it can be implemented in whole or in part in the form of a computer program product. A computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the procedures or functions according to the embodiments of the present application are generated in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable device. Computer instructions may be stored in or transmitted over a computer-readable storage medium. Computer instructions may be sent from one website site, computer, server, or data center to another website site, computer, via wire (eg, coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.) , server or data center for transmission. A computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center, or the like that contains one or more of the available mediums integrated. Useful media may be magnetic media (eg, floppy disks, hard disks, magnetic tapes), optical media (eg, DVDs), or semiconductor media (eg, solid state disks (SSDs)), and the like.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features thereof can be equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present application. Scope.

Claims

A startup method for a camera, comprising:

Load the ciphertext of at least one target program of the camera, wherein the at least one target program includes at least one of a system program and an application program;

Obtain at least one first function key;

Convert the ciphertext of the at least one target program into the plaintext of the at least one target program by using the at least one first function key;

For each target program, do the following:

Verify that the target program meets the program launch conditions based on the plaintext of the target program; and

The target program is started in response to the verification result indicating that the target program meets the program start condition.
The method according to claim 1, wherein different function keys correspond to different target programs.
The method according to claim 1 or 2, further comprising: for all target programs, first verifying whether the system program can be started, and then verifying whether the application program can be started after starting the system program.
The method of claim 3, further comprising:

In response to the launch of the application, a first encrypted message is sent to the activation server based on the second function key to request activation of the camera.
The method of claim 4, wherein:

The first encrypted message is sent to the activation server over an encrypted channel.
The method of claim 4, further comprising: before sending the first encrypted message to the activation server,

sending a second encrypted message to the gimbal associated with the camera and/or to a control device inside the camera to request the status of the camera,

Wherein, when the query result indicates that the camera has not been activated, the activation process of the camera is started.
The method of claim 6, wherein:

Send the second encrypted message to the PTZ through an encrypted channel.
The method according to claim 6 or 7, wherein,

The query result is obtained from the PTZ through an encrypted channel.
The method according to claim 1, wherein the acquiring at least one first function key comprises:

The at least one first function key is obtained from a gimbal associated with the camera.
The method according to claim 9, wherein the obtaining the at least one first function key from a PTZ associated with the camera comprises:

The at least one first function key is obtained from the PTZ through an encrypted channel.
The method according to claim 9 or 10, characterized in that,

Obtain at least one encryption function key from the PTZ, wherein the at least one encryption function key is a key obtained by encrypting at least one of the at least one first function key.
The method according to claim 9 or 10, characterized in that,

The at least one first function key is obtained from the memory of the PTZ.
A startup method for a camera, comprising:

generating and storing at least one first function key; and

The at least one first function key is sent to the camera, so that the camera performs a camera startup operation based on the at least one first function key.
The method of claim 13, further comprising:

Encrypting at least one of the at least one first function key to generate and store the encrypted function key.
The method according to claim 14, wherein the sending the at least one first function key to the camera comprises:

Send the encrypted function key to the camera through an encrypted channel.
The method according to claim 15, wherein the sending the encrypted function key to the camera through an encrypted channel comprises:

obtaining a first encrypted message from the camera for requesting to obtain the encrypted function key;

verifying the first encrypted message; and

In response to the first encrypted message passing the verification, the encrypted function key is sent to the camera through an encrypted channel.
The method of claim 13, further comprising:

obtain and store state information for the camera;

obtaining a second encrypted message from the camera for requesting to query the status of the camera;

verifying the second encrypted message; and

In response to the verification of the second encrypted message being passed, the status information is sent to the camera, so that the camera can determine whether to initiate a camera activation process.
The method according to claim 17, wherein the sending the status information to the camera comprises:

The status information is sent to the camera over an encrypted channel.
The method of claim 17, wherein:

The state information is stored in the memory of the gimbal associated with the camera.
The method of claim 13, wherein:

The at least one first function key is stored in the memory of the gimbal associated with the camera.
An activation method for a camera, comprising:

obtaining an encrypted message from the camera requesting activation of the camera;

verifying the encrypted message; and

Whether to activate the camera is determined based on the result of the verification of the encrypted message.
A camera, characterized in that the camera includes a processor for:

Load the ciphertext of at least one target program of the camera, wherein the at least one target program includes at least one of a system program and an application program;

Obtain at least one first function key;

Convert the ciphertext of the at least one target program into the plaintext of the at least one target program by using the at least one first function key;

For each target program, do the following:

Verify that the target program meets the program launch conditions based on the plaintext of the target program; and

The target program is started in response to the verification result indicating that the target program meets the program start condition.
The camera of claim 22, wherein different function keys correspond to different target software.
The camera according to claim 22 or 23, wherein the processor is further configured to: for all target programs, first verify whether the system program can be started, and then verify whether the application program can be started after the system program is started .
The camera of claim 24, wherein the camera further comprises:

A message sender, configured to send a first encrypted message to the activation server by the second function key to request activation of the camera in response to the activation of the application.
The camera of claim 25, wherein the message transmitter is further configured to:

The first encrypted message is sent to the activation server over an encrypted channel.
The camera of claim 25, wherein

The message sender is further configured to: before sending the first encrypted message to the activation server, send a second encrypted message to the pan/tilt associated with the camera and/or to a control device inside the camera to request an inquiry the status of the camera; and

The processor is further configured to start the activation process of the camera when the query result indicates that the camera has not been activated.
The camera of claim 27, wherein the message transmitter is further configured to:

Send the second encrypted message to the PTZ through an encrypted channel.
The camera according to claim 27 or 28, wherein the camera further comprises a message receiver for:

The query result is obtained from the PTZ through an encrypted channel.
The camera of claim 22, wherein the camera further comprises a message receiver for:

The at least one first function key is obtained from a gimbal associated with the camera.
The camera of claim 30, wherein the message receiver is further configured to:

The at least one first function key is obtained from the PTZ through an encrypted channel.
The camera of claim 30 or 31, wherein the message receiver is further configured to:

Obtain an encryption function key from the PTZ, wherein the encryption function key is a key obtained by encrypting at least one of the at least one first function key.
The camera of claim 30 or 31, wherein the message receiver is further configured to:

The at least one first function key is obtained from the memory of the PTZ.
A pan/tilt, used in conjunction with a camera, is characterized in that it includes:

a processor for generating and storing at least one first function key; and

A message transmitter, configured to send the at least one first function key to the camera, so that the camera performs a camera startup operation based on the at least one first function key.
The pan-tilt according to claim 34, wherein the processor is further configured to:

Encrypting at least one of the at least one first function key to generate and store the encrypted function key.
The PTZ according to claim 35, wherein the message transmitter is further used for:

Send the encrypted function key to the camera through an encrypted channel.
The pan/tilt according to claim 36, wherein,

The PTZ further includes: a message receiver, configured to obtain a first encrypted message from the camera for requesting to obtain the encrypted function key;

the processor, further configured to authenticate the first encrypted message; and

The message sender is further configured to send the encrypted function key to the camera through an encrypted channel in response to the first encrypted message passing the verification.
The pan/tilt according to claim 34, wherein,

the message receiver, further configured to obtain status information for the camera and obtain a second encrypted message from the camera for requesting to query the camera status;

The pan/tilt also includes: a memory for storing state information for the camera;

the processor, further configured to authenticate the second encrypted message; and

The message sender is further configured to send the status information to the camera in response to the second encrypted message passing the verification, so that the camera determines whether to start the camera activation process.
The PTZ according to claim 38, wherein the message transmitter is further used for:

The status information is sent to the camera over an encrypted channel.
The PTZ according to claim 34, wherein the PTZ further comprises: a memory for storing the at least one first function key.
A server, characterized in that it includes:

a message receiver for obtaining an encrypted message from the camera for requesting activation of the camera;

A processor for verifying the encrypted message and determining whether to activate the camera based on a result of the verification of the encrypted message.
A camera system, characterized in that it includes:

The camera of any of claims 22-33; and

The pan/tilt according to any one of claims 34-40.
A computer-readable storage medium comprising instructions which, when run on a computer, cause the computer to perform the method of any one of claims 1-21.
A computer program product comprising instructions which, when executed on a computer, cause the computer to perform the method of any one of claims 1-21.