[go: up one dir, main page]

CN104661109B - Method, system and terminal for hiding media URI in CDN - Google Patents

Method, system and terminal for hiding media URI in CDN Download PDF

Info

Publication number
CN104661109B
CN104661109B CN201310585928.6A CN201310585928A CN104661109B CN 104661109 B CN104661109 B CN 104661109B CN 201310585928 A CN201310585928 A CN 201310585928A CN 104661109 B CN104661109 B CN 104661109B
Authority
CN
China
Prior art keywords
media
cdn
uri
encrypted
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201310585928.6A
Other languages
Chinese (zh)
Other versions
CN104661109A (en
Inventor
黄小桑
沈昕
祝谷乔
罗传飞
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN201310585928.6A priority Critical patent/CN104661109B/en
Publication of CN104661109A publication Critical patent/CN104661109A/en
Application granted granted Critical
Publication of CN104661109B publication Critical patent/CN104661109B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/643Communication protocols
    • H04N21/6437Real-time Transport Protocol [RTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/235Processing of additional data, e.g. scrambling of additional data or processing content descriptors
    • H04N21/2351Processing of additional data, e.g. scrambling of additional data or processing content descriptors involving encryption of additional data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/435Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
    • H04N21/4353Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream involving decryption of additional data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/845Structuring of content, e.g. decomposing content into time segments
    • H04N21/8456Structuring of content, e.g. decomposing content into time segments by decomposing the content in the time domain, e.g. in time segments
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/85Assembly of content; Generation of multimedia applications
    • H04N21/858Linking data to content, e.g. by linking an URL to a video object, by creating a hotspot
    • H04N21/8586Linking data to content, e.g. by linking an URL to a video object, by creating a hotspot by using a URL

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The disclosure relates to a method, a system and a terminal for hiding a media URI in a CDN. The method comprises the steps of requesting a play address of a medium to be played to a play address generation module; receiving the encrypted playing address, and forwarding the encrypted playing address to the CDN through a playing list request; receiving a playlist file returned by the CDN, wherein the playlist file comprises encrypted URI of each fragment of the requested media; requesting a media file from the CDN, wherein the request for the media file comprises encrypted URI of each fragment of the requested media; and receiving the media file returned by the CDN. The present disclosure may hide the media URI when the HAS mechanism is employed.

Description

对CDN内的媒体URI进行隐藏的方法、系统与终端Method, system and terminal for hiding media URI in CDN

技术领域technical field

本公开涉及三网融合领域,特别地,涉及一种基于HAS(HTTP AdaptiveStreaming,HTTP自适应流媒体)机制对CDN(Content Delivery Network,内容分发网络)内的媒体URI(Uniform Resource Identifier,统一资源标识)进行隐藏的方法、系统与用户终端。The present disclosure relates to the field of triple network integration, and in particular, relates to a media URI (Uniform Resource Identifier, Uniform Resource Identifier) in a CDN (Content Delivery Network, content distribution network) based on the HAS (HTTP Adaptive Streaming, HTTP Adaptive Streaming Media) mechanism. ) method, system and user terminal for hiding.

背景技术Background technique

近些年,互联网视频迅猛发展,视频内容的流量已占到了整个互联网流量的一半。谈到互联网视频就不得不提到流媒体技术,正是流媒体技术的不断发展促进了目前互联网视频的迅猛发展。In recent years, Internet video has developed rapidly, and video content traffic has accounted for half of the entire Internet traffic. When it comes to Internet video, streaming media technology has to be mentioned. It is the continuous development of streaming media technology that promotes the rapid development of Internet video.

传统的媒体内容分发技术主要有两大类,一类是以RTSP(Real Time StreamingProtocol,实时流媒体协议)/RTP(Real Time Transfer Protocol,实时传输协议)为代表的面向连接的流媒体技术,另一类则是目前主流视频网站采用的无连接的HTTP渐进式下载。There are two main categories of traditional media content distribution technologies, one is connection-oriented streaming media technology represented by RTSP (Real Time Streaming Protocol)/RTP (Real Time Transfer Protocol, real-time transport protocol), and the other is One type is the connectionless HTTP progressive download adopted by mainstream video websites at present.

所谓的渐进式下载,即终端播放器可以在整个媒体文件被下载完成之前即可开始媒体的播放,客户端及服务端如果均支持HTTP1.1,则终端还可从没下载完成的部分中任意选取一个时间点开始播放。The so-called progressive download means that the terminal player can start playing the media before the entire media file is downloaded. If both the client and the server support HTTP1. Pick a point in time to start playing.

但是,传统的媒体内容分发技术与HTTP渐进式下载技术均存在一定的缺陷,这时HAS技术应运而生,它融合了传统RTSP/RTP流媒体技术以及基于HTTP渐进式下载技术的优点,具有高效、可扩展以及兼容性强的特点。However, both traditional media content distribution technology and HTTP progressive download technology have certain defects. At this time, HAS technology came into being. It combines the advantages of traditional RTSP/RTP streaming media technology and HTTP-based progressive download technology. , scalability and strong compatibility.

HAS技术结合了传统的流媒体技术和HTTP渐进式下载播放的特点,以HTTP的方式向用户传送媒体内容,该技术的采用可以大大提升用户的媒体播放体验,同时该技术降低了头端服务器的技术复杂度。基于HTTP的传送方式提升了媒体内容在网络设备中的穿透能力,该技术目前已成为流媒体视频行业发展的趋势。HAS technology combines the traditional streaming media technology and the characteristics of HTTP progressive download and playback, and transmits media content to users in the form of HTTP. The adoption of this technology can greatly improve the user's media playback experience, and at the same time, this technology reduces the overhead of the head-end server. technical complexity. The transmission method based on HTTP improves the penetration capability of media content in network devices, and this technology has become the development trend of the streaming video industry.

HAS技术是一种混合的媒体分发方式,给用户的体验是流的方式,但是实际上与HTTP渐进式下载方式一样采用HTTP协议完成了内容的下载分发,但这些媒体内容都被切割成了一系列的媒体分块进行传输,这是HAS的一个关键技术。每个分块的时间长度相同,一般为2~10秒。HAS technology is a hybrid media distribution method, and the user experience is a streaming method, but in fact, the HTTP protocol is used to complete the download and distribution of content just like the HTTP progressive download method, but these media contents are all cut into one A series of media blocks are transmitted, which is a key technology of HAS. The time length of each block is the same, generally 2 to 10 seconds.

媒体分块存储在HTTP Web服务器中,客户端以线性的方式向Web服务器请求媒体分块,并以传统的HTTP方式进行媒体分块的下载,当媒体分块下载至客户端时,客户端按照顺序播放这一系列媒体分块。因为这些媒体分块按照约定的规则进行编码,各个媒体分块之间没有内容的重叠或不连续,对于用户来说,则看到了一个无缝平滑的播放效果。The media chunks are stored in the HTTP web server. The client requests the media chunks from the web server in a linear manner, and downloads the media chunks in the traditional HTTP way. When the media chunks are downloaded to the client, the client follows the Plays the sequence of media chunks sequentially. Because these media blocks are coded according to the agreed rules, there is no content overlap or discontinuity among the various media blocks, and for the user, a seamless and smooth playback effect is seen.

需要指出的是,网络视讯服务使用CDN向大量的用户终端进行媒体文件的传送,在服务过程中CDN需要向用户终端隐藏媒体文件的真实的URI,以防止出现盗链行为。It should be pointed out that the network video service uses the CDN to transmit media files to a large number of user terminals. During the service process, the CDN needs to hide the real URI of the media files from the user terminals to prevent hotlinking.

在HAS机制中,客户端是通过播放列表文件中包含的媒体文件地址访问相应媒体文件,但是,现有电信运营商的防盗链机制中只对播放列表文件的地址进行加密,无法对播放列表文件中包含的媒体文件地址进行加密。因此,在此机制下电信运营商现有的防盗链机制无法对CDN内的媒体文件的URI进行隐藏。In the HAS mechanism, the client accesses the corresponding media file through the address of the media file contained in the playlist file. However, in the anti-leech mechanism of the existing telecom operators, only the address of the playlist file is encrypted, and the playlist file cannot be encrypted. Encrypt the media file address contained in . Therefore, under this mechanism, the existing anti-leeching mechanism of the telecom operator cannot hide the URI of the media file in the CDN.

发明内容Contents of the invention

本公开鉴于以上问题中的至少一个提出了新的技术方案。The present disclosure proposes a new technical solution in view of at least one of the above problems.

本公开在其一个方面提供了一种基于HAS机制对CDN内的媒体URI进行隐藏的方法,其可以隐藏采用HAS机制时的媒体URI。In one aspect, the present disclosure provides a method for hiding the media URI in the CDN based on the HAS mechanism, which can hide the media URI when the HAS mechanism is adopted.

本公开在其另一方面提供了一种用户终端,其可以隐藏采用HAS机制时的媒体URI。Another aspect of the present disclosure provides a user terminal, which can hide the media URI when using the HAS mechanism.

本公开在其又一方面提供了一种基于HAS机制对CDN内的媒体URI进行隐藏的系统,其可以隐藏采用HAS机制时的媒体URI。In yet another aspect, the present disclosure provides a system for hiding media URIs in a CDN based on the HAS mechanism, which can hide the media URIs when the HAS mechanism is used.

根据本公开,提供一种基于HAS机制对CDN内的媒体URI进行隐藏的方法,包括:According to the present disclosure, a method for hiding media URIs in a CDN based on an HAS mechanism is provided, including:

向播放地址生成模块请求待播放媒体的播放地址;Request the playback address of the media to be played to the playback address generation module;

接收加密的播放地址,并通过播放列表请求将加密的播放地址转发至CDN;Receive the encrypted playback address, and forward the encrypted playback address to CDN through the playlist request;

接收CDN返回的播放列表文件,其中,播放列表文件中包含加密的所请求媒体各个分片的URI;Receiving the playlist file returned by the CDN, wherein the playlist file contains encrypted URIs of each segment of the requested media;

向CDN请求媒体文件,对媒体文件的请求中包含加密的所请求媒体各个分片的URI;Request the media file from the CDN, and the request for the media file includes the encrypted URI of each segment of the requested media;

接收CDN返回的媒体文件。Receive media files returned by CDN.

在本公开的一些实施例中,该方法还包括:In some embodiments of the present disclosure, the method also includes:

CDN在接收到加密的播放地址后,根据加密的播放地址将相应的加密后的URI发送给用户终端。After receiving the encrypted playback address, the CDN sends the corresponding encrypted URI to the user terminal according to the encrypted playback address.

在本公开的一些实施例中,根据加密的播放地址将相应的加密后的URI发送给用户终端的步骤包括:In some embodiments of the present disclosure, the step of sending the corresponding encrypted URI to the user terminal according to the encrypted playback address includes:

对加密的播放地址进行解密;Decrypt the encrypted playback address;

对与解密后的播放地址对应的播放列表文件所包含的媒体各个分片的URI进行加密;Encrypt the URIs of the media fragments contained in the playlist file corresponding to the decrypted playback address;

生成包含所请求媒体各个分片的加密URI的播放列表文件并发送给用户终端。A playlist file containing encrypted URIs of each segment of the requested media is generated and sent to the user terminal.

在本公开的一些实施例中,该方法还包括:In some embodiments of the present disclosure, the method also includes:

CDN在接收到对媒体文件的请求后,对其中包含的各个分片的URI进行解密;After the CDN receives the request for the media file, it decrypts the URI of each fragment contained therein;

并将与解密后的URI对应的媒体分片发送至用户终端。And send the media segment corresponding to the decrypted URI to the user terminal.

根据本公开,还提供了一种用户终端,包括:According to the present disclosure, a user terminal is also provided, including:

播放地址请求单元,用于向播放地址生成模块请求待播放媒体的播放地址;A playback address request unit is used to request the playback address of the media to be played to the playback address generation module;

播放地址转发单元,用于接收加密的播放地址,并通过播放列表请求将加密的播放地址转发至CDN;The playback address forwarding unit is used to receive the encrypted playback address, and forward the encrypted playback address to the CDN through the playlist request;

列表文件接收单元,用于接收CDN返回的播放列表文件,其中,播放列表文件中包含加密的所请求媒体各个分片的URI;The list file receiving unit is used to receive the playlist file returned by the CDN, wherein the playlist file contains the encrypted URI of each segment of the requested media;

媒体文件请求单元,用于向CDN请求媒体文件,对媒体文件的请求中包含加密的所请求媒体各个分片的URI;The media file request unit is used to request the media file from the CDN, and the request for the media file includes the encrypted URI of each segment of the requested media;

媒体文件接收单元,用于接收CDN返回的媒体文件。The media file receiving unit is configured to receive the media file returned by the CDN.

根据本公开,还提供了一种基于HAS机制对CDN内的媒体URI进行隐藏的系统,包括CDN、播放地址生成模块以及前述实施例的用户终端。According to the present disclosure, there is also provided a system for hiding the media URI in the CDN based on the HAS mechanism, including the CDN, the playback address generation module and the user terminal of the foregoing embodiments.

在本公开的一些实施例中,该CDN包括:In some embodiments of the present disclosure, the CDN includes:

URI加密单元,用于根据加密的播放地址将相应的加密后的URI发送给用户终端。The URI encryption unit is configured to send the corresponding encrypted URI to the user terminal according to the encrypted playback address.

在本公开的一些实施例中,URI加密单元包括:In some embodiments of the present disclosure, the URI encryption unit includes:

地址解密子单元,用于对加密的播放地址进行解密;The address decryption subunit is used to decrypt the encrypted playback address;

加密子单元,用于对与解密后的播放地址对应的播放列表文件所包含的媒体各个分片的URI进行加密;The encryption subunit is used to encrypt the URIs of the media fragments contained in the playlist file corresponding to the decrypted playback address;

列表文件生成子单元,用于生成包含所请求媒体各个分片的加密URI的播放列表文件并发送给用户终端。The list file generation subunit is used to generate a playlist file containing the encrypted URI of each segment of the requested media and send it to the user terminal.

在本公开的一些实施例中,该CDN还包括:In some embodiments of the present disclosure, the CDN also includes:

URI解密单元,用于对其中包含的各个分片的URI进行解密;The URI decryption unit is used to decrypt the URI of each fragment contained therein;

媒体分片发送单元,用于将与解密后的URI对应的媒体分片发送至用户终端。The media fragment sending unit is configured to send the media fragment corresponding to the decrypted URI to the user terminal.

在本公开的技术方案中,由于CDN对媒体文件的每个分片对应的URI分别进行了加密,并将加密后的URI通过播放列表文件的方式发送给了用户终端,使得用户终端只能看到加密的URI,进而防止了媒体文件链接的被盗。In the technical solution of the present disclosure, since the CDN encrypts the URI corresponding to each segment of the media file, and sends the encrypted URI to the user terminal in the form of a playlist file, the user terminal can only watch to encrypted URIs, thereby preventing theft of media file links.

附图说明Description of drawings

此处所说明的附图用来提供对本公开的进一步理解,构成本申请的一部分。在附图中:The accompanying drawings described herein are included to provide a further understanding of the disclosure, and constitute a part of this application. In the attached picture:

图1是本公开一个实施例的基于HAS机制对CDN内的媒体URI进行隐藏的方法的流程示意图。Fig. 1 is a schematic flowchart of a method for hiding a media URI in a CDN based on an HAS mechanism according to an embodiment of the present disclosure.

图2是本公开另一实施例的基于HAS机制对CDN内的媒体URI进行隐藏的方法的流程示意图。Fig. 2 is a schematic flowchart of a method for hiding a media URI in a CDN based on an HAS mechanism according to another embodiment of the present disclosure.

图3是本公开一个实施例的用户终端的结构示意图。Fig. 3 is a schematic structural diagram of a user terminal according to an embodiment of the present disclosure.

图4是本公开一个实施例的基于HAS机制对CDN内的媒体URI进行隐藏的系统的结构示意图。Fig. 4 is a schematic structural diagram of a system for hiding media URIs in a CDN based on an HAS mechanism according to an embodiment of the present disclosure.

图5是本公开另一实施例的基于HAS机制对CDN内的媒体URI进行隐藏的系统的结构示意图。Fig. 5 is a schematic structural diagram of a system for hiding media URIs in a CDN based on an HAS mechanism according to another embodiment of the present disclosure.

图6是本公开又一实施例的基于HAS机制对CDN内的媒体URI进行隐藏的系统的结构示意图。Fig. 6 is a schematic structural diagram of a system for hiding media URIs in a CDN based on an HAS mechanism according to another embodiment of the present disclosure.

具体实施方式Detailed ways

下面将参照附图描述本公开。要注意的是,以下的描述在本质上仅是解释性和示例性的,决不作为对本公开及其应用或使用的任何限制。除非另外特别说明,否则,在实施例中阐述的部件和步骤的相对布置以及数字表达式和数值并不限制本公开的范围。另外,本领域技术人员已知的技术、方法和装置可能不被详细讨论,但在适当的情况下意在成为说明书的一部分。The present disclosure will be described below with reference to the accompanying drawings. It is to be noted that the following description is merely explanatory and exemplary in nature, and in no way serves as any limitation of the present disclosure, its application or uses. Relative arrangements of components and steps and numerical expressions and numerical values set forth in the embodiments do not limit the scope of the present disclosure unless otherwise specifically stated. Additionally, techniques, methods and devices known to those skilled in the art may not be discussed in detail but are intended to be part of the description where appropriate.

本公开下述实施例提供了一种在基于HAS机制的网络视讯服务的过程中对CDN内的媒体URI进行隐藏的技术方案。在该技术方案中,当CDN向用户终端传送播放列表文件时,对其中包含的媒体URI进行加密,在用户终端请求媒体内容时,再由CDN对媒体URI进行解密,进而通过上述方式面向用户终端隐藏CDN中媒体文件的真实URI。The following embodiments of the present disclosure provide a technical solution for hiding the media URI in the CDN during the network video service based on the HAS mechanism. In this technical solution, when the CDN transmits the playlist file to the user terminal, it encrypts the media URI contained in it, and when the user terminal requests media content, the CDN decrypts the media URI, and then uses the above method to face the user terminal. Hide the real URI of the media file in the CDN.

图1是本公开一个实施例的基于HAS机制对CDN内的媒体URI进行隐藏的方法的流程示意图。Fig. 1 is a schematic flowchart of a method for hiding a media URI in a CDN based on an HAS mechanism according to an embodiment of the present disclosure.

如图1所示,该实施例可以包括以下步骤:As shown in Figure 1, this embodiment may include the following steps:

S102,向播放地址生成模块请求待播放媒体的播放地址;S102, request the playback address of the media to be played from the playback address generation module;

具体地,在用户终端想请求播放某个媒体文件时,其首先需向网络侧的播放地址生成模块请求待播放媒体文件的播放地址。Specifically, when the user terminal wants to request to play a certain media file, it first needs to request the playback address of the media file to be played from the playback address generation module on the network side.

S104,接收加密的播放地址,并通过播放列表请求将加密的播放地址转发至CDN;S104, receiving the encrypted playback address, and forwarding the encrypted playback address to the CDN through the playlist request;

具体地,播放地址生成模块根据所请求的媒体文件查询与该媒体文件对应的播放地址,并将该播放地址加密后发送给用户终端。用户终端在收到该加密的播放地址后,直接将该加密的播放地址承载在播放列表请求中发送给CDN。Specifically, the playback address generating module queries the playback address corresponding to the media file according to the requested media file, and encrypts the playback address and sends it to the user terminal. After receiving the encrypted playback address, the user terminal directly carries the encrypted playback address in the playlist request and sends it to the CDN.

S106,接收CDN返回的播放列表文件,其中,播放列表文件中包含加密的所请求媒体各个分片的URI;S106, receiving the playlist file returned by the CDN, wherein the playlist file contains encrypted URIs of each segment of the requested media;

具体地,CDN在接收到播放列表请求后,根据加密的播放地址生成播放列表文件返回给用户终端。Specifically, after receiving the playlist request, the CDN generates a playlist file according to the encrypted playback address and returns it to the user terminal.

S108,向CDN请求媒体文件,对媒体文件的请求中包含加密的所请求媒体各个分片的URI;S108, requesting the media file from the CDN, where the request for the media file includes the encrypted URI of each segment of the requested media;

具体地,用户终端在接收到播放列表文件后,向CDN发出媒体文件请求,该请求中包含CDN发给用户终端的加密的媒体URI。Specifically, after receiving the playlist file, the user terminal sends a media file request to the CDN, and the request includes the encrypted media URI sent by the CDN to the user terminal.

S110,接收CDN返回的媒体文件;S110, receiving the media file returned by the CDN;

具体地,在用户终端将媒体文件请求发送给CDN后,CDN提取其中的加密的媒体URI,对其进行解密,根据解密后的URI获取对应的媒体文件并发送给用户终端。Specifically, after the user terminal sends the media file request to the CDN, the CDN extracts the encrypted media URI, decrypts it, obtains the corresponding media file according to the decrypted URI, and sends it to the user terminal.

在该实施例中,由于CDN对媒体文件的每个分片对应的URI分别进行了加密,并将加密后的URI通过播放列表文件的方式发送给了用户终端,使得用户终端只能看到加密的URI,进而防止了媒体文件链接的被盗。In this embodiment, since the CDN encrypts the URI corresponding to each segment of the media file separately, and sends the encrypted URI to the user terminal in the form of a playlist file, the user terminal can only see the encrypted URI, thereby preventing the theft of media file links.

进一步地,在步骤S104之后,用户终端将加密的播放地址转发给CDN,CDN在接收到加密的播放地址后,根据加密的播放地址将相应的加密后的URI发送给用户终端。Further, after step S104, the user terminal forwards the encrypted playback address to the CDN, and after receiving the encrypted playback address, the CDN sends the corresponding encrypted URI to the user terminal according to the encrypted playback address.

具体地,根据加密的播放地址将相应的加密后的URI发送给用户终端的步骤可以包括:Specifically, the step of sending the corresponding encrypted URI to the user terminal according to the encrypted playback address may include:

对加密的播放地址进行解密,需要指出的是,CDN与播放地址生成模块事先约定了对播放地址进行加密与解密的密钥,进而使得CDN在收到加密的播放地址后能够正确解密出其中的播放地址;To decrypt the encrypted playback address, it should be pointed out that the CDN and the playback address generation module have agreed in advance on the key for encrypting and decrypting the playback address, so that the CDN can correctly decrypt the encrypted playback address after receiving it. play address;

对与解密后的播放地址对应的播放列表文件所包含的媒体各个分片的URI进行加密;Encrypt the URIs of the media fragments contained in the playlist file corresponding to the decrypted playback address;

生成包含所请求媒体各个分片的加密URI的播放列表文件并发送给用户终端。A playlist file containing encrypted URIs of each segment of the requested media is generated and sent to the user terminal.

进一步地,在步骤S108之后,CDN在接收到对媒体文件的请求后,对其中包含的各个分片的URI进行解密;Further, after the step S108, after receiving the request for the media file, the CDN decrypts the URIs of each segment contained therein;

并将与解密后的URI对应的媒体分片发送至用户终端。And send the media segment corresponding to the decrypted URI to the user terminal.

图2是本公开另一实施例的基于HAS机制对CDN内的媒体URI进行隐藏的方法的流程示意图。Fig. 2 is a schematic flowchart of a method for hiding a media URI in a CDN based on an HAS mechanism according to another embodiment of the present disclosure.

如图2所示,其描述的是基于本公开的网络视讯服务中的CDN防盗链流程,在该流程中由CDN对播放列表文件中的媒体URI进行加密,再由CDN对用户的媒体文件请求进行解密,对CDN来说是一个闭环的加密与解密过程,该过程对用户终端隐藏了CDN中媒体文件的真实URI。As shown in Figure 2, what it describes is based on the CDN anti-leeching process in the network video service of the present disclosure. In this process, the media URI in the playlist file is encrypted by the CDN, and then the CDN requests the user's media file Decryption is a closed-loop encryption and decryption process for the CDN, which hides the real URI of the media file in the CDN from the user terminal.

如图2所示,该实施例可以包括以下步骤:As shown in Figure 2, this embodiment may include the following steps:

S202,用户终端向播放地址生成组件请求播放地址;S202, the user terminal requests the playback address from the playback address generation component;

S204,播放地址生成模块生成加密的播放地址;S204, the playback address generating module generates an encrypted playback address;

S206,播放地址生成模块将加密的播放地址返回给用户终端;S206, the playback address generating module returns the encrypted playback address to the user terminal;

S208,用户终端根据加密的播放地址向CDN请求播放内容,即,用户终端将加密的播放地址承载在对播放列表文件的请求中转发给CDN;S208, the user terminal requests the CDN to play the content according to the encrypted playback address, that is, the user terminal carries the encrypted playback address in the request for the playlist file and forwards it to the CDN;

S210,根据CDN与播放地址生成模块事先约定的加解密密钥,CDN对播放地址进行解密;S210, according to the encryption and decryption key agreed in advance between the CDN and the broadcast address generating module, the CDN decrypts the broadcast address;

S212,CDN生成包含加密媒体URI的播放列表文件,具体地,CDN对接收到的播放地址进行解密后获取真实的播放地址,CDN将真实的播放地址中所对应的播放列表文件所包含的媒体文件URI进行加密,生成包含加密媒体文件URI的播放列表文件;S212, the CDN generates a playlist file that includes an encrypted media URI. Specifically, the CDN decrypts the received playback address to obtain the real playback address, and the CDN uses the media files contained in the corresponding playlist file in the real playback address. Encrypt the URI to generate a playlist file containing the URI of the encrypted media file;

S214,CDN将生成的播放列表文件返回为用户终端;S214, the CDN returns the generated playlist file as the user terminal;

S216,用户终端根据播放列表文件向CDN请求媒体内容;S216, the user terminal requests the media content from the CDN according to the playlist file;

S218,CDN对媒体内容请求中所包含的媒体URI进行解密;S218, the CDN decrypts the media URI included in the media content request;

S220,CDN将与解密的媒体URI对应的媒体内容返回给用户终端。S220, the CDN returns the media content corresponding to the decrypted media URI to the user terminal.

本领域普通技术人员可以理解,实现上述方法实施例的全部和部分步骤可以通过程序指令相关的硬件来完成,前述的程序可以存储于一计算设备可读取存储介质中,该程序在执行时,执行包括上述方法实施例的步骤,而前述的存储介质可以包括ROM、RAM、磁碟和光盘等各种可以存储程序代码的介质。Those of ordinary skill in the art can understand that all and part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computing device readable storage medium. When the program is executed, Execution includes the steps of the above method embodiments, and the aforementioned storage medium may include various media capable of storing program codes such as ROM, RAM, magnetic disk, and optical disk.

图3是本公开一个实施例的用户终端的结构示意图。Fig. 3 is a schematic structural diagram of a user terminal according to an embodiment of the present disclosure.

如图3所示,该实施例中的终端30可以包括播放地址请求单元302、播放地址转发单元304、列表文件接收单元306、媒体文件请求单元308和媒体文件接收单元310。其中,As shown in FIG. 3 , the terminal 30 in this embodiment may include a playback address requesting unit 302 , a playback address forwarding unit 304 , a list file receiving unit 306 , a media file requesting unit 308 and a media file receiving unit 310 . in,

播放地址请求单元302,用于向播放地址生成模块请求待播放媒体的播放地址;Playing address requesting unit 302, is used for requesting the playing address of media to be played to broadcasting address generation module;

播放地址转发单元304,用于接收加密的播放地址,并通过播放列表请求将加密的播放地址转发至CDN;The play address forwarding unit 304 is used to receive the encrypted play address, and forward the encrypted play address to the CDN through the play list request;

列表文件接收单元306,用于接收CDN返回的播放列表文件,其中,播放列表文件中包含加密的所请求媒体各个分片的URI;The list file receiving unit 306 is used to receive the playlist file returned by the CDN, wherein the playlist file contains the URI of each segment of the requested media encrypted;

媒体文件请求单元308,用于向CDN请求媒体文件,对媒体文件的请求中包含加密的所请求媒体各个分片的URI;The media file request unit 308 is configured to request the media file from the CDN, and the request for the media file includes the encrypted URI of each segment of the requested media;

媒体文件接收单元310,用于接收CDN返回的媒体文件。The media file receiving unit 310 is configured to receive the media file returned by the CDN.

在该实施例中,由于CDN对媒体文件的每个分片对应的URI分别进行了加密,并将加密后的URI通过播放列表文件的方式发送给了用户终端,使得用户终端只能看到加密的URI,进而防止了媒体文件链接的被盗。In this embodiment, since the CDN encrypts the URI corresponding to each segment of the media file separately, and sends the encrypted URI to the user terminal in the form of a playlist file, the user terminal can only see the encrypted URI, thereby preventing the theft of media file links.

图4是本公开一个实施例的基于HAS机制对CDN内的媒体URI进行隐藏的系统的结构示意图。Fig. 4 is a schematic structural diagram of a system for hiding media URIs in a CDN based on an HAS mechanism according to an embodiment of the present disclosure.

如图4所示,该实施例中的系统40可以包括CDN402、播放地址生成模块404以及用户终端406。其中,用户终端406可以通过前述实施例实现。As shown in FIG. 4 , the system 40 in this embodiment may include a CDN 402 , a playback address generating module 404 and a user terminal 406 . Wherein, the user terminal 406 may be implemented through the aforementioned embodiments.

图5是本公开另一实施例的基于HAS机制对CDN内的媒体URI进行隐藏的系统的结构示意图。Fig. 5 is a schematic structural diagram of a system for hiding media URIs in a CDN based on an HAS mechanism according to another embodiment of the present disclosure.

如图5所示,与图4中的实施例相比,该实施例中的系统50中的CDN502可以包括:As shown in FIG. 5, compared with the embodiment in FIG. 4, the CDN 502 in the system 50 in this embodiment may include:

URI加密单元502a,用于根据加密的播放地址将相应的加密后的URI发送给用户终端。The URI encryption unit 502a is configured to send the corresponding encrypted URI to the user terminal according to the encrypted playback address.

进一步地,URI加密单元可以包括地址解密子单元、加密子单元和列表文件生成子单元。其中,Further, the URI encryption unit may include an address decryption subunit, an encryption subunit and a list file generation subunit. in,

地址解密子单元,用于对加密的播放地址进行解密;The address decryption subunit is used to decrypt the encrypted playback address;

加密子单元,用于对与解密后的播放地址对应的播放列表文件所包含的媒体各个分片的URI进行加密;The encryption subunit is used to encrypt the URIs of the media fragments contained in the playlist file corresponding to the decrypted playback address;

列表文件生成子单元,用于生成包含加密的所请求媒体各个分片的URI的播放列表文件并发送给用户终端。The list file generating subunit is configured to generate a playlist file containing encrypted URIs of each segment of the requested media and send it to the user terminal.

图6是本公开又一实施例的基于HAS机制对CDN内的媒体URI进行隐藏的系统的结构示意图。Fig. 6 is a schematic structural diagram of a system for hiding media URIs in a CDN based on an HAS mechanism according to another embodiment of the present disclosure.

如图6所示,与图5中的实施例相比,该实施例中的系统60中的CDN602还可以包括URI解密单元602a和媒体分片发送单元602b。其中,As shown in FIG. 6, compared with the embodiment in FIG. 5, the CDN 602 in the system 60 in this embodiment may further include a URI decryption unit 602a and a media fragment sending unit 602b. in,

URI解密单元602a,用于解密其中包含的各个分片的URI;The URI decryption unit 602a is configured to decrypt the URI of each fragment contained therein;

媒体分片发送单元602b,用于将与解密后的URI对应的媒体分片发送至用户终端。The media segment sending unit 602b is configured to send the media segment corresponding to the decrypted URI to the user terminal.

本说明书中各个实施例均采用递进的方式描述,每个实施例重点说明的都是与其他实施例的不同之处,各个实施例之间相同和相似的部分可以相互参见。对于装置实施例而言,由于其与方法实施例基本相似,所以描述的比较简单,相关之处可以参见方法实施例部分的说明。Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related details, please refer to the description of the method embodiment.

需要指出的是,本公开上述实施例适用于基于HAS机制的网络视讯服务,可以视讯对CDN内的媒体URL的有效隐藏,以提高CDN的安全性。It should be pointed out that the above-mentioned embodiments of the present disclosure are applicable to the network video service based on the HAS mechanism, which can effectively hide the media URL in the CDN by video, so as to improve the security of the CDN.

虽然已参照示例性实施例描述了本公开,但应理解,本公开不限于上述的示例性实施例。对于本领域技术人员显然的是,可以在不背离本公开的范围和精神的条件下修改上述的示例性实施例。所附的权利要求的范围应被赋予最宽的解释,以包含所有这样的修改以及等同的结构和功能。While the present disclosure has been described with reference to exemplary embodiments, it is to be understood that the present disclosure is not limited to the above-described exemplary embodiments. It will be apparent to those skilled in the art that the above-described exemplary embodiments can be modified without departing from the scope and spirit of the present disclosure. The scope of the appended claims should be given the broadest interpretation to encompass all such modifications and equivalent structures and functions.

Claims (5)

1. A method for hiding a media URI in a CDN based on a HAS mechanism is characterized by comprising the following steps:
requesting a playing address of a medium to be played from a playing address generating module;
receiving an encrypted playing address, and forwarding the encrypted playing address to the CDN through a playing list request, wherein the CDN decrypts the encrypted playing address after receiving the encrypted playing address; encrypting the URI of each media fragment contained in the playlist file corresponding to the decrypted play address; generating a playlist file containing encrypted URI of each fragment of the requested media and sending the playlist file to the user terminal;
receiving a playlist file returned by the CDN, wherein the playlist file contains encrypted URI of each fragment of the requested media;
requesting a media file from the CDN, wherein the request for the media file comprises encrypted URI of each fragment of the requested media;
and receiving the media file returned by the CDN.
2. The HAS mechanism-based method for hiding media URIs within CDNs according to claim 1, further comprising:
after receiving the request for the media file, the CDN decrypts the URI of each fragment contained in the request;
and sending the media fragment corresponding to the decrypted URI to the user terminal.
3. A user terminal, comprising:
a play address request unit, configured to request a play address of a media to be played from the play address generation module;
the CDN comprises a play address forwarding unit, a CDN, a play list sending unit and a play address forwarding unit, wherein the play address forwarding unit is used for receiving an encrypted play address and forwarding the encrypted play address to the CDN through a play list request, and the CDN decrypts the encrypted play address after receiving the encrypted play address; encrypting the URI of each media fragment contained in the playlist file corresponding to the decrypted play address; generating a playlist file containing encrypted URI of each fragment of the requested media and sending the playlist file to the user terminal;
a playlist file receiving unit, configured to receive a playlist file returned by the CDN, where the playlist file includes URIs of encrypted pieces of the requested media;
a media file request unit, configured to request a media file from the CDN, where the request for the media file includes encrypted URIs of segments of the requested media;
and the media file receiving unit is used for receiving the media file returned by the CDN.
4. A system for hiding a media URI in a CDN based on a HAS mechanism, comprising the CDN, a play address generation module, and the user terminal of claim 3;
wherein, the URI encryption unit of the CDN comprises:
the address decryption subunit is used for decrypting the encrypted playing address;
the encryption subunit is used for encrypting the URI of each media fragment contained in the playlist file corresponding to the decrypted playing address;
and the list file generating subunit is used for generating a play list file containing the encrypted URI of each fragment of the requested media and sending the play list file to the user terminal.
5. The system for hiding media URIs within a CDN in accordance with the HAS mechanism of claim 4 wherein said CDN further comprises:
a URI decryption unit used for decrypting the URI of each fragment contained in the request of the media file;
and the media fragment sending unit is used for sending the media fragment corresponding to the decrypted URI to the user terminal.
CN201310585928.6A 2013-11-20 2013-11-20 Method, system and terminal for hiding media URI in CDN Active CN104661109B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310585928.6A CN104661109B (en) 2013-11-20 2013-11-20 Method, system and terminal for hiding media URI in CDN

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310585928.6A CN104661109B (en) 2013-11-20 2013-11-20 Method, system and terminal for hiding media URI in CDN

Publications (2)

Publication Number Publication Date
CN104661109A CN104661109A (en) 2015-05-27
CN104661109B true CN104661109B (en) 2018-06-19

Family

ID=53251718

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310585928.6A Active CN104661109B (en) 2013-11-20 2013-11-20 Method, system and terminal for hiding media URI in CDN

Country Status (1)

Country Link
CN (1) CN104661109B (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105208404A (en) * 2015-08-26 2015-12-30 北京新东方迅程网络科技有限公司 Video encryption and decryption method and device
CN107104993A (en) * 2016-02-19 2017-08-29 中国移动通信集团公司 A kind of transmission of Uniform Resource Identifier, preparation method and device
CN107222480A (en) * 2017-05-27 2017-09-29 中国联合网络通信集团有限公司 A kind of flow media playing method, terminal device and CDN server
CN116781425B (en) * 2023-08-21 2023-11-07 太平金融科技服务(上海)有限公司深圳分公司 Service data acquisition method, device, equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1812421A (en) * 2006-03-06 2006-08-02 中国移动通信集团公司 Data business right discriminating method
CN1992594A (en) * 2005-12-31 2007-07-04 中兴通讯股份有限公司 URL extension method for streaming media system
CN102025749A (en) * 2011-01-18 2011-04-20 中国联合网络通信集团有限公司 Anti-theft method of mobile streaming media service
CN102547481A (en) * 2012-02-10 2012-07-04 中国联合网络通信集团有限公司 Mobile streaming media online play list setting and content fast-switching method and system

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050229205A1 (en) * 2004-04-13 2005-10-13 Alan Azralon Encrypted trigger and associated methods
CN101309275B (en) * 2008-06-27 2012-05-30 武汉烽火网络有限责任公司 Method for protecting file name in streaming media service
US20120124372A1 (en) * 2010-10-13 2012-05-17 Akamai Technologies, Inc. Protecting Websites and Website Users By Obscuring URLs
CN102801810A (en) * 2012-08-24 2012-11-28 乐视网信息技术(北京)股份有限公司 Method for hiding URL (Uniform Resource Locator) in content delivery network

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1992594A (en) * 2005-12-31 2007-07-04 中兴通讯股份有限公司 URL extension method for streaming media system
CN1812421A (en) * 2006-03-06 2006-08-02 中国移动通信集团公司 Data business right discriminating method
CN102025749A (en) * 2011-01-18 2011-04-20 中国联合网络通信集团有限公司 Anti-theft method of mobile streaming media service
CN102547481A (en) * 2012-02-10 2012-07-04 中国联合网络通信集团有限公司 Mobile streaming media online play list setting and content fast-switching method and system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
《自适应流媒体技术在CDN中的应用研究》;洪伟等;《现代电信科技》;20120430(第4期);全文 *

Also Published As

Publication number Publication date
CN104661109A (en) 2015-05-27

Similar Documents

Publication Publication Date Title
US10698985B2 (en) Extending data confidentiality into a player application
JP5021639B2 (en) Protected content transport using streaming control and transport protocols
US10057277B2 (en) System and method for partial URL signing with applications to dynamic adaptive streaming
US10162943B2 (en) Streamlined digital rights management
JP5686951B2 (en) Protection of digital media of various content types
CN104854894B (en) For the content URL certifications of DASH
CN105939484B (en) A kind of audio and video encryption playback method and system
CN102143133B (en) Method, device and system for supporting advertisement content in hyper text transport protocol (HTTP) stream playing manner
KR101428875B1 (en) System and method for processing security based on http live streaming
EP2543186B1 (en) Apparatus and method for providing streaming service in a data communication network
US11277456B2 (en) System and method for delivering an audio-visual con tent to a client device
US20080063195A1 (en) Method and system for encrypting or decrypting wmv streaming media
CN1620810A (en) Rights management method for streaming media
CN108881205B (en) HLS streaming media safe playing system and playing method
CN106936770A (en) A kind of HLS index lists encrypted antitheft catenary system and method
CN113259720B (en) Video encryption method and system based on HLS protocol
CN104283845A (en) Hotlink protecting method and system, CDN server and client side
US20150199498A1 (en) Flexible and efficient signaling and carriage of authorization acquisition information for dynamic adaptive streaming
CN111556340A (en) A Secure Cross-Platform Video Streaming Method
CN101370137A (en) Streaming media transmission and playing method, system and client device
CN104661109B (en) Method, system and terminal for hiding media URI in CDN
CN107276969B (en) A data transmission method and device
CN101160965B (en) Method for realizing network TV program preview, encryption device, copyright center system and user terminal equipment
CN102843335B (en) The processing method of streaming medium content and equipment
Chang et al. A cost-effective key distribution of P2P IPTV DRM over opportunistic multicast overlay for e-commerce systems

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
EXSB Decision made by sipo to initiate substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant