CN122001663A

CN122001663A - End-to-end network audio stream encryption transmission method, apparatus, equipment and medium

Info

Publication number: CN122001663A
Application number: CN202610241392.3A
Authority: CN
Inventors: 侍艳华; 隗楠; 吴昕; 雷鸣; 王辉; 蒋灏; 林贤; 刘帅; 郭正宇
Original assignee: Beijing Zhongdian Huisheng Technology Co ltd
Current assignee: Beijing Zhongdian Huisheng Technology Co ltd
Filing date: 2026-02-28
Publication date: 2026-05-08

Abstract

The application provides an end-to-end network audio stream encryption transmission method, device, equipment and medium, relating to the technical field of communication; the method comprises the steps of responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end, establishing communication session connection of the audio stream sending end and the audio stream receiving end, generating a stream encryption key for symmetric encryption by the audio stream receiving end, exchanging the stream encryption key by the audio stream sending end and the audio stream receiving end in an asymmetric encryption mode, encrypting an audio stream to be transmitted by the audio stream sending end in real time by using the stream encryption key through a symmetric encryption algorithm, transmitting the encrypted audio stream to the audio stream receiving end, and decrypting the encrypted audio stream by the audio stream receiving end in real time by using the stream encryption key through the symmetric encryption algorithm. The application realizes the network audio stream encryption transmission with high security and low delay.

Description

End-to-end network audio stream encryption transmission method, device, equipment and medium

Technical Field

The present invention relates to the field of communications technologies, and in particular, to an end-to-end network audio stream encryption transmission method, apparatus, device, and medium.

Background

In the modern communication field, the network audio transmission technology realizes the efficient transmission of audio signals through the Internet, so that not only can the increasing audio content demands be met, but also more flexible and convenient audio services can be provided. However, audio data is subject to serious security threats during network transmission, including security risks such as eavesdropping attacks, data tampering, identity masquerading, denial of service, and the like. The unencrypted audio stream may be intercepted by a malicious attacker, resulting in leakage of sensitive dialog content, causing serious consequences such as privacy violations, commercial confidentiality leakage, etc. Especially, under the background that the Internet of things and intelligent equipment are popular, the real-time performance and the continuity of the audio data enable the audio data to be an attack target more easily.

The audio stream encryption technology can effectively ensure confidentiality, integrity and availability of audio data in the transmission process by adopting a symmetric encryption algorithm, an asymmetric encryption algorithm or a hybrid encryption algorithm. The encryption technology can not only prevent unauthorized access and eavesdropping, but also ensure copyright protection and identity authentication of the audio content. End-to-end encryption has become an important trend in audio transmission security today, which ensures that only the communicating parties can access the original audio content, and that data cannot be decrypted even if intercepted during transmission.

In the related art, the application with the patent number of CN216357277U discloses a network audio transmission device and an audio system, and proposes a method for encrypting audio data for a plurality of times through a secret key, wherein although the occupation of operation resources is small and the encryption and decryption speeds are high, the method only depends on symmetric encryption, and the secret key must be shared in advance or manually injected through an additional safety channel; not only is the key management complex, but also once the key is revealed, all ciphertext can be decrypted in batches, and the security protection level of forward confidentiality and 'one-time encryption' cannot be realized.

The application with the patent number of CN117176327A discloses a method and a system for audio encryption transmission, which are proposed to collect audio and store the audio into a plurality of buffer areas, and then carry out AES encryption transmission after multistage serial operation such as data rearrangement, odd-even serial number cyclic shift, preset cipher dictionary table mapping, time function disturbance and the like. Although the method improves the confusion degree of data to a certain extent, the key space is fixed by presetting a dictionary table and a time stamp as a key source, the key space is fixed and needs to be shared in advance, and the risk of reverse decoding of the key source exists, once the dictionary or the time function is reversed, all sessions can be decrypted, and the security protection level of forward confidentiality and 'one-time confidentiality' cannot be realized; in addition, all the audio data are required to undergo secondary coding, the processing flow is complex, large processing delay is introduced, and the method is difficult to be suitable for application scenes with high real-time requirements such as real-time sound expansion and voice intercom.

Disclosure of Invention

The invention provides an end-to-end network audio stream encryption transmission method, device, equipment and medium, which solve the problem of how to realize high-security and low-delay network audio stream encryption transmission.

In order to achieve the above purpose, the application adopts the following technical scheme:

in a first aspect, an end-to-end network audio stream encryption transmission method is provided, including:

Responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end, and establishing communication session connection of the audio stream sending end and the audio stream receiving end;

Generating a stream encryption key for symmetric encryption by the audio stream receiving end, wherein the audio stream transmitting end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode;

The audio stream sending end encrypts the audio stream to be transmitted in real time by using the stream encryption key through a symmetric encryption algorithm and transmits the encrypted audio stream to the audio stream receiving end;

and the audio stream receiving end decrypts the encrypted audio stream in real time by using the stream encryption key through a symmetric encryption algorithm.

In a second aspect, there is provided an end-to-end network audio stream encryption transmission apparatus, comprising:

the session management module is used for responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end and establishing communication session connection of the audio stream sending end and the audio stream receiving end;

The system comprises a stream encryption key generation and exchange module, a stream encryption key generation and exchange module and a stream encryption module, wherein the stream encryption key generation and exchange module is used for generating a stream encryption key for symmetric encryption by the audio stream receiving end;

the audio stream encryption and transmission module is used for encrypting the audio stream to be transmitted in real time by the audio stream sending end through a symmetric encryption algorithm by utilizing the stream encryption key and transmitting the encrypted audio stream to the audio stream receiving end;

and the audio stream decryption module is used for decrypting the encrypted audio stream in real time by the audio stream receiving end through a symmetric encryption algorithm by utilizing the stream encryption key.

In a third aspect, there is provided an electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the computer program implementing the steps of the method according to the first aspect when executed by the processor.

In a fourth aspect, there is provided a readable storage medium having stored thereon a program or instructions which when executed by a processor performs the steps of the method according to the first aspect.

Drawings

Fig. 1 is a schematic flow chart of an end-to-end network audio stream encryption transmission method according to an embodiment of the present application;

fig. 2 is a schematic flow chart of a stream encryption key generation and exchange process according to an embodiment of the present application.

Detailed Description

In order to further describe the technical means and effects adopted by the present application to achieve the predetermined purpose, the technical solutions in the embodiments of the present application are clearly described, and it is obvious that the described embodiments are some embodiments of the present application, but not all embodiments. All other embodiments, which are obtained by a person skilled in the art based on the embodiments of the present application, fall within the scope of protection of the present application.

The terms first, second and the like in the description and in the claims, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the embodiments of the application are capable of operation in sequences other than those illustrated or otherwise described herein, and that the objects identified by "first," "second," etc. are generally of a type not limited to the number of objects, for example, the first object may be one or more. In addition, "and/or" in the specification means at least one of the connected objects, and the character "/", generally means a relationship in which the associated objects are one kind of "or".

The steps of the method flow described in the present specification and the flowchart in the drawings in the present specification are not necessarily strictly executed by step numbers, and the execution order of the method steps may be changed. Moreover, some steps may be omitted, multiple steps may be combined into one step to be performed, and/or one step may be decomposed into multiple steps to be performed.

In the present specification, an end-to-end network audio stream encryption transmission method is provided, and an end-to-end network audio stream encryption transmission device, a computer device, and a computer readable storage medium are provided, which are described in detail below with reference to the accompanying drawings and preferred embodiments.

Referring to fig. 1, an embodiment of the present application provides an end-to-end network audio stream encryption transmission method, which includes:

step S1, an audio stream sending end and an audio stream receiving end are determined and communication session connection of the audio stream sending end and the audio stream receiving end is established in response to an encryption transmission request initiated by a third party;

s2, generating a stream encryption key for symmetric encryption by the audio stream receiving end, wherein the audio stream transmitting end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode;

Step S3, the audio stream sending end encrypts the audio stream to be transmitted in real time by using the stream encryption key through a symmetric encryption algorithm, and transmits the encrypted audio stream to the audio stream receiving end;

And S4, the audio stream receiving end decrypts the encrypted audio stream in real time by using the stream encryption key through a symmetric encryption algorithm.

Further, the stream encryption key is dynamically generated by the audio stream receiving end through a random number generator every time a communication session is established, and a new stream encryption key is independently generated every time a communication session is established.

The invention provides an end-to-end network audio stream encryption transmission method, which realizes the full-link encryption protection between network audio transmitting equipment and receiving equipment. The method adopts an asymmetric encryption and symmetric encryption mixed encryption architecture, completes the secure exchange of stream encryption keys through an asymmetric encryption algorithm, effectively eliminates the leakage risk of the keys in the transmission process, simultaneously encrypts real-time audio stream data by using the symmetric encryption algorithm, obviously improves the encryption and decryption efficiency while ensuring the data security, and meets the low-delay requirement of real-time audio transmission.

In the method, the stream encryption key is directly generated by the receiving end equipment end, and the sending end can directly utilize the key to send the encrypted audio stream without reconfirming. If the stream encryption key is generated by the transmitting end, the transmitting end needs to confirm whether the encrypted audio stream is received correctly or not again. And the stream encryption key is directly generated by the receiving end equipment end, and a third party key distribution service or special equipment is not needed, so that the system architecture is greatly simplified, and the deployment cost is reduced. By adopting a dynamic key generation mechanism, independent stream encryption keys are randomly generated each time an audio communication session is established, so that one-time one-secret safety protection is realized, the audio data is ensured to be always kept in an encrypted state in the whole transmission process through the design of an end-to-end encryption path, the security threats such as man-in-the-middle attack, data interception and tampering are effectively prevented, and the comprehensive safety guarantee is provided for network audio communication.

Further, the third party is a management platform or route management software.

Referring to fig. 2, further, the audio stream receiving end generates a stream encryption key for symmetric encryption, and the audio stream transmitting end exchanges the stream encryption key with the audio stream receiving end in an asymmetric encryption mode, including:

Step S21, the audio stream receiving end generates a first asymmetric key pair comprising a receiving end private key and a receiving end public key.

Specifically, the receiving end generates a stream encryption key set_key using a random number generator. (if the stream encryption key is generated by the sender, the sender needs to confirm whether the sender receives the encrypted audio stream correctly or not again before sending the encrypted audio stream). The receiving end can generate a corresponding asymmetric encryption private key pri_key_recv and public key pub_key_recv by utilizing a key generation algorithm in an asymmetric encryption algorithm (such as an SM2 encryption algorithm).

Step S22, the audio stream transmitting end generates a second asymmetric key pair comprising a transmitting end private key and a transmitting end public key.

Specifically, the sender generates the corresponding asymmetric encryption private key pri_key_send and public key pub_key_send by using a key generation algorithm in an asymmetric encryption algorithm (such as SM2 encryption algorithm).

Step S23, the audio stream sending end and the audio stream receiving end exchange the public keys corresponding to the audio stream sending end and the audio stream receiving end respectively.

Specifically, the transmitting-end and the receiving-end exchange public keys pub_key_send and pub_key_recv.

And step S24, the audio stream receiving end performs asymmetric encryption on the first asymmetric key by utilizing the public key of the sending end, and generates an encrypted stream encryption key after encryption.

Specifically, the receiving end encrypts the pass_key using a pub_key_send with an asymmetric encryption algorithm (e.g., SM2 encryption algorithm).

And S25, the audio stream receiving end signs the encrypted stream encryption key and the receiving end private key to generate signature data.

Specifically, the receiving end signs the encrypted sess_key and the private key pri_key_recv of the receiving end by using a signature algorithm in an asymmetric encryption algorithm (such as an SM2 encryption algorithm).

And step S26, the audio stream receiving end sends the signature data to the audio stream sending end.

And step S27, the audio stream sending end performs signature verification on the signature data by using the public key of the receiving end, and simultaneously acquires the encrypted stream encryption key.

Specifically, after receiving the signature data, the sender uses a signature authentication algorithm in an asymmetric encryption algorithm (such as an SM2 encryption algorithm) to perform signature decoding by using a public key pub_key_recv of the receiver to confirm the identity of the sender, and simultaneously obtains the encrypted sess_key.

And step S28, the audio stream sending end uses the private key of the sending end to asymmetrically decrypt the encrypted stream encryption key, and the stream encryption key is restored.

Specifically, the sender decrypts the encrypted sess_key by using a decryption algorithm in an asymmetric encryption algorithm (such as SM2 encryption algorithm) and using pri_key_send to obtain the sess_key. Then the audio stream encryption transmission and communication are started by using the sess_key.

Based on the scheme, the application has the following beneficial effects:

1. The application adopts a mode of combining asymmetric encryption and symmetric encryption to realize the encrypted transmission of the audio stream. The stream encryption key is exchanged in an asymmetric encryption mode, so that the security of the stream encryption key is ensured. And the symmetric encryption algorithm is adopted to encrypt the audio stream, so that the transmission efficiency of the real-time audio stream is ensured.

2. The digital signature authentication technology can prevent the stream encryption key from being tampered and the identity of the receiving end from being falsified.

3. The system architecture is greatly simplified and the deployment cost is reduced without relying on a third party key distribution service or special equipment.

4. The stream encryption key is randomly generated when the audio stream encryption communication is initiated every time, so that the one-time-pad safety protection is realized, and the audio stream transmission safety is improved.

5. Through the end-to-end encryption path design, the audio data is ensured to be always kept in an encryption state in the whole transmission process, so that security threats such as man-in-the-middle attack, data interception and tampering are effectively prevented, and an omnibearing security guarantee is provided for network audio communication.

Corresponding to the above embodiment of the end-to-end network audio stream encryption transmission method, the embodiment of the present application provides an end-to-end network audio stream encryption transmission device, including:

Further, the third party is a management platform or route management software.

Further, the stream encryption key generation and exchange module is further configured to:

The audio stream receiving end generates a first asymmetric key pair which comprises a receiving end private key and a receiving end public key;

the audio stream transmitting end generates a second asymmetric key pair which comprises a transmitting end private key and a transmitting end public key;

the audio stream sending end and the audio stream receiving end exchange respective corresponding public keys;

the audio stream receiving end performs asymmetric encryption on the first asymmetric key by utilizing the public key of the transmitting end, and generates an encrypted stream encryption key after encryption;

The audio stream receiving end signs the encrypted stream encryption key and the receiving end private key to generate signature data;

the audio stream receiving end sends the signature data to the audio stream sending end;

The audio stream sending end performs signature verification on the signature data by utilizing the public key of the receiving end, and simultaneously acquires the encrypted stream encryption key;

and the audio stream sending end uses the private key of the sending end to asymmetrically decrypt the encrypted stream encryption key, and the stream encryption key is restored.

The end-to-end network audio stream encryption transmission device realizes the steps of the end-to-end network audio stream encryption transmission method embodiment and the processes of the embodiment, can achieve the same technical effects, and is not repeated here.

Corresponding to the end-to-end network audio stream encryption transmission method embodiment, the embodiment of the application provides an electronic device, which comprises a memory, a processor and a computer program stored on the memory and capable of running on the processor, wherein the computer program realizes the steps of the end-to-end network audio stream encryption transmission method embodiment and the processes of the embodiment when being executed by the processor, and can achieve the same technical effect, so that repetition is avoided and no further description is given here.

The memory may be used to store software programs as well as various data. The memory may mainly include a first memory area storing programs or instructions and a second memory area storing data, wherein the first memory area may store an operating system, application programs or instructions (such as a sound playing function, an image playing function, etc.) required for at least one function, and the like. Further, the memory may include volatile memory or nonvolatile memory, or the memory may include both volatile and nonvolatile memory. The nonvolatile memory may be a Read-only memory (ROM), a programmable Read-only memory (ProgrammableROM, PROM), an erasable programmable Read-only memory (ErasablePROM, EPROM), an electrically erasable programmable Read-only memory (ElectricallyEPROM, EEPROM), or a flash memory, among others. The volatile memory may be random access memory (RandomAccessMemory, RAM), static random access memory (STATICRAM, SRAM), dynamic random access memory (DYNAMICRAM, DRAM), synchronous dynamic random access memory (SynchronousDRAM, SDRAM), double data rate synchronous dynamic random access memory (DoubleDataRateSDRAM, DDRSDRAM), enhanced synchronous dynamic random access memory (ENHANCEDSDRAM, ESDRAM), synchronous link dynamic random access memory (SYNCHLINKDRAM, SLDRAM), and direct memory bus random access memory (DirectRambusRAM, DRRAM). Memory in embodiments of the application includes, but is not limited to, these and any other suitable types of memory.

The processor may include one or more processing units and, optionally, the processor integrates an application processor that primarily processes operations involving an operating system, user interface, application program, etc., and a modem processor that primarily processes wireless communication signals, such as a baseband processor. It will be appreciated that the modem processor described above may not be integrated into the processor.

Corresponding to the end-to-end network audio stream encryption transmission method embodiment, the embodiment of the present application further provides a readable storage medium, where a program or an instruction is stored on the readable storage medium, and the program or the instruction when executed by a processor implements the steps of the end-to-end network audio stream encryption transmission method embodiment and the processes of the embodiment, and can achieve the same technical effects, so that repetition is avoided and no further description is given here.

The processor is a processor in the electronic device described in the above embodiment of the present application. The readable storage medium includes computer readable storage medium such as computer readable memory ROM, random access memory RAM, magnetic or optical disk, etc.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element. Furthermore, it should be noted that the scope of the methods and apparatus in the embodiments of the present application is not limited to performing the functions in the order shown or discussed, but may also include performing the functions in a substantially simultaneous manner or in an opposite order depending on the functions involved, e.g., the described methods may be performed in an order different from that described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

From the above description of the embodiments, it will be clear to those skilled in the art that the above-described embodiment method may be implemented by means of software plus a necessary general hardware platform, but of course may also be implemented by means of hardware, but in many cases the former is a preferred embodiment. Based on such understanding, the technical solution of the present application may be embodied essentially or in a part contributing to the prior art in the form of a computer software product stored in a storage medium (e.g. ROM/RAM, magnetic disk, optical disk) comprising instructions for causing a terminal (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the method according to the embodiments of the present application.

It will be understood that the embodiments of the present application have been described above with reference to the accompanying drawings, but the application is not limited to the specific embodiments described above, which are intended to be illustrative only, and not limiting, and that various changes in the characteristics and embodiments may be made, or equivalents may be substituted, by those skilled in the art without departing from the spirit and scope of the application. In addition, many modifications may be made to adapt a particular situation or material to the teachings of the application by those skilled in the art without departing from the spirit and scope thereof. Therefore, it is intended that the application not be limited to the particular embodiment disclosed, but that the application will include all embodiments falling within the scope of the appended claims.

Claims

1. An end-to-end network audio stream encryption transmission method, comprising:

2. The end-to-end network audio stream encryption transmission method of claim 1, wherein,

The stream encryption key is dynamically generated by the audio stream receiving end through a random number generator when each communication session is established, and a new stream encryption key is independently generated each communication session.

3. The end-to-end network audio stream encryption transmission method of claim 1, wherein,

The third party is a management platform or routing management software.

4. The end-to-end network audio stream encryption transmission method of claim 1, wherein,

The audio stream sending end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode, and the method comprises the following steps:

5. An end-to-end network audio stream encryption transmission apparatus, comprising:

6. The end-to-end network audio stream encrypted transmission apparatus according to claim 5, wherein,

7. The end-to-end network audio stream encrypted transmission apparatus according to claim 5, wherein,

The third party is a management platform or routing management software.

8. The end-to-end network audio stream encrypted transmission apparatus according to claim 5, wherein,

The stream encryption key generation and exchange module is further configured to:

9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, which when executed by the processor performs the steps of the end-to-end network audio stream encryption transmission method according to any one of claims 1 to 4.

10. A readable storage medium, characterized in that the readable storage medium has stored thereon a program or instructions which, when executed by a processor, implement the steps of the end-to-end network audio stream encrypted transmission method according to any one of claims 1 to 4.