CN-122001663-A - End-to-end network audio stream encryption transmission method, device, equipment and medium

CN122001663ACN 122001663 ACN122001663 ACN 122001663ACN-122001663-A

Abstract

The application provides an end-to-end network audio stream encryption transmission method, device, equipment and medium, relating to the technical field of communication; the method comprises the steps of responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end, establishing communication session connection of the audio stream sending end and the audio stream receiving end, generating a stream encryption key for symmetric encryption by the audio stream receiving end, exchanging the stream encryption key by the audio stream sending end and the audio stream receiving end in an asymmetric encryption mode, encrypting an audio stream to be transmitted by the audio stream sending end in real time by using the stream encryption key through a symmetric encryption algorithm, transmitting the encrypted audio stream to the audio stream receiving end, and decrypting the encrypted audio stream by the audio stream receiving end in real time by using the stream encryption key through the symmetric encryption algorithm. The application realizes the network audio stream encryption transmission with high security and low delay.

Inventors

SHI YANHUA
Kui Nan
WU XIN
LEI MING
WANG HUI
JIANG HAO
LIN XIAN
LIU SHUAI
GUO ZHENGYU

Assignees

北京中电慧声科技有限公司

Dates

Publication Date: 20260508
Application Date: 20260228

Claims (10)

1. An end-to-end network audio stream encryption transmission method, comprising: Responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end, and establishing communication session connection of the audio stream sending end and the audio stream receiving end; Generating a stream encryption key for symmetric encryption by the audio stream receiving end, wherein the audio stream transmitting end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode; The audio stream sending end encrypts the audio stream to be transmitted in real time by using the stream encryption key through a symmetric encryption algorithm and transmits the encrypted audio stream to the audio stream receiving end; and the audio stream receiving end decrypts the encrypted audio stream in real time by using the stream encryption key through a symmetric encryption algorithm.
2. The end-to-end network audio stream encryption transmission method of claim 1, wherein, The stream encryption key is dynamically generated by the audio stream receiving end through a random number generator when each communication session is established, and a new stream encryption key is independently generated each communication session.
3. The end-to-end network audio stream encryption transmission method of claim 1, wherein, The third party is a management platform or routing management software.
4. The end-to-end network audio stream encryption transmission method of claim 1, wherein, The audio stream sending end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode, and the method comprises the following steps: The audio stream receiving end generates a first asymmetric key pair which comprises a receiving end private key and a receiving end public key; the audio stream transmitting end generates a second asymmetric key pair which comprises a transmitting end private key and a transmitting end public key; the audio stream sending end and the audio stream receiving end exchange respective corresponding public keys; the audio stream receiving end performs asymmetric encryption on the first asymmetric key by utilizing the public key of the transmitting end, and generates an encrypted stream encryption key after encryption; The audio stream receiving end signs the encrypted stream encryption key and the receiving end private key to generate signature data; the audio stream receiving end sends the signature data to the audio stream sending end; The audio stream sending end performs signature verification on the signature data by utilizing the public key of the receiving end, and simultaneously acquires the encrypted stream encryption key; and the audio stream sending end uses the private key of the sending end to asymmetrically decrypt the encrypted stream encryption key, and the stream encryption key is restored.
5. An end-to-end network audio stream encryption transmission apparatus, comprising: the session management module is used for responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end and establishing communication session connection of the audio stream sending end and the audio stream receiving end; The system comprises a stream encryption key generation and exchange module, a stream encryption key generation and exchange module and a stream encryption module, wherein the stream encryption key generation and exchange module is used for generating a stream encryption key for symmetric encryption by the audio stream receiving end; the audio stream encryption and transmission module is used for encrypting the audio stream to be transmitted in real time by the audio stream sending end through a symmetric encryption algorithm by utilizing the stream encryption key and transmitting the encrypted audio stream to the audio stream receiving end; and the audio stream decryption module is used for decrypting the encrypted audio stream in real time by the audio stream receiving end through a symmetric encryption algorithm by utilizing the stream encryption key.
6. The end-to-end network audio stream encrypted transmission apparatus according to claim 5, wherein, The stream encryption key is dynamically generated by the audio stream receiving end through a random number generator when each communication session is established, and a new stream encryption key is independently generated each communication session.
7. The end-to-end network audio stream encrypted transmission apparatus according to claim 5, wherein, The third party is a management platform or routing management software.
8. The end-to-end network audio stream encrypted transmission apparatus according to claim 5, wherein, The stream encryption key generation and exchange module is further configured to: The audio stream receiving end generates a first asymmetric key pair which comprises a receiving end private key and a receiving end public key; the audio stream transmitting end generates a second asymmetric key pair which comprises a transmitting end private key and a transmitting end public key; the audio stream sending end and the audio stream receiving end exchange respective corresponding public keys; the audio stream receiving end performs asymmetric encryption on the first asymmetric key by utilizing the public key of the transmitting end, and generates an encrypted stream encryption key after encryption; The audio stream receiving end signs the encrypted stream encryption key and the receiving end private key to generate signature data; the audio stream receiving end sends the signature data to the audio stream sending end; The audio stream sending end performs signature verification on the signature data by utilizing the public key of the receiving end, and simultaneously acquires the encrypted stream encryption key; and the audio stream sending end uses the private key of the sending end to asymmetrically decrypt the encrypted stream encryption key, and the stream encryption key is restored.
9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, which when executed by the processor performs the steps of the end-to-end network audio stream encryption transmission method according to any one of claims 1 to 4.
10. A readable storage medium, characterized in that the readable storage medium has stored thereon a program or instructions which, when executed by a processor, implement the steps of the end-to-end network audio stream encrypted transmission method according to any one of claims 1 to 4.

Description

End-to-end network audio stream encryption transmission method, device, equipment and medium Technical Field The present invention relates to the field of communications technologies, and in particular, to an end-to-end network audio stream encryption transmission method, apparatus, device, and medium. Background In the modern communication field, the network audio transmission technology realizes the efficient transmission of audio signals through the Internet, so that not only can the increasing audio content demands be met, but also more flexible and convenient audio services can be provided. However, audio data is subject to serious security threats during network transmission, including security risks such as eavesdropping attacks, data tampering, identity masquerading, denial of service, and the like. The unencrypted audio stream may be intercepted by a malicious attacker, resulting in leakage of sensitive dialog content, causing serious consequences such as privacy violations, commercial confidentiality leakage, etc. Especially, under the background that the Internet of things and intelligent equipment are popular, the real-time performance and the continuity of the audio data enable the audio data to be an attack target more easily. The audio stream encryption technology can effectively ensure confidentiality, integrity and availability of audio data in the transmission process by adopting a symmetric encryption algorithm, an asymmetric encryption algorithm or a hybrid encryption algorithm. The encryption technology can not only prevent unauthorized access and eavesdropping, but also ensure copyright protection and identity authentication of the audio content. End-to-end encryption has become an important trend in audio transmission security today, which ensures that only the communicating parties can access the original audio content, and that data cannot be decrypted even if intercepted during transmission. In the related art, the application with the patent number of CN216357277U discloses a network audio transmission device and an audio system, and proposes a method for encrypting audio data for a plurality of times through a secret key, wherein although the occupation of operation resources is small and the encryption and decryption speeds are high, the method only depends on symmetric encryption, and the secret key must be shared in advance or manually injected through an additional safety channel; not only is the key management complex, but also once the key is revealed, all ciphertext can be decrypted in batches, and the security protection level of forward confidentiality and 'one-time encryption' cannot be realized. The application with the patent number of CN117176327A discloses a method and a system for audio encryption transmission, which are proposed to collect audio and store the audio into a plurality of buffer areas, and then carry out AES encryption transmission after multistage serial operation such as data rearrangement, odd-even serial number cyclic shift, preset cipher dictionary table mapping, time function disturbance and the like. Although the method improves the confusion degree of data to a certain extent, the key space is fixed by presetting a dictionary table and a time stamp as a key source, the key space is fixed and needs to be shared in advance, and the risk of reverse decoding of the key source exists, once the dictionary or the time function is reversed, all sessions can be decrypted, and the security protection level of forward confidentiality and 'one-time confidentiality' cannot be realized; in addition, all the audio data are required to undergo secondary coding, the processing flow is complex, large processing delay is introduced, and the method is difficult to be suitable for application scenes with high real-time requirements such as real-time sound expansion and voice intercom. Disclosure of Invention The invention provides an end-to-end network audio stream encryption transmission method, device, equipment and medium, which solve the problem of how to realize high-security and low-delay network audio stream encryption transmission. In order to achieve the above purpose, the application adopts the following technical scheme: in a first aspect, an end-to-end network audio stream encryption transmission method is provided, including: Responding to an encryption transmission request initiated by a third party, determining an audio stream sending end and an audio stream receiving end, and establishing communication session connection of the audio stream sending end and the audio stream receiving end; Generating a stream encryption key for symmetric encryption by the audio stream receiving end, wherein the audio stream transmitting end and the audio stream receiving end exchange the stream encryption key in an asymmetric encryption mode; The audio stream sending end encrypts the audio stream to be transmitted in real time by using the stream encryption key throu