一种基于国密算法的音视频选择性加密方案

doi:10.3969/j.issn.1671-1122.2023.11.006

摘要/Abstract

摘要：

针对目前以国密算法为基础的音视频数据加密方案不完善、加密效率与安全性难以权衡的问题，文章在腾讯实时音视频（Tencent Real-Time Communication，TRTC）架构下设计了一种基于国密算法的音视频选择性加密方案。根据音视频应用的特点与需求提出口令认证与协同签名相结合的身份认证方案，通过分析SM4算法与H.264编码方式的特点，使用SM4-CFB模式对编码后帧内关键语法元素IPM、MVD和RC进行加密，实现了高效的音视频数据选择性加密。实验证明，该方案有效降低了加密数据量，提高了加密速度，并且具有较高的密码安全性和感知安全性。

关键词: 国密算法, 选择性加密, 音视频数据安全, 协同签名

Abstract:

Aiming to address the current issues of imperfect encryption schemes based on national cryptographic algorithm in audio and video data, balancing encryption efficiency and security, this paper designed a selective audio-video encryption scheme within the TRTC audio-video architecture, based on national cryptographic algorithms. The scheme proposed an identity authentication mechanism combining password authentication and collaborative signature, tailored to the characteristics and requirements of audio-video applications. By analyzing the features of the SM4 algorithm and H.264 encoding method, the scheme employed SM4-CFB mode to encrypt key syntax elements such as IPM, MVD, and residual coefficients within encoded frames, achieving efficient selective encryption of audio-video data. Experimental results demonstrate that this approach effectively reduces encrypted data volume, enhances encryption speed, and maintains high levels of cryptographic security and perceptual security.

Key words: national cryptographic algorithm, selective encryption, audio and video data security, co-signature

中图分类号:

TP309

许盛伟, 邓烨, 刘昌赫, 谭莉. 一种基于国密算法的音视频选择性加密方案[J]. 信息网络安全, 2023, 23(11): 48-57.

XU Shengwei, DENG Ye, LIU Changhe, TAN Li. A Selective Encryption Scheme for Audio and Video Based on the National Cryptographic Algorithm[J]. Netinfo Security, 2023, 23(11): 48-57.

图/表 14

表1

图1

图2

图3

表2

图4

图5

图6

图7

表3

表4

图8

图9

表5

参考文献 21

[1]	Shanghai Airui Market Consulting Company Limited. China Real-Time Audio and Video Industry Research Report[EB/OL]. (2022-10-13)[2023-04-23]. https://baijiahao.baidu.com/s?id=1742238707272155025&wfr=spider&for=pc.
	上海艾瑞市场咨询股份有限公司. 中国实时音视频行业研究报告[EB/OL]. (2022-10-13)[2023-04-13]. https://baijiahao.baidu.com/s?id=1742238707272155025&wfr=spider&for=pc.
[2]	LIAN Shiguo, SUN Jinsheng, WANG Zhiquan. Video Encryption and Its Development[J]. Information and Control, 2004, 33(5): 560-566.
	廉士国, 孙金生, 王执铨. 视频加密算法及其发展现状[J]. 信息与控制, 2004, 33(5):560-566.
[3]	SPANOS G A, MAPLES T B. Performance Study of a Selective Encryption Scheme for the Security of Networked, Real-Time Video[C]// IEEE. International Conference on IEEE Computer Society. New York: IEEE, 1995: 2-10.
[4]	QIAO Lintian, NAHRSTEDT K. A New Algorithm for MPEG Video Encryption[C]// Oscillations and Chaos. 1st International Conference on Imaging Science System and Technology. Saint Petersburg: CiteSeer, 1997: 21-29.
[5]	YUAN Zhimin, ZHU Chunlei, LYU Chengdu. Selective Video Encryption Algorithm Based on SM4[J]. Communications Technology, 2019, 52(8): 1962-1966.
	袁志民, 朱春磊, 吕成都. 基于SM4的选择性视频加密算法[J]. 通信技术, 2019, 52(8):1962-1966.
[6]	ZHANG Shuli, SHI Yuanbing, REN Xubin, et al. Research on Video Conference Encryption Technology[J]. Communications Technology, 2020, 53(10): 2520-2527.
	张舒黎, 石元兵, 任旭斌, 等. 视频会议加密技术研究[J]. 通信技术, 2020, 53(10):2520-2527.
[7]	MA Jianping, CHEN Bo, MA Shijia, et al. Adaptive Video Realtime Stream Transmission for Digital Terminals[J]. Journal of Chinese Computer Systems, 2010, 31(6): 1231-1235.
	马建平, 陈渤, 马识佳, 等. 数字终端音视频实时自适应流式传输方法[J]. 小型微型计算机系统, 2010, 31(6):1231-1235.
[8]	YU Bo, LI Xuanshan, WANG Wei, et al. Research and Application of Real-Time Communication Optimization Based on QUIC[J]. Journal of Chinese Computer Systems, 2021, 42(8): 1753-1757.
	于波, 李炫杉, 王卫, 等. 基于QUIC的实时通信优化研究与应用[J]. 小型微型计算机系统, 2021, 42(8):1753-1757.
[9]	HU Jingxiu, YANG Yang, XIONG Lu, et al. SM Algorithm Analysis and Software Performance Research[J]. Netinfo Security, 2021, 21(10): 8-16.
	胡景秀, 杨阳, 熊璐, 等. 国密算法分析与软件性能研究[J]. 信息网络安全, 2021, 21(10):8-16.
[10]	ZUO Liming, XIA Pingping, CHEN Zuosong. Protection Technology of Network Camera Based on SM2 Digital Signature[J]. Netinfo Security, 2018, 18(5): 32-40.
	左黎明, 夏萍萍, 陈祚松. 基于国密SM2数字签名的网络摄像头保护技术[J]. 信息网络安全, 2018, 18(5):32-40.
[11]	XU Shengwei, DENG Ye, TIAN Yu. Design and Application of a Cloud Bilateral Collaborative Signature Scheme Based on SM2[J]. Journal of Beijing Electronic Science and Technology Institute, 2023, 31(1): 1-8.
	许盛伟, 邓烨, 田宇. 基于SM2的云服务器端双方协同签名方案设计与应用[J]. 北京电子科技学院学报, 2023, 31(1):1-8.
[12]	XU Dawen, WANG Rangding, SHI Yunqing. Data Hiding in Encrypted H.264/AVC Video Streams by Codeword Substitution[J]. IEEE Transactions on Information Forensics and Security, 2014, 9(4): 596-606. doi: 10.1109/TIFS.2014.2302899 URL
[13]	QIN Lele, ZHANG Guojuan, LI You. Application of CSK Encryption Algorithm in Video Synergic Command Systems[J]. Journal of Organizational and End User Computing(JOEUC), 2022, 34(2): 1-18.
[14]	ABOMHARA M, ZAKARIA O, KHALIFA O O, et al. Enhancing Selective Encryption for H.264/AVC Using Advanced Encryption Standard[J]. International Journal of Computer and Electrical Engineering, 2022, 10(1): 339-341.
[15]	KHALIL M I. Real-Time Encryption/Decryption of Audio Signal[J]. International Journal of Computer Network and Information Security, 2016, 8(2): 25-31.
[16]	LI Shanxi, CHEN Wenbo, SHANG Zhihao. Research on the Performance of Encryption Techniques for High-Bandwidth Multicast Video Streaming[C]// University of Western Australia. 1st International Workshop on Cloud Computing and Information Security. Brisbane: Atlantis Press, 2013: 492-496.
[17]	ABOMHARA M, ZAKARIA O, KHALIFA O O. An Overview of Video Encryption Techniques[J]. International Journal of Computer Theory and Engineering, 2010, 2(1): 1793-1801.
[18]	CHENG Shuli, WANG Liejun, AO Naixiang, et al. A Selective Video Encryption Scheme Based on Coding Characteristics[J]. Symmetry, 2020, 12(3): 332-340. doi: 10.3390/sym12030332 URL
[19]	MAO Niansheng, ZHUO Li, ZHANG Jing, et al. Fast Compression Domain Video Encryption Scheme for H.264/AVC Streaming[C]// IEEE. 14th International Conference on Advanced Communication Technology(ICACT). New York: IEEE, 2012: 425-429.
[20]	SALLAM A I, FARAGALLAH O S, EL-RABAIE E S M. HEVC Selective Encryption Using RC6 Block Cipher Technique[J]. IEEE Transactions on Multimedia, 2017, 20(7): 1636-1644. doi: 10.1109/TMM.2017.2777470 URL
[21]	WANG Xingyuan, SU Yining. An Audio Encryption Algorithm Based on DNA Coding and Chaotic System[J]. IEEE Access, 2020, 8: 9260-9270. doi: 10.1109/Access.6287639 URL

类型	国密算法	原理	对应国际算法
非对称加密	SM2	椭圆曲线的离散对数问题	RSA
杂凑	SM3	散列函数	Hash
对称加密	SM4	分组加密	DES、AES

密钥名称	密码算法	长度/bit	产生方式	用途
用户密钥对	SM2	128	云服务器密码模块产生	数字签名、数字信封
会议密钥	SM4	128	随机动态产生	数据流加密
分片密钥	SM2	128	随机动态产生	协同签名

Mb_type	类型名称	帧内16×16预测模式	码字
1	I_16×16_0_0_0	0	010
2	I_16×16_1_0_0	1	011
3	I_16×16_2_0_0	2	00100
4	I_16×16_3_0_0	3	00101
5	I_16×16_0_1_0	0	00110
6	I_16×16_1_1_0	1	00111
7	I_16×16_2_1_0	2	0001000
8	I_16×16_3_1_0	3	0001001
9	I_16×16_0_2_0	0	0001010
10	I_16×16_1_2_0	1	0001011
11	I_16×16_2_2_0	2	0001100
12	I_16×16_3_2_0	3	0001101
13	I_16×16_0_0_1	0	0001110
14	I_16×16_1_0_1	1	0001111
15	I_16×16_2_0_1	2	000010000
16	I_16×16_3_0_1	3	000010001
17	I_16×16_0_1_1	0	000010010
18	I_16×16_1_1_1	1	000010011
19	I_16×16_2_1_1	2	000010100
20	I_16×16_3_1_1	3	000010101
21	I_16×16_0_2_1	0	000010110
22	I_16×16_1_2_1	1	000010111
23	I_16×16_2_2_1	2	000011000
24	I_16×16_3_2_1	3	000011001

MVD	码字
1	010
-1	011
2	00100
-2	00101
3	00110
-3	00111

方案	加密元素	加密算法	格式兼容性
廉士国^[2]等人	全部数据	DES算法	不兼容
SPANOS^[3]等人	I帧	AES算法	不兼容
QIAO^[4]等人	I帧	异或运算	不兼容
袁志民^[5]等人	一半数据	SM4算法	不兼容
XU^[12]等人	IPM、MVD、T1s	Chaos	兼容
WANG^[21]等人	IPM、MVD	Hash、AES	兼容
CHENG^[18]等人	IPM、MVD、RC	Chaos、AES	兼容
本文方案	IPM、MVD、RC	SM2、SM4	兼容