Overview

The Baidu AI Cloud video copyright protection service is a safe and easy-to-use lightweight copyright protection service. The AES128 encryption algorithm is used to encrypt the video files through the video transcoding platform, to prevent the illegal users from copying and spreading the video content.

At present, the copyright protection service only protects the video in HLS format. The video in other formats must be transcoded into the HLS format before encryption.

Copyright Protection Architecture

The video copyright protection architecture consists of video encryption service, key authorization service and security player as shown in the figure below:

• Video Encryption Service

  The AES128 encryption algorithm is used to encrypt the video to transcode into the HLS format during video transcoding, and the video encryption encapsulation conforms to the HLS specification. For the video in non-HLS format, the video encryption service must be used with the video transcoding service. The input video is transcoded into the HLS format before encryption.

• Key Authorization Service (KMS)

  It provides the video decryption key authorization service. The legal users can use the security player to get the decryption key and decrypt and play the video content.

  The key authorization includes Open and PlayerBinding modes:

  • Open mode: The decryption key is used for all users.
  • PlayerBinding mode: The key access is subject to access control, and the unauthorized users cannot get the decryption key.
  • Token Mode: The Token authentication is added for the key access to provide more secure access control.

• Security Player

  The encrypted video cannot be played by the universal player, but must be played by the security player provided by Baidu AI Cloud. You can customize the Web/Android/iOS security player based on the Baidu AI Cloud player SDK.

Operating Procedures to Protect Copyrights

Video Encryption

1. Log in to Baidu AI Cloud Website.

   • If not registered, Register Baidu AI Cloud Account first.
   • If you register the Baidu account, you can login to it directly.

2. Select “Product Services” -> “MCP” to enter the “Pipeline ” page, and then click “Transcoding Template” on the left to create the user template with the video encryption function.

   (1) lick "New User Template".

   (2) Click "New User Template".

   It is recommended that you select the system template for the HLS format in the Sample Template drop-down list, such as “bce.video_hls_1920×1080_3660bkps”, and customize the user template based on the system template.

   (3) Configuration Parameters.

   Select the following four configurable items:

   Select the following four configurable items:

   • Fragment extraction
   • Video
   • Audio

   • Content Encryption

     When a configurable item is selected each time, the system pops up the corresponding detailed configuration parameter item under the configurable item, and the video encryption configuration is located at the bottom of page.

 The video encryption configuration includes the following options:

• Open: Open key, the system automatically generates the encryption key, the key is public, and the access control is not set.
• PlayerBinding: Bind the player, and the system automatically generates the encryption key, and the access control is set for the key. The access control is set for the key in the PlayerBinding mode, so it is high security. It is recommended to use the PlayerBinding mode.
• Token: Temporary password playback authorization, and the system generates the key to encrypt the video according to UserKey. During playback, a token is generated according to the rules and sent to the key service for authentication. It can be played only after successful authentication, so it is high security.

(4) Click “Create Transcoding Template” to complete the creation.

3. Select “Product Service” -> “BOS” to create two buckets to prepare for creating pipeline.

   The BOS bucket must be adopted for the input and output of video transcoding job. You need to provide at least one BOS bucket to use relevant functions. It is recommended that you prepare two BOS buckets for video input and output respectively.

4. Create Pipeline。

   The BOS buckets created in Step 3 are selected as the input/output buckets.

5. Create Transcoding Task

   • The pipelines created in Step 4 are selected as “Pipeline”.
   • The videos to encrypt that are stored in the input bucket are selected as "Source File Input".
   • The user templates created in Step 2 are selected as “Transcoding Template”.

   After the transcoding job status is displayed as "successful", you can enter the output bucket to view the encrypted video.

Decrypting and Playing Video

• The encrypted audio and video cannot be played by the universal player, but must be played by security playerprovided by Baidu AI Cloud. The playback method is exactly the same as that of non-encrypted video.
• [Detailed Description of Token Mode](https://cloud.baidu.com/doc/VOD/s/Djwvyd3z9#token mode)
• m3u8 file example of HLS video decrypted by MCP:

• Description of MCP getting UserKey: