Encrypt video data with Alibaba Cloud proprietary cryptography-ApsaraVideo Media Processing(MPS)-阿里云帮助中心

Alibaba Cloud proprietary cryptography secures your video content by encrypting the data. Encrypted videos remain protected even if downloaded to a local device, preventing unauthorized redistribution, content leaks, and hotlinking. This method is more secure and easier to use than HLS encryption. This topic describes how to set up Alibaba Cloud proprietary cryptography.

Usage

The proprietary cryptography feature in ApsaraVideo Media Processing (MPS) is now integrated into ApsaraVideo VOD. If you are new to Alibaba Cloud proprietary cryptography, see Alibaba Cloud proprietary cryptography for instructions.

Limitations

Alibaba Cloud proprietary cryptography supports only HLS and MP4 output formats.
Alibaba Cloud proprietary cryptography is available only in the Chinese mainland.

How to use

You can automatically trigger Alibaba Cloud proprietary cryptography using a user-managed workflow or an API call.

Before you begin

Activate Key Management Service (KMS).
Activate Alibaba Cloud CDN.

Set up video encryption

Create a transcoding workflow for video encryption.

For more information about how to create a workflow, see Create a workflow. When you create the workflow, configure the encryption settings as follows:

On the Basic Settings page of the Encode node, click Advanced Settings.
Turn on the Encryption switch.

Select Alibaba Cloud proprietary cryptography.

Encryption method	Description
Alibaba Cloud proprietary cryptography	This method uses a proprietary AES-128 algorithm to encrypt video content. Encrypted videos can be decrypted and played back only by using ApsaraVideo Player for iOS, Android, and Flash. This provides a high level of security.

Configure other parameters as required, and then click OK.
Click the pen icon on the Publish node.
Set Publish Type to Auto. This allows the video to be played immediately after transcoding is complete.

Configure the CDN domain name for the output bucket. For more information, see Configure a CDN domain name.

Upload a video

After configuring the encryption settings, you can upload videos. After a video is uploaded, the system automatically transcodes and encrypts it.

Upload a video in the MPS console or by using OSS. For more information, see Upload a video.
After the upload completes, the video is in the Initialized state.

Note
The Initialized status is displayed only if you set Publish Type in the workflow to Auto. If you set it to Manual, the video's status is Unpublished. For encryption workflows, you must set Publish Type to Auto.

After the upload is complete, you can find the video on the Media List page. The Publish Status of the video is Initialized.
After transcoding is complete, the video is automatically published. The Publish Status changes to Published. You can now play the video.

Video playback

Videos encrypted with Alibaba Cloud proprietary cryptography must be played using ApsaraVideo Player. For more information about how to play encrypted videos, see ApsaraVideo Player SDK.