Surveillance server, method of processing data of surveillance server, and surveillance system

• US 10,567,708 B2
• Filed: 01/10/2017
• Issued: 02/18/2020
• Est. Priority Date: 07/26/2013
• Status: Active Grant

• Current Assignee: Hanwha Vision Company Limited (Hanwha Corporation)
• Original Assignee: Hanwha Techwin Co., Ltd. (Hanwha Corporation)
• Inventors: Park, Young Joon, Kim, Myung Soo, Kwon, Su Ho, Kang, Kyung Don
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US15/402,701
• Publication Number:
  US 20170118445A1
• Time in Patent Office: 1,134 Days
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/183 for receiving images from a single remote source

Abstract

A surveillance server connected to a camera through a network is provided, the camera acquiring an image of a surveillance area. The surveillance server includes: a data acquisition unit configured to acquire from the camera image data of the image that is encrypted; a mode selection unit configured to select a processing mode of the image data; and a decryption control unit configured to decrypt the image data in response to selection of a first mode.

Claims

1. A method for protecting image within devices that share a content key, the method comprising:

receiving, by a server, image data from a camera, the image data being encrypted with the content key;

determining whether the image data is valid;

when the image data is determined to be valid, transmitting, by a decryption controller, the image data to a protected device as encrypted without decrypting the image data, the protected device having the content key; and

when the image data is required to be transmitted to an unprotected device, decrypting, by the decryption controller, the image data with the content key and transmitting the decrypted image data to the unprotected device not having the content key.

2. The method of claim 1, wherein a validity of the image data is determined by verifying whether the image data is transmitted from the camera without alteration.

3. The method of claim 2, wherein the verifying comprises:

receiving authentication data of the image data from the camera; and

comparing the authentication data with verification data obtained at the server based on the image data received.

4. The method of claim 1, wherein the unprotected device comprises a display configured to display the decrypted image data.

5. The method of claim 1, wherein the image data is stored as encrypted into the protected device comprising a storage.

6. The method of claim 1, wherein the image data is transferred as encrypted to the protected device comprising a client device.

7. The method of claim 6, further comprising:

generating authentication data of the image data at the server using an authentication key, the authentication key being shared with the client device; and

transmitting the authentication data to the client device together with the image data so that the authentication data is to be compared with verification data obtained at the client device to ensure validity of the image data.

8. The method of claim 7, wherein the authentication key is shared between the server and the client device based on a public key infrastructure.

9. A server comprising:

a memory configured to store a content key;

a communication unit configured to receive image data in a form of encrypted data from a camera, and selectively transmit the image data to a protected device having the content key, and an unprotected device not having the content key; and

a processor configured to;

determine whether the image data is valid;

when the image data is determined to be valid, transmit, through the communication unit, the image data to the protected device as encrypted without decrypting the image data; and

when the image data is required to be transmitted to the unprotected device, decrypt the image data with the content key and transmit the decrypted image data to the unprotected device.

10. The server of claim 9, wherein validity of the image data is determined by verifying whether the image data is transmitted from the camera without alteration.

11. The server of claim 10, wherein the processor is further configured to:

receive authentication data of the image data from the camera; and

compare the authentication data with verification data obtained based on the image data received.

12. The server of claim 9, wherein the content key is shared with the protected device based on a public key infrastructure.

13. A camera comprising:

an image sensor configured to capture an image;

a storage configured to store a content key and an authentication key;

a communication unit configured to communicate with a server; and

a processor configured to;

control the image sensor to capture the image;

generate image data by encrypting the image with the content key;

generate authentication data based on the authentication key to ensure validity of the image data; and

transmit the image data and the authentication data to the server,

wherein, at the camera, the image data is transmitted as encrypted to a protected interface comprising the server and having the content key; and

wherein, at the camera, the image data is decrypted and transmitted to an unprotected device not having the content key.

14. The camera of claim 13, wherein the validity of the image data is determined, at the server, by comparing the authentication data and verification data obtained at the server based on the image data transmitted from the camera.

15. The camera of claim 13, wherein the content key and the authentication key are shared between the camera and the server based on a public key infrastructure.