APPARATUS AND METHOD FOR ENHANCING PERSONAL INFORMATION DATA SECURITY

• US 20180014198A1
• Filed: 01/19/2016
• Published: 01/11/2018
• Est. Priority Date: 01/20/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: SUH, Kyung-Joo, YU, Han-Il, KIM, Sang-Jin, PARK, Joo-Hyun, LEE, Hye-Jin, LEE, Hee-Jeong
• Granted Patent: US 11,100,249 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof
• CPC Class Codes: H04N 1/448 Rendering the image unintelligible, e.g. scrambling
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]

Abstract

The present disclosure relates to a communication technique for converging a 5G communication system for supporting a higher data rate beyond a 4G system with an IoT technology, and a system therefor. The present disclosure can be applied to intelligent services on the basis of a 5G communication technology and an IoT-related technology (for example, smart home, smart building, smart city, smart car or connected car, healthcare, digital education, retail, security and safety-related service, and the like). The present invention provides a method for enhancing data security, comprising: when a request message including information related to a first privacy level is received from a user device, authenticating the user device; when the user device is an authenticated device as a result of the authentication, verifying the information related to the first privacy level; and when the verification of the information related to the first privacy level is completed, transmitting, to the user device, an image processed on the basis of the first privacy level among images processed on the basis of a plurality of privacy levels.

Claims

1. A method for enhancing data security, comprising:

authenticating a terminal, if a request message including information related to a first privacy level is received from the terminal;

verifying the information related to the first privacy level, if the terminal is determined as an authenticated device;

transmitting, to the terminal, an image processed based on the first privacy level among images processed based on a plurality of privacy levels, if the verification of the information related to the first privacy level is completed.

2. The method of claim 1, wherein the plurality of privacy levels include a plurality of image permission levels, the image permission levels indicate whether access to the processed images is permitted, and if an image permission level is high, the access to the processed image similar to a raw image is permitted.

3. The method of claim 1, further comprising:

receiving a level-up request message including information related to a second privacy level allowing access to an image similar to a raw image before being processed rather than the image processed based on the first privacy level; and

transmitting, to the terminal, an image processed based on the second privacy level among the processed images, if the verification of the information related to the second privacy level is completed.

4. The method of claim 1, wherein verifying the information related to the first privacy level includes comparing a privacy level indicated by the information related to the first privacy level with a privacy level that is permitted to the terminal by policy.

5. The method of claim 1, further comprising transmitting, to the terminal, an image processed based on a privacy level with a default value, if the request message does not include the information related to the first privacy level.

6. The method of claim 1, further comprising previously setting the first privacy level in a call setup and registration procedure through a session description protocol (SDP) parameter or a home subscriber server (HSS).

7. The method of claim 1, further comprising:

transmitting, to a sensor unit, an emergency situation notification message including the information related to an occurrence of an emergency situation, if information related to occurrence of the emergency situation is received from the terminal; and

transmitting a raw image and the information related to the occurrence of the emergency situation to at least one of the terminal, an emergency center and a nearby terminal, if the raw image and the information related to the occurrence of the emergency situation are received from the sensor unit.

8. The method of claim 7, further comprising, when transmitting the raw image and the information related to the occurrence of the emergency situation to the emergency center, further transmitting at least one of an identifier (ID) of a patient, an ID of a wearable device of the patient, and an ID of an e-health device of the patient.

9. The method of claim 1, further comprising processing a raw image based on the plurality of privacy levels;

wherein processing the raw image includes any one of excluding a remaining background except for a target shooting subject from the raw image, leaving only contours of shooting subjects on the raw image, processing the raw image based on a smoothing technique, and replacing the remaining background except for the target shooting subject with another background on the raw image.

10. The method of claim 1, further comprising transmitting, to the terminal, at least one of information related to a time stamp and information related to a random number for the raw image;

wherein the time stamp and the random number for the raw image are used to determine whether the processed image is modulated.

11. The method of claim 1, further comprising:

storing raw data in a first database; and

storing the raw data in a second database interworking with a file system, storing the raw data in a second database, or storing an analysis result obtained by analyzing the raw data in the second database.

12. The method of claim 11, further comprising:

receiving additional information from the terminal or a sensor unit, if the raw data is multimedia data; and

managing usage logs or log records for similar data based on the additional information.

13. (canceled)

14. A first terminal for enhancing data security, comprising:

a transceiver; and

a processor configured to;

authenticate a second terminal, if a request message including information related to a first privacy level is received by the transceiver from the second terminal,

verify the information related to the first privacy level, if the second terminal is determined as an authenticated device,

control the transceiver to transmit, to the second terminal, an image processed based on the first privacy level among images processed based on a plurality of privacy levels, if the verification of the information related to the first privacy level is completed.

15. The first terminal of claim 14, wherein the plurality of privacy levels include a plurality of image permission levels, the image permission levels indicate whether access to the processed images is permitted, and if an image permission level is high, the access to the processed image similar to a raw image is permitted.

16. The first terminal of claim 14, wherein the processor is further configured to control the transceiver to receive a level-up request message including information related to a second privacy level allowing access to an image similar to a raw image before being processed rather than the image processed based on the first privacy level, and transmit, to the second terminal, an image processed based on the second privacy level among the processed images, if verification of the information related to the second privacy level is completed.

17. The first terminal of claim 14, wherein the processor is configured to compare a privacy level indicated by the information related to the first privacy level with a privacy level that is permitted to the second terminal by policy.

18. The first terminal of claim 14, wherein the processor is further configured to control the transceiver to transmit, to the second terminal, an image processed based on a privacy level with a default value, if the request message does not include the information related to the first privacy level.

19. The first terminal of claim 14, wherein the processor is further configured to previously set the first privacy level in a call setup and registration procedure through a session description protocol (SDP) parameter or a home subscriber server (HSS).

20. The first terminal of claim 14, wherein the processor is further configured to control the transceiver to:

transmit, to a sensor unit, an emergency situation notification message including information related to an occurrence of the emergency situation, if the information related to occurrence of an emergency situation is received from the second terminal; and

transmit a raw image and the information related to the occurrence of the emergency situation to at least one of the second terminal, an emergency center and a nearby second terminal, if the raw image and the information related to the occurrence of the emergency situation are received from the sensor unit.

21. The first terminal of claim 20, wherein the processor is further configured to control the transceiver to transmit at least one of an identifier (ID) of a patient, an ID of a wearable device of the patient, and an ID of an e-health device of the patient, when transmitting the raw image and the information related to the occurrence of the emergency situation to the emergency center.