KR101665199B1 - System and method for detecting image modulation of automobile blackbox - Google Patents

Abstract

The present invention relates to a video surveillance system and method for a vehicle black box, which comprises a vehicle black box, a network, and a server, the vehicle black box comprising: a camera that performs shooting; A timer for providing time information to the control unit, and a timer for providing time information to the server through the network. The sensor unit includes a sensor unit for performing authentication with the server, a server for performing authentication with the server, The server performs registration and management of a black box for a vehicle, and stores an original image of an accident image and a hash value transmitted from the network. According to the present invention, since it is possible to confirm whether or not images are stolen or altered, it can play a large role in solving an event, can clearly make an estimation of an offender and a victim, detects an act such as stomach, Since the original image can be acquired, it is possible to simplify and automate the process of checking and correcting the moving image and the modulation, which are costly and time consuming, and can improve the economy and convenience.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for detecting a video black-

The present invention relates to a system and method for detecting a video black-box in a vehicle, and more particularly to a video black-box detection system and a video black-box detection system for detecting the presence or absence of a black- ≪ / RTI >

Recently, as the violent crime is increasing, CCTV is installed for the purpose of crime prevention in order to prevent it, and the images obtained through these provide crucial clues to solve crime incidents.

On the other hand, as the video equipment provides a clue to solve the problem, the automobile black box is installed in most of the vehicles by application thereof, and even the installation is required to be installed. As such, the installation of a vehicle black box in most vehicles is a great help in judging vehicles that have been subjected to illegal acts such as interruptions, hit-and-run, and signal violations.

However, in recent years, it has become increasingly important to determine whether or not an image of a black box in a car is distorted or distorted, making it difficult to estimate the victim, destroying or destroying the original image, And social problems such as the perpetrators escaping the law by giving big chaos are continuously occurring.

In this way, in a situation where the penetration rate is steadily increasing to the extent that most of the vehicles have black boxes for automobiles, there is a tendency that the black box image of the vehicle is stolen, forcibly deleted or forcibly deleted to make the situation favorable to the perpetrator, Since there is an increasing tendency, it is necessary to solve this problem.

Korean Patent Publication No. 10-2011-0040556 (published on April 20, 2011).

SUMMARY OF THE INVENTION Accordingly, the present invention has been made to solve the above-mentioned problems occurring in the prior art, and it is an object of the present invention to provide a vehicle black box image stabilization method capable of detecting the presence / And to provide a detection system and method.

According to another aspect of the present invention, there is provided a video surveillance / alarm detection system for a vehicle black box, comprising: a vehicle black box; a network; and a server, The box includes: a camera for photographing; A sensor unit for sensing an event related to a vehicle accident; A controller for performing authentication with the server and transmitting an incident image and a hash value to the server when an event occurs; A timer for providing time information to the control unit; And a communication unit for performing transmission and reception of data input and output through the network, wherein the server performs registration management of the vehicle black box, and stores the original image of the accident image and the hash value transmitted from the network .

The control unit may include an authentication performing unit for performing user authentication and vehicle black box authentication through the public key cryptography scheme with the server; An integrity verification unit for generating the incident image and the hash value for a set time before and after the event time when the event occurs; And a storage unit for storing the accident image and the hash value.

In the meantime, the method of detecting an image false alarm of a black box for a vehicle according to the present invention comprises the steps of communicating a vehicle black box and a server via a VPN (Virtual Private Network); Streaming video data generated in the vehicle black box to the server; Storing an accident image before and after a set time based on a time when an event occurred in the vehicle black box when an event related to a vehicle accident occurs; Generating a hash value of the accident image in the vehicle black box; Performing authentication with a public key and a private key between the vehicle black box and the server; Transmitting the incident image and the hash value to the server in the vehicle black box; And storing the incident image and the hash value in the server.

Here, HMAC (hashed message authentication code) is used to prevent the accident image and the hash value from being modulated. The HMAC generates a hash value based on a specific value, so that only the vehicle black box Hash with the specific value you have.

The integrity verification of the accident image may include: HMACing the accident image transmitted to the server through a specific value of only the vehicle black box; Comparing the HMAC with a predetermined value between an accident image of the vehicle black box and an accident image of the server; And if the HMAC values are the same, it is determined that there is no stochastic modulation, and if the HMAC values are different, it is determined that there is stochastic modulation.

As described above, according to the system and method for detecting video image and modulation of a black box for a vehicle according to the present invention, it is possible to check whether images are stolen or altered, The estimation can be made clear.

As a result, according to the present invention, it is possible to detect an act such as a stomach, a modulation or deletion, and acquire an original image. Therefore, it is possible to simplify and automate the process of watching and decoding a moving image, Can be improved.

1 is a block diagram of a system for detecting a video image and a modulation of a black box for a vehicle according to an embodiment of the present invention.
2 is a configuration diagram of a control unit according to an embodiment of the present invention.
FIG. 3 is a flowchart illustrating a method of detecting an image false alarm in a black box for a vehicle according to an embodiment of the present invention.
4 is a conceptual diagram of the principle of MD5 applied to the present invention.
5 is a conceptual diagram of HMAC applied to the present invention.
6 is a diagram illustrating an HMAC process of a vehicle black box and a server of the present invention.
FIG. 7 illustrates a process of verifying the HMAC of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a system and method for detecting video image and modulation of a vehicle black box according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a system for detecting a video image and a modulation of a black box for a vehicle according to an embodiment of the present invention.

Referring to Fig. 1, the video surveillance and modulation detection system of a black box for a vehicle of the present invention mainly includes a black box 1 for a vehicle, a network 2 and a server 3.

The vehicle black box 1 includes a camera 11 for photographing, a sensor unit 12 for sensing events including impact and motion, authentication to the server 3, 3, a controller 13 for ensuring integrity by transmitting image data and a hash value, a timer 14 for providing time information to the controller 13, and a transmitter 14 for transmitting and receiving data input and output through the network 2 And a communication unit 15 for communicating with each other.

The server 3 performs registration and management of the vehicle black box 1 and performs a function of storing the image data transmitted from the network 2 and the original image of the hash value.

In the present embodiment, only events related to impact and motion are described, but various events including ambient sound, driving speed, acceleration, angular velocity, and the like can be sensed.

The system for detecting the video image and the modulation of the black box for a vehicle according to the present invention is configured to detect image data of the vehicle black box 1 through a network 2, for example, an LTE (Long Term Evolution) 3), and the integrity of the image data is secured by transmitting the image data together with the hash value. It is possible to detect that the integrity has been destroyed and the image has been distorted or distorted when the image stored in the server 3 is different from the image recorded in the vehicle black box 1 or has a different hash value. In addition, by performing authentication and communication encryption through an asymmetric key encryption algorithm in communication between the vehicle black box 1 and the server 3 of the service provider, the image of the vehicle black box 1 is transmitted to the server 3 of the service provider It can prevent being intercepted by a malicious attacker when sent. In order to prevent the service provider or the internal attacker from modulating the image or hash value, the image of the vehicle black box 1 is compared with the original image and the hash value stored in the server 3 of the service provider, Box (1) Car black box (1) In the device itself, the user or service provider generates an unknown key and uses it in HMAC to enhance security. On the other hand, if all of the images recorded in real time in the vehicle black box 1 are stored in the server 3, a storage space shortage problem occurs. Therefore, when a collision is detected, it is preferable to record and record 60 seconds before and after will be. That is, the image transmission method may be changed depending on the situation. For example, in case of no accident, the image data is streamed to the server 3, and when an accident occurs, ). It is desirable to record the current time stamp on the screen in which the video is recorded in real time in case of no accident, and the time stamp of the time stamp is manipulated. Therefore, the time server (3).

2 is a configuration diagram of a control unit according to an embodiment of the present invention.

2, the control unit 13 of the present invention includes an authentication performing unit 131 for performing user authentication and vehicle black box (1) authentication with the server 3 through a public key encryption technique, An integrity verification unit 132 for generating image data and a hash value for a set time before and after the time, and a storage unit 133 for storing the image data and the hash value.

Hereinafter, a method for detecting an image false alarm in a vehicle black box of the present invention using the system configured as described above will be described.

FIG. 3 is a flowchart illustrating a method of detecting an image false alarm in a black box for a vehicle according to an embodiment of the present invention.

Referring to FIG. 3, when power is supplied to the vehicle black box 1 (S1), the vehicle black box 1 is activated and connected to the network 2 (S2). At this time, the network 2 can be connected to the mobile communication network, and the communication unit 15 can be configured as a mobile communication module.

Subsequently, the vehicle black box 1 requests authentication using a public key and a private key based on the public key cryptosystem, and the server 3 performs an authentication process on the vehicle black box 1 (S3).

When the authentication is completed, the vehicle black box 1 is connected to the server 3 via the VPN (S4). At this time, IP traffic is protected by IPSec.

When the connection between the vehicle black box 1 and the server 3 is completed, the video data generated from the vehicle black box 1 is streamed to the server 3 in real time (S5).

Meanwhile, when an event occurs through the shock detection or the like (S6), an image for 60 seconds before and after the event is generated and stored in the storage unit 133 (S7).

Next, the control unit 13 generates a hash value of the 60-second image (S8), and performs authentication using the public key and the private key (S9).

A Simple File (SFTP) protocol using only a data link layer for file transfer between the vehicle black box 1 and the server 3 so as to transfer the file to the vehicle black box 1 with a simple method of minimizing the load, Transfer Protocol (S10).

The 60-second image and the hash value are transmitted to the server 3 (S11).

Thereafter, a hash value of the 60-second image stored in the server 3 of the service provider is generated, and the hash value transmitted to the server 3 of the service provider at the beginning with the image is compared to verify the integrity of the image have.

On the other hand, when the power is turned off, the service is terminated. If a shock is not detected, it is considered to be a normal situation without an accident. The real time image data collected by the vehicle black box 1 is transmitted to the server 3 of the service provider in real time so that the image can be confirmed.

[Example]

In order to prevent the black box 1 from being distorted or distorted, it is important to secure integrity. In the present invention, an image photographed by the vehicle black box 1 is transmitted to the server 3 in real time via LTE communication. When transmitting the image taken in the vehicle black box 1 through the LTE communication to the server 3 in real time, user authentication is carried out between the server 3 and the vehicle black box 1, And encrypts the data transmission between the black boxes 1. Considering the problem of the size of the transmitted image data, an image of 60 seconds before and after the accident is read and stored in the server 3. Then, the integrity is verified by comparing the hash value of the original image and the collected image of the server 3.

In this embodiment, PPPD, WvDial, SFTP, VPN and FFmpeg-video4linux2 are used as communication elements.

And is a component of Point-to-Point Protocol (PPP) in Point-to-Point Protocol Daemon (PPPD). PPP provides a solid way to establish a network (2) connection that goes beyond the serial link. PPPD builds links to destinations, creates network interfaces, and includes support for authentication. In the present invention, it is used for connecting the network 2 between the vehicle black box 1 and the server 3 as required.

WvDial (weave-dial) is a utility that helps you connect to the Internet with modem-based Linux. WvDial refers to a point-to-point dialer, which means to start the PPPD to control the modem and connect to the Internet.

SFTP stands for SSH FTP and is an interactive file transfer program with a user interface similar to FTP. This means logging into the remote system and copying the files. By enhancing the security for the general FTP connection, it is possible to prevent hacking and security problems by encrypting account information etc. during data transmission between the server (3) and the client. In addition, the SFTP connection can use public key or private key for security enhancement, thus enabling more secure data transmission and reception. SFTP connections can also be easily configured and used via the FTP client program. In the present invention, this element is used for receiving the real-time image data photographed in real time in the vehicle black box 1 and transmitting it to the server 3 of the service provider.

VPN (Virtual Private Network) is a private network that is used for communication without exposing contents through the public network. IPSec (Internet Protocol Security) is a communication protocol for realizing secure communication on the Internet which is vulnerable to security. The security services provided by IPSec are protected against Authentication, Integrity, Confidentiality, Access Control, and Replay Attack. This communication protocol can be loaded on the user side terminal, and only a specific client and the server 3 can exchange data with IPSec through the Internet. In the present invention, this element is used to communicate using IPSec VPN.

FFmpeg is a library used to record and convert various types of digital voice streaming and video streaming, and is composed of various free software and open source libraries. In the present invention, FFmpeg-videolinux2 is used because Linux is used as an overall operating system.

In the present invention, a public key authentication method and an MD5 hash are used as elements for preventing stolen or tampered.

The public key authentication scheme means that a party giving a message encrypts it with the public key of the other party, and a party that receives and decrypts the message with its own private key. The data encrypted using the public key can be decrypted only with the secret key, and the data encrypted with the secret key can be decrypted only with the public key. Before transmission to the server 3 of the service provider, authentication is first performed for the vehicle black box 1 authenticated with the public key and the private key, and the encrypted data is transmitted in SFTP after transmitting the encrypted data in consideration of video modulation. When a real-time image data is transmitted to the server 3 in real time, an image is cut and recorded for 60 seconds in case of an accident, and a hash value is generated. Thereafter, the 60-second image and the hash value are transmitted to the server 3 of the service provider and are compared with the image data in the server 3. If the decoded result is the same as the video sent to the user, the user is authenticated as being identical.

The Message-Digest algorithm 5 (MD5) hash is a 128-bit cryptographic hash function. The hash function takes an arbitrary message and outputs the hash value. The key is used in the encryption algorithm, but since the hash function does not use the key, the same output is always output for the same input. The hash function greatly reduces the computation, memory, and transmission required to collapse outgoing messages. It is mainly used for integrity checking to check whether a program or file is the same as the original image. In case of an accident, as shown in FIG. 4, when the image is cut and recorded for about 60 seconds before and after the time that has occurred, the board generates a hash value of the truncated image. Then, the integrity is verified by comparing the hash value of the original image and the collected image of the server 3.

On the other hand, what is used to apply the technique proposed in the present invention to the vehicle black box 1 can be largely classified into a shell script related to an LTE connection-related shell script and a shell script related to a method of operating when an impact is detected.

First is the LTE connection related shell script. Before starting the communication, the dialer to be used for communication between the communication company and the board is first set up. The related shell script is as shown in [Table 1]. After setting up the dialer, check the encryption method to be used and how to communicate with the communication company as shown in [Table 2]. After that, basic IP policy and related encryption are set as shown in [Table 3] for VPN connection. It is necessary to prevent the unauthorized user from accessing the video data of the vehicle black box 1 to the server 3 of the service provider by making the VPN in the LTE communication. To prevent this, the VPN uses the ID and password to perform authentication. The corresponding shell script is shown in [Table 4].

[Table 1]: Dialer settings used for communications between the carrier and the vehicle black box (1)

[Table 2]: Option to check the encryption method used and how to communicate with the carrier

[Table 3]: Basic IP policy and related encryption setting for VPN connection

[Table 4]: ID Password to be used for VPN

On the other hand, the following is a shell script related to a method of operating when a shock is detected in the black box 1 for a vehicle. First, if an impact is detected in the vehicle black box 1, it operates as shown in [Table 5]. When a shock is detected, the transmission of the image that was being transmitted in real time is stopped, and the image of 60 seconds associated with the impact is stored at a resolution of 320 * 240. In the case of the time limit, transmission is interrupted by 30 seconds. And transmits this image to the server 3 of the service provider in 30 sec.avi. After generating the hash value for the image with MD5, the vehicle black box 1 again starts the real time transmission, and calls up the shell script [Table 6] to transmit the image and the hash value to the server 3 come. First, we set the ID, password, and server (3) address, which are necessary for file transfer. Then stores the created movie file and hash value in variables. Wait until SFTP is connected. Then, the corresponding image and the hash value are uploaded to the server 3, and a script for automating this is executed. ID and host values are automatically input and password values are input. After waiting for the input prompt port, the image file is stored in the server 3, and the hash value is also stored in the server 3. When the transfer is completed, the transfer is terminated and the file deletion tool is executed to erase the hash value remaining in the black box 1 for the vehicle. The shell script for the file deletion tool is shown in [Table 7].

[Table 5]: Part of the shell script that is executed when a shock is detected

[Table 6]: Method of transmitting image and hash value when a shock is detected

[Table 7]: File deletion tool

Meanwhile, in the present invention, the vehicle black box 1, which is a service provider, and a service provider and an internal attacker use hash-based message authentication codes (HMAC) to prevent image or hash value tampering. The concept of HMAC is shown in Fig.

Since the existing MD5 hash function is a unidirectional hash, there is a problem that if the service provider regenerates the hash value maliciously and manipulates the image, integrity is lost. If the malicious service provider replaces the image stored in the server 3 and regenerates the MD5 hash value of the replaced image and then re-uploads the image and MD5 hash value to the server 3, the modulation is successful and the malicious service provider The problem arises because you will not be aware of this fact.

However, this problem can be solved by using HMAC, and its concept is shown in Fig. The HMAC creates a hash value based on a specific value, so that when an image is created in the user's vehicle black box 1, the HMAC carries out a hash with a specific value (hereinafter referred to as a key value) possessed only by the user's vehicle black box 1. In this case, the hash value obtained by hashing is HMAC. If the HMAC is transmitted to the server 3, the service provider can not operate the image since the key value held by the user's vehicle black box 1 can not be known. Since the user can not know the key value of the vehicle black box (1), it is possible to prevent the image manipulation by the service provider and the vehicle black box (1) user using the HMAC, and the integrity of whether the image is manipulated according to the HMAC value Can be verified.

The process of verifying the HMAC is shown in FIG. When verifying the integrity of the image verification, the HMAC of the image of the user's vehicle black box 1 and the service provider is collated. First, the user brings his / her own black box 1 to the vehicle. Then, the image transmitted to the server 3 through the key value in the vehicle black box 1 is HMACed. After checking the key value between the server 3 and the vehicle black box 1, the HMAC is compared. If the HMAC values are equal, there is no manipulation, and if the HMAC values are different, there is modulation. This allows verification of the HMAC.

If HMAC is performed with a modulated image on the user side, a new HMAC is created and the integrity is collapsed. Since the key is known at the time of verification, the vehicle black box 1 is necessarily required. On the server 3 side, the unique value of the vehicle black box 1 is not known.

As described above, in the present invention, in order to secure the integrity of the moving image of the black box 1 for a vehicle, the image of the black box 1 for a vehicle is transmitted in real time via LTE. If the transmitted image and the recorded image are different, it is possible to detect whether the image is stigmatized or not. In this way, even if the image is damaged or altered for malicious purpose, the integrity of the original image can be secured.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the invention.

1: Car black box 11: Camera
12: sensor part 13: control part
131: authentication performing unit 132: integrity verification unit
133: storage unit 14: timer
15: communication unit 2: network
3: Server

Claims (5)

A system for detecting video forgery and video modulation of a vehicle black box,
A controller for performing an authentication process with the server, a sensor unit for sensing an event related to a vehicle accident, and a server for transmitting an incident image and a hash value to the server when the event occurs, A timer for providing time information; And a communication unit for transmitting and receiving data input and output through a network; And
And a server configured to perform registration management of the vehicle black box and to store the incident image and the hash value transmitted through the network,
Wherein the control unit includes an authentication unit for performing user authentication and vehicle black box authentication through the public key cryptosystem and the server, an integrity verification unit for generating the accident image and the hash value for a set time before and after the event time, And a storage unit for storing the accident image and the hash value,
The integrity verification unit may separately generate a first HMAC, which is the hash value based on the private key value unique to the automobile black box and the accidental image, based on the private key value and the accident image stored in the server, And the integrity of the accident image is verified based on whether the second HMAC is identical or not. The method according to claim 1,
The incident image and the hash value are transmitted from the vehicle black box to the server through a protocol using only the data link layer,
The incident image is divided and transmitted from the vehicle black box to the server,
Wherein the controller is configured to transmit real-time image information captured in real-time streaming to the server without generating the hash value when the event does not occur,
Wherein the real-time image information is synchronized based on a time stamp. Connecting a vehicle black box and a server to a VPN (Virtual Private Network);
Streaming video data generated in the vehicle black box to the server;
Storing an accident image before and after a set time based on a time at which the event occurred in the vehicle black box when an event related to a vehicle accident occurs;
Generating a hash value of the accident image in the vehicle black box;
Performing authentication with a public key and a private key between the vehicle black box and the server;
Transmitting the incident image and the hash value to the server in the vehicle black box; And
Storing the incident image and the hash value in the server,
Further comprising the step of performing a verification procedure on the accident image in the vehicle black box,
The validation procedure is separately generated based on the private key value inherent to the vehicle black box and the first HMAC, which is the hash value generated based on the accident image, and the private key value and the accident image stored in the server, And the integrity of the accident image is verified based on whether or not the second HMAC is identical. The method of claim 3,
The incident image and the hash value are transmitted from the vehicle black box to the server through a protocol using only the data link layer,
The incident image is divided and transmitted from the vehicle black box to the server,
Wherein the vehicle black box is configured to transmit real-time image information captured in real-time streaming to the server without generating the hash value when the event does not occur,
Wherein the real-time image information is generated synchronously based on a time stamp. delete

Images