KR20230031494A - Video storage method, video providing method and apparatus therefor in cloud environment - Google Patents

Abstract

A cloud-based image storage method, image providing method, and apparatus thereof are disclosed. The cloud-based image storage method includes the steps of: (a) receiving a recording image from a locally installed camera through a communication network; (b) adding user identification information and frame information to each frame of the recording image and converting each frame into an extension frame format in which a moving image cannot be reproduced; and (c) encrypting and storing the converted extension frame using an encryption algorithm. Therefore, the security of the image can be improved.

Description

Video storage method, video providing method and apparatus therefor in cloud environment}

The present invention relates to a cloud-based image storage method, an image providing method, and an apparatus therefor.

As the cloud technology develops, a method of storing the recorded video of a security camera in a cloud environment and checking the recorded video when necessary is being tried. When recording video is stored in a cloud environment, there is no need to install equipment such as storage space required for local storage, which reduces construction costs and reduces installation space, which enables a more comfortable environment configuration.

In addition, when saving in the cloud, the storage space can be increased or decreased by the actual capacity required for image storage, enabling efficient system operation without worrying about the additional storage space construction cost or storage space surplus that occurs when saving locally. There are also possible advantages.

However, despite these advantages, when storing video in the cloud environment, recorded video is stored externally, raising concerns about privacy exposure due to leakage of recorded video. It is necessary.

An object of the present invention is to provide a cloud-based image storage method, image providing method, and device with enhanced security.

In addition, the present invention is to provide a cloud-based video storage method, video providing method, and apparatus that make it impossible to check video content by a third party even if a recorded video stored in a cloud environment is leaked.

According to one aspect of the present invention, a cloud-based image storage method and image providing method with enhanced security are provided.

According to an embodiment of the present invention, (a) receiving a recorded image from a camera installed locally through a communication network; (b) adding user identification information and frame information to each frame of the recorded video and converting each frame into an extended frame format in which moving images cannot be reproduced; and (c) encrypting and storing the converted extended frame using an encryption algorithm.

The recorded video is an video compressed by MPEG/HEVC video compression technology, and in the step (b), the stream of the recorded video is analyzed, divided into frames, and reconstructed, and the header of each of the reconstructed frames is displayed. By adding at least one of the identification information and the frame information, it can be converted into an extended frame format in which video cannot be reproduced.

The user identification information is the camera identification information, and the frame information is a frame number. The user identification information and the frame number may be added to the front end of the reconstructed frame data to be converted into an extended frame format.

The encryption algorithm is an ARIA encryption algorithm, and the encrypted data may be stored in a storage space in the cloud.

According to another embodiment of the present invention, receiving an image provision request from a user terminal - the request includes user identification information and target image information; generating extended frames by extracting and decoding encrypted data according to the target image information; And if the user identification information and the user identification information included in the extension frame are the same, a cloud-based video providing method comprising the step of converting each extension frame into a basic frame format capable of playing a video to generate a recorded video. can be provided.

The extension frame is a format in which user identification information and each frame information are added to the header of the basic frame capable of playing the video, and is a format that cannot be reproduced by a video player.

When the user identification information and the user identification information included in the extended frame are different, it is determined that the video is not a user's recorded video and may not be converted into a video playable frame.

According to another aspect of the present invention, an apparatus for storing and providing cloud-based images is provided.

According to one embodiment of the present invention, the receiving unit for receiving a recorded image from the camera through a communication network; a conversion unit for adding user identification information and frame information to each frame of the recorded video and converting each frame into an extended frame format in which video cannot be reproduced; and an encryption unit configured to encrypt and store the converted extended frame using an encryption algorithm.

The conversion unit may divide the recorded video into frame units and add the user identification information and each frame information to each frame header to convert the video into an extended frame format incapable of reproducing the video.

According to another embodiment of the present invention, a receiver receiving a video provision request from a user terminal - the video provision request includes user identification information and target image information; a decryption unit extracting encrypted data corresponding to the target image information from a storage space and generating extended frames by decoding the encrypted data; a conversion unit converting each of the extended frames into a basic frame format capable of reproducing a video to generate a recorded image when the user identification information and the user identification information included in the extended frame are the same; and a transmitter for transmitting the recorded video to the user terminal.

The conversion unit may remove user identification information and each frame information from the header of the extension frame, and convert the frame format into a frame format capable of reproducing a video.

The conversion unit may delete and discard the decoded extension frame when the user identification information and the user identification information included in the extension frame do not match.

By providing a cloud-based image storage method, image providing method, and apparatus according to an embodiment of the present invention, there is an advantage in that security of images stored in a cloud environment can be strengthened.

In addition, the present invention changes the recorded video into an extended frame format based on user information, so that even if the recorded video stored in the cloud environment is leaked, it is impossible to check the contents of the video by a third party, thereby eliminating privacy exposure concerns. there is.

1 is a block diagram schematically illustrating a cloud video recording system according to an embodiment of the present invention;
2 is a flowchart illustrating a method of storing an image in a cloud environment according to an embodiment of the present invention.
3 is a diagram schematically illustrating a frame configuration of a recorded image according to an embodiment of the present invention;
4 is a diagram illustrating an extended frame format according to an embodiment of the present invention;
5 is a flowchart illustrating a method of transmitting a stored image to a user terminal according to an embodiment of the present invention.
6 is a block diagram schematically showing the internal configuration of a cloud-based video storage device according to an embodiment of the present invention.

Singular expressions used herein include plural expressions unless the context clearly dictates otherwise. In this specification, terms such as "consisting of" or "comprising" should not be construed as necessarily including all of the various components or steps described in the specification, and some of the components or some of the steps It should be construed that it may not be included, or may further include additional components or steps. In addition, terms such as "...unit" and "module" described in the specification mean a unit that processes at least one function or operation, which may be implemented as hardware or software or a combination of hardware and software. .

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram schematically illustrating a cloud video recording system according to an embodiment of the present invention.

Referring to FIG. 1 , a cloud video recording system 100 according to an embodiment of the present invention includes at least one camera 110, a cloud-based video storage device 120, and a user terminal 130.

At least one camera 110 is installed locally and is a means for taking real-time images for controlling a control area.

An image (recorded image) taken by the camera 110 is transmitted to the cloud-based image storage device 120 through a communication network. It should be understood that a recorded image transmitted from the camera 110 to the cloud-based image storage device 120 is a compressed image compressed in a designated format, unless otherwise described below. Of course, the recorded image may be in a raw format depending on the implementation method.

When a recorded image is received from each camera 110 installed locally, the cloud-based image storage device 120 may convert the recorded image into an extended frame format in which video cannot be reproduced, and then encrypt and store the recorded image.

In addition, when the user terminal 130 requests video provision, the cloud-based video storage device 120 decodes the encrypted data and determines whether the user identification information in the extended frame and the user identification information requested for video provision are the same as the extended frame format. After converting to a basic frame capable of playing a video, a recorded video may be generated and transmitted to the user terminal 130 .

This will be more clearly understood by the following description.

The user terminal 130 may be an electronic device equipped with a communication function possessed by the user. For example, the type of user terminal 130 may be a mobile communication terminal, a laptop computer, a PC, a smart TV, and the like.

2 is a flowchart illustrating a method for storing an image in a cloud environment according to an embodiment of the present invention, FIG. 3 is a diagram schematically showing a frame configuration of a recorded image according to an embodiment of the present invention, and FIG. It is a diagram illustrating an extended frame format according to an embodiment of the present invention.

In step 210, the cloud-based image storage device 120 receives a recorded image from the camera 110 installed locally. The camera 110 may also transmit user identification information (ID) when transmitting a recorded image to the cloud-based image storage device 120 .

In step 215, the cloud-based video storage device 120 separates the recorded video (compressed video) into frames. 3 shows an example of dividing a recorded image into frame units. In FIG. 3, since it is assumed that the recorded video is compressed by the MPEG/HEVC international standard compression technique, it is assumed that it is composed of I-frames, P-frames, and the like. If the video compression technology is not an MPEG/HEVC international standard compression technology, it is natural that the frame configuration may be different.

In step 220, the cloud-based video storage device 120 adds user identification information (ID) and each frame information (eg, frame number) to each frame header and converts the frame header into an extended frame format.

4 illustrates an extended frame format. As shown in FIG. 4, in the extended frame format, user identification information and each frame number may be added to a frame header capable of reproducing a video. Unlike the basic frame format capable of reproducing a video, the extended frame format may be a format in which video playback is impossible because user identification information and frame information not defined in the standard are added to each frame header.

In step 225, the cloud-based video storage device 120 encrypts and stores the recorded video converted into an extended frame format. Here, as the encryption method, various known methods such as a symmetric key-based encryption method, an asymmetric key-based encryption method, and a hash-based encryption method may be used.

In one embodiment of the present invention, it is assumed that a recorded image converted into an extended frame format is encrypted using an ARIA encryption method.

The cloud-based image storage device 120 may receive compressed recorded images from each locally located camera 110, convert them into an extended frame format in which video cannot be reproduced, encrypt them, and then store them in a cloud storage system. Through this, even if an encrypted recorded video stored in a cloud environment is leaked, there is an advantage in making it impossible to check the recorded video by a third party.

5 is a flowchart illustrating a method of transmitting a stored image to a user terminal according to an embodiment of the present invention. Hereinafter, a method of decrypting an image stored as encrypted data through the method described in FIG. 2 and transmitting it to a user terminal will be described.

In step 510, the cloud-based video storage device 120 receives a video provision request from the user terminal 130. Here, the image provision request may include user identification information and target image information.

In step 515, the cloud-based video storage device 120 extracts encrypted data corresponding to target video information included in the video provision request.

In step 520, the cloud-based video storage device 120 decrypts the extracted encrypted data to generate extended frames. As already described above, the extended frame format is a format that cannot be reproduced by a codec because additional information not defined in the MPEG/HEVC international standard is added to a frame header.

In step 525, the cloud-based image storage device 120 determines whether the user requesting the provision of the image is a legitimate user.

For example, the cloud-based video storage device 120 determines whether user identification information included in the video provision request and user identification information included in the extended frame are the same.

If the user identification information included in the video provision request and the user identification information included in the extended frame are not the same, in step 530, the cloud-based video storage device 120 transmits a message indicating that the user is not a legitimate user to the user terminal. Then, the decoded extended frame is deleted.

However, if the user identification information included in the video provision request and the user identification information included in the extended frame are the same, in step 535, the cloud-based video storage device 120 converts the extended frame format into a basic frame capable of playing a video Create a recorded video.

That is, the cloud-based video storage device 120 may generate a recorded video by removing user identification information and each frame information (number) from the header of each extended frame, converting the frame into a basic frame capable of playing a video, and rearranging the frame.

In step 5400, the cloud-based video storage device 120 transmits the generated recorded video (compressed video) to the user terminal 130.

As described above, the recorded video recorded by the local camera 110 is divided into frame units, and user identification information is added to the header to be encrypted and stored so that even if the recorded video is leaked, it is impossible to check the video content, thereby eliminating privacy exposure concerns. There are benefits you can do.

In addition, by comparing user identification information stored in the frame header of the recorded video and transmitting the recorded video only to legitimate users, there is an advantage in that anxiety due to video leakage can be eliminated by strengthening security.

6 is a block diagram schematically illustrating an internal configuration of a cloud-based video storage device according to an embodiment of the present invention.

Referring to FIG. 6 , the cloud-based video storage device 120 according to an embodiment of the present invention includes a receiving unit 610, a transmitting unit 615, a converting unit 620, an encryption unit 625, and a decryption unit 630. , a memory 635 and a processor 640.

The receiving unit 610 is a means for receiving data from other devices (eg, the camera 110 or the user terminal 130) through a communication network.

For example, the receiving unit 610 may receive a recorded image from the camera 110 . Also, the receiving unit 610 may receive a video provision request from the user terminal 130 .

The transmission unit 615 is a means for transmitting data to another device (eg, the user terminal 130) through a communication network. For example, the transmitter 615 may transmit a recorded image to the user terminal 130 under the control of the processor 640 .

The conversion unit 620 is a means for converting each frame of a recorded image into an extended frame format or conversely converting an extended frame into a video playable frame format.

For example, the converter 620 may divide the recorded images received through the receiver 610 (for example, recorded images compressed by MEPG/HEVC video compression technology) into frame units. Subsequently, the conversion unit 620 may add user identification information (ID) and information on each frame (eg, a frame number) to each frame header to convert the frame into an extended frame format. When the video is converted to the extended frame format as described above, it is impossible to reproduce the video in a codec supporting the MEPG/HEVC video compression technology, so that the contents of the recorded video cannot be confirmed.

For another example, the conversion unit 620 may remove user identification information and each frame information from the extended frame header decoded by the decoder 630 to be described below, and convert the frame format into a frame format capable of playing a video. At this time, the conversion unit 620 converts the corresponding extension frame into a frame format capable of reproducing a video, respectively, when the user identification information included in the video provision request of the user terminal 130 matches the user identification information included in the decoded extension frame header. can be converted to If the user identification information does not match, the conversion unit 620 may delete and discard the corresponding decoded extended frame without converting the extended frame into a frame format capable of playing a video.

The encryption unit 625 is a means for encrypting the recorded video converted into the extended frame format by the conversion unit 620 using an encryption algorithm. For example, the encryption unit 625 may encrypt a recorded image converted into an extended frame format using an ARIA encryption method. Of course, in addition to this, the encryption unit 625 may perform encryption using various known encryption methods such as a symmetric key-based encryption method, an asymmetric key-based encryption method, and a hash-based encryption method.

The decryption unit 630 is a means for generating extended frames by decoding encrypted data under the control of the processor 640 . That is, the decryption unit 630 may extract encrypted data corresponding to the video provision request of the user terminal 130 from the storage space under the control of the processor 640 and then decode it.

The memory 635 is a means for storing various commands for performing a cloud-based image storage method and an image providing method according to an embodiment of the present invention.

The processor 640 includes internal components (eg, a receiver 610, a transmitter 615, a converter 620, an encryption unit) of the cloud-based image storage device 120 according to an embodiment of the present invention. 625), decoding unit 630, memory 635, etc.).

Devices and methods according to embodiments of the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in computer readable media. Computer readable media may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on a computer readable medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in the art in the field of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. - Includes hardware devices specially configured to store and execute program instructions, such as magneto-optical media and ROM, RAM, flash memory, etc. Examples of program instructions include high-level language codes that can be executed by a computer using an interpreter, as well as machine language codes such as those produced by a compiler.

The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

So far, the present invention has been looked at mainly by its embodiments. Those skilled in the art to which the present invention pertains will be able to understand that the present invention can be implemented in a modified form without departing from the essential characteristics of the present invention. Therefore, the disclosed embodiments should be considered from a descriptive point of view rather than a limiting point of view. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the equivalent scope will be construed as being included in the present invention.

100: system
110: camera
120: cloud-based image storage device
130: user terminal

Claims (14)

(a) receiving a recorded image from a camera installed locally through a communication network;
(b) adding user identification information and frame information to each frame of the recorded video and converting each frame into an extended frame format in which moving images cannot be reproduced; and
(c) a cloud-based image storage method comprising the step of encrypting and storing the converted extended frame using an encryption algorithm.
According to claim 1,
The recorded image is an image compressed by MPEG/HEVC video compression technology,
In step (b),
Characterized in that the stream of the recorded video is analyzed, separated into frame units and reconstructed, and at least one of the user identification information and the frame information is added to a header of each of the reconstructed frames to convert into an extended frame format in which video playback is impossible. A cloud-based video storage method.
According to claim 2,
The user identification information is the camera identification information,
The frame information is a frame number,
Cloud-based image storage method characterized in that the conversion to the extended frame format by adding the user identification information and the frame number to the front end of the reconstructed frame data.
According to claim 1,
The encryption algorithm is an ARIA encryption algorithm,
The cloud-based image storage method, characterized in that the encrypted data is stored in a storage space in the cloud.
Receiving an image provision request from a user terminal - the request includes user identification information and target image information;
generating extended frames by extracting and decoding encrypted data according to the target image information; and
When the user identification information and the user identification information included in the extension frame are the same, converting each extension frame into a basic frame format capable of reproducing a video to generate a recorded image.
According to claim 5,
The extended frame is a format in which user identification information and each frame information are added to the header of the basic frame capable of playing the video, and is a format that cannot be reproduced by a video player.
According to claim 5,
Cloud-based video providing method, characterized in that if the user identification information and the user identification information included in the extended frame are different, it is determined that the recorded video is not a user's recorded video and is not converted into a video playable frame.
A computer-readable recording medium recording program codes for performing the method according to any one of claims 1 to 7.
a receiving unit for receiving a recorded image from a camera through a communication network;
a conversion unit for adding user identification information and frame information to each frame of the recorded video and converting each frame into an extended frame format in which video cannot be reproduced; and
A cloud-based video storage device comprising an encryption unit for encrypting and storing the converted extended frame using an encryption algorithm.
According to claim 9,
The conversion unit,
Cloud-based video storage device, characterized in that after dividing the recorded video into each frame unit, the user identification information and each frame information are added to each frame header to convert each into an extended frame format in which video playback is impossible.
a receiving unit receiving an image provision request from a user terminal - the image provision request includes user identification information and target image information;
a decryption unit extracting encrypted data corresponding to the target image information from a storage space and generating extended frames by decoding the encrypted data;
a conversion unit converting each of the extended frames into a basic frame format capable of reproducing a video to generate a recorded image when the user identification information and the user identification information included in the extended frame are the same; and
A cloud-based video storage device comprising a transmitter for transmitting the recorded video to the user terminal.
According to claim 11,
The extended frame is a format in which user identification information and each frame information are added to a header of a basic frame capable of playing a video, and is a format that cannot be played by a video player.
According to claim 12,
The conversion unit,
Cloud-based video storage device, characterized in that by removing user identification information and each frame information from the header of the extended frame, respectively, and converting it into a frame format capable of playing a video.
According to claim 12,
The conversion unit,
If the user identification information and the user identification information included in the extended frame do not match, the decoded extended frame is deleted and discarded.

Images