TW201507459A - File security confidentiality mechanism of cloud video recording platform - Google Patents

Abstract

The present invention is a file security confidentiality mechanism of cloud video recording platform comprising steps of a public key and a private key for establishing asymmetric encryption, a cryptographic key for establishing symmetric encryption, an image file text, an image file cipher text encrypted by the cryptographic key, and a cryptographic key cipher text encrypted by the public key, allowing the image file text to obtain effective confidentiality. While fetching the image file, the cryptographic key cipher text that is encrypted by the public key is firstly fetched and then decrypted by the private key to obtain the symmetric cryptographic key cipher text for encryption. Afterward the image file cipher text is decrypted by the symmetric encrypted cryptographic key cipher text to allow a user to access the correct image file text. Accordingly, the confidentiality of the image file text can be greatly improved such that no one could access the image file except the user so as to effectively prevent image files in the cloud video recording platform from being revealed.

Description

File security and confidentiality mechanism of cloud video platform

The invention belongs to a secret technology of a cloud video archive, and specifically relates to a file security and confidentiality mechanism of a cloud video platform, thereby improving the security of a video archive stored by a user in the cloud.

With the rapid development of computer technology and the Internet, the new form of cloud service technology services provided by the Internet is also increasing; and the cloud storage service can provide users with remote server hosts via the Internet. The space provided for storing data, thereby breaking the limitation of the local hardware storage space and increasing the portability of the file, so the cloud storage service is widely used for storing various network files, network video, network voice and the like. It allows users to view the data stored in the cloud at any time through the Internet using various network devices or portable handheld devices.

For monitors in general traffic intersections, schools, stores, homes, etc., users can use the IP camera [IPCam] as a monitor and store the video files generated by the network camera through a server host. In hardware storage devices, in general, large enterprises have their own hardware storage devices. However, for ordinary small users, the hardware storage device needs to be additionally installed after installing the IP camera [IPCam]. Will increase the cost of its construction, and because the IP camera [IPCam] may be performing video recording 24 hours a day, the video file space will become larger and larger over time, resulting in its huge construction cost; Therefore, the network camera [IPCam] has recently provided a cloud video recording platform (CVR) architecture for users to connect the IP camera [IPCam] to the server in the operator's computer room through the Internet. a host computer and a hardware storage device for recording and managing information about video files generated by each network camera [IPCam], such as file size, time, etc., and storing the video files in the hard disk. The appropriate location in the body storage device.

The aforementioned cloud video recorder (Cloud Video Recorder, CVR) provides users with more and faster services and functions, and reduces the user's construction cost, but it also has some problems. The most important part is that The storage of each video file is confidential. Since each video file may involve personal privacy, if it is not effectively kept confidential, it may be invaded by hackers or even original designers. The current common practice is AES, DES, 3DES, RC2. Symmetric encryption such as RC4... is used to keep the video files confidential, but its confidentiality is still insufficient. Therefore, how to solve the problem of video file confidentiality in the traditional cloud video platform is an important issue in the industry.

The reason is that the inventor has been engaged in research and development and manufacturing experience of related industries for many years, and has in-depth discussions on the problems faced by the aforementioned cloud video platform in file confidentiality, and actively seeks solutions, and has been continuously researching and developing. Finally, we successfully developed a file security and confidentiality mechanism for the cloud video platform to overcome the existing problems and inconvenience caused by insufficient confidentiality.

Therefore, the main purpose of the present invention is to provide a file security and confidentiality mechanism of the cloud video platform, so that the video file can be encrypted, the non-user can obtain the video file, and the security of the file security can be improved.

Based on this, the present invention mainly achieves the foregoing objects and functions by the following technical means, the cloud recording platform has a server host And at least one hardware storage device, and the server host can be connected to the plurality of network cameras through the Internet, so that each of the network cameras can generate a video file when performing the recording, and the server host specifies Each of the video files is stored in each of the hardware storage devices, and the user can view the video files stored in each of the hardware storage devices through the Internet. The file security mechanism includes: Step 1. Making an asymmetric Sexual password: A set of asymmetric encryption keys is defined by the user as a public key and a private key, and the public key is notified to the cloud recording platform, and the user retains the private key; step 2: creating an image Archive: The server host obtains a video data stream of a certain length from the network camera and encapsulates it to form an image file. Step 3: Create an image file ciphertext: The server host randomly generates a symmetric encryption key. And encrypting the image file obtained in the above step 2 with the symmetry encryption key to form an image file ciphertext; step 4, making symmetry Key ciphertext: The server host simultaneously asymmetrically encrypts the symmetry encryption key of step 3 using the public key provided by the user in step 1 to form a symmetric encryption key ciphertext; step 5 And the encrypted data is divided: the server host uploads each of the symmetric encryption key ciphertext and the image file ciphertext to a key database and a file database in the hardware storage device; Step 6. Extract the image File: First, obtain the symmetry encryption key of the image file, which first obtains the symmetry encryption key ciphertext of the image file from the key database, and then uses the user's all asymmetrically encrypted private key to unlock. Obtaining a symmetric encryption key of the image file; then, obtaining an image file, obtaining the image file ciphertext from the file database, and using the aforementioned symmetry The encryption key is decrypted so that the user can obtain the corresponding image file.

Therefore, through the foregoing technical means, the file security and confidentiality mechanism of the cloud video recording platform of the present invention uses a randomly generated symmetric encryption key to encrypt the image file into an image file ciphertext, and then uses an asymmetric encryption. The key is used to encrypt the randomly generated key to form a key ciphertext, and then the image file ciphertext and the key ciphertext are shunted. When the user wants to obtain the image file, the asymmetric encryption key is used. The paired private key is used to unlock the symmetry encryption key ciphertext, and finally the symmetry encryption key is used to unlock the image file ciphertext, so that the user can obtain the image file, and the privacy of the image file can be greatly improved. Sex, so that the image file can not be obtained by anyone except the user, which can effectively increase the added value of the product and improve its economic efficiency.

The preferred embodiments of the present invention are set forth in the accompanying drawings, and in the claims

(10) ‧‧‧Server Host

(20)‧‧‧ Hardware storage equipment

(30)‧‧‧Webcam

(40) ‧‧‧ users

The first figure is a schematic diagram of a schematic architecture of the cloud video platform of the present invention.

The second figure is a schematic diagram of the flow structure of the file security and confidentiality mechanism of the cloud video platform of the present invention.

The present invention is a file security and confidentiality mechanism of a cloud video platform, and the specific embodiments of the present invention and the components thereof, as illustrated in the accompanying drawings, all relate to front and rear, left and right, top and bottom, upper and lower, and horizontal and The vertical reference is for convenience of description only and is not intended to limit the invention, nor to limit its components to any position or spatial orientation. The drawings and the dimensions specified in the specification can be embodied in accordance with the invention without departing from the scope of the invention. The design and needs of the application vary.

The schematic architecture of the cloud video platform is as shown in the first figure, which includes a server host (10) [Recorder] and at least one hardware storage device (20), and the server host (10) is transparent. The Internet is connected to a plurality of network cameras (30) [IPCam], so that each of the network cameras (30) can generate a video file when performing video recording, and the video file is designated by the server host (10). Stored in each of the hardware storage devices (20), allowing different users (40) [User] to view the video files stored in each of the hardware storage devices (20) by using the Internet, and the cloud recording of the present invention The file security mechanism of the platform is applied to the domain between the server host (10) and each of the hardware storage devices (20), so that the user (40) needs to be stored by the security machine to obtain the hardware storage device ( 20) each of the video files; as for the cloud security platform, the file security mechanism is implemented as shown in the second figure; step 1, creating an asymmetric password: a set of non-users (40) The symmetric encryption key is defined as a public key [USER_KEY] And a private key [USER_KEY'], and the public key is notified to the hardware storage device (20), and the user (40) retains the private key. Thereafter, the server host (10) can use the asymmetrically encrypted public key to create data that only the user (40) can read; Step 2. Create an image file. This server host (10) from the webcam (30) Obtaining a video data stream of a length of time and packaging it to form an image file, such as a two-minute length avi file; and step 3, creating an image file ciphertext: the server host (10) randomly generates a symmetry Encryption key [RANDOM_KEY], and encrypt the image file obtained in step 2 above with the symmetry encryption key to form an image File ciphertext; Step 4: Making symmetry encryption key ciphertext: The server host (10) simultaneously performs the symmetric key of step 3 above using the public key provided by the user (40) in step 1 for asymmetric Encryption, and form a symmetric encryption key ciphertext; Step 5, encrypted data distribution: the server host (10) uploads each of the symmetric encryption key ciphertext and the image file ciphertext to the hardware storage device (20) One of the key database and one file database, wherein the key database is used to store the symmetric encryption key ciphertext of each image file, and the file database is used to save each Image file ciphertext; Step 6, take out the image file: When the user (40) wants to access an image file, it needs to be divided into two steps: Step 6.1: Obtain the symmetry encryption key of the image file: The key database obtains the symmetry encryption key ciphertext of the image file, and then uses the private key of all asymmetric encryption keys of the user (40) to unlock, and then obtains the symmetric encryption key of the image file; 6.2. Obtaining an image file The hardware storage device (20) of the archives database obtains the image file ciphertext, then step symmetric encryption key to obtain the decrypted 6.1, so that the user (40) can obtain the image file corresponding to the article.

In this way, the group constitutes a highly secure cloud video recording platform file security mechanism.

Through the file security mechanism of the cloud recording platform of the present invention, the image file is encrypted into an image file ciphertext by using a randomly generated symmetric encryption key, and the asymmetric key encrypted by the user (40) is used. To encrypt the randomly generated key to form a key ciphertext, and then to make the image file The ciphertext and the key ciphertext are shunted. When the user (40) wants to obtain the image file, he uses his private key to unlock the symmetry encryption key ciphertext, and finally the symmetry encryption key is unlocked. The image file ciphertext allows the user to obtain the image file, and can greatly improve the confidentiality of the image file, and solve the problem of video file confidentiality of the conventional cloud video platform, so that the image file can not be obtained by anyone other than the user. .

In this way, it can be understood that the present invention is an excellent creation, in addition to effectively solving the problems faced by the practitioners, and greatly improving the efficiency, and the same or similar product creation or public use is not seen in the same technical field. At the same time, it has the effect of improving the efficiency. Therefore, the present invention has met the requirements for "novelty" and "progressiveness" of the invention patent, and is filed for patent application according to law.

(10) ‧‧‧Server Host

(20)‧‧‧ Hardware storage equipment

(30)‧‧‧Webcam

(40) ‧‧‧ users

Claims (1)

A file security and confidentiality mechanism of a cloud video platform, the cloud video platform has a server host and at least one hardware storage device, and the server host can connect with a plurality of network cameras through the Internet to make each of the network cameras A video file may be generated during the execution of the video, and the video file is designated by the server host to be stored in each of the hardware storage devices for the user to view and store each of the hardware storage devices through the Internet. The video archives the document, and the file security and confidentiality mechanism includes: Step 1. Making an asymmetric password: the user creates a set of asymmetric encryption keys, which are respectively defined as a public key and a private key, and the public key is defined therein. The key informs the cloud video platform, and the user retains the private key; Step 2: Create an image file. The server host obtains a video stream of a length of time from the network camera and encapsulates it to form an image file; step 3. Creating an image file ciphertext: The server host randomly generates a symmetric encryption key and encrypts the key with the symmetric encryption key. Step 2: Obtain an image file ciphertext; Step 4: Create a symmetric encryption key ciphertext: The server host simultaneously uses the symmetric encryption key of the above step 3 to utilize the user of step 1 The key is asymmetrically encrypted to form a symmetric encrypted key ciphertext; Step 5: encrypted data splitting: the server host uploads each symmetric cryptographic key ciphertext and image file ciphertext to the hardware respectively One of the key data banks and one file database in the storage device; Step 6. Extract the image file: First, obtain the symmetric encryption key of the image file, which first obtains the symmetry of the image file from the key database. Sex Encrypting the key ciphertext, and then using the private key of the user's asymmetric encryption key to obtain the symmetric encryption key of the image file; and then obtaining the image file, obtaining the image from the file database The file ciphertext is decrypted by the aforementioned symmetry encryption key, so that the user can obtain the corresponding image file.