KR101831075B1 - System and Method for Tracing of Moving Route of Subject - Google Patents

Abstract

The present invention relates to a system and a method for tracking a moving path of a subject. The tracking system comprises: at least one surveillance apparatus including a camera and an electronic tag reader; at least one local server for receiving data from the surveillance apparatus; and an identity management server for receiving a request for tracking a moving path on at least one subject from at least one management apparatus, and checking identity information on the subject from the data received from the local server according to the request for tracking a moving path so as to track a moving path of the subject. Other embodiments also can be applied.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a moving object tracking system,

The present invention relates to a system and method for tracking a moving path of a subject, and is capable of tracking a position and a moving path of a subject at a specific point of time based on image data of a subject obtained from a camera and identification information of a subject obtained from an electronic tag reader And more particularly, to a system and method for tracking a moving path of a subject.

In recent years, in order to increase the incidence of violent crimes such as kidnapping, robbery, sexual assault, and to find criminals or missing persons (hereinafter referred to as "subjects") and solve crimes, police are using cameras (for example, closed circuit television And utilizes the acquired image data. The police can check the face, step speed, stride, crime situation, etc. of the subject from the image data. In particular, the police track a moving path of a subject through a combination of a plurality of image data obtained from cameras installed at various locations to solve the event.

However, currently used tracking methods of a moving object track a moving path of a subject through a combination of image data acquired by a camera within a critical radius based on a camera that acquires image data of the subject for the first time. However, such a method has a problem that much time and resources are consumed at the time of tracking a subject. In addition, when it is difficult to recognize the face from the image data, it takes a long time to solve the event.

In order to solve such conventional problems, various embodiments of the present invention track the position and movement path of a subject at a specific point based on image data of a subject obtained from a camera and identification information of a subject obtained from an electronic tag reader And to provide a system and method for tracking a moving path of a subject.

In various embodiments of the present invention, an electronic tag reader is installed in a position close to a camera, the identification information of a subject input from a device used in a related organization such as police is searched from among the identification information acquired from the electronic tag reader, Which tracks a position and a movement path of a subject at a specific point in time,

A system for tracking a moving path of a subject according to an embodiment of the present invention includes at least one monitoring device including a camera and an electronic tag reader, at least one local server for receiving data from the monitoring device, For tracking the moving path of the subject in response to the movement route tracking request by checking the identification information of the subject in the data received from the local server in response to the movement route tracking request from at least one subject, .

Also, the surveillance apparatus may further comprise: moving picture data obtained by the camera; symmetric key-based encrypted identity information mapped to the electronic tag recognized by the electronic tag reader; and secret information of the electronic tag reader encrypted with the public key of the identity management server And transmits the shared key to the local server.

Also, the local server confirms the recognition time when the electronic tag reader recognizes the electronic tag, and acquires the still image data corresponding to the recognition time from the moving image data.

Also, the local server multiplexes the unique number of the camera, the encrypted identity information, the secret shared key, the recognition time, and the mapping table generated by the still image data, and applies a hash function to the multiplexed mapping table To generate a first message digest.

Also, the local server encrypts the first message digest with the private key of the local server, and transmits the tracking data obtained by multiplexing the encrypted first message digest and the multiplexed mapping table to the identity management server.

In addition, the identity management server stores the tracking data received from the local server, demultiplexes the tracking data according to the tracking request, decrypts the first message digest using the public key of the local server, do.

Also, the identity management server generates the second message digest by applying the hash function to the multiplexed mapping table demultiplexed and separated from the tracking data.

Also, the identity management server compares the second message digest with the first message digest and decrypts the secret shared key with the private key of the identity management server if integrity is preserved.

Also, the identity management server decrypts the identity information with the decrypted secret sharing key to confirm the movement path of the subject related to the movement path tracking request.

Further, the identity management server transmits the movement route of the identified object to the management apparatus related to the movement route tracking request.

According to another aspect of the present invention, there is provided a method for tracking a moving path of a subject, the method comprising: at least one local server receiving data from at least one monitoring device including a camera and an electronic tag reader; Receiving a movement route tracking request for at least one subject from the management apparatus of the local management server and checking the identification information on the subject in the data received from the local server according to the movement route tracking request, And confirming the movement path of the subject.

In addition, prior to the operation of receiving the data, the surveillance device transmits the moving picture data obtained by the camera, the symmetric key-based encrypted identity information mapped to the electronic tag recognized by the electronic tag reader, and the public key of the identity management server And transmitting the encrypted secret key of the RFID reader to the local server.

The method of claim 1, further comprising: after the operation of receiving data from the monitoring device, confirming a recognition time when the local server recognizes the electronic tag in the electronic tag reader; And acquiring image data.

In addition, after the operation of acquiring the still image data, the local server generates a mapping table with the unique number of the camera, the encrypted identity information, the secret shared key, the recognition time point and the still image data, The local server multiplexing the mapping table and the local server applying a hash function to the multiplexed mapping table to generate a first message digest.

In addition, after the operation of generating the first message digest, the local server encrypts the first message digest with the private key of the local server, and the local server encrypts the encrypted first message digest and the multiplexed mapping table And transmitting the multiplexed tracking data to the identity management server.

The operation for confirming the movement route may include: an operation in which the identity management server demultiplexes the tracking data in response to the movement route tracking request; and the identity management server transmits the first message digest Lt; / RTI >

The method further includes the step of, after the operation of decoding the first message digest, the identity management server applying the hash function to the multiplexed mapping table demultiplexed from the tracking data to generate a second message digest do.

After the operation of generating the second message digest, the identity management server compares the second message digest with the first message digest to verify that the integrity is preserved, and if the integrity is preserved, And the identity management server decrypts the secret shared key with the private key of the identity management server.

In addition, after the operation of decrypting the secret sharing key, the identity management server decrypts the identity information with the decrypted secret sharing key, and the identity management server confirms the moving path of the subject related to the moving route tracking request .

Further, after the operation of confirming the movement route, the operation of the identity management server further includes transmitting the movement route of the identified object to the management apparatus related to the movement route tracking request.

As described above, according to the present invention, there is provided a system and method for tracking a moving path of a moving object, comprising: moving image data of a subject obtained from a camera and identification information of the moving object, By tracking the route, there is an effect that the position and the movement route of the subject can be confirmed more quickly.

According to another aspect of the present invention, there is provided a system and method for tracking a moving path of a subject, comprising: providing an electronic tag reader at a position close to a camera; detecting, from the identification information acquired by the electronic tag reader, It is possible to save time and resources consumed in tracking a subject by tracking the position and movement path of the subject at a specific time using the search result.

FIG. 1 illustrates a system for tracking a moving path of a subject according to an embodiment of the present invention. Referring to FIG.
2 is a flowchart illustrating a data acquisition method for tracking a moving path of a subject according to an exemplary embodiment of the present invention.
3 is a flowchart illustrating a method for tracking a moving path of a subject according to an embodiment of the present invention.
4 is a view for explaining a method for tracking a moving path of a subject according to an embodiment of the present invention.
FIGS. 5 to 7 are diagrams illustrating screens that display a tracking result of a moving path of a subject in a management apparatus according to an exemplary embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. Note that, in the drawings, the same components are denoted by the same reference symbols as possible. Further, the detailed description of known functions and configurations that may obscure the gist of the present invention will be omitted.

FIG. 1 illustrates a system for tracking a moving path of a subject according to an embodiment of the present invention. Referring to FIG.

Referring to FIG. 1, a system 10 according to the present invention includes a monitoring apparatus 100, a local server 200, an identity management server 300, a management apparatus 400, and an authentication server 500.

The monitoring apparatus 100 performs wired communication or wireless communication with the local server 200. [ The wired communication may use a cable such as a communication line or USB, and the wireless communication may use at least one of Bluetooth, Wi-Fi, BLE (bluetooth low energy), and NFC (near field communication). The monitoring apparatus 100 includes a camera 110 and an electronic tag reader 120. The electronic tag reader 120 may be attached to a part of the camera 110 or located close to the camera 110.

The camera 110 transmits the video data obtained in real time to the local server 200 in real time or periodically. The camera 110 may be a closed circuit television (CCTV) installed in a specific area (e.g., an administrative area such as a city, an area, or the like).

The electronic tag reader 120 is an apparatus for recognizing an electronic tag attached to an identification card or the like of a subject, and is a device capable of recognizing an RFID (radio frequency identification) tag or the like. The electronic tag reader 120 may be attached to a specific area of the camera 110 or may be installed within a critical distance based on the camera 110. [ The electronic tag reader 120 recognizes the electronic tag of a subject, such as a criminal or a missing person, and confirms the identity information of the criminal or the missing person. At this time, the identity information may be information encrypted based on the symmetric key. The RFID reader 120 encrypts the secret shared key of the RFID reader 120 with the public key of the identity management server 300 received from the authentication server 500. To this end, the RFID reader 120 receives the public key of the identity management server 300 from the authentication server 500. The monitoring device 100 transmits the moving image data obtained by the camera 110, the identity information confirmed by the RFID reader 120, and the secret shared key to the local server 200. At this time, the monitoring apparatus 100 transmits the unique number of the camera 110 that has acquired the moving image data to the local server 200.

In the embodiment of the present invention, the monitoring apparatus 100 is described as being one, but a plurality of monitoring apparatuses 100 may be installed at various positions. At this time, the identification information may include a profile photograph of the subject, a name, and a resident registration number. Identity information can be entered by the government and can be read-only information that can not be modified by unqualified users.

The local server 200 performs wired communication or wireless communication with at least one monitoring apparatus 100, the identity management server 300, and the authentication server 500. The wired communication may use a cable such as a communication line or USB, and the wireless communication may use at least one of Bluetooth, Wi-Fi, BLE (bluetooth low energy), and NFC (near field communication). At least one local server 200 may be installed in a specific area (e.g., an administrative area such as a city, an area, or the like). The local server 200 receives the unique number of the camera 110 that has acquired the moving image data and the moving image data from at least one monitoring device 100 installed in the area covered by the local server 200, .

The local server 200 receives the unique number of the camera 110 that has obtained the moving picture data and the moving picture data from the monitoring apparatus 100, the identification information, and the secret shared key. When the electronic tag reader 120 recognizes the electronic tag Check the recognition time. The local server 200 acquires the still image data corresponding to the electronic tag recognition time from the moving image data. The local server 200 generates a mapping table of the unique number, identity information, secret shared key, electronic tag recognition time, and still image data of the camera 110 that has acquired the moving image data.

The local server 200 generates the first message digest MD1 by multiplexing the mapping table and applying the hash function of the local server 200 to the multiplexed mapping table. The local server 200 encrypts the first message digest MDl with the private key of the local server 200. [ The local server 200 multiplexes the first message digest MD1 encrypted with the private key of the local server 200 and the multiplexed mapping table to generate the tracking data. The local server 200 transmits the tracking data to the identity management server 300.

The identity management server 300 performs wired or wireless communication with at least one local server 200, at least one management device 400, and the authentication server 500. The wired communication may use a cable such as a communication line or USB, and the wireless communication may use at least one of Bluetooth, Wi-Fi, BLE (bluetooth low energy), and NFC (near field communication). The identity management server 300 stores the tracking data received from the local server 200.

The identity management server 300 receives a tracking request signal for tracking a subject from at least one management device 400. [ The identity management server 300 demultiplexes the tracking data according to the tracking request signal. The identity management server 300 receives the public key of the local server 200 from the authentication server 500. The identity management server 300 decrypts the first message digest MD1 included in the demultiplexed tracking data using a public key.

The identity management server 300 generates the second message digest MD2 by applying the hash function of the identity management server 300 to the multiplexed mapping table included in the demultiplexed tracking data. The identity management server 300 compares the first message digest MD1 with the second message digest MD2. If the integrity of the first message digest MD1 is preserved as a result of the comparison of the first message digest MD1 and the second message digest MD2, the identity management server 300 transmits the private key of the identity management server 300 Decrypt the secret shared key. To this end, the identity management server 300 may demultiplex the multiplexed mapping table included in the demultiplexed tracking data. At this time, the secret sharing key is a secret shared key of the RFID reader 120 and can be decrypted with the private key of the identity management server 300 since it is a key encrypted with the public key of the identity management server 300. The identity management server 300 may decrypt the encrypted identity information based on the symmetric key using the decrypted secret shared key.

The identity management server 300 checks the mapping table including the unique number or location of the camera if the tracking request signal received by the management device 400 includes the unique number or position of the camera. At this time, the unique number or location of the camera may be the location of the crime or the unique number or location of the camera installed at the location where the crime was predicted to have occurred. The identity management server 300 confirms the identity information included in the identified mapping table. The identity management server 300 can additionally search the mapping table including the identified identity information and confirm the movement path of the object based on the electronic tag recognition time and the camera position included in the retrieved mapping table.

The identity management server 300 checks the mapping table including the identity information if the identity of the subject is included in the tracking request signal received by the management device 400. [ At this time, the identification information about the subject received by the management apparatus 400 may include the name of the criminal or the missing person and a resident registration number. The identity management server 300 can confirm the mapping table including the identity information about the subject received from the management apparatus 400 and arrange the identified mapping table based on the recognition time of the electronic tag. The identity management server 300 can confirm the moving path of the subject by checking the position of the camera included in the mapping table. The identity management server 300 transmits the identified moving path of the object to the management apparatus 400. [

The management apparatus 400 performs wired communication or wireless communication with the identity management server 300. [ The wired communication may use a cable such as USB, and the wireless communication may use at least one of Bluetooth, Wi-Fi, BLE (bluetooth low energy), and NFC (near field communication). The management device 400 is a device used by a criminal or a related organization that tracks a missing person such as a police officer, and may be a device such as a computer, a tablet PC, a smart phone, or the like.

The management apparatus 400 can access a web site for tracking a subject provided by the identity management server 300 or download an application for tracking a subject from the identity management server 300. [ The management apparatus 400 transmits a tracking request signal for tracking the subject to the identity management server 300. [ At this time, the management apparatus 400 stores the information such as the viewpoint including the view start time and the inquiry end time of the subject, the location where the crime has occurred, the unique number or location of the camera installed at the location where the crime is predicted to have occurred, And identification information including resident registration number. The management apparatus 400 receives the movement path for the object corresponding to the tracking request signal from the identity management server 300 and displays the movement path.

2 is a flowchart illustrating a data acquisition method for tracking a moving path of a subject according to an exemplary embodiment of the present invention.

Referring to FIG. 2, in operation 201, the camera 110 included in the monitoring apparatus 100 acquires moving picture data in real time. In operation 203, the camera 110 transmits the obtained moving image data to the local server 200 periodically or in real time. At this time, the camera 110 may transmit the unique number of the camera 110 that has acquired the moving image data together with the moving image data. In operation 205, the electronic tag reader 120 included in the monitoring apparatus 100 confirms whether or not an electronic tag attached to an object such as an ID card provided by a criminal or a missing person is recognized. When the electronic tag reader 120 recognizes the electronic tag, the electronic tag reader 120 performs operation 207, and if the electronic tag is not recognized, waits for recognition of the electronic tag.

In operation 207, the electronic tag reader 120 confirms the identity information by the electronic tag recognition. At this time, the identity information may be information encrypted based on the symmetric key. In operation 209, the authentication server 500 transmits the public key of the identity management server 300 to the monitoring device 100. Although not shown, when the electronic tag reader 120 recognizes the electronic tag, the electronic tag reader 120 transmits a signal indicating that the electronic tag is recognized to the local server 200, and the local server 200 transmits a signal indicating that the electronic tag is recognized To the authentication server 500. The authentication server 500 can transmit the public key of the identity management server 300 to the monitoring device 100 when a signal indicating that the RFID is recognized in the RFID reader 120 from the local server 200 is received.

In operation 211, the monitoring apparatus 100 encrypts the secret shared key of the RFID reader 120 using the public key of the identity management server 300. [ In operation 213, the monitoring device 100 transmits the encrypted identity information and the secret shared key by the electronic tag recognition to the local server 200. [ In the embodiment of the present invention, it is described that in the operation 203, the moving image data and the unique number of the camera 110 are transmitted to the local server 200 and the encrypted identity information and secret sharing are transmitted to the local server 200 in operation 213 However, the present invention is not limited thereto. For example, operation 203 is omitted, and motion picture data and the unique number of the camera 110, the encrypted identity information, and the secret shared key may be transmitted to the local server 200 at one time in operation 213.

In operation 215, the local server 200 confirms the recognition time at which the electronic tag reader 120 recognizes the electronic tag when the unique number, the identification information, and the secret shared key of the camera 110 that has acquired the moving image data are received. In operation 217, the local server 200 acquires the frame corresponding to the recognition time in the moving image data as still image data. In operation 219, the local server 200 generates a mapping table of the unique number of the camera 110, identification information, secret shared key, electronic tag recognition time, and still image data of the camera 110 that has acquired the moving image data, and multiplexes the mapping table.

In operation 221, the local server 200 applies the hash function of the local server 200 to the multiplexed mapping table to generate the first message digest MD1. In operation 223, the local server 200 encrypts the first message digest MDl with the private key of the local server 200. In operation 225, the local server 200 multiplexes the first message digest MD1 encrypted with the private key of the local server 200 and the multiplexed mapping table. In operation 227, the local server 200 transmits the generated tracking data to the identity management server 300. In operation 229, the identity management server 300 stores the received trace data.

3 is a flowchart illustrating a method for tracking a moving path of a subject according to an embodiment of the present invention.

Referring to FIG. 3, in operation 301, at least one management device 400 transmits a tracking request signal for tracking a subject to the identity management server 300. [ The trace request signal may include a viewpoint. The tracking request signal may include the camera's unique number or location, and may include the identity of a particular subject.

In operation 303, the identity management server 300 performs demultiplexing of the tracking data stored in the operation 229 of FIG. 2 upon receipt of the tracking request signal from the management device 400. FIG. The identity management server 300 may demultiplex the tracking data into a first message digest MD1 encrypted with the private key of the local server 200 and a multiplexed mapping table. In operation 305, the authentication server 500 transmits the public key of the local server 200 to the identity management server 300. Although not shown, for this purpose, the identity management server 300 may request the public server 200's public key to the authentication server 500 after demultiplexing the tracking data.

In operation 307, the identity management server 300 decrypts the first message digest MD1 encrypted with the private key of the local server 200 using the public key of the local server 200 received from the authentication server 500 do. In operation 309, the identity management server 300 generates the second message digest MD2 by demultiplexing the trace data and applying the hash function of the identity management server 300 to the separated multiplexed mapping table. In operation 311, the identity management server 300 compares the first message digest MD1 with the second message digest MD2. In operation 313, when the integrity of the first message digest MD1 is preserved as a result of the comparison of the 311 operation, the identity management server 300 performs the 315 operation.

In operation 315, the identity management server 300 decrypts the secret shared key with the private key of the identity management server 300. The secret sharing key is a secret shared key of the electronic tag reader 120 that the monitoring apparatus 100 has encrypted using the public key of the identity management server 300 as in the operation 211 of FIG. In operation 317, the identity management server 300 decrypts the encrypted identity information based on the symmetric key using the decrypted secret shared key. In operation 319, the identity management server 300 confirms the movement path of the subject. To this end, the identity management server 300 may demultiplex the demultiplexed mapping tables in operation 303. [

More specifically, in operation 319, when the identification number of the camera or the position of the camera is contained in the tracking request signal received from the management apparatus 400 in operation 301, Check the mapping table. At this time, the unique number or location of the camera may be the location of the crime or the unique number or location of the camera installed at the location where the crime was predicted to have occurred. The identity management server 300 confirms the identity information included in the identified mapping table. The identity management server 300 can additionally search the mapping table including the identified identity information and confirm the movement path of the object based on the electronic tag recognition time and the camera position included in the retrieved mapping table.

The identity management server 300 checks the mapping table including the identity information if the identity of the subject is included in the tracking request signal received by the management device 400. [ At this time, the identification information about the subject received by the management apparatus 400 may include the name of the criminal or the missing person and a resident registration number. The identity management server 300 can confirm the mapping table including the identity information about the subject received from the management apparatus 400 and arrange the identified mapping table based on the recognition time of the electronic tag. The identity management server 300 can confirm the moving path of the subject by checking the position of the camera included in the mapping table.

In operation 321, the identity management server 300 transmits the movement path of the object identified in operation 319 to the management apparatus 400. In operation 323, the management apparatus 400 displays the movement path of the received object.

If the integrity of the first message digest MD1 is found to be corrupted as a result of the comparison of the 311 operation, the identity management server 300 performs the 325 operation. In operation 325, since the integrity of the first message digest MD1 has been compromised, the identity management server 300 transmits a message to the management apparatus 400 informing that the tracking of the moving path of the subject is impossible. In operation 327, the management device 400 displays the received message.

4 is a view for explaining a method for tracking a moving path of a subject according to an embodiment of the present invention.

Referring to FIG. 4, the first monitoring device 100a, the second monitoring device 100b, and the first monitoring device 100a are respectively connected to the first area A, the second area B, and the third area C of the specific area 410, A third monitoring apparatus 100c may be installed. The first monitoring device 100a, the second monitoring device 100b and the third monitoring device 100c are connected to the first local server 200a, the second local server 200b and the third local server 200c, respectively . The first monitoring apparatus 100a transmits the data obtained from the camera and the electronic tag reader included in the first monitoring apparatus 100a to the first local server 200a and the second monitoring apparatus 100b transmits data obtained from the camera The third monitoring device 100c transmits the data acquired from the camera and the electronic tag reader included in the apparatus 100b to the second local server 200b, And transmits the data acquired by the reader to the third local server 200c.

The first local server 200a, the second local server 200b and the third local server 200c are connected to the respective cameras 100a, 100b and 100c, respectively, Number, the still image data obtained from the moving image data obtained from the camera included in the monitoring apparatuses 100a, 100b and 100c, the electronic tag recognition time, the identity information, and the secret shared key. Each of the local servers 200a, 200b, and 200c multiplexes and encrypts each of the mapping tables, as described with reference to FIG. 3, and transmits the generated tracking data to the identity management server 300. FIG.

When the tracking management server 300 receives a tracking request signal for the subject from the management apparatus 400, the tracking management server 300 sends tracking data received from the plurality of local servers 200a, 200b, Demultiplexing and decoding as described above. The identity management server 300 confirms that the moving path 420 of the subject is sequentially passing through the first area A, the second area B and the third area C based on the demultiplexing and decoding result . The identity management server 300 transmits the identified moving path of the object to the management apparatus 400. [

FIGS. 5 to 7 are diagrams illustrating screens that display a tracking result of a moving path of a subject in a management apparatus according to an exemplary embodiment of the present invention.

5 to 7, the management apparatus 400 accesses a web site for tracking a subject provided by the identity management server 300 or downloads an application for tracking a subject from the identity management server 300 The execution screen 501 as shown in Fig. 5 is displayed on the display unit (not shown) of the management apparatus 400. Fig.

When the date and time are inputted in the "reference date and time 503" on the execution screen 501 displayed on the management device 400 and the camera information is inputted into the area 505 for inputting the camera information, When the button is selected, a screen as shown in FIG. 6 may be displayed on the management device 400. For example, in the execution screen 501, 11:30 pm is entered as the subject view start time, and 2016.12.02. 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: Also, the inquiry button is selected after the unique number 3600 of the camera (for example, CCTV) is inputted to the execution screen 501 or the position of the camera "00, Sanggye 2-dong, The following button can be selected. When the inquiry button is selected, the management device 400 can transmit a tracking request signal including the tracking start time including the inquiry start time and the inquiry end time and the camera information to the identity management server 300.

The identity management server 300 includes the mapping table based on the result of demultiplexing and decoding the tracking data according to the tracking request signal, the recognition time of the electronic tag is included in the tracking time, the unique number of the camera is 3600, It is possible to extract a mapping table in which the location is "in front of 00 kindergarten in Sanggye 2-dong, Nowon-gu, Seoul". In this case, the tracking point refers to a time point included between the subject inquiry start time and the subject inquiry end time. When the extracted mapping tables are three, the identity management server 300 lists the first item 601, the second item 603, and the third item 605 corresponding to each of the mapping tables as shown in FIG. 6 Management apparatus 400 according to the present invention. When the "track route" button for the third item 605 in the list is selected in the management apparatus 400, the identity management server 300 confirms the identity information included in the third item 605. [ The identity management server 300 can further search the mapping table including the identified identity information in the mapping table. At this time, the identity management server 300 can search the mapping table including the identity information and the electronic tag recognition time point included in the tracking time point. The identity management server 300 can check the moving path of the subject by arranging the retrieved mapping table based on the point of time when the electronic tag is recognized. The identity management server 300 generates the map data 703 as shown in FIG. 7, and provides the map data to the management apparatus 400. In addition, the identity management server 300 generates detailed information corresponding to the map data 703 as a list 705 and provides the list 705 to the management apparatus 400. In addition, in order to minimize the search time of the mapping table, the controller 250 searches map tables including other cameras located within a critical radius based on the position corresponding to the camera information, A mapping table including identity information can be searched.

The date and time are input to the "reference date and time 503" on the execution screen 501 displayed on the management device 400 and the identification information is input into the area 507 for inputting the subject identification information After selecting the inquiry button, the management apparatus 400 may display a screen as shown in FIG. For example, in the execution screen 501, 11:30 pm is entered as the subject view start time, and 2016.12.02. 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: 00: In addition, the inquiry button may be selected after the name of the subject and the resident registration number are inputted on the execution screen 501. [ When the inquiry button is selected, the management device 400 can transmit a tracking request signal including the tracking start time including the inquiry start time and the inquiry end time and the subject identity information to the identity management server 300.

The identity management server 300 includes a mapping table based on the result of demultiplexing and decoding the tracking data according to the tracking request signal, and includes a mapping table including the input identification information, Can be extracted. The identity management server 300 extracts a mapping table in which the electronic tag recognition time point is included in the tracking time point and the identity information includes " Kim, Chul Soo (123456-1234567) " in the mapping table. The identity management server 300 can arrange the extracted mapping tables from the mapping table having the earliest time of recognizing the electronic tags in chronological order as shown in FIG. For example, the identity management server 300 can confirm that the unique numbers of the cameras included in the mapping table arranged based on the electronic tag recognition time are 3600, 3605, and 3615 based on the time order. The identity management server 300 can confirm the movement path of the subject by checking the position of each camera in the mapping table. The identity management server 300 generates the map data 703 as shown in FIG. 7, and provides the map data to the management apparatus 400. In addition, the identity management server 300 generates detailed information corresponding to the map data 703 as a list 705 and provides the list 705 to the management apparatus 400. In order to minimize the searching time of the mapping table, the control unit 250 can search for Kim Cheol-Soo in mapping tables including other cameras located within a critical radius based on the position of the camera included in the mapping table including Kim Chul- have.

It should be noted that the embodiments of the present invention disclosed in the present specification and drawings are only illustrative of the present invention in order to facilitate the understanding of the present invention and are not intended to limit the scope of the present invention. That is, it will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention are possible.

Claims (20)

At least one monitoring device including a camera and an electronic tag reader for identifying encrypted identity information based on a symmetric key;
The moving picture data obtained by the camera from the monitoring device, the encrypted identity information mapped to the electronic tag recognized by the electronic tag reader, and the secret shared key of the electronic tag reader encrypted with the public key of the identity management server At least one local server for receiving; And
The method comprising: receiving a movement route tracking request for at least one subject from at least one management apparatus; generating identification information on the subject from the tracking data received from the local server, An identity management server for checking the movement path of the subject;
. ≪ / RTI > delete The method according to claim 1,
The local server comprises:
Wherein the electronic tag reader confirms a recognition time when the electronic tag is recognized and acquires still image data corresponding to the recognition time from the moving image data. The method of claim 3,
The local server comprises:
Multiplexes the unique number of the camera, the encrypted identity information, the secret shared key, the recognition time point, and the mapping table generated by the still image data, and applies a hash function to the multiplexed mapping table to generate a first message digest Generating tracking system. 5. The method of claim 4,
The local server comprises:
Encrypting the first message digest with the private key of the local server, and transmitting the tracking data multiplexed with the encrypted first message digest and the multiplexed mapping table to the identity management server. 6. The method of claim 5,
Wherein the identity management server comprises:
Storing the tracking data received from the local server, demultiplexing the tracking data according to the movement path tracking request, and decrypting the first message digest using the public key of the local server. The method according to claim 6,
Wherein the identity management server comprises:
And a second message digest is generated by applying a hash function to the multiplexed mapping table demultiplexed and separated from the tracking data. 8. The method of claim 7,
Wherein the identity management server comprises:
And compares the second message digest with the first message digest to decrypt the secret shared key with the private key of the identity management server if the integrity is preserved. 9. The method of claim 8,
Wherein the identity management server comprises:
And decrypting the identity information with the decrypted secret sharing key to confirm a movement path of the subject related to the movement path tracking request. 10. The method of claim 9,
Wherein the identity management server comprises:
And transmits the identified movement path of the subject to the management apparatus associated with the movement path tracking request. At least one local server maps the moving picture data obtained by the camera to the electronic tag recognized by the electronic tag reader from at least one monitoring device including an electronic tag reader for identifying the camera and the encrypted identity information based on the symmetric key Receiving encrypted identity information and data including a secret shared key of the electronic tag reader encrypted with a public key of an identity management server;
The identity management server receiving a route tracking request for at least one subject from at least one management device; And
Confirming the moving path of the subject by checking the identification information on the subject from the tracking data generated based on the data and received from the local server in response to the moving route tracking request;
≪ / RTI > delete 12. The method of claim 11,
After the operation of receiving data from the monitoring device,
Confirming a recognition time when the local server recognizes the electronic tag in the electronic tag reader; And
The local server acquiring still image data corresponding to the recognition time from the moving image data;
≪ / RTI > 14. The method of claim 13,
After obtaining the still image data,
Generating, by the local server, a mapping table of the unique number of the camera, the encrypted identity information, the secret shared key, the recognition time and the still image data;
The local server multiplexing the mapping table; And
The local server applying a hash function to the multiplexed mapping table to generate a first message digest;
≪ / RTI > 15. The method of claim 14,
After the operation of generating the first message digest,
Encrypting the first message digest with the private key of the local server; And
Transmitting, by the local server, the tracking data obtained by multiplexing the encrypted first message digest and the multiplexed mapping table to the identity management server;
≪ / RTI > 16. The method of claim 15,
The operation for confirming the movement route includes:
The identity management server demultiplexing the tracking data according to the movement path tracking request; And
The identity management server decrypting the first message digest using the public key of the local server;
≪ / RTI > 17. The method of claim 16,
After the operation of decoding the first message digest,
Generating a second message digest by applying a hash function to the multiplexed mapping table demultiplexed and separated from the tracking data;
≪ / RTI > 18. The method of claim 17,
After the operation of generating the second message digest,
Comparing the second message digest with the first message digest to verify that the integrity is preserved; And
Decrypting the secret shared key with the private key of the identity management server if the integrity is preserved;
≪ / RTI > 19. The method of claim 18,
After decrypting the secret shared key,
The identity management server decrypting the identity information with the decrypted secret shared key; And
Confirming the movement path of the subject related to the movement route tracking request by the identity management server;
≪ / RTI > 20. The method of claim 19,
After confirming the movement route,
The identity management server transmitting the identified movement path of the subject to the management device associated with the movement path tracking request;
≪ / RTI >

Images