KR101950507B1 - blockchain-based method of providing secure processing of camera video - Google Patents

Abstract

The present invention generally relates to a technology for security processing a camera shot image based on a blockchain. More particularly, the present invention relates to a security processing technology for utilizing a blockchain technique to prevent unauthorized exposure of a camera shot image by hacking or to prevent forgery of the shot image data in a system configured to access an image shot by a camera through a network. According to the present invention, it is possible to prevent unauthorized exposure or forgery of a camera shot image by hacking. According to the present invention, it is possible to prevent the camera shot image stored in an image storage from being hacked, and by making the update period (e.g., 3 minutes) of the blockchain sufficiently short, security processing can be also achieved for a real-time camera image. The present invention can be applied to an IP camera (webcam) installed in a house to enhance security, and it is possible to effectively prevent a personal image generated in the house from being leaked or forged.

Description

[0001] The present invention relates to a block-chain-based security processing method,

BACKGROUND OF THE INVENTION 1. Field of the Invention [0002] The present invention generally relates to a technology for security processing based on a block-chain-based camera image.

More particularly, the present invention relates to a system configured to access an image photographed by a camera via a network, and to prevent unauthorized exposure of a camera photographed image by hacking or to prevent forgery of photographed image data, To a security processing technique.

Camera devices are being used in various fields. Smart phones, tablets, laptop computers, and CCTV have been in use for a long time, and recently IP cameras have been installed at home for security and pet observation purposes. These camera devices are connected to a broadband network so that a user can view photographed images from outside, thereby enabling various services.

However, as a side effect, there has been a problem in that there is a high possibility that privacy is exposed unauthorized. As the camera images can be accessed through the network without physically intruding, a person who has no authority can view the camera images through hacking or the like.

In order to prevent such unauthorized exposure, conventionally, a login method is generally adopted. The user can access the camera shot image related to the user only after the login procedure is completed by inputting the user ID and the password. However, this type of control technique is not helped by any effort, and hacking accidents are often caused by this.

It is important to prevent unauthorized exposure of camera images, but it is also important to prevent images from being forged by someone. Since image information is generally accepted as a relatively reliable evidence, it is important to prevent forgery of images to prevent unforeseen situations.

Accordingly, there has been a demand for a technique capable of enhancing the security of camera shot images. This is not only required for the camera shot image generated in real time, but also an important issue for the camera shot image stored in the image storage. This is particularly important for camera shots that are photographed at home and contain personal privacy.

SUMMARY OF THE INVENTION An object of the present invention is to provide a technology for security processing based on a block chain, in general, a camera photographed image.

In particular, it is an object of the present invention to provide a system and method for preventing unauthorized exposure of a camera photographed image by hacking in a system configured to access an image photographed by a camera via a network, And a security processing technique.

According to an aspect of the present invention, there is provided a method of security processing based on a block chain of a camera shot image, the method including: a first step of acquiring data of a camera shot image; A second step of the image processing apparatus setting a cryptographic processing key for encrypting a camera photographed image; A third step of the image processing apparatus encrypting the camera photographed image with the encryption processing key; A fourth step of the image processing apparatus generating block data by combining the encryption processing key and the meta information of the camera photographed image; A fifth step of the video processing apparatus encrypting a specific data area including at least the encryption processing key from the block data with the public key of the party user; And a sixth step of the image processing apparatus to update the block chain by reflecting the block data.

According to another aspect of the present invention, there is provided a security processing method based on a block chain, An eighth step of retrieving block data encrypted by its own public key by inquiring a block chain by the image query device; A ninth step of decrypting the acquired block data with its own private key to obtain meta information about the encryption processing key and the camera photographed image, A step 10 in which the image query device acquires data of the camera photographed image based on the obtained meta information; An eleventh step of decrypting the acquired image data of the camera photographed image with the obtained encryption processing key, And a step of reproducing the data of the decoded camera photographed image by the image searching apparatus.

In the present invention, the block data may further include a hash code for the camera photographed image in the fourth step, and the image query device may further be configured to acquire a hash code for the camera photographed image in the ninth step. Here, the block-chain-based security processing method according to the present invention is a method for processing a security-based block according to the present invention, wherein the image query device generates a hash code for the decoded image data, And verifying the obtained camera photographed image by comparing with the code.

The second step of the present invention comprises: generating a private AES key in a raw time; And setting an AES key as a cryptographic processing key for encrypting a camera photographed image.

The fourth step of the present invention comprises the steps of: acquiring a hash code by substituting data of a camera photographed image into a preset hash function; Setting access information on data of a camera shot image as meta information about a camera shot image; And generating block data by combining the encryption key, the hash code, and the meta information.

Meanwhile, a computer-readable nonvolatile recording medium according to the present invention records a program for causing a computer to execute a block-chain-based security processing method for a camera-captured image.

According to the present invention, it is possible to prevent unauthorized exposure or forgery of a camera photographed image by hacking. According to the present invention, it is possible not only to prevent the camera image captured in the image storage from being hacked but also to securely process the real camera image by shortening the block chain update period (e.g., 3 minutes). The present invention can be applied to an IP camera (webcam) provided in the house to enhance security, and it is possible to effectively prevent personal images generated in the house from being leaked or forged.

FIG. 1 conceptually illustrates the overall system configuration for security processing of a camera photographed image in the present invention. FIG.
FIG. 2 is a flowchart illustrating a process in which an image processing apparatus performs security processing on a camera-shot image based on a block chain in the present invention. FIG.
3 is a diagram showing an example of the internal configuration of block data according to the present invention.
4 is a flowchart illustrating a process in which a video image retrieving apparatus reproduces a camera photographed image based on a block chain in the present invention.
5 is a view showing a state in which a first video image retrieving apparatus reproduces a photographed image of a first camera according to the present invention.
6 is a view showing a state in which a second video image retrieving apparatus reproduces an image photographed by a second camera in the present invention.

Hereinafter, the present invention will be described in detail with reference to the drawings.

1 is a diagram conceptually showing an overall system configuration for security processing a camera photographed image in the present invention.

Referring to Fig. 1, a plurality of cameras 1 and 2 respectively generate photographed image data relating to the installation point. These may be CCTV cameras installed in specific buildings, surveillance cameras installed on the roads, or IP cameras installed in the homes of communication service subscribers.

The photographed image data is transmitted to the corresponding image processing apparatuses 101 and 102, and security processing according to the present invention is performed in units of, for example, 30 seconds. Thus, the camera photographed images 410 and 420 are configured. The first image processing apparatus 101 generates an encrypted image block, for example, every 30 seconds for the image captured by the first camera 1, and connects them together to form a camera captured image 410. As the first camera 1 continues shooting, these encrypted image blocks are continuously generated in units of 30 seconds, for example, and are superimposed on the camera photographed image 410. The second image processing apparatus 102 performs the same process on the image captured by the second camera 2. [

At this time, the image processing apparatuses 101 and 102 may be implemented as a DVR server, a dedicated signal processing apparatus, a set-top box, or the like. One image processing apparatus 101 or 102 may be assigned to each of the cameras 1 and 2 or one image processing apparatus 101 or 102 may be configured to take charge of a plurality of cameras 1 and 2. [

The image query devices 201 and 202 are devices capable of receiving and reproducing images generated by the cameras 1 and 2 within a range in which each of them is authorized. In the present specification, the first image inquiry apparatus 201 is a device authorized to inquire the photographed image of the first camera 1, and the second image inquiry apparatus 202 is a device It is assumed that the device is authorized to view images. At this time, the image query devices 201 and 202 may be implemented as a smart phone, a set-top box, a laptop computer, a manager computer, or the like, and may be the same device as the image processing devices 101 and 102 or may be different devices . [Figure 1] is shown as a different device.

In order to protect privacy and prevent forgery and corruption, the image processing apparatuses 101 and 102 encrypt and store photographed image data generated by the cameras 1 and 2. For example, the Advanced Encryption Standard Algorithm (AES algorithm) can be preferably utilized. As described above, the image processing apparatuses 101 and 102 receive the photographed image data from the cameras 1 and 2, encrypt them every predetermined period (e.g., 30 seconds), connect the encrypted image blocks, 410, and 420, respectively.

The image processing apparatuses 101 and 102 generate block data including information related to the encryption scheme of the camera images 410 and 420. Preferably, each time the image processing apparatus 101 or 102 generates one encrypted image block, block data corresponding thereto is generated. On the other hand, in order to distinguish the block data and the encrypted image block generated by the first image processing apparatus 101, the block data and the encrypted image block generated by the second image processing apparatus 102 are displayed in a square box, The encrypted image block is marked with a hatched box inside.

In the present invention, the image processing apparatuses 101 and 102 and the image query apparatuses 201 and 202, which are parties to deal with the camera photographed images 410 and 420, manage the block chain 300 for these block data. Currently, blockchain technology is mainly used for bitcoin which is a virtualization culprit. In the present invention, the technology is used for security processing of camera images.

The image processing apparatuses 101 and 102 and the image inquiry apparatuses 201 and 202 perform a process of updating the block chain 300 to the latest state every predetermined period (for example, three minutes) And shares the chain 300. Referring to FIG. 1, fragments indicated by hollow rectangles in the block chain 300 are block data generated by the first image processing apparatus 101, and fragments marked with a hatched pattern in the block chain 300 2 < / RTI > These block data are added together to constitute a block chain 300. The image processing apparatuses 101 and 102 and the image inquiry apparatuses 201 and 202 perform update operations at regular intervals to share them in the latest state.

At this time, the camera images 410 and 420 are preferably not included in the block chain. In the present invention, only the information for handling encrypted video blocks is managed in a block chain, so that the amount of data to be exchanged in the update process is kept small and the update period can be set to be very short, . In addition, if the block chain update period (for example, 3 minutes) is shortened, the video transmission / reception can be performed close to real time.

On the other hand, if it is reflected in the block chain 300, it is impossible to correct the image, so the integrity of the forgery and falsification can be guaranteed. If the shot image is modified or partially cut, the value of the block data linked with the encrypted image block must be modified corresponding to the operation details. However, since the block data is included in the block chain 300, it is impossible to modify the captured image afterwards, so that it is difficult to try to modify or partially cut the captured image.

As described above, the image query devices 201 and 202 participate in the maintenance of the block chain 300 and thus have a plurality of block data. The image retrieving apparatuses 201 and 202 can decrypt only the block data related to the photographed image having the inquiry authority of itself and understand the contents thereof, can not do. Accordingly, the image query devices 201 and 202 can selectively read the block data that can be understood by the image query devices 201 and 202, and obtain an encrypted image block corresponding thereto according to the contents of the block data. As described later, since the key for decrypting the encrypted image block can be acquired from the block data, the image retrieving apparatuses 201 and 202 can reproduce the encrypted image block.

The first image inquiry apparatus 201 can retrieve and reproduce the captured image 410 of the first camera 1 and the second image inquiry apparatus 202 can reproduce the captured image 410 of the second camera 2 The image 420 can be retrieved and reproduced. However, according to the present invention, the image query apparatuses 201 and 202 can inquire the corresponding image only after the block chain update time has elapsed since the encrypted image block is generated. Therefore, it is suitable for the stored image, Somewhat difficult. This can be overcome to some extent by setting the block chain update period to be sufficiently short. To this end, the present invention does not include image data in the block data.

2 is a flowchart illustrating a process of performing a security process on a camera-shot image based on a block chain in the image processing apparatus 100 of the present invention.

Step S110: First, the image processing apparatus 100 acquires data of the photographed image from the cameras 1 and 2 connected thereto. Since the photographing is continuously performed, the image processing apparatus 100 receives photographed image data from the cameras 1 and 2 continuously, for example, in a streaming manner.

Step S120: The image processing apparatus 100 performs security processing on data of the photographed image at a predetermined period, for example, every 30 seconds to generate an encrypted image block. To this end, the image processing apparatus 100 sets a cryptographic processing key for encrypting the camera photographed image. At this time, it is preferable that the encryption processing key is randomly generated internally in a private manner, not received from the outside. Also, it is preferable that the encryption key is not a one-time value used for a considerable period of time but is used as a one-time value only for a currently processed image block. In the present invention, the AES algorithm can be preferably applied to encrypt the captured image data, in which case the encryption key is called an AES key.

Step S130: The image processing apparatus 100 encrypts the camera photographed image with the set encryption key (AES key), more specifically, the 30-second photographed image block currently being processed. This encryption process is also referred to as scrambling or encryption. This encrypted result is referred to as an encrypted image block in this specification, and the series of encrypted image blocks are connected to constitute the camera captured images 410 and 420. Referring to FIG. 1, four captured video images 410 and 420 are connected to three encrypted video blocks, respectively.

Such encrypted image data may be stored in the storage device or transmitted to the outside via the network.

Step S140: The image processing apparatus 100 generates block data by collecting various pieces of information for handling the encrypted shot image data (for example, encrypted image blocks) for 30 seconds, for example. Such information is preferably an encryption key (AES key), a hash code for a camera image, and meta information about a camera image.

The encryption key (AES key) is a key used in the data encryption process to form the encrypted image block in step S130. Since different encryption processing keys are applied to each encrypted video block (one-time), the image processing apparatus 100 generates block data for each encrypted video block individually.

The hash code has a fixed bit length value (e.g., a 64-bit value) obtained by substituting 30 seconds of photographed image data into a predetermined hash function (e.g., md5, sha, lsh) it means.

The meta information is information on the corresponding encrypted image block, and preferably includes access information (URL) and image capturing information (photographing time, photographing point, image length). After generating the encrypted image block in step S130, the image processing apparatus 100 stores the encrypted image block somewhere such as an internal storage space or an external storage server. In the meta information, information that can access the encrypted image block, Is included.

The image processing apparatus 100 generates block data by combining such a cryptographic processing key, a hash code, and meta information.

Step S150: For the sake of security, the image processing apparatus 100 encrypts a part of the block data with a public key (e.g., an RSA public key) of a party user, that is, a user authorized to access the photographed image of the camera . The block data contains information capable of handling the corresponding encrypted video block. Therefore, it is desirable to encrypt the block data so that the contents can be understood only when the access authority is provided. For this purpose, a public key given to a person having the access right in the public key cryptosystem It is suitable. A typical example of an open type encryption system is Rivest Shamir Adleman (RSA).

It is preferable that at least the encryption key (AES key) is subjected to encryption processing on the attribute of the data constituting the block data. 3 is a diagram showing an example of the internal configuration of block data according to the present invention, and shows four embodiments according to the range of encryption processing application.

As shown in FIG. 3, the encryption processing may be applied to the entire block data, the encryption processing key and the entire meta information may be encrypted, the encryption processing key and the access information may be encrypted, Encryption processing may be applied only to the encryption processing key.

Step S160: The image processing apparatus 100 updates the block chain 300 by reflecting the block data generated by the image processing apparatus 100 itself.

Accordingly, the block data independently generated by the image processing apparatuses 101 and 102 are combined into one data group by the block chain technique, thereby constituting the block chain 300. Referring to FIG. 1, the image processing apparatuses 101 and 102 generate four and three encrypted image blocks, respectively, and generate four and three block data, respectively. The block data generated in this manner is connected in the order of generation time, for example, to constitute a block chain 300. As shown in FIG. 1, when the update is performed, the image processing apparatuses 101 and 102 participating in the block chain and the image query apparatuses 201 and 202 have the same block chain 300.

4 is a flowchart illustrating a process in which a video image retrieving apparatus 200 approaches and reproduces a camera photographed image having an inquiry authority on a block-chain basis in the present invention.

Step S210: First, the image query device 200 updates the block chain 300 to the latest according to a predetermined period.

Step S220: The image query apparatus 200 inquires the block chain 300 and acquires block data encrypted with its own public key (e.g., RSA public key). As described above, the image processing apparatus 100 encrypts the block data with a public key of a party user (e.g., an RSA public key), and then reflects the block data to the block chain 300. [ Accordingly, the image query device 200 selects block data that has been encrypted with its own public key from a series of block data included in the block chain 300.

Step S230: The image retrieving apparatus 200 decrypts the acquired block data with its own private key (e.g. RSA private key). Since the appropriate private key can be retained only when there is an inquiry authority, the security of the camera image can be maintained due to the configuration of step S230. From the result of decrypting the block data with the private key, the image retrieval apparatus 200 obtains the encryption key (AES key), the hash code for the camera image, and meta information about the camera image. As described above, the meta information includes access information (URL) and image capturing information (capturing time, capturing point, image length) for the corresponding encrypted image block.

Step S240: The image query device 200 acquires the data of the camera photographed image, that is, the encrypted image block, based on the meta information obtained in step S230. Since the meta information includes the access information (URL) of the encrypted image block, the encrypted image block can be obtained by using the access information (URL).

Step S250: The image query apparatus 200 decrypts the encrypted processing block obtained in step S240 using an encryption key (AES key) acquired in step S230, And acquires the photographed image data. This decryption process is also referred to as descrambling or decryption in the field of encryption technology.

Step S260: The image query device 200 verifies the suitability or integrity of the captured image data acquired in step S250 using a hash code. To this end, the image searching apparatus 200 generates a hash code by substituting the decoded image data into a hash function (e.g., md5, sha, lsh), compares the hash function with the hash code acquired in step S230, . If it is different, it means that some error occurred including forgery and falsification, and if it is the same, the processing process is performed without error.

Generally, if there is a problem in the process of the image query device 200, an error may occur in the decryption process of step S230 or the decryption process of step S250, and thus it may be regarded as being sufficiently verified. Considering this point, the integrity verification process of step S260 is optional.

Step S270: Finally, the image query device 200 reproduces data of the decoded camera photographed image and outputs an image of, for example, 30 seconds. By repeating the above-described process for a series of block data included in the block chain 300, a camera shot image over a long period of time can be reproduced.

5 is a diagram showing a state in which the first image processing apparatus 101 performs security processing and the first image viewing apparatus 201 reproduces an image taken by the first camera 1 in the present invention, 6 is a diagram illustrating a state in which the second image processing apparatus 102 performs security processing and the second image retrieving apparatus 202 reproduces an image captured by the second camera 2 in the present invention.

Referring to FIG. 5, the first image processing apparatus 101 divides image data continuously generated by the first camera 1 into units of 30 seconds, for example, and outputs a series of encrypted image blocks 411, 412, 413, 414). At the same time, the first image processing apparatus 101 generates a series of block data 311, 312, 313, and 314 corresponding to the encrypted image blocks 411, 412, 413, and 414, Reflect.

Referring to FIG. 6, the second image processing apparatus 102 divides the image data continuously generated by the second camera 2 into a series of encrypted image blocks 421, 422, and 413, for example, . At the same time, the second image processing apparatus 101 generates a series of block data 321, 322 and 323 corresponding to the encrypted image blocks 421, 422 and 413, and reflects the generated block data 321, 322 and 323 in the block chain 300.

In the block chain technology, the image data is periodically updated. When the block chain update is performed, the image processing apparatuses 101 and 102 and the image query apparatuses 201 and 202 have the same block chain 300.

Referring to FIG. 5, the first image inquiry device 201 is a device authorized to inquire the photographed image of the first camera 1. Accordingly, the first image processing apparatus 101 encrypts the block data 311, 312, 313, and 314 with a public key (e.g., RSA public key) associated with the first image inquiry apparatus 201, 300).

The first image inquiry apparatus 201 can find the block data 311, 312, 313 and 314 encrypted by the public key of the block chain 300 and transmit them to the private key ). ≪ / RTI > Through this process, the first image retrieval apparatus 201 acquires a series of encryption processing keys (AES key) capable of decrypting a series of encrypted image blocks 411, 412, 413, and 414, The camera photographed image 410 can be normally reproduced.

Referring to FIG. 6, the second image inquiry device 202 is a device authorized to inquire the photographed image of the second camera 2. Accordingly, the second image processing apparatus 102 encrypts the block data 321, 322, and 323 using a public key (e.g., an RSA public key) associated with the second image query apparatus 202, .

The second image retrieving apparatus 202 can find the block data 321, 322, and 323 encrypted with the public key from the block chain 300 and use them as their own private key (e.g., RSA private key) You can decrypt it. Through this process, the second image inquiry apparatus 202 acquires a series of encryption key (AES key) capable of decrypting a series of encrypted image blocks 421, 422 and 423, The image 420 can be normally reproduced.

Although the technical configuration of the present invention has been described on the assumption of a home IP camera, the present invention is not limited thereto and is generally applicable to an environment in which a camera is connected to a network. For example, the present invention can be suitably applied to a security DVR image to perform security processing to prevent unauthorized leakage or forgery.

Meanwhile, the present invention can be embodied in the form of computer readable code on a computer-readable non-volatile recording medium. Such a non-volatile recording medium includes all kinds of storage devices for storing computer-readable data such as a hard disk, an SSD, a CD-ROM, a NAS, a magnetic tape, a web disk, a cloud disk, The code may be distributed and stored in the storage device of the computer.

1, 2: Camera
100: image processing device
200:
300: Block Chain
311 to 324: Block data
410, 420: camera shot image (encrypted state)
411 to 423: Encrypted image block

Claims (6)

A first step in which the image processing apparatus 100 acquires photographed image data (hereinafter, referred to as 'section image data') of a camera photographed image by a predetermined time unit;
A second step of setting an encryption key (key_l) for scrambling the segment image data by the image processing apparatus (100);
A third step of the image processing apparatus 100 scrambling the interval image data with the encryption key key_1 to generate an encrypted image block;
Storing the encrypted image block in the storage space and obtaining corresponding access information;
Setting the meta information of the segment image data including the access information by the image processing apparatus 100;
A fourth step of the image processing apparatus 100 generating block data by combining the encryption processing key key_1 and the meta information;
A fifth step of the image processing apparatus 100 encrypting a data area including the encryption key (key_l) in the block data with a public key (key_public) of a party user for the camera image;
The image processing apparatus 100 repeatedly performs the first step to the fifth step at every predetermined time unit to encrypt the camera photographed image in a predetermined time unit;
A sixth step of the image processing apparatus 100 periodically updating the block chain by reflecting the block data;
A seventh step of periodically updating the block chain by the image query device (200);
An eighth step of retrieving the block data encrypted by its public key (key_public) from a series of block data included in the block chain by retrieving the block chain by the image retrieval apparatus 200;
A ninth step of decrypting the acquired block data with its own private key (key_private) to obtain a cryptographic processing key (key_1) and the meta information;
(B) obtaining the encrypted image block from the storage space using the access information included in the obtained meta information;
An eleventh step of descrambling the encrypted image block obtained in the tenth step with the encryption processing key key_1 obtained by the image searching apparatus 200 to obtain the photographed image data of the predetermined time unit;
A twelfth step of reproducing the photographed image data obtained by descrambling the image query device (200);
The image searching apparatus 200 repeats the eighth step to the twelfth step to continuously reproduce the camera photographed image by dividing the photographed image into a predetermined time unit;
And a block-chain-based security processing method for a camera photographed image.
delete The method according to claim 1,
Wherein the block data in the fourth step further comprises a hash code for the camera image,
In the ninth step, the image query device 200 further obtains a hash code for the camera image,
The method of claim 11,
Verifying the obtained camera photographed image by generating a hash code for the descrambled photographed image data and comparing the hash code with the hash code obtained from the block data;
The method of claim 1, further comprising the steps of:
The method of claim 3,
The second step comprises:
Generating a private AES key in a raw time;
Setting the AES key as a cryptographic processing key (key_1) for scrambling the camera photographed image;
Wherein the block-chain-based security processing method comprises:
The method of claim 3,
In the fourth step,
Acquiring a hash code by substituting data of the camera photographed image into a predetermined hash function;
Generating block data by combining the encryption key (key_1), the hash code, and the meta information;
Wherein the block-chain-based security processing method comprises:
A computer-readable nonvolatile recording medium having recorded thereon a program for causing a computer to execute a block-chain-based security processing method for a camera photographed image according to any one of claims 1 and 3 to 5.

Images