KR102302041B1 - Cctv video management system for personal information protection - Google Patents

Abstract

The present invention relates to a CCTV video management system in the installation and operation of CCTV. The CCTV video management system can solve the problem of privacy invasion due to the collection of personal information by encrypting a captured video and authenticating the same through a setting key required for decryption to view an original video.

Description

CCTV video management system for personal information protection {CCTV VIDEO MANAGEMENT SYSTEM FOR PERSONAL INFORMATION PROTECTION}

The present invention relates to a CCTV video management system, and in detail, encrypts the video captured in the installation and operation of the CCTV and authenticates it through a setting key required for decryption so that the original video can be viewed. It relates to a CCTV video management system that can solve this problem.

In recent years, security systems using CCTV have been increasing a lot to prevent and solve various crimes as well as to protect public safety and facilities.

In addition, these CCTVs are becoming easier to remotely control and monitor due to the development of network communication, and as the importance and application range of video surveillance continue to increase, interest in its security is also increasing.

In fact, recently, a large amount of home CCTVs connected to the Internet are being hacked in large quantities. Problems of invasion of privacy and misuse and abuse of video information are constantly being raised.

In particular, in the situation where the subject who installs and operates CCTV has unilateral authority in managing recorded video information, when a video request is made by an outsider such as an investigative agency or a crime victim, it is inevitable to provide or reject it without a clear standard, and it is usually There is a security vulnerability because it is necessary to access the video server and check the video through an authentication process including login.

In order to solve this problem, various techniques related to image data encryption have been disclosed. These algorithms, represented by symmetric key encryption and asymmetric key encryption algorithms, manipulate data in a form that cannot be reverse mapped based on the key value and add redundancy, so that decryption of data is impossible without a key. have.

However, these methods have a weakness that data is hacked if the key is exposed. In relation to the distribution of these keys, a dedicated network with high security may be used, or double or triple encryption may be adopted, which encrypts the key with another key. There is a problem of increasing the complexity of the system as well as the limit of security that still exists.

Republic of Korea Patent No. 10-1648188 (2016.08.08)

The present invention was created to solve the above problems, and an object of the present invention is to enable a CCTV camera to add a masking image to an original image at the same time as it is filmed, encrypt it, and then transmit it to a connected recorder. It is to provide a CCTV video management system for personal information protection in which personal information and privacy can be protected by making it possible to view the original video from which the masking video has been removed through decryption.

For the above purpose, the present invention provides a CCTV image management system, comprising: an image acquisition unit for acquiring an image of a set area; an encryption unit for masking the set region of the acquired image so that it cannot be identified; a storage unit for storing the masked image; a key setting unit generating an authentication key allowing access to the storage unit, and generating the authentication key as a divided key in a plurality of divided forms; an authentication unit for generating an authentication key by combining the split keys generated through the key setting unit and granting access to the storage unit; a decryption unit that removes the masking of the stored image according to the access right granted through the authentication unit, restores it to the original image, and provides it; It is characterized in that it includes.

At this time, the image acquisition unit starts acquiring an image as an authentication key is generated by combining the split keys generated in advance through the key setting unit, and the encryption unit performs encryption masking in response to the authentication key in response to the authentication key to perform the authentication key Each masked image may be configured to be stored in the storage unit.

In addition, the encryption unit may further include a recognition unit that analyzes the acquired image to separate the motionless background from the motionless object, and determines the masking shape and area set according to the shape and motion characteristics of the object.

In addition, the method further includes a timer unit that interworks with the image acquisition unit and assigns a time tag to the acquired image in real time, wherein the key setting unit generates different authentication keys for each time zone for accessing the stored image within the selected time tag range. can be

In addition, a deletion management unit that grants the right to delete the image stored in the storage unit as the authentication key is generated by combining the split key generated through the key setting unit, but automatically deletes the image as a set time elapses after the image is stored. may include

In checking CCTV footage through the present invention, as authentication using a distributed key has to be done through preset parties, it is possible to solve the problem of infringement of personal information and privacy due to the confirmation and management of images that had to be done indiscriminately in the prior art. .

In particular, by applying various authentication methods, including biometrics, passwords, and RF cards, in addition to greatly improving security, it is possible to improve the management convenience of related persons such as investigative agencies and building security managers, and the demand for CCTV in educational facilities and hospitals It can solve the problem that may be troubled by the possibility of invasion of privacy even as the number of people increases day by day.

1 is a conceptual diagram of the present invention;
2 is a block diagram showing the configuration and connection relationship according to an embodiment of the present invention;
3 is an operation explanatory diagram according to an embodiment in which the present invention is applied to a medical institution;
4 is an operation explanatory diagram according to an embodiment in which the present invention is applied to an educational institution.

Hereinafter, the configuration of the CCTV video management system for the protection of personal information of the present invention will be described in detail with reference to the accompanying drawings.

1 is a conceptual diagram of the present invention, and the present invention has a form of a CCTV system comprising a camera and an NVR to shoot a designated area and store the captured image.

In particular, as it is installed and filmed for security and safety, the video being filmed in a place where there is a risk of invasion of privacy for unspecified persons is protected by encrypting it to a level that cannot be displayed normally. provided at a level of protection.

In other words, the video input to the camera is masked and transmitted to the recorder, and the NVR corresponding to the recorder basically displays the masked video, but only through a pre-set authentication key, the decoded video is displayed and the backup is duplicated. do.

2 is a block diagram showing the configuration and connection relationship according to an embodiment of the present invention. According to detailed operations of the present invention, the image acquisition unit 110, the encryption unit 120, the storage unit 130, and the key The configuration of the setting unit 140 , the authentication unit 150 , the decryption unit 160 , the timer unit 170 , and the deletion management unit 180 is provided.

The image acquisition unit 110 is configured to acquire an image of a set area, and may be any type of camera provided in a conventional CCTV system. is the main subject of application.

The encryption unit 120 is configured to mask the set region of the acquired image so that it cannot be identified. Basically, the image acquired through the image acquisition unit 110 is encrypted and masked immediately in real time. Masking that makes it impossible to identify objects included in an image can be implemented through various commercial image masking algorithms such as image quality degradation, black screen, and partial occlusion. It can be restored to the original image that is not.

The storage unit 130 is configured to store the masked image, and stores the image processed through the encryption unit 120 over time through various commercially available data storage media including HDD and SSD.

At this time, when the image stored through the processing of the encryption unit 120 is displayed through a general NVR, onvif, or rtsp, the masked image is displayed, so it is practically impossible to confirm the image content.

The key setting unit 140 is configured to generate an authentication key that allows access to the storage unit. As mentioned above, the masked image is substantially decrypted through the reverse algorithm applied to the encryption unit 120. The required authentication key is generated.

In this case, the key setting unit 140 is configured to generate and distribute the authentication key as a split key in the form of a plurality of splits. This is a configuration that aims to fundamentally prevent the leakage of personal information or destruction of evidence by arbitrarily providing or deleting images to the outside as the CCTV administrator monopolizes all rights in operating the conventional CCTV system. have.

In this case, the split key may be various authentication methods used in the security field, and may be representative biometrics, passwords, RF cards, and the like. In addition, possession of the split key can be basically not only the manager of the CCTV, but also the investigative agency represented by the police, the hired security company, and in particular, the information protection target among the shooting targets according to the installation location of the CCTV.

Specifically, in the operating room of a medical institution, which is a major issue in the mandatory installation of CCTV, the operating surgeon and the patient or guardian can each have a split key, and in a daycare center or school, teachers and parents can split the split key.

The authentication unit 150 is configured to generate an authentication key by combining the split key generated through the key setting unit 140 and then grant access to the storage unit. In other words, only when all the generated split keys are gathered, an authentication key is generated to access the original video. to block the actions of

The decryption unit 160 is configured to restore and provide the original image by removing the masking of the stored image according to the access authority granted through the authentication unit. It is configured so that the original image can be checked as the split key is combined.

At this time, there are cases where security managers and investigative agencies of facilities, such as CCTV systems for security and crime prevention, have a fixed key. In some cases, the subject of the image may be different, such as in the operating room of a medical institution as exemplified above.

In this case, it is necessary to have a different split key and a holding target for each captured image. To this end, the authentication key and the split key are generated in advance before the video is taken.

In addition, the image acquisition unit 110 starts to acquire an image as an authentication key is generated by combining the split keys generated in advance through the key setting unit, and the encryption unit 120 stores the authentication key in response to the authentication key. Correspondingly, the encryption masking process is performed so that the masked image for each authentication key is stored in the storage unit 130 .

The timer unit 170 is configured to link with the image acquisition unit 110 to assign a time tag to the acquired image in real time. In response, the key setting unit 140 accesses the stored image within the selected time tag range. For this purpose, it can be configured to generate different authentication keys for each time zone.

Through this, even though continuous shooting is performed through the image acquisition unit 110, the person concerned, such as a patient, is given only a split key according to the image of the part where he or she is photographed, so that personal information about other patients can be thoroughly protected.

In addition, in masking the acquired image, it is possible to make the entire area indistinguishable through a black screen or deterioration of image quality. A method of selectively masking sensitive parts related to

To this end, the encryption unit 120 includes a recognition unit 121 that analyzes the acquired image to separate the motionless background from the motion object, and the recognition unit 121 includes the shape and motion characteristics of the object. A partial masking process is performed through an algorithm that determines the masking shape and area set according to the .

In addition to the verification procedure of the original image, operations such as arbitrary deletion, copying, and backup can be performed after authentication using the authentication key, thereby preventing the act of damaging the stored image to conceal the conventional accident.

To this end, the deletion management unit 180 generates an authentication key by combining the division key generated through the key setting unit 140 , thereby granting the right to delete the image stored in the storage unit 130 . In addition, the deletion management unit 180 applies a designated personal information retention period to automatically delete the image as a set time elapses after the image is stored, thereby managing personal information more safely.

3 is an operation explanatory diagram according to an embodiment in which the present invention is applied to a medical institution.

As mentioned above, for example, in an operating room where CCTV installation is an issue, an authentication key is generated in advance before surgery and the recording is started by authentication through this, so that the patient who is the main target of shooting does not have access rights other than their own surgical image.

In this case, the subject of possession of the split key is the hospital-side personnel such as the hospital director, operating surgeon, and other related persons, as well as the patient or guardian.

The captured image is masked, and after the operation is completed, the scope of access rights of the acquired image is re-verified by re-authentication through the authentication key after confirmation by the patient's guardian.

Basically, the photographed image can be confirmed or deleted through the approval of the authorized personnel, and since the hospital-side personnel usually resides, it is actually made through the approval of the patient (or guardian). Of course, even if there is no access to the video, the video is automatically deleted after a certain period of time according to the designation of the personal information retention period.

In addition, when an image is needed as evidence due to the occurrence of a medical dispute, all personnel authorized with the split key participate to restore the image to the original image and use it, and the mutual authentication of the parties has a strong effect.

4 is an operation explanatory diagram according to an embodiment in which the present invention is applied to an educational institution.

In this case, unlike the hospital described above, since the shooting target is constant for a long time, an authentication key is generated after the equipment is installed, but a split key is given to the personnel of the school, which is the administrator, and the student, the target of the shooting. A school principal, a designated teacher, and a steering committee member can be designated as the school personnel to which the split key is assigned, and the student's staff can be parents or student representatives. Similarly, a competent police station may be designated if necessary.

All images recorded thereafter are encrypted and masked and stored in chronological order, and automatically deleted after a set period has elapsed. If it is necessary to check the video due to an accident, the original video can be checked by generating an authentication key after all the personnel who have been given the split key gather and authenticate.

The right of the present invention is not limited to the embodiments described above, but is defined by what is described in the claims, and a person of ordinary skill in the art can make various modifications and adaptations within the scope of the claims. it is self-evident

110: image acquisition unit 120: encryption unit
121: recognition unit 130: storage unit
140: key setting unit 150: authentication unit
160: decoding unit 170: timer unit
180: deletion management unit

Claims (5)

In the CCTV video management system,
an image acquisition unit 110 for acquiring an image of a set area;
an encryption unit 120 for masking the set region of the acquired image so that it cannot be identified;
a storage unit 130 for storing the masked image;
a key setting unit 140 for generating an authentication key allowing access to the storage unit, and generating the authentication key as a divided key in a plurality of divided forms;
an authentication unit 150 for creating an authentication key by combining the split keys generated through the key setting unit 140 and granting access to the storage unit;
a decryption unit 160 that restores and provides the original image by removing the masking of the stored image according to the access right granted through the authentication unit; includes,
Further comprising a timer unit 170 interlocking with the image acquisition unit 110 to assign a time tag to the acquired image in real time,
The key setting unit 140,
CCTV video management system, characterized in that it is configured to generate a different authentication key for each time zone for accessing the stored video within the selected time tag range.
According to claim 1,
The image acquisition unit 110,
As an authentication key is generated by combining the split keys generated in advance through the key setting unit 140, image acquisition is started,
The encryption unit 120 performs encryption masking in response to the authentication key in response to the authentication key, and the masked image for each authentication key is stored in the storage unit.
According to claim 1,
The encryption unit 120,
CCTV image, characterized in that it further comprises a recognition unit 121 that analyzes the obtained image to separate the motionless background from the motionless object, and determines the masking shape and area set according to the shape and motion characteristics of the object. management system.
delete According to claim 1,
Deletion management unit that grants the right to delete the image stored in the storage unit as the authentication key is generated by combining the split key generated through the key setting unit 140, but automatically deletes the image as a set time elapses after the image is stored (180) CCTV video management system, characterized in that it further comprises.

Images