KR102577403B1 - Distributed storage cctv system with data leakage prevention through data encryption - Google Patents

Abstract

The present invention relates to a leak prevention distributed storage CCTV system (100) through data encryption, and more specifically, the system includes: a distribution unit; a storage management unit; an encryption unit; a storage device; a decryption unit; a CCTV viewer unit; a remote CCTV viewer unit; and a network security transmission unit.

Description

Distributed storage CCTV system to prevent leakage through data encryption {DISTRIBUTED STORAGE CCTV SYSTEM WITH DATA LEAKAGE PREVENTION THROUGH DATA ENCRYPTION}

The present invention relates to a distributed storage CCTV system, and more specifically, to a distributed storage CCTV system that prevents leakage through data encryption.

The content described in this part simply provides background information on an embodiment of the present invention and does not constitute prior art.

CCTV (Closed Circuit Television) is a system that transmits images from a specific building or facility to a specific recipient using a wired or special wireless transmission path. It is used for industrial, educational, medical, traffic control, surveillance, disaster prevention, and in-house video information purposes. It has a variety of uses, including delivery. Unlike regular television broadcasts, CCTV signals are transmitted only by coaxial cable, microwave link, or other transmission medium with controlled access, so they cannot be received arbitrarily by the general public.

CCTV is often used for unmanned surveillance in crime-ridden areas such as banks or alleys that require security. Recently, the scope of use is expanding, with individuals installing CCTV in their homes for the safety of children, the elderly, and pets.

Recently, as the quality of CCTV images has gradually developed into higher resolution, Full-HD image quality has become common, and the data processing capacity that must be processed in CCTV systems is also increasing accordingly. Due to the nature of the CCTV system, which requires storing captured images for more than a certain period of time, a distributed storage technology that can efficiently store data and prevent time delays has been disclosed (Registered Patent No. 10-1903726).

Meanwhile, CCTV footage can have the effect of preventing and suppressing crime, making it easier to find and arrest criminals, reducing fear of crime, and supplementing police personnel, but it can be problematic in that it infringes on the portrait rights and privacy of ordinary citizens. However, encryption is often not applied to CCTV systems due to technical limitations, cost issues, and encrypted data processing problems. Therefore, in order to prevent the leakage of video data and safely store and transmit it, the development of leakage prevention technology that can be practically applied to CCTV systems is required.

The above-mentioned background technology is technical information that the inventor possessed for deriving the present invention or acquired in the process of deriving the present invention, and cannot necessarily be said to be known technology disclosed to the general public before filing the application for the present invention.

The present invention was proposed to solve the above-mentioned problems of previously proposed methods, and distributes and stores video data captured by CCTV cameras or IP cameras, and encrypts the video data in the encryption unit to create a dedicated block-level encryption file. When playing, the decryption unit decrypts the dedicated block-level encrypted file into video data and plays it. When backing up video for external export, the original data is encrypted, and the backed-up encrypted file is played using a dedicated player. The purpose is to provide a leak-proof distributed storage CCTV system through data encryption that can eliminate concerns about video data leakage.

In addition, the present invention prohibits direct access through a proxy server and performs reliable channel communication based on the encryption communication protocol of the Https tunneling method for video transmission with an IP camera with video transmission security. It prevents hacking, and the network security transmission unit encrypts and manages the communication protocol when a client connects remotely, eliminating concerns about video data being leaked in all processes of remote client access, monitoring, and backup through data encryption. Another purpose is to provide a leak-proof distributed storage CCTV system.

In addition, the present invention plays encrypted video data through a dedicated player with a built-in decryption algorithm provided by the player provider, so that even if the video data is secured through hacking or hard disk theft, the encrypted video data cannot be stored without a dedicated player. Another purpose is to provide a leak-preventing distributed storage CCTV system through data encryption that prevents leakage of video data even in the event of hacking or hard disk hijacking by making it unverifiable.

However, the technical problem to be achieved by the present invention is not limited to the technical problems described above, and other technical problems may exist, and even if not explicitly mentioned, the purpose or purpose that can be understood from the solution or embodiment of the problem Of course, effects are also included in this.

A distributed storage CCTV system to prevent leakage through data encryption according to the characteristics of the present invention to achieve the above object is,

A distributed storage CCTV system that receives and distributes video data from CCTV cameras or IP cameras in real time,

A distribution unit that receives and distributes video data from CCTV cameras or IP cameras in real time;

a storage management unit that receives image data from the distribution unit, stores the image data distributed in a plurality of storage devices, and loads the image data from the storage devices;

an encryption unit that encrypts the image data in block units and generates a dedicated block-unit encryption file;

a storage device that stores image data in the form of the dedicated block-level encrypted file encrypted in the encryption unit;

a decryption unit that reads the dedicated block-level encryption file and decrypts it into image data;

A CCTV viewer unit that monitors video data received from the distribution unit in real time, monitors video data stored in the storage device or backs it up as an encrypted file, and plays video data backed up as an encrypted file through a dedicated player. ;

Monitoring video data received from the distribution unit from a remote location in real time, remote monitoring or backing up video data stored in the storage device as an encrypted file, and playing video data backed up as an encrypted file through a dedicated player. Remote CCTV viewer unit; and

A network security transmission unit that provides a trusted channel based on an encrypted communication protocol for remote access to the remote CCTV viewer unit and transmits video data to a client through communication based on the encrypted communication protocol,

The storage management unit,

Real-time video data received through the distribution unit is encrypted in blocks through the encryption unit and distributedly stored in the storage device,

The remote CCTV viewer unit,

For remote real-time monitoring, receive the video data through the network security transmission unit and perform remote real-time monitoring,

The remote CCTV viewer unit,

Attempts to connect through the network security transmission unit for remote monitoring and backup, and after completion of authentication, receives the video data decrypted through the decryption unit from the dedicated block-unit encryption file stored in the storage device through the network security transmission unit. Its structural feature is that the video data can be played back for remote monitoring or backed up as an encrypted file.

Preferably,

The encryption unit encrypts the image data in blocks using AES-256, a symmetric key encryption method, and stores it in the storage device,

The network security transmission unit may communicate using the TLS (Transport Layer Security) encrypted communication protocol for encrypted communication.

Preferably,

When the CCTV camera or IP camera is a video transmission security camera, a user authentication unit to authenticate the user, control the user's access to video data captured by the video transmission security camera, and maintain integrity and confidentiality; and

For secure video transmission, it may further include a proxy server that prohibits direct access to the encrypted distributed storage system and prevents hacking by performing reliable channel communication based on the HTTPS tunneling encryption communication protocol.

More preferably, the distribution unit,

After completing authentication to the video transmission security camera through the user authentication unit, video data is received from the video transmission security camera through reliable channel communication of the proxy server 150, and the received video data is transmitted to the CCTV. It can be delivered to the viewer unit to be played back in real time, and the received video data can be delivered to the encryption unit to be encrypted and stored in the form of a dedicated block-based encrypted file.

Preferably, the network security transmission unit,

(1) receiving an encrypted packet from a client;

(2) decoding the packet received in step (1);

(3) confirming the IP that transmitted the packet;

(4) if the IP confirmed in step (3) is not an allowed IP, blocking and terminating the client's connection;

(5) If the IP confirmed in step (3) is an allowed IP, authenticating the account through encrypted account information, but if authentication fails, blocking and terminating the client's connection; and

(6) If account authentication is successful in step (5), the step of approving the client's connection and allocating a reliable channel based on the TLS encrypted communication protocol to transmit video data can be performed.

Preferably,

It further includes a backup unit that performs a backup of image data stored in the storage device,

The CCTV viewer unit,

Backup is performed in conjunction with the backup unit. For backup, the decryption unit reads the dedicated block-unit encryption file stored in the storage device, decrypts it into video data, re-encrypts it, and stores it as a video file in the requested format. You can back up.

More preferably, the remote CCTV viewer unit,

For backup, a connection is attempted through the network security transmission unit, and video data can be encrypted through the backup unit and backed up in the form of a secure backup file.

Even more preferably,

The CCTV viewer unit or remote CCTV viewer unit provides a viewer used to play video data in real time or stored video data for monitoring, and a dedicated player used to play back-up video, wherein the decoding algorithm through the decoder unit It may further include a player providing unit that provides the dedicated player to the CCTV viewer unit or remote CCTV viewer unit so that the video data can be played by decoding the security backup file through the built-in dedicated player.

According to the leak-prevention distributed storage CCTV system through data encryption proposed in the present invention, video data captured by CCTV cameras or IP cameras is distributedly stored, and the video data is encrypted in the encryption unit in the form of a dedicated block-level encrypted file. When storing and playing, the decryption unit decrypts the dedicated block-level encrypted file into video data and plays it. When backing up video for external export, the original data is encrypted, and the backed up encrypted file is played using a dedicated player, thereby converting the video data. Concerns about leakage can be eliminated.

In addition, according to the leak-proof distributed storage CCTV system through data encryption proposed in the present invention, in order to transmit video with an IP camera with secured video transmission, direct access is prohibited through a proxy server and Https tunneling method is used. It prevents hacking by performing reliable channel communication based on the encrypted communication protocol, and the network security transmission unit encrypts and manages the communication protocol when the client connects remotely, thereby protecting video data in all processes of remote client access, monitoring, and backup. Concerns about leakage can be eliminated.

In addition, according to the distributed storage CCTV system to prevent leakage through data encryption proposed in the present invention, the encrypted video data is played through a dedicated player with a built-in decryption algorithm provided by the player provider, thereby preventing hacking or hard disk theft. Even if video data is secured through a dedicated player, the encrypted video data cannot be viewed without a dedicated player, preventing leakage of video data even in the event of hacking or hard disk hijacking.

In addition, the various and beneficial advantages and effects of the present invention are not limited to the above-described content, and may be more easily understood in the process of explaining specific embodiments of the present invention.

Figure 1 is a diagram showing the device configuration of a distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.
Figure 2 is a diagram showing the detailed configuration of a distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.
Figure 3 is a diagram showing a process in which the encryption unit of the distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention encrypts image data.
Figure 4 is a diagram illustrating the encrypted storage processing process of real-time video data in a distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.
Figure 5 is a diagram showing a process in which the decryption unit of the distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention decrypts encrypted image data.
Figure 6 is a diagram illustrating a decryption process of stored image data in a distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.
Figure 7 is a diagram illustrating a real-time video data remote transmission processing process in a distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.
Figure 8 is a diagram illustrating a remote transmission processing process of stored image data in a distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.
Figure 9 is a diagram illustrating the authentication process of the network security transmission unit in the distributed storage CCTV system to prevent leakage through data encryption according to an embodiment of the present invention.

Below, with reference to the attached drawings, embodiments of the present invention will be described in detail so that those skilled in the art can easily implement the present invention. However, the present invention may be implemented in many different forms and is not limited to the embodiments described herein. In order to clearly explain the present invention in the drawings, parts that are not related to the description are omitted, and similar parts are given similar reference numerals throughout the specification.

Throughout the specification, when a part is said to be "connected" to another part, this includes not only the case where it is "directly connected," but also the case where it is "indirectly connected" with another element in between. . In addition, when a part is said to "include" a certain component, this does not mean excluding other components unless specifically stated to the contrary, but may further include other components, and one or more other features. It should be understood that it does not exclude in advance the presence or addition of numbers, steps, operations, components, parts, or combinations thereof.

The following examples are detailed descriptions to aid understanding of the present invention and do not limit the scope of the present invention. Accordingly, inventions of the same scope and performing the same function as the present invention will also fall within the scope of rights of the present invention.

Additionally, each configuration, process, process, or method included in each embodiment of the present invention may be shared within the scope of not being technically contradictory to each other.

Additionally, in the present invention, some of the operations or functions described as being performed by a terminal, apparatus, or device may instead be performed on a server connected to the terminal, apparatus, or device. Likewise, some of the operations or functions described as being performed by the server may also be performed on a terminal, device, or device connected to the server.

In particular, the means for executing the system according to each embodiment of the present invention may be an application or a web server, and the terminal that can read the recording medium recording the application or web server may be, It may include not only general PCs such as desktops and laptops, but also mobile terminals such as smart phones and tablet PCs.

Hereinafter, embodiments of the present invention will be described in detail with reference to the attached drawings.

Figure 1 is a diagram showing the device configuration of a distributed storage CCTV system 100 to prevent data leakage through data encryption according to an embodiment of the present invention. As shown in FIG. 1, the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention receives video data in real time from the CCTV camera 11 or the IP camera 12, and An encrypted distributed storage CCTV system 100 that encrypts and stores distributed data may be configured to include a camera 10, an encrypted distributed storage device 20, and a client 30. Hereinafter, with reference to FIG. 1, the device constituting the distributed storage CCTV system 100 to prevent data leakage through data encryption according to an embodiment of the present invention will be described in detail.

The camera 10 is a device that collects video data that is subject to encryption and distributed storage in the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention, and is a CCTV camera 11 or It may include an IP camera 12, etc. Additionally, the camera 10 may include both a camera 10 with video transmission security and a camera 10 without video transmission security.

The encrypted distributed storage device 20 can encrypt and distribute image data received from the CCTV camera 11 or the IP camera 12 through a closed network router. In other words, the encrypted distributed storage device 20 protects the confidentiality of the video data by applying encryption in the storage process of video data captured by the CCTV camera 11 or the IP camera 12 and is related to communication for remote access. External access can be managed through protocol encryption, and encryption can be applied when backing up for export to prevent external leakage of video due to hacking or data backup by an unspecified number of people.

The client 30 may be an electronic device that remotely accesses the encrypted distributed storage device 20 through a network such as the Internet for monitoring or backing up video data. More specifically, a remote viewer and a dedicated player are installed in the client 30, and real-time video monitoring and stored video playback are possible through the remote viewer, and encrypted video data can be decrypted and played through the dedicated player. .

Here, the electronic devices include smartphones, tablet personal computers, mobile phones, video phones, e-book readers, desktop PCs, laptop PCs, netbook computers, and workstations. ), a server, a personal digital assistant (PDA), a media box, a game console, an electronic dictionary, or a wearable device. The wearable device may be an accessory type (e.g., a watch, a ring, Bracelets, anklets, necklaces, glasses, contact lenses, or head-mounted-devices (HMDs), fabric or clothing-integrated (e.g. electronic garments), body-worn (e.g. skin pads or tattoo), or an implantable circuit. In various embodiments, the electronic device is not limited to the above-described devices, and may be a combination of two or more of the various devices described above. there is.

Figure 2 is a diagram showing the detailed configuration of a distributed storage CCTV system 100 to prevent data leakage through data encryption according to an embodiment of the present invention. As shown in FIG. 2, the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention includes a distribution unit 105, a storage management unit 110, an encryption unit 115, and a storage unit. It may be configured to include a device 120, a decryption unit 125, a CCTV viewer unit 130, a remote CCTV viewer unit 135, and a network security transmission unit 140, and a user authentication unit 145 and a proxy server. It may further include a backup unit 150, a backup unit 155, and a player provision unit 160.

More specifically, the leak-proof distributed storage CCTV system 100 through data encryption proposed in the present invention includes: i) an encryption unit ( In 115), video data is encrypted in block units and stored in the form of a dedicated block-unit encrypted file, and ii) in the case of video transmission security cameras, authentication is additionally performed through the user authentication unit 145, and after completion of authentication, Video data is received and monitored in real time through reliable channel communication of the Https tunneling method through the proxy server 150, and stored in the form of a dedicated block-level encrypted file through a self-encryption process by the encryption unit 115, ⅲ ) When remotely monitoring and backing up the remote CCTV viewer unit 135, and when remotely accessing the client 30 from the network security transmission unit 140, video data is transmitted based on a reliable channel based on an encrypted communication protocol. By applying encryption and encrypted communication in all processes of storage, remote access of the client 30, remote monitoring, and backup, concerns about leakage of video data can be eliminated.

Here, the functions of each component constituting the leak-prevention distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention can be performed in the encrypted distributed storage device 20 and the client 30, Specific functions of each unit may be processed individually or distributedly by multiple devices. For example, the remote CCTV viewer unit 135 may include functions performed in the client 30, and the player provider unit 160 may include some functions in the encrypted distributed storage device 20 and the client 30, respectively. can be performed. Hereinafter, each configuration of the data leak-prevention distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention will be described in detail with reference to FIG. 2.

The distribution unit 105 can receive and distribute video data from the CCTV camera 11 or the IP camera 12 in real time. Here, the distribution unit 105 can receive video data in real time through the RTSP protocol.

The storage management unit 110 may receive image data from the distribution unit 105, store the image data distributed in a plurality of storage devices 120, and load the image data from the storage devices 120. More specifically, the storage management unit 110 may encrypt real-time video data received through the distribution unit 105 in block units through the encryption unit 115 and store the distributed data in the storage device 120 . That is, the storage management unit 110 stores image data in the storage device 120 and manages the process of retrieving the stored data, and can store image data in a distributed manner for efficient use of the storage device 120.

The encryption unit 115 may encrypt image data using its own encryption algorithm. More specifically, the encryption unit 115 can encrypt the image data in blocks to create a dedicated block-by-block encryption file. At this time, the image data is encrypted in blocks using AES-256, a symmetric key encryption method, etc. It can be stored in the storage device 120. The encryption unit 115 may generate a dedicated block-level encryption file after encrypting the image data. Figure 3 is a diagram showing a process in which the encryption unit 115 of the distributed storage CCTV system 100 to prevent leakage through data encryption according to an embodiment of the present invention encrypts image data.

Here, block-by-block encryption means that continuous image data captured by the camera 10 is cut into first blocks of a predetermined time length (for example, 1 minute) and processed, and the first blocks are again divided into first blocks of a predetermined size. This may mean cutting into second blocks of (e.g., 400 bytes) and applying an encryption algorithm (e.g., AES-256) to each second block to create a block-wise encrypted file.

The storage device 120 stores image data in the form of a dedicated block-level encrypted file encrypted in the encryption unit 115, and may perform distributed storage. Here, the storage device 120 may be implemented with various hardware such as HDD, and by storing encrypted image data, it is possible to prevent the image from being leaked even if the storage device 120 is leaked.

FIG. 4 is a diagram illustrating the encrypted storage processing process of real-time video data in the leak-prevention distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention. As shown in FIG. 4, in the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention, image data captured by the CCTV camera 11 or IP camera 12 is distributed to the distribution unit. After reception by 105, the image data encrypted by the encryption unit 115 can be stored in the storage device 120 through the storage management unit 110.

The decryption unit 125 can read a dedicated block-level encrypted file and decrypt it into image data. Here, the decryption unit 125 may be configured to include a decryption algorithm that decrypts the self-encryption algorithm of the encryption unit 115, and may be configured as an encryption/decryption integrated video recording device (encrypted distributed storage device 20). there is. Figure 5 is a diagram showing a process in which the decryption unit 125 of the distributed storage CCTV system 100 to prevent leakage through data encryption according to an embodiment of the present invention decrypts encrypted image data.

The CCTV viewer unit 130 monitors the video data received from the distribution unit 105 in real time, monitors the video data stored in the storage device 120, or backs it up as an encrypted file. You can play video data backed up as a file. Here, the CCTV viewer unit 130 is configured to reproduce video data from the encrypted distributed storage device 20 and may be configured to include a live viewer and a search viewer.

FIG. 6 is a diagram illustrating a decryption process of stored image data in a distributed storage CCTV system 100 to prevent leakage through data encryption according to an embodiment of the present invention. As shown in FIG. 6, in the leak-prevention distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention, when video playback is requested through the CCTV viewer unit 130, in response to the request The storage management unit 110 can load encrypted data stored in the storage device 120, decrypt it in the decryption unit 125, and then play it on the CCTV viewer unit 130. In other words, even when playing video data inside the encrypted distributed storage device 20, the video data can be safely managed by loading the encrypted video data, decrypting it, and then playing it.

The remote CCTV viewer unit 135 monitors video data received from the distribution unit 105 from a remote location in real time, remotely monitors video data stored in the storage device 120, or backs it up as an encrypted file, and performs a dedicated player. You can play video data backed up as an encrypted file. In other words, the remote CCTV viewer unit 135 is configured to process requests and play video data in response to remote monitoring or backup requests from the client 30. Encryption is applied during the remote monitoring and backup process to prevent leakage of video data. It can be prevented.

The network security transmission unit 140 provides a trusted channel based on an encrypted communication protocol for remote access of the remote CCTV viewer unit 135, and can transmit video data to the client 30 through communication based on an encrypted communication protocol. there is. More specifically, the network security transmission unit 140 may communicate using the TLS encrypted communication protocol for encrypted communication. That is, the network security transmission unit 140 can enable safe remote access by applying TLS encryption during server-client 30 communication.

More specifically, the remote CCTV viewer unit 135 may receive video data through the network security transmission unit 140 for remote real-time monitoring. In addition, the remote CCTV viewer unit 135 attempts to connect through the network security transmission unit 140 for remote monitoring and backup, and after completing authentication, the dedicated block unit encryption file stored in the storage device 120 is decrypted ( The video data decrypted through 125) can be received through the network security transmission unit 140, and the video data can be played back for remote monitoring or saved as an encrypted file for backup. Remote transmission of real-time video data and remote transmission of stored video data will be described in detail later with reference to FIGS. 7 and 8.

When the CCTV camera 11 or IP camera 12 is a video transmission security camera, the user authentication unit 145 authenticates the user, controls the user's access to video data captured by the video transmission security camera, and controls the integrity and is configured to maintain confidentiality. More specifically, the user authentication unit 145 processes user authentication through HTTP Digest SHA-2 authentication or RTSP Digest SHA-2 authentication, and may use SHA-1 authentication as a SOAP user authentication method.

The proxy server 150 prohibits direct access to video transmission security cameras for secure video transmission and can prevent hacking by performing reliable channel communication based on the Https tunneling encrypted communication protocol.

The backup unit 155 may perform a backup of images stored in the storage device 120. The remote CCTV viewer unit 135 may attempt to connect through the network security transmission unit 140 for backup and back up through the backup module. The CCTV viewer unit 135 performs backup in conjunction with the backup unit 155, and for backup, the decryption unit 125 reads the dedicated block-unit encryption file stored in the storage device 120 and decrypts it into video data. , it can be backed up by re-encrypting it and saving it as a video file in the requested format. Additionally, the remote CCTV viewer unit 135 may attempt to connect through the network security transmission unit 140 for backup, encrypt the image data through the backup unit 155, and back it up in the form of a secure backup file. That is, the backup unit 155 is configured to support external backup when requesting export of video data, and can process additional encryption during external backup. At this time, the backup unit 155 supports avi format backup and can process encryption using AES-128, a symmetric key encryption method, etc.

The player provider unit 160 is a viewer used by the CCTV viewer unit 130 or the remote CCTV viewer unit 135 to play back video data or stored video data in real time for monitoring and to play back-up video. Provides a dedicated player that decrypts the security backup file through a dedicated player with a built-in decryption algorithm through the decryption unit 125 and uses a CCTV viewer unit 130 or a remote CCTV viewer unit 135 so that the video data can be played. A dedicated player can be provided. In addition, the player provider 160 can manage the dedicated player's decryption algorithm updates, etc. to stably maintain the dedicated player.

FIG. 7 is a diagram illustrating a real-time video data remote transmission processing process in the leak-prevention distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention. As shown in FIG. 7, the remote CCTV viewer unit 135 of the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention, the network security transmission unit 140 for remote real-time monitoring. ) allows remote real-time monitoring by receiving video data. That is, when the client 30, which is allowed to access through the network security transmission unit 140, requests real-time monitoring, the distribution unit 105 transmits video data through the network security transmission unit 140 in an encrypted communication protocol-based manner. Video can be transmitted through a trusted channel. Therefore, video data can be safely transmitted over the network even during real-time remote monitoring.

Meanwhile, as shown in FIG. 7, if the CCTV camera 11′ or the IP camera 12′ is a video transmission security camera 10′, user authentication is additionally performed through the user authentication unit 145. , It is possible to communicate through a reliable channel based on an encrypted communication protocol using Https tunneling through the proxy server 150. That is, after completing authentication with the video transmission security camera 10′ through the user authentication unit 145, the distribution unit 105 authenticates the video transmission security camera 10 through reliable channel communication of the proxy server 150. ′), and the received video data can be transmitted through a trusted channel based on the TLS encrypted communication protocol through the network security transmission unit 140. In addition, if the CCTV camera 11' or the IP camera 12' is a video transmission security camera 10', the distribution unit 105 provides information to the video transmission security camera 10' through the user authentication unit 145. After completing authentication, video data is received from the video transmission security camera 10′ through the proxy server 150, the received video data is transmitted to the CCTV viewer unit 130 to be played in real time, and the received video data is transmitted to the CCTV viewer unit 130. It can be transmitted to the encryption unit 115 to be encrypted and stored in the form of a dedicated block-level encrypted file.

That is, when receiving video data from the video transmission security camera 10', user authentication is additionally performed through the user authentication unit 145, and encryption communication protocol-based encryption is performed through Https tunneling through the proxy server 150. Data received through reliable channel communication can be monitored in real time by the CCTV viewer unit 130, and the video data can be encrypted through its own encryption algorithm in the encryption unit 115 and stored in the storage device 120. Therefore, a person who steals video data cannot decrypt the stolen data because it has been encrypted using the encryption unit 115's own encryption algorithm, thereby effectively preventing data leakage.

FIG. 8 is a diagram illustrating a remote transmission processing process of stored image data in the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention. As shown in FIG. 8, the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention allows access through the network security transmission unit 140 and the user authentication unit 145. When the client 30 requests remote monitoring or backup of stored video data, the storage management unit 110 loads the encrypted video data, that is, a dedicated block-level encryption file, from the storage device 120 and performs the decryption unit 125. It can be decrypted and transmitted to the remote CCTV viewer unit 135 through the network security transmission unit 140. The remote CCTV viewer unit 135 can receive video data and play it back with a dedicated viewer.

FIG. 9 is a diagram illustrating the authentication process of the network security transmission unit 140 in the distributed storage CCTV system 100 to prevent leakage through data encryption according to an embodiment of the present invention. As shown in FIG. 9, the network security transmission unit 140 of the leak-proof distributed storage CCTV system 100 through data encryption according to an embodiment of the present invention receives an encrypted packet from the client 30. Step (S141), decoding the packet received in step S141 (S142), checking the IP that sent the packet (S143), if the IP confirmed in step S143 is not an allowed IP, the client 30 is not connected. Blocking and terminating step (S144). If the IP confirmed in step S143 is an allowed IP, the account is authenticated through encrypted account information, but if authentication fails, connection of the client 30 is blocked and terminated (S145). And if account authentication is successful in step S145, a step S146 of approving the connection of the client 30 and transmitting video data through a trusted channel based on the TLS encrypted communication protocol can be performed.

In this way, the network security transmission unit 140 of the distributed storage CCTV system 100 to prevent leakage through data encryption according to an embodiment of the present invention allows or blocks access from a specific IP address and the user authentication unit 145 By processing user authentication through , limited access is allowed only when an authorized user uses a confirmed client 30 device, thereby systematically managing external accessors and strengthening security.

As described above, according to the leak-proof distributed storage CCTV system 100 through data encryption proposed in the present invention, video data captured by the CCTV camera 11 or IP camera 12 is distributedly stored, and the encryption unit The video data is encrypted at 115 and stored in the form of a dedicated block-unit encrypted file. When playing, the decryption unit 125 decrypts the dedicated block-unit encrypted file into video data and plays it. When backing up the video for external export, the original By encrypting data and playing backed up encrypted files using a dedicated player, you can eliminate concerns about video data being leaked.

In addition, according to the leak-proof distributed storage CCTV system 100 through data encryption proposed in the present invention, direct access through the proxy server 150 is prohibited for video transmission with IP cameras with video transmission security. Hacking is prevented by performing reliable channel communication based on the HTTPS tunneling encryption communication protocol, and the network security transmission unit 140 encrypts and manages the communication protocol when the client 30 remotely accesses the remote client 30. You can eliminate concerns about video data leakage during all processes of access, monitoring, and backup.

In addition, according to the leak-prevention distributed storage CCTV system 100 through data encryption proposed in the present invention, by playing encrypted video data through a dedicated player with a built-in decryption algorithm provided by the player provider 160, Even if video data is secured through hacking or hard disk theft, the encrypted video data cannot be viewed without a dedicated player, preventing leakage of video data even in the event of hacking or hard disk theft.

Meanwhile, the present invention may include a computer-readable medium containing program instructions for performing operations implemented in various communication terminals. For example, computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD_ROM and DVD, and floptical disks. It may include magneto-optical media and hardware devices specifically configured to store and perform program instructions, such as ROM, RAM, flash memory, etc.

Such computer-readable media may include program instructions, data files, data structures, etc., singly or in combination. At this time, program instructions recorded on a computer-readable medium may be specially designed and configured to implement the present invention, or may be known and available to those skilled in the computer software art. For example, it may include not only machine language code such as that produced by a compiler, but also high-level language code that can be executed by a computer using an interpreter, etc.

The description of the present invention described above is for illustrative purposes, and those skilled in the art will understand that the present invention can be easily modified into other specific forms without changing the technical idea or essential features of the present invention. will be. Therefore, the embodiments described above should be understood in all respects as illustrative and not restrictive. For example, each component described as unitary may be implemented in a distributed manner, and similarly, components described as distributed may also be implemented in a combined form.

The scope of the present invention is indicated by the claims described below rather than the detailed description above, and all changes or modified forms derived from the meaning and scope of the claims and their equivalent concepts should be construed as being included in the scope of the present invention. do.

10: Camera
10′: Video transmission security camera
11: CCTV camera
12: IP Camera
20: Encrypted distributed storage device
30: Client
100: Encrypted distributed storage CCTV system
105: Distribution unit
110: storage management unit
115: Encryption unit
120: storage device
125: Decryption unit
130: CCTV viewer unit
135: Remote CCTV viewer unit
140: Network security transmission unit
145: User authentication unit
150: proxy server
155: Backup unit
160: Player provision department
S141: Receiving an encrypted packet from the client
S142: Decoding the received packet
S143: Step to check the IP that sent the packet
S144: Blocking and terminating client access if the IP is not allowed
S145: If the IP is allowed, authenticate the account through encrypted account information, but if authentication fails, block the client's connection and terminate it.
S146: If account authentication is successful, approving the client's connection and transmitting video data through a trusted channel based on the TLS encrypted communication protocol

Claims (8)

A distributed storage CCTV system (100) that receives video data in real time from a CCTV camera (11) or an IP camera (12) and stores it in a distributed manner,
a distribution unit 105 that receives and distributes video data in real time from a CCTV camera 11 or an IP camera 12;
a storage management unit 110 that receives image data from the distribution unit 105, stores the image data distributed in a plurality of storage devices 120, and loads the image data from the storage devices 120;
An encryption unit 115 that encrypts the image data and encrypts the image data block by block to generate a dedicated block-by-block encryption file;
a storage device 120 that stores image data in the form of the dedicated block-level encrypted file encrypted in the encryption unit 115;
A decryption unit 125 that reads the dedicated block-level encryption file and decrypts it into image data;
Monitor video data received from the distribution unit 105 in real time, monitor video data stored in the storage device 120, or back up as an encrypted file, and video data backed up as an encrypted file through a dedicated player. CCTV viewer unit 130 that plays;
Monitor video data received from the distribution unit 105 from a remote location in real time, remotely monitor video data stored in the storage device 120 or back it up as an encrypted file, and back up as an encrypted file through a dedicated player. a remote CCTV viewer unit 135 that plays back the video data;
A network security transmission unit 140 that provides a trusted channel based on an encrypted communication protocol for remote access of the remote CCTV viewer unit 135 and transmits video data to the client 30 through communication based on the encrypted communication protocol. ; and
It includes a backup unit 155 that performs backup of image data stored in the storage device 120,
The storage management unit 110,
The real-time video data received through the distribution unit 105 is encrypted in block units through the encryption unit 115 and distributed and stored in the storage device 120,
The remote CCTV viewer unit 135,
For remote real-time monitoring, the video data is received through the network security transmission unit 140 and remote real-time monitoring is performed,
The remote CCTV viewer unit 135,
For remote monitoring and backup, the connection is attempted through the network security transmission unit 140, and after completion of authentication, the dedicated block-unit encrypted file stored in the storage device 120 is decrypted through the decryption unit 125. Video data is received through the network security transmission unit 140, and the video data is played back for remote monitoring or backed up as an encrypted file,
The CCTV viewer unit 130,
Backup is performed in conjunction with the backup unit 155. For backup, the decryption unit 125 reads the dedicated block-unit encrypted file stored in the storage device 120, decrypts it into image data, and re-encrypts it. A leak-proof distributed storage CCTV system (100) through data encryption, characterized by storing and backing up video files in the requested format.
According to paragraph 1,
The encryption unit 115 encrypts the image data in block units using AES-256, a symmetric key encryption method, and stores it in the storage device 120,
The network security transmission unit 140 is a CCTV system 100 for preventing leakage through data encryption, characterized in that it communicates using the TLS encrypted communication protocol for encrypted communication.
According to paragraph 1,
When the CCTV camera 11 or IP camera 12 is a video transmission security camera, it is used to authenticate the user, control user access to video data captured by the video transmission security camera, and maintain integrity and confidentiality. User authentication unit 145; and
For secure video transmission, a proxy server 150 is added to prevent hacking by prohibiting direct access to the encrypted distributed storage system and performing reliable channel communication based on the HTTPS tunneling encryption communication protocol. A distributed storage CCTV system (100) to prevent leakage through data encryption, characterized in that it includes.
The method of claim 3, wherein the distribution unit 105,
After completing authentication to the video transmission security camera through the user authentication unit 145, video data is received from the video transmission security camera through reliable channel communication of the proxy server 150, and the received video is Data encryption, characterized in that the data is transmitted to the CCTV viewer unit 130 to be played in real time, and the received video data is transmitted to the encryption unit 115 to be encrypted and stored in the form of the dedicated block-based encryption file. Leakage prevention distributed storage CCTV system (100).
The method of claim 1, wherein the network security transmission unit 140,
(1) receiving an encrypted packet from the client 30;
(2) decoding the packet received in step (1);
(3) confirming the IP that transmitted the packet;
(4) if the IP confirmed in step (3) is not an allowed IP, blocking and terminating the connection of the client 30;
(5) If the IP confirmed in step (3) is an allowed IP, authenticating the account through encrypted account information, but if authentication fails, blocking and terminating the connection of the client 30; and
(6) If account authentication is successful in step (5), the step of approving the connection of the client 30 and allocating a reliable channel based on the TLS encrypted communication protocol to transmit video data is performed. Characterized by a leak-proof distributed storage CCTV system (100) through data encryption.
delete The method of claim 1, wherein the remote CCTV viewer unit 135,
Distributed leak prevention through data encryption, characterized by attempting to connect through the network security transmission unit 140 for backup, encrypting video data through the backup unit 155, and backing it up in the form of a secure backup file. Storage CCTV system (100).
In clause 7,
The CCTV viewer unit 130 or the remote CCTV viewer unit 135 provides a viewer used to play real-time or stored video data for monitoring and a dedicated player used to play backed-up video, and the decoding unit ( Providing the dedicated player to the CCTV viewer unit 130 or the remote CCTV viewer unit 135 so that the video data can be played by decrypting the security backup file through a dedicated player with a built-in decryption algorithm through 125). A CCTV system (100) for preventing leakage through data encryption, further comprising a player providing unit (160).

Images