TWI840837B - Management system for encrypted multimedia information and implementation method thereof - Google Patents

Abstract

When the present disclosure is implemented, a first user can scan a sensing device (such as a card) by a first information device (such as a mobile device with APP) to obtain an identification code; then the first information device generates a public key based on identity characteristics of a second user to encrypt a multimedia information (such as text, number, audio, images, video, etc.) which would be transmitted to the second user. Moreover, the first information device transmits the encrypted multimedia information, the identification code, and a time condition set by the first user to a server for a second encryption process. Further, the second user can scan the sensing device by a second information device to obtain the identification code and input the identity characteristics; then the second information device generates a private key corresponding to the public key and a key from the current point in time. Moreover, the second information device decrypts the encrypted multimedia information by the private key and the key to obtain the multimedia information.

Description

Encrypted multimedia information management system and implementation method thereof

The present invention relates to a multimedia information management system that can be encrypted based on time, and in particular to an encrypted multimedia information management system that can only be opened within a specific time period and an implementation method thereof.

With the development of technology, information devices such as mobile phones and computers have become quite popular. The use of multimedia information to convey information has gradually replaced the previous communication method that relies on text. For example, by wishing a birthday by shooting a birthday video or recording a will in multimedia information media and adding a text will, relatives can no longer face only cold text, but vivid images of their relatives before their death. The patents related to this technology are as follows: (1) Patent Publication No. TW201933149A, which is an interactive virtual reality system, including a service platform, a cloud database, and an interactive database. The service platform is accessible to users. The cloud database includes a storage for the living contract signed by the contracting party, a storage for the original audio-visual data uploaded by the user, a storage for the encoded audio-visual data processed by the service platform, and a storage for the virtual reality audio-visual data post-produced by the encoded audio-visual data; and (2) Publication No.: TW200943089A, sacrificial image management system and method thereof; (3) Publication No.: CN113034328A, information storage device.

However, since the above-mentioned usage scenarios are that the parties want to present the recorded content to the various objects in need at a specific time and situation, how to enable the objects to effectively receive the multimedia information content under specific time conditions and must be confirmed as the parties themselves is still a big problem at present; in addition, for multimedia information content involving rights and privacy, such as: wills, confidentiality, etc., especially in the current situation where information security vulnerabilities are hard to prevent, how to prevent multimedia information content from being leaked is an important issue; accordingly, how to enable multimedia information content to be opened only within a specific time period and have good encryption protection is a problem to be solved.

In view of the above problems, the inventors have made improvements to multimedia information management based on their years of experience in related industries. Therefore, the main purpose of the present invention is to provide an encrypted multimedia information management system with time conditions and encryption using personal identity characteristics, and its implementation method.

To achieve the above-mentioned purpose, the encrypted multimedia information management system and its implementation method of the present invention include a sensing device, a first information device, a second information device, and a server. When a first user wants to have the recorded multimedia information received and viewed by the second user at a specific time point, wherein the multimedia information may include data such as text, numbers, sounds, images, video streams, etc., the first user may first scan the sensing device with the first information device to obtain an identification code of the sensing device. The first user then sets a time condition (i.e., the specific time point for the second user to view) and an identity feature of the second user with the first information device. The first information device generates a public key using the identity feature and performs a first encryption on the multimedia information. After completion, the identification code, time condition, and the first encrypted multimedia information are uploaded to the server. At this time, the multimedia information is received. The second information device generates a key corresponding to the public key, and the second information device generates a key corresponding to the public key. ... Find the corresponding multimedia information, generate a key with the current time point and identification code for the first decryption. If the decryption is successful, it can be confirmed that the multimedia information is requested to be opened at the correct time. After the first decryption is completed, the server will use the private key for the second decryption. If the decryption is successful, it also means that it is the correct second user information, and it can be confirmed that the recipient is not the person who steals the information. In this way, the multimedia information can be opened by the designated user at a specific time.

In order to enable you to clearly understand the purpose, technical features and effects of this invention after implementation, the following description is provided with illustrations for your reference.

Please refer to "Figure 1", which is a system architecture diagram of the present invention. As shown in the figure, the encrypted multimedia information management system 1 of the present invention includes a sensing device 11, a first information device 12, a server 13, and a second information device 14. The following is an example of each device: (1) Sensing device 11: The sensing device 11 includes a wireless communication element 111, wherein the wireless communication element 111 can be, for example, a near-field communication (NFC) induction coil or a wireless radio frequency identification (RFI) The wireless communication element 111 stores the identification code of the sensing device 11, and when being sensed and read, if a decryption request is received, the identification code is transmitted to the device that issued the decryption request; in addition, the sensing device 11 may also have a color change element 112, and the color change element 112 may be, for example, a light-emitting element, such as a light-emitting diode light source, an electrochromic material, an electronic ink, etc. The color changing element 112 can change color or present a luminous state when the wireless communication element 111 is read or sensed. For example, when the wireless communication element 111 is successfully read, the color changing element 112 emits light, changes color, or presents different patterns. Preferably, the sensing device 11 is formed into a card shape, and the color changing element 112 is a transparent light-emitting diode and is formed around the card. (2) First information device 12: The first information device 12 can be, for example, a mobile phone, a tablet computer, a personal computer, etc. Preferably, the first information device 12 is a portable mobile device and is equipped with an application APP to execute subsequent technical features. The first information device 12 includes a first communication unit 121 and a first processor 122; the first communication unit 121 is used to be informationally connected with the sensing device 11 and the server 13, and obtain the identification code of the sensing device 11. In addition, the first processor 122 can be a second user An identity feature generates a public key based on a first key generation function, and the multimedia information is encrypted for the first time using the public key. The first key generation function can be, for example, an encryption algorithm such as RSA, ElGamal, Rabin, DSA, ECDSA, etc., and the multimedia information that has completed the first encryption is associated with the identification code, and then the multimedia information is uploaded to the server 13 with a time condition through the first communication unit 121; preferably, the first communication unit 121 can also be set with a browsing limit, and uploaded to the server 13 at the same time. (3) Server 13: The server 13 has a processing unit 131 and a memory unit 132. The processing unit 131 can respectively complete information connection with the first information device 12 and the second information device 14, and the memory unit 132 can store received information, such as multimedia information, identification code, private key, etc. The processing unit 131 takes the identification code and time condition as input data, and generates a key with symmetric encryption based on a second key generation function. The second key generation function can be, for example, a time-based one-time password algorithm (Time-based One-Time Password, TOTP), uses the key to perform a second encryption on the multimedia information that has completed the first encryption, and the processing unit 131 is also used to use the identification code to filter out the corresponding multimedia information; when there is a decryption demand, the processing unit 131 also generates a key based on the second key generation function based on the current time point and the identification code to perform the first decryption; and after completing the first decryption, it further performs a second decryption with a private key transmitted by the second information device 14, and transmits the multimedia information to the second information device 14 after the decryption is completed; preferably, the server 13 can delete the multimedia information or reject the decryption request based on the aforementioned browsing number limit; the processing unit 131 can be, for example, a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MPU), or a microcontroller (MCU). The memory unit 132 may be, for example, a solid state disk (SSD), a hard disk (HDD), a static random access memory (SRAM), a random access memory (DRAM), or a cloud drive (Cloud Drive) or a combination thereof, but is not limited thereto. (4)  Second information device 14: The second information device 14 can be, for example, a mobile phone, a tablet computer, a personal computer, etc. Preferably, the second information device 14 is a portable mobile device and is equipped with an application APP to execute subsequent technical features. The second information device 14 includes a second communication unit 141 and a second processor 142. The second communication unit 141 is used to establish information connection with the sensing device 11 and the server 13, and obtain the identification code of the sensing device 11; the second processor 142 can generate a private key corresponding to the aforementioned public key based on the identity feature and the first key generation function, and transmit the identification code and the private key to the server 13 through the second communication unit 141.

Please refer to "Figure 2" and "Figure 3", which are the flow charts (I) and (II) of the method of the present invention, and refer to "Figure 1" as well. As shown in the figure, the encrypted multimedia information management method of the present invention is divided into two parts, one is the encryption step of multimedia information M, and the other is the decryption step of multimedia information M, which are described in detail as follows: (1)  A card opening step S1: A first information device 12 sends an identification code request to the sensing device 11, and the sensing device 11 returns an identification code I to the first information device 12 after receiving it; wherein, it can be based on the wireless communication element 111 through the first communication unit 121 Near-field communication (NFC) or wireless radio frequency identification (RFI) RFID) and other technologies for data transmission; as shown in "Figure 4", which is a schematic diagram of the implementation of the present invention (I), a first user uses a first information device 12 to capture the identification code I of a card-like sensing device 11; preferably, if the sensing device 11 successfully receives the identification code I request, the sensing device 11 changes color or presents a light-emitting state. (2) A first encryption step S2: The first information device 12 generates a public key K_L using an identity feature F of a second user; wherein the identity feature F may be, for example, a fingerprint, a phone number, data related to personal information, such as an ID number, a birthday, a special anniversary, etc., or a self-set password; as shown in "Figure 5", which is a schematic diagram of the implementation of the present invention (II), the first information device 12 uses the even digits of the ID number of the second user to generate a public key K_L with asymmetric encryption through a first key generation function, and as shown in "Figure 6", which is a schematic diagram of the implementation of the present invention (III), the multimedia information M is encrypted for the first time using the public key K_L. (3)  A file creation step S3: The first information device 12 uploads the multimedia information M, the identification code I and a time condition T1 after the first encryption step S3 to a server 13, and establishes an association between the multimedia information M and the identification code I. As shown in "Figure 7", which is a schematic diagram of the implementation of the present invention (IV), the first user sets a time condition T1 through the first information device 12, and as shown in "Figure 8", which is a schematic diagram of the implementation of the present invention (V), the first information device 12 uploads the time condition T1, the multimedia information M after the first encryption, and the identification code I to the server 13; preferably, the first information device 12 can also send a browsing limit to the server 13. (4) A second encryption step S4: As shown in FIG. 9 , which is a schematic diagram of the implementation of the present invention (six), the server 13 provides the identification code I and the time condition T1 as input data, and generates a symmetrically encrypted key K_E based on a second key generation function. Referring to FIG. 10 , which is a schematic diagram of the implementation of the present invention (seven), the server 13 uses the key K_E to perform a second encryption on the multimedia information M that has completed the first encryption.

The above is a step in which a first user uses a first information device 12 to first encrypt multimedia information M to be transmitted to a second user. When the second user obtains a sensing device 11 and wants to decrypt and receive the multimedia information M, the following steps are followed. Please refer to "Figure 3": (1) A decryption request step S5: As shown in "Figure 11", it is a schematic diagram (eight) of the implementation of the present invention. A second information device 14 sends an identification code request to the sensing device 11. After receiving the request, the sensing device 11 returns an identification code I to the second information device 14; preferably, if the sensing device 11 successfully receives the identification code I request, the sensing device 11 changes color or presents a light-emitting state. (2) An identity verification step S6: The second information device 14 uses an identity feature F of the second user as input data, and generates a private key K_U corresponding to the public key K_L based on the first key generation function. The second information device 14 transmits the private key K_U to the server 13, and the server 13 selects the corresponding multimedia information M with the identification code I; as shown in "Figure 12", which is a schematic diagram (IX) of the implementation of the present invention, the second information device 14 inputs the identity card number of the second user as the identity feature F, and can generate a private key K_U corresponding to the aforementioned public key K_L. As shown in "Figure 13", which is a schematic diagram (X) of the implementation of the present invention, the current time point T2, the identification code I, and the private key K_U are transmitted to the server 13. (3)  A first decryption step S7: Please refer to "Figure 14" to "Figure 15", which are schematic diagrams (11) to (12) of the implementation of the present invention. The server 13 uses the identification code I and the current time point T2 as input data, generates a key K_E based on the second key generation function, and uses the key K_E to perform the first decryption. (4) A second decryption step S8: Please refer to "Figure 16", which is a schematic diagram of the implementation of the present invention (thirteen). The server 13 uses the private key K_U to perform a second decryption on the multimedia information M, and after the decryption is completed, the multimedia information M is transmitted to the second information device 14. When the number of times the server 13 transmits the multimedia information M to the second information device 14 reaches the browsing number limit, the server 13 deletes the multimedia information M or rejects the decryption request of the multimedia information M.

To clearly express the above technical content, the following will be illustrated by the first scenario, with birthday greetings as an example: User A wants to send a birthday greeting video to User B. User A can first record the birthday greeting video with the first information device 12, and then hold a sensor device 11 and capture the identification code I. User A uses the name of User B as the identity feature F to generate a public key K_L, and then encrypts the birthday greeting video for the first time, and The first encrypted birthday congratulation video, the identification code I, and the time condition T1 set by user A as user B's birthday are sent to the server 13. The server 13 uses the identification code I and user B's birthday as input data to generate a key K_E and perform a second encryption. The above is to complete the setting of the birthday congratulation video. On the birthday, user B can take out the gift from user A. The sensor device 11 is sent a decryption request by the second information device 14 of user B to the sensor device 11 and extracts the identification code I. User B then inputs the identity feature F through the second information device 14 and uses the name of user B as input data to generate a private key K_U corresponding to the public key K_L. The second information device 14 then transmits the identification code I, the private key K_U, and the current time point T2 to the server 13. The server 13 uses the identification code I to filter out the birthday greeting video corresponding to it, and then generates a key K_E with the received time point T2 and the identification code I to perform the first decryption. After the decryption is successful, the second decryption can be performed with the received private key K_U. When the second decryption is also successful, the server 13 transmits the birthday greeting video to the second information device 14 of user B, and the second information device 14 can play the birthday greeting video.

Please refer to "Figure 17", which is another embodiment of the present invention. As shown in the figure, the encrypted multimedia information management system and implementation method of the present invention, in the first information device 12, there is another smart contract unit 123, the smart contract unit 123 is used to record a smart contract with a contract private key as a time condition, and there is another contract public key corresponding to the contract private key. Before the smart contract is executed, the server 13 uses the contract public key to The multimedia information M is encrypted for the second time, so it will be impossible to decrypt the multimedia information M for the first time before the contract is fulfilled; when the smart contract is fulfilled, the server 13 first decrypts the multimedia information M with the contract private key, and then re-encrypts it for the second time with the time when the smart contract is fulfilled, so that the multimedia information M can be decrypted for the second time and even completely decrypted to obtain the content of the multimedia information M after the smart contract is fulfilled.

In order to clearly express the technical content of the above-mentioned another embodiment, the second scenario will be illustrated below, with a will as an example: User C wants to write a will and use a living contract to plan his affairs after his death. He uses the living contract and the encrypted multimedia information management system and implementation method of the present invention to first establish a public will and multimedia information for each beneficiary. The public will records the identity characteristics of each beneficiary's multimedia information to be decrypted, such as: specific memories, secrets, or agreements between each beneficiary and user C, and generates a public key to access each multimedia information. The information is encrypted for the first time, and the smart contract records the public will, the time condition is "immediately", and a contract private key. The smart contract is set to be fulfilled when user C passes away, and the multimedia information is encrypted for the second time with a smart contract public key; when user C passes away, the smart contract is fulfilled, the server obtains the contract private key, decrypts the multimedia information, and re-encrypts it for the second time with the time condition recorded in the smart contract as "immediately"; in this way, user C does not need to worry about the will being made public in advance or leaked due to human intention or negligence.

As described above, the encrypted multimedia information management system and its implementation method of the present invention can be applied to, for example, congratulatory multimedia information, message leaving, and intelligence message delivery. It includes asymmetric encryption public and private keys using user identity characteristics, as well as symmetric encryption keys using physical sensing devices and time conditions. By first encrypting the multimedia information to be delivered with a public key and then encrypting it with a key for the second time, it can be ensured that the server cannot decrypt it through the identification code and time conditions. Moreover, when the encrypted multimedia information is stolen, it cannot be detected by the time condition alone. and identity features for decryption, and the second user cannot open the multimedia information at an incorrect time. In this way, it can be ensured that the second user who only has the sensing device can open the multimedia information at the specified time. In addition, the present invention further includes a smart contract that can re-encrypt and decrypt the multimedia information under specified circumstances, greatly expanding the application. Accordingly, after the present invention is implemented, it can indeed achieve the purpose of an encrypted multimedia information management system and its implementation method, which can only be opened within a specific time period and has good encryption protection.

However, the above description is only a preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Any equivalent changes and modifications made by a person skilled in the art without departing from the spirit and scope of the present invention should be included in the patent scope of the present invention.

In summary, this invention has the patent requirements of "industrial applicability", "novelty" and "progress"; the applicant has filed an application for invention patent with the Jun Bureau in accordance with the provisions of the Patent Law.

1: Encrypted multimedia information management system 11: Sensing device 111: Wireless communication element 112: Color change element 12: First information device 121: First communication unit 122: First processor 123: Smart contract unit 13: Server 131: Processing unit 132: Memory unit 14: Second information device 141: Second communication unit 142: Second place Processor S1: Card opening step S2: File creation step S3: First encryption step S4: Second encryption step S5: Decryption request step S6: Identity verification step S7: First decryption step S8: Second decryption step I: Identification code F: Identity feature T1: Time condition T2: Time point K_L: Public key K_U: Private key K_E: Key M: Multimedia information

Figure 1 is a system architecture diagram of the present invention. Figure 2 is a method flow chart of the present invention (I). Figure 3 is a method flow chart of the present invention (II). Figure 4 is a schematic diagram of the implementation of the present invention (I). Figure 5 is a schematic diagram of the implementation of the present invention (II). Figure 6 is a schematic diagram of the implementation of the present invention (III). Figure 7 is a schematic diagram of the implementation of the present invention (IV). Figure 8 is a schematic diagram of the implementation of the present invention (V). Figure 9 is a schematic diagram of the implementation of the present invention (VI). Figure 10 is a schematic diagram of the implementation of the present invention (VII). Figure 11 is a schematic diagram of the implementation of the present invention (VIII). Figure 12 is a schematic diagram of the implementation of the present invention (IX). Figure 13 is a schematic diagram of the implementation of the present invention (X). Figure 14 is a schematic diagram of the implementation of the present invention (XI). Figure 15 is a schematic diagram of the implementation of the present invention (XII). Figure 16 is a schematic diagram of the implementation of the present invention (XIII). Figure 17 is a schematic diagram of the implementation of the present invention (XIV).

1: Encrypted multimedia information management system

11:Sensor device

111: Wireless communication components

112: Color changing element

12: First information device

121: First communication unit

122: First processor

13: Server

131: Processing unit

132: Memory unit

14: Second information device

141: Second communication unit

142: Second processor

Claims (8)

An encrypted multimedia information management system is provided for a second user to check a multimedia information of a first user, comprising: a sensing device including a wireless communication element storing an identification code; a first information device, which is informationally connected to the sensing device and a server, including a first communication unit for obtaining the identification code, and a first processor for using an identity feature of the second user and a public key generated by a first key generation function to transfer the multimedia information to the encrypted multimedia information management system. The first information device encrypts the multimedia information for the first time, associates the multimedia information with the identification code, and uploads the multimedia information to the server with a time condition, and the first information device further includes a smart contract unit for recording a smart contract with a contract private key as the time condition; a second information device is informationally connected to the sensing device and the server, includes a second communication unit for obtaining the identification code, and further includes a second processor for converting the identity feature into a smart contract based on the first financial information device. The key generation function generates a private key corresponding to the public key, and transmits the identification code and a private key of the second information device to the server; the server includes a storage unit for storing the identification code, the time condition, and the multimedia information, and also includes a processing unit for generating a key based on the identification code and the time condition by a second key generation function, and performing a second encryption on the multimedia information that has completed the first encryption with a contract public key; the processing unit uses the identification code The corresponding multimedia information is selected, and the key is generated based on the second key generation function at a current time point and the identification code to perform a first decryption on the multimedia information; the processing unit performs a second decryption with the private key, and transmits the multimedia information to the second information device after the decryption is completed; and when the smart contract is fulfilled, the server first decrypts the multimedia information with the contract private key, and then re-encrypts it for a second time at the time when the smart contract is fulfilled. An encrypted multimedia information management system as described in claim 1, wherein the server is used to encrypt the time condition or the time point using a time-based one-time password algorithm. The encrypted multimedia information management system as described in claim 1, wherein the first information device is used to send a browsing limit to the server, and when the number of times the server sends the multimedia information to the second information device reaches the browsing limit, the server deletes the multimedia information or rejects the decryption request for the multimedia information. The encrypted multimedia information management system as described in claim 1, wherein the sensing device includes a color changing element, and when the sensing device successfully receives the identification code request, the color changing element changes color or presents a light-emitting state. An encrypted multimedia information management method is provided for a second user to check a multimedia information of a first user, comprising: a card opening step: a first information device sends an identification code request to a sensing device, and the sensing device returns an identification code to the first information device; a first encryption step: the first information device generates a public key based on a first key generation function using an identity feature of the second user, and uses the public key to The multimedia information is encrypted for the first time; a file creation step: the first information device uploads the multimedia information that has completed the first encryption and a time condition to a server, and associates the multimedia information with the identification code, and the first information device further includes a smart contract unit for recording a smart contract with a contract private key as the time condition; a second encryption step: the server uses the identification code and the time condition, and encrypt the multimedia information that has completed the first encryption for the second time with a contract public key; a decryption request step: a second information device sends a decryption request to the sensing device and obtains the identification code; an identity verification step: the second information device sends the identification code and a private key of the second information device to the server, and the server selects the corresponding multimedia information with the identification code; a first decryption step; A decryption step: the server performs a first decryption based on a current time point and the identification code; A second decryption step: the server performs a second decryption with the private key, and transmits the multimedia information to the second information device after the decryption is completed; and when the smart contract is fulfilled, the server first decrypts the multimedia information with the contract private key, and then re-encrypts it for a second time with the time when the smart contract is fulfilled. The encrypted multimedia information management method as described in claim 5, wherein the server encrypts the time condition or the time point using a time-based one-time password algorithm. The encrypted multimedia information management method as described in claim 5, wherein, in the file creation step, the first information device transmits a browsing limit to the server, and when the number of times the server transmits the multimedia information to the second information device reaches the browsing limit in the second decryption step, the server deletes the multimedia information or rejects the decryption request for the multimedia information. The encrypted multimedia information management method as described in claim 5, wherein, during the card opening step or the decryption request step, if the sensing device successfully receives the identification code request, the sensing device changes color or emits light.

Images