The invention belongs to the technical field related to data encryption and video security, A video encryption system includes two-way authentication module, When the key negotiation module, the videodecryption module, the security decoder and the security monitoring workstation are connected with the storage server, the storage server transmits the video key encryption key and the correspondingversion number of the related reinforced camera to the security decoder through the signaling mode, and the security monitoring workstation executes the key negotiation process once in the forwardingprocess. Device authentication, through the verification of the validity of the public key certificate in the built-in cryptographic module, can verify the validity of the device. When the device is out of control, the device can be revoked in time in the CA server, and the device can be blocked from re-entering the network. Through the encryption scheme of the whole encryption process, the videoinformation is always in a safe state and under strict supervision in all application links, and the possibility of illegal stealing, forgery or alteration of video images is avoided.