Video management system based on video monitoring platform
By sharding and out of order encryption of surveillance video data, and using directional displacement swap incremental arrays to generate encryption sequences, it solves the key management problem of small and medium-sized enterprises in the AES encryption algorithm, and realizes the security and integrity of video data.
Patent Information
- Application Number
- CN202510454803.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-11
- Publication Date
- 2025-07-04
AI Technical Summary
When small and medium-sized enterprises use AES encryption algorithm, key management is difficult, resulting in a high risk of key loss and cannot guarantee the security of video data.
The shard encryption execution unit is used to perform sequence segmentation and chaotic encryption of monitoring video data. By switching incremental arrays through directional displacement, a monitoring video encryption sequence is generated, which gets rid of the dependence on keys, reduces key management costs and enhances data security.
It reduces the cost of key management, improves the security and integrity of data, enhances the anti-cracking ability, quickly locates data tampering and reduces the tampering data capacity, and ensures the credibility and security of video data.
Smart Images
Figure CN120264044A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of video management, and specifically to a video management system based on a video surveillance platform. Background Art
[0002] With the rapid development of information technology, video surveillance platforms are widely used in various fields such as urban security, enterprise park monitoring, public place management, and home security protection. A large amount of video data generated by these platforms contains rich and sensitive information. Once the data is illegally obtained, tampered with, or leaked, it will seriously damage personal privacy, public security, and corporate interests. To ensure the security of video data in the video surveillance platform, video encryption has become an important security management measure. Among many encryption methods, it is relatively common to encrypt the transmitted video data using a 256-bit AES encryption variant algorithm. The AES (Advanced Encryption Standard) algorithm is widely used in the field of cryptography due to its high security and good performance. However, the AES algorithm belongs to a symmetric key encryption algorithm, and both encryption and decryption require the use of keys, which leads to greater difficulty in key management and requires special management measures to ensure key security. Most enterprises do not have sufficient human and financial resources to invest in key security management. To achieve the necessary key security management conditions for the AES encryption algorithm, a series of complex operations such as key generation, storage, distribution, and update need to be carried out by professional personnel. At the same time, funds need to be invested to build a secure and reliable key management system. However, for many enterprises, especially small and medium-sized enterprises, it is difficult for them to bear such high human costs and technological investments. This makes it impossible for most current enterprises to meet the necessary key security management conditions for the AES encryption algorithm, which will increase the risk of key loss in small and medium-sized enterprises, and further affect the security of video data storage and transmission. To solve the above problems, the present invention proposes a solution. Summary of the Invention
[0003] The purpose of the present invention is to provide a video management system based on a video surveillance platform to solve the problems raised in the above background art.
[0004] The present invention provides a video management system based on a video surveillance platform, including: A sharding encryption execution unit, which is used to perform sequence segmentation on the digital surveillance video data of the target area collected in real time to obtain all shard sequences of the real-time target area. The digital surveillance video data is in binary coding form, and each shard sequence contains a number of incremental arrays. The sharding encryption execution unit is also used to, after obtaining all the shard sequences of the real-time target area, perform out-of-order encryption on all the shard sequences of the real-time target area according to a preset out-of-order encryption rule to obtain the monitoring video encryption sequence of the real-time target area; The ciphertext management unit is used to store the received monitoring video encryption sequence of the real-time target area.
[0005] Furthermore, the steps of sequence segmentation to obtain all the shard sequences of the target area at the current moment are as follows: SS11: Taking 4 as the iteration increment, divide every 4 characters in the digital monitoring video data from left to right into a group to obtain a number of increment arrays. According to their positions in the digital monitoring video data, mark all the groups of increment arrays as A1, A2,..., Aa from left to right in sequence, where a≥1; SS12: Perform sequence segmentation on the digital monitoring video data to obtain all the shard sequences of the target area at the current moment. For any shard sequence obtained by segmentation, it satisfies the preset segmentation conditions: The shard sequence is composed of a number of increment arrays with consecutive marked subscripts. Among the several groups of increment arrays that make up the shard sequence, there is at least one group of increment arrays that is consistent with the four-bit binary numbers of 0, 1,..., 15 respectively; Among the several groups of increment arrays that make up the shard sequence, there is at least one group of increment arrays that is inconsistent with all the other groups of increment arrays.
[0006] Furthermore, the sharding encryption execution unit is also used to, after obtaining all the shard sequences of the real-time target area, according to the positions of each shard sequence in the digital monitoring video data before sequence segmentation, number the all shard sequences in the order from left to right, and the digital numbering starts from 1 and continues sequentially.
[0007] Compared with the prior art, the following beneficial effects are achieved: (1) In the present invention, by setting up a partitioned video acquisition unit to collect and convert the format of the monitoring video data in the target area, and setting up a sharding encryption execution unit to perform out-of-order encryption on the real-time digital monitoring video data. During the out-of-order encryption process, for each shard sequence obtained after sequence segmentation, determine the directional displacement of a number of increment arrays according to the initial orientation of several increment arrays therein and the initial orientation of its adjacent increment arrays, and swap a number of increment arrays according to the positioning displacement to obtain the monitoring video encryption sequence. In this way, on the one hand, the dependence on the key is eliminated, the cost of key management is saved, and the risk of key loss is avoided at the same time; (2) The present invention swaps the positions of several incremental arrays according to the positioning displacement, so that the consistent incremental arrays in the encrypted sequence of the surveillance video have different swaps based on their positions, adjacent incremental arrays, and the shard sequences they belong to. At the same time, since the length of the shard sequence is not fixed, the encryption results of each shard sequence are quite different. In this way, on the one hand, it is difficult to infer the swapping rule of the incremental arrays in each shard sequence through the repeating pattern, enhancing the difficulty of cracking different shard sequences. At the same time, the encryption and restoration processes of each shard sequence depend on the incremental arrays therein. If some characters in the standard encryption sequence of a certain shard sequence are tampered with, it will be easily verified during decryption, achieving rapid positioning, further reducing the size of the retransmitted data of the tampered data, and also avoiding the incorrect storage caused by data tampering, ensuring the integrity and credibility of the storage of the encrypted sequence of the surveillance video; (3) For each standard sequence, the present invention determines the initial phase of all incremental arrays according to the absolute value of the difference between the decimal number of each incremental array in the standard sequence and the determined sequence reference value, and the total number of incremental arrays separated from the extracted incremental array. Based on the incremental arrays in the even positions, the initial phase of the incremental array in the odd position adjacent to it is used as its final phase, and the two are combined to determine the directional displacement of the incremental array in the even position. In this way, the displacement rule of the incremental array cannot be modeled by a linear equation, improving the anti-algebraic attack ability and ensuring the security of the transmitted surveillance data. Description of the Drawings
[0008] Figure 1 is the system block diagram of the present invention. Detailed Embodiments
[0009] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.
[0010] Please refer to Figure 1 , the present application provides a video management system based on a video surveillance platform, including a partition monitoring end and a video supervision platform end; The partition monitoring end is used to perform real-time monitoring on the target area. The partition monitoring end includes a partition video acquisition unit and a shard encryption execution unit; The partitioned video acquisition unit performs real-time acquisition on the monitoring video data of the target area, and performs a preset first conversion operation on the monitoring video data of the target area acquired in real time to obtain the digital monitoring video data of the real-time target area. The specific content of the first conversion operation is: using a binary conversion algorithm, converting the monitoring video data of the target area from the original format to a binary encoded form; The partitioned video acquisition unit transmits the digital monitoring video data of the real-time target area to the sharding encryption execution unit; After receiving the transmitted digital monitoring video data of the real-time target area, the sharding encryption execution unit first performs sequence segmentation on the digital monitoring video data according to the preset chunking steps to obtain all shard sequences of the real-time target area; Taking the digital monitoring video data of the target area at the current moment as an example, the steps of performing sequence segmentation on the digital monitoring video data according to the preset segmentation steps are as follows: SS11: Taking 4 as the iteration increment, divide every 4 characters in the digital monitoring video data from left to right into a group to obtain several increment arrays, and mark all the group increment arrays as A1, A2,..., Aa in sequence from left to right according to their positions in the digital monitoring video data, where a≥1; SS12: Perform sequence segmentation on the digital monitoring video data to obtain all shard sequences of the target area at the current moment. For any shard sequence obtained by segmentation, it satisfies the preset segmentation conditions: The shard sequence is composed of several increment arrays with consecutive marked subscripts. Among the several groups of increment arrays that make up the shard sequence, there is at least one group of increment arrays that is consistent with the four-bit binary numbers of 0, 1,..., 15 respectively; Among the several groups of increment arrays that make up the shard sequence, there is at least one group of increment arrays that is inconsistent with all the other groups of increment arrays. In other words, when performing deduplication and counting the number of all groups of increment arrays that make up any shard sequence, there is at least one group of increment arrays with a count of 1 during the statistics; For example, if a shard sequence is 111100101101011111000010010000010001010101100101100101111101100011010011000110101010100101011001010011011011111101011001110011101110001110100111101000100000, when performing deduplication and counting on it, the number of the increment array 0000 is 1, that is, the number of increment arrays consistent with the increment array 0000 in the shard sequence is 0; It should be noted here that the digital surveillance video data is obtained by splicing the several fragment sequences obtained by segmentation; Then, after all the slice sequences of the real-time target area are obtained, according to the position of each slice sequence in the digital monitoring video data before the sequence segmentation, all the slice sequences are digitally labeled in order from left to right, and the digital labels start from 1 and extend backward. At this time, there is the following corresponding relationship: one slice sequence corresponds to one digital label; In the present application, the smaller the numerical number, the closer the corresponding segment sequence is to the leftmost side in the digital surveillance video data; Then, all the fragment sequences of the real-time target area are encrypted according to the preset random encryption rules to obtain the real-time surveillance video encryption sequence of the target area; Taking all the fragment sequences of the target area at the current moment as an example, all the fragment sequences of the target area at the current moment are randomly encrypted according to the preset random encryption rules. The random encryption rules are as follows: SS21: Calculate the sequence reference value C1 of the slice sequence with the digital label 1 of the target area at the current moment. The calculation formula of the sequence reference value C1 is C1=B1 mod P1, where B1 is the total number of slice sequences of the target area obtained after sequence segmentation of the digital surveillance video data of the target area at the current moment, and P1 is a preset fixed compensation value used to adjust the value of the sequence reference value to be within the interval [1,15]. SS22: All group increment arrays that are consistent with the sequence reference value C1 in all group increment arrays constituting the slice sequence are re-labeled as D1, D2, ..., Dd in sequence, where d≥1; SS23: label all group increment arrays located to the left of the increment array D1 (excluding the increment array D1) in the slice sequence as E1, E2, ..., Ee, e≥1, in order from left to right; SS24: Determine the initial shift of the incremental array E1 according to the absolute value F1 of the difference between the decimal number of the incremental array E1 and the sequence base value C1 and the total number F2 of the incremental arrays between the incremental array E1 and the incremental array D1, wherein the initial shift includes three types: left shift, right shift and zero shift, specifically: If the absolute value F1 is an odd number and the total number F2 is an even number, the initial position of the incremental array E1 is determined to be a left shift; if the absolute value F1 is an even number and the total number F2 is an odd number, the initial position of the incremental array E1 is determined to be a right shift; otherwise, the initial position of the incremental array E1 is determined to be a zero shift; Similarly, determine the initial position of the incremental array E2; SS25: Determine the directional displacement of increment array E2 by combining the initial orientation of increment array E1 as the final orientation of increment array E2 with the initial orientation of increment array E2. Specifically: If the final orientation is consistent with the initial orientation, determine that the directional displacement of increment array E2 is a right shift. If one of the final orientation and the initial orientation is a left shift and the other is a right shift, determine that the directional displacement of increment array E2 is a zero shift. The directional displacement includes two types: right shift and zero shift. SS26: Sequentially determine the directional displacements of increment arrays E4, E6,..., Ef according to SS24 to SS25. If e is odd, then f = e - 1; otherwise, f = e. SS27: Successively swap the positions of several increment arrays in the shard sequence according to the directional displacements of increment arrays E2, E4,..., Ef to obtain the standard encryption sequence of increment array D1. Specifically as follows: SS31: Extract the sequence located on the left side of (including) increment array D1 in the shard sequence and label the sequence as the standard sequence of increment array D1. SS32: If the directional displacement of increment array E2 is a right shift, swap the positions of increment array E1 and increment array E2 in the standard sequence in the order from left to right. If the directional displacement of increment array E1 is a zero shift, do not swap the positions of increment array E1 and increment array E2 in the standard sequence in the order from left to right. SS32: Sequentially swap the positions of several increment arrays in the standard sequence according to the directional displacements of increment arrays E4, E6,..., Ef according to SS31. Specifically, if the directional position of increment array E4 is a right shift, swap the positions of increment array E3 and increment array E4 correspondingly. The same applies to increment arrays E6, E8,..., Ef. SS33: Relabel the finally obtained standard sequence after the swapping as the standard encryption sequence of increment array D1. SS28: Sequentially obtain the standard encryption sequences of increment arrays D2, D3,..., Dd according to SS24 to SS27, and then splice the standard encryption sequences of increment arrays D1, D2,..., Dd and the reserved sequence in the order of increment arrays D1, D2,..., Dd, reserved sequence to obtain the scrambled encryption sequence of the shard sequence numbered 1. It should be noted here that during the process of successively obtaining the standard encryption sequences of increment arrays D1, D2,..., Dd, d standard sequences are successively extracted from the shard sequence, and the sequence remaining after extracting d standard sequences from the shard sequence is labeled as the reserved sequence of the shard sequence. SS29: Obtain the scrambled encryption sequences of the shard sequences with digital labels 2, 3, …, B1 in sequence according to SS21 to SS28, and then splice the scrambled encryption sequences of the shard sequences with digital labels 1, 2, …, B1 in sequence according to the order of 1, 2, …, B1 to obtain the encrypted monitoring video sequence of the target area at the current moment; The shard encryption execution unit transmits the encrypted monitoring video sequence of the real-time target area to the video supervision platform side; The video supervision platform side is used to monitor and store the digital monitoring video data of the target area; The video supervision platform side includes a ciphertext management unit and a decryption execution display unit. After receiving the transmitted encrypted monitoring video sequence of the real-time target area, the video supervision platform side transmits it to the ciphertext management unit for ciphertext storage; After receiving the display instruction input by the authorized user who has been allowed to view after identity confirmation, the decryption execution display unit extracts the encrypted monitoring video sequence within the corresponding monitoring period from the ciphertext management unit according to the monitoring period included in the display instruction, and restores the extracted encrypted monitoring video sequence. For the encrypted monitoring video sequence at any moment within the monitoring period, the steps for restoring it are as follows: First, traverse the encrypted monitoring video sequence to determine the digital labels of all shard sequences of the target area at that moment and their scrambled encryption sequences; Then, for the scrambled encryption sequence of any one of the shard sequences, determine the sequence reference value of the shard sequence, and determine the directional displacements of several incremental arrays according to the sequence reference value and the positions of each incremental array in the scrambled encryption sequence; Next, restore the shard sequence according to the directional displacements of several incremental arrays; Finally, splice the restored several shard sequences according to the determined digital labels to obtain the digital monitoring video data of the target area at that moment; Play and display the digital monitoring video data of all moments within the restored monitoring period to the authorized user in the order of shooting time; In this application, identity determination includes but is not limited to the name, ID number, facial image data, etc. of the authorized user; Some data in the above formula are numerically calculated after removing their dimensions, and the content not described in detail in this specification belongs to the prior art well known to those skilled in the art.
[0011] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical method of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical method of the present invention.
Claims
1. A video management system based on a video surveillance platform, characterized in that Including: A shard encryption execution unit, which is used to perform sequence segmentation on the digital surveillance video data of the target area collected in real time to obtain all shard sequences of the real-time target area. The digital surveillance video data is in binary encoding form, and each shard sequence contains several incremental arrays; The shard encryption execution unit is also used to perform out-of-order encryption on all shard sequences of the real-time target area according to a preset out-of-order encryption rule after obtaining all shard sequences of the real-time target area to obtain a surveillance video encryption sequence of the real-time target area; A ciphertext management unit, which is used to store the received surveillance video encryption sequence of the real-time target area.
2. The video management system based on a video monitoring platform according to claim 1, wherein The steps of performing sequence segmentation to obtain all shard sequences of the target area at the current moment are as follows: SS11: Taking 4 as the iteration increment, divide every 4 characters in the digital surveillance video data from left to right into a group to obtain several incremental arrays. According to their positions in the digital surveillance video data, mark all groups of incremental arrays as A1, A2,..., Aa from left to right in sequence, where a≥1; SS12: Perform sequence segmentation on the digital surveillance video data to obtain all shard sequences of the target area at the current moment. For any shard sequence obtained by segmentation, it satisfies the preset segmentation conditions: The shard sequence is composed of several incremental arrays with consecutive marked subscripts. Among the several groups of incremental arrays that make up the shard sequence, there is at least one group of incremental arrays that is consistent with the four-bit binary numbers of 0, 1,..., 15 respectively; Among the several groups of incremental arrays that make up the shard sequence, there is at least one group of incremental arrays that is inconsistent with all the other groups of incremental arrays.
3. The video management system based on a video monitoring platform according to claim 1, characterized in that, The shard encryption execution unit is also used to, after obtaining all shard sequences of the real-time target area, number the all shard sequences in order from left to right according to their positions in the digital surveillance video data before sequence segmentation for each shard sequence, and the digital numbering starts from 1 and continues sequentially.
4. The video management system based on a video monitoring platform according to claim 1, wherein, The steps of performing out-of-order encryption on all shard sequences of the target area at the current moment according to a preset out-of-order encryption rule are as follows: SS21: Calculate the sequence reference value C1 of the shard sequence with the digital number 1 in the target area at the current moment. The calculation formula of the sequence reference value C1 is C1 = B1 mod P1, where B1 is the total number of shard sequences of the target area obtained by performing sequence segmentation on the digital surveillance video data of the target area at the current moment, and P1 is a preset fixed compensation value used to adjust the value of the sequence reference value within the range [1, 15]; SS22: Re-mark all groups of incremental arrays that are consistent with the sequence reference value C1 in all groups of incremental arrays that make up the shard sequence in order from left to right as D1, D2,..., Dd, where d≥1; SS23: Mark all groups of incremental arrays located to the left of the incremental array D1 in the shard sequence in order from left to right as E1, E2,..., Ee, where e≥1; SS24: Determine the initial orientation of the increment array E1 based on the absolute value F1 of the difference between the decimal number of the increment array E1 and the sequence reference value C1, and the total number F2 of increment arrays in the interval between the increment array E1 and the increment array D1. The initial orientation includes three types: left shift, right shift, and zero shift. Similarly, determine the initial orientation of the increment array E2; SS25: Use the initial orientation of the increment array E1 as the final orientation of the increment array E2, and combine it with the initial orientation of the increment array E2 to determine the directional displacement of the increment array E2; SS26: Sequentially determine the directional displacements of the increment arrays E4, E6,..., Ef according to SS24 to SS25. If e is odd, then f = e - 1; otherwise, f = e; SS27: Successively swap the positions of several increment arrays in the shard sequence according to the directional displacements of the increment arrays E2, E4,..., Ef to obtain the standard encrypted sequence of the increment array D1; SS28: Sequentially obtain the standard encrypted sequences of the increment arrays E3, E4,..., Ee according to SS24 to SS27, and then splice the standard encrypted sequences of the increment arrays E1, E2,..., Ee in the order of the increment arrays E1, E2,..., Ee to obtain the scrambled encrypted sequence of the shard sequence numbered 1; SS29: Sequentially obtain the scrambled encrypted sequences of the shard sequences numbered 2, 3,..., B1 according to SS21 to SS28, and then splice the scrambled encrypted sequences of the shard sequences numbered 1, 2,..., B1 in the order of 1, 2,..., B1 to obtain the encrypted sequence of the surveillance video of the target area at the current moment; 5. The video management system based on a video monitoring platform according to claim 4, wherein In SS24, if the absolute value F1 is odd and the total number F2 is even, then determine the initial orientation of the increment array E1 as a left shift. If the absolute value F1 is even and the total number F2 is odd, then determine the initial orientation of the increment array E1 as a right shift. Otherwise, determine the initial orientation of the increment array E1 as a zero shift.
6. The video management system based on a video monitoring platform according to claim 4, wherein In SS25, if the final orientation and the initial orientation are the same, then determine the directional displacement of the increment array E2 as a right shift. If one of the final orientation and the initial orientation is a left shift and the other is a right shift, then determine the directional displacement of the increment array E2 as a zero shift; where the directional displacement includes two types: right shift and zero shift.
7. The video management system based on a video surveillance platform according to claim 4, characterized in that SS27. The steps to swap and obtain the standard encrypted sequence of the increment array D1 are as follows: SS31: Extract the sequence located on the left side of the increment array D1 (including the increment array D1) in the shard sequence, and label the sequence as the standard sequence of the increment array D1; SS32: If the directional displacement of the increment array E2 is a right shift, then swap the positions of the increment arrays E1 and E2 in the standard sequence in the order from left to right. If the directional displacement of the increment array E1 is a zero shift, then do nothing; SS32: Sequentially swap the positions of several increment arrays in the standard sequence according to the directional displacements of the increment arrays E4, E6,..., Ef according to SS31; SS33: Re-calibrate the finally obtained standard sequence after the swapping as the standard encryption sequence of the incremental array D1.
8. The video management system based on a video monitoring platform according to claim 4, characterized in that In SS28, for each obtained standard encryption sequence of the incremental array, a standard sequence needs to be intercepted from the shard sequence. If, after obtaining the standard encryption sequences of the incremental arrays D1, D2, ..., Dd, there are remaining sequences in the shard sequence, then the remaining sequences in the shard sequence at this time are calibrated as the reserved sequences of the shard sequence; Concatenate the reserved sequences to the rightmost end of the encrypted monitoring video sequence of the target area at the current moment as the new encrypted monitoring video sequence of the target area at the current moment.