System for verificating original and source of security image

Abstract

The proposed invention relates to a system technology comprising a camera device that reliably manages the original at the initial generation time when image data is generated in the camera device, wherein the camera device comprises a first authentication block information generation instruction set, and the first authentication block information generation instruction set generates first authentication block information including unique identification information of the camera device and a first hash code generated by hashing at least a portion of security image data requested from a client terminal connected via a network, and encrypted with the private key of the camera device.

Description

Technology Field

[0001] The proposed invention discloses a security image verification technology having a function to verify whether an image has been forged or tampered with and its source. Background Technology

[0002] With the advancement of artificial intelligence and deep learning technologies, technologies for generating, editing, or synthesizing video and audio are also advancing significantly. For example, the activity of creating sophisticatedly manipulated photos or videos using AI learning technology known as Generative Adversarial Networks (GANs) is becoming popular among individuals and companies. Consequently, efforts are emerging to legally punish harmful deepfake activities to reduce damage to individuals and organizations caused by false information or hate speech. Generally, "deepfake" is a portmanteau of "deep learning" and "fake," referring to human image synthesis technology based on artificial intelligence.

[0003] Korean Patent Publication (Registration No.: 10-1628720, “Copy Image Evidence Management System for Proving Authenticity and Integrity”) discloses a copy image evidence management system in which, when an image storage device generates an original image, it adds its hash value so that even if the original image is copied to an image collection device, it can be confirmed that the copy image has been altered from the original image. However, in the case of security images, since the original at the time when image or audio data is generated by the camera device is important, it is necessary to manage the original at the time of initial generation.

[0004] Meanwhile, in the broadcasting sector, technology exists to encrypt original author or editor information into works for copyright management. However, in the field of video security, rather than from a copyright management perspective, the location of the camera device that generated the original footage and the time of recording are critical factors; therefore, the identification of the device containing the camera and the generation of information regarding the time of creation are required. The problem to be solved

[0005] The proposed invention aims to present a system technology including a camera device that reliably manages the original at the initial generation point when an image is generated in the camera device.

[0006] The proposed invention according to an additional aspect aims to present a system technology for verifying the original and source of reliable security images. means of solving the problem

[0007] According to one aspect of the proposed invention, the system includes a camera device, and the camera device includes a first authentication block information generation instruction set. The first authentication block information generation instruction set generates first authentication block information including unique identification information of the camera device and first authentication information generated by hashing at least a portion of security image data requested from a client terminal connected via a network, and encrypting a first hashing code generated by hashing with the private key of the camera device.

[0008] According to one embodiment, the system includes an original and source verification service server, and the original and source verification service server receives a first authentication information included in a video clip and a unique identification information of a camera device in response to a request for verification of the original security video of a client terminal, and can verify the original and source of the video clip by decrypting the first authentication information with a public key.

[0009] According to another embodiment, the system may provide a public key to the client terminal to enable the client to decrypt the first authentication information and verify the original and source of the video clip. Effects of the invention

[0010] According to the proposed invention, the original can be reliably managed at the initial point of creation when video or audio data is generated from a camera device, thereby verifying whether the security video has been tampered with and its source. Furthermore, in a content creation device, such as a recording device that edits video generated from a camera to create video clips, the device can be authenticated and the creator identified to prevent tampering. Additionally, even within the edited video clips, the camera that originally created the content can be identified, or whether tampering occurred at the time of creation can be verified.

[0011] Ultimately, it can prevent illegal deepfake activities by individuals or groups.

[0012] The effects of the present invention are not limited to the effects described above, and unmentioned effects will be clearly understood by those skilled in the art from this specification and the attached drawings. Brief explanation of the drawing

[0013] FIG. 1 illustrates the configuration of a security video source and origin verification camera system according to one embodiment. FIG. 2 illustrates the configuration of a camera device according to one embodiment. FIG. 3 illustrates the configuration of an image recording device according to one embodiment. FIG. 4 illustrates the configuration of an original and source verification server according to one embodiment. FIG. 5 illustrates the structure of an image clip generated by a camera device according to one embodiment. Figure 6 illustrates a flowchart for verifying the source and origin of a video clip. Figure 7 illustrates a method for verifying the source and origin of a video clip. Specific details for implementing the invention

[0014] The foregoing and additional aspects are embodied through embodiments described with reference to the accompanying drawings. It is understood that the components of each embodiment may be combined in various ways within the embodiment or with components of other embodiments, unless otherwise stated or contradicted. Based on the principle that the inventor may appropriately define the concepts of terms to best describe his invention, the terms used in this specification and claims shall be interpreted in a meaning and concept consistent with the description or proposed technical idea. Preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0015] <Description of Claim 1>

[0016] FIG. 1 illustrates the configuration of a security video source and origin verification camera system according to one embodiment. FIG. 2 illustrates the configuration of a camera device according to one embodiment. As illustrated in FIG. 1, the security video source and origin verification camera system (1000) according to one embodiment includes one or more camera devices (100, Camera device). The camera device (100) may be an IP camera (Internet Protocol Camera) device, but is not limited thereto.

[0017] The camera device (100) includes an image capturing element (110), a first communication element (120) that connects to a client terminal (200) via a network, a first memory element (130) that stores an executable first program and security image data, and a first computation element (140) that executes the first program. The camera device (100) captures the dynamic or static appearance of the subject. The network may be encrypted using Transport Layer Security (TLS).

[0018] The first program includes a 'first authentication block information generation commands set'. The first authentication block information generation commands set hashes at least a portion of the security video data requested from a client terminal (200) connected via a network, and generates first authentication block information that includes (all) first authentication information, which encrypts the first hashing code recorded in the frames of the security video data with the private key of the camera device, and unique identification information of the camera device (100).

[0019] Hashing is a known technique for verifying data tampering. For example, in a series of video frames, first authentication information may be included in the frame header for each frame.

[0020] According to the proposed invention, at least a portion of the image data may be hashed. According to one embodiment, the first authentication information may be included in some frames, for example, only in the I-Frame, rather than in all frames (I-Frame, B-Frame, P-Frame). According to one embodiment, instead of the entire frame, only a portion of the frame, for example, only the first 10 columns, may be hashed. By reducing the image data to be hashed, the time required for encryption can be reduced.

[0021] A private key is a key generated in pairs with a public key in an asymmetric key encryption algorithm, and such an asymmetric key encryption algorithm is a known technology. The private key is distributed only to the target subject and can be decrypted only by possessing the corresponding public key; thus, decryption with the public key implies that the data was encrypted with the corresponding private key, and since only the target subject possesses the private key, it can be confirmed that the data was created by the target subject. The private key of the camera device (100) can be generated at the time of production of the camera device (100) and installed in the camera device (100).

[0022] A private key is assigned to a camera device, and a first hashing code, which hashes at least a portion of a security image generated by the camera device, is encrypted with the private key of the camera device to generate authentication information (first authentication information). By transmitting one's own identification information in plain text along with the authentication information to a client terminal, the client receiving the image can obtain the public key of the camera device from the identification information, decrypt the first authentication information using the obtained public key, and compare it with the first hashing code to authenticate or verify whether the original creator of the image is the camera device.

[0023] The camera device (100) is composed of one or more and is assigned an identifiable unique ID. For example, this identifiable unique ID may be the unique identification information of the camera device, for example, a GUID (Globally Unique Identifier). The first authentication information may further include signature information. The unique identification information of the camera device may be composed of unencrypted plain text.

[0024] The client terminal (200) includes a desktop, laptop, or smartphone carried by the client, and may further be composed of a USB device or a hard disk. The client terminal (200) is connected to the camera device (100) to extract and store secure video data from the camera device (100). The integrity of the secure video data can be authenticated through hashing processing, and the source of the secure video data can be authenticated by encrypting the first hashing code with the private key of the camera device. The secure video data may further include voice data. The camera device (100) may further include a voice recognizer (not shown).

[0025] The camera device (100) can generate an image clip, and the image recording device (300) described later may also generate an image clip. An image clip refers to video content that is edited by extracting only a specific part of the video from the entire video. An image clip may be composed of a clip header and a plurality of frames (unit video) (described in detail in FIG. 5).

[0026] According to one embodiment, the camera device (100) can generate hash codes for all hash codes of a video clip containing security video data (including voice data) and store them in at least a part of the video clip (e.g., the header of the video clip).

[0027] <Description of Claim 2>

[0028] According to one embodiment, the first program may further include a 'first image clip service commands set'. The first image clip service commands set may extract security image data requested by a client terminal (200) from a first memory element (130), generate an image clip by adding first image clip authentication information to security image data containing first authentication block information generated by a first authentication block information generation command set, and transmit the image clip containing the first image clip authentication information to the client terminal (200) (via the first communication element (120)). An image clip refers to an image that has been edited by extracting only a specific part of the image from the entire image. An image clip may be composed of a clip header and a plurality of frames (unit images) (described in detail in FIG. 5).

[0029] The first video clip authentication information may be information obtained by hashing the first hashing code and encrypting the hashing code with the camera device's private key. The first hashing code may be multiple.

[0030] The video clip transmitted by the camera device (100) to an external device, such as a client terminal (200), through the first communication element (120) may be real-time streaming data.

[0031] The first computational element (140) illustrated in FIG. 2 performs the function of executing a first authentication block information generation command set or a first video clip service command set, and accordingly, can generate first authentication block information including first authentication information including a first hashing code and unique identification information of a camera device, and further generate a video clip. The first authentication information may be information obtained by hashing at least a portion of the secure video data to generate a first hashing code and encrypting it with the private key of the camera device.

[0032] The client receiving the video clip and the client requesting verification of the original and source of the video clip may be the same person or different people. Accordingly, the client terminal (200) receiving the video clip and the client terminal (200) requesting verification of the original and source of the video clip may be the same terminal or different terminals.

[0033] <Description of Claim 3>

[0034] According to one embodiment, in FIG. 1, the security image source and origin verification camera system (1000) may further include one or more image recording devices (300). The image recording device (300) may include a second communication element (320) that connects to a client terminal (200) and a camera device (100) via a network, a second memory element (330) that stores security image data and an executable second program, and a second computation element (340) that executes the second program. In the present invention, the image recording device (300) is not an essential component but is an additional component according to additional aspects. The network may be encrypted with Transport Layer Security (TLS).

[0035] The second program includes a 'second authentication block information generation commands set'.

[0036] A second authentication block information can be generated by hashing at least a portion of the security video data requested from the client terminal (200) and encrypting the second hashing code recorded in the frames of the security video data using the private key of the video recording device (300), and including (all) the unique identification information of the video recording device (300). The second authentication block information may further include signature information.

[0037] The video recording device (300) stores the first authentication block information provided by the camera device (100) and can generate authentication block information for the video clip when the video clip requested by the client is generated.

[0038] The private key of the video recording device (300) may be obtained from an external device or server at the time of production of the video recording device (300). The video recording device (300) is composed of one or more devices and is assigned a unique, identifiable ID. The video recording device (300) may be a Digital Video Recorder (DVR), a Network Video Recorder (NVR), or an Edge computer, and may perform functions for recording and editing video. A client terminal (200) may be connected to the video recording device (300) to extract and store secure video data. The integrity of the secure video data may be authenticated through hashing processing, and the source of the secure video data may be authenticated by encrypting a second hashing code with the private key. The private key of the video recording device (300) may be generated at the time of production of the video recording device (300) and installed in the video recording device (300).

[0039] <Description of Claim 4>

[0040] According to one embodiment, the second program may further include a 'second image clip service commands set'. The second image clip service commands set may extract security image data requested from a client terminal from a second memory element, generate an image clip by adding second image clip authentication information to security image data containing second authentication block information generated by a first authentication information and / or a second authentication block information generation commands set, and transmit the image clip containing the second image clip authentication information to a client terminal (200) (via a second communication element (320)). The image clip may be composed of a clip header and a plurality of frames (unit images) (described in detail in FIG. 5).

[0041] The second video clip authentication information may be information obtained by hashing the first hashing code and / or the second hashing code and encrypting the hashing code with the private key of the video recording device (300).

[0042] <Description of Claim 5>

[0043] According to one embodiment, the camera device (100) may include a plurality of camera devices, and the image recording device (300) may include a plurality of image recording devices.

[0044] According to one embodiment, the security video source and origin verification camera system (1000) may further include a 'Key Management Server (400).' The Key Management Server (400) can register and manage the unique identification information and public key of the camera device, or the unique identification information and public key of the video recording device.

[0045] The key management server (400) may be configured as a cloud server or an edge box, but is not limited thereto. The key management server (400) may receive a public key and unique identification information separately at the time of production of the camera device (100) and / or video recording device (300).

[0046] The key management server (400) provides a public key to a client terminal (200) requesting verification of the original and source, and the client terminal (200) may verify the original and source of the security image by decrypting the corresponding first authentication information and / or second authentication information using the public key.

[0047] <Description of the Invention of Claims 6 and 7>

[0048] According to one embodiment, in FIG. 1, the security image original and source verification camera system (1000) may further include an original and source verification service server (500). FIG. 4 illustrates the configuration of the original and source verification server according to one embodiment. As illustrated in FIG. 4, the original and source verification service server (500) may include a third communication element (520) that connects to a client terminal and a key management server via a network, a third memory element (530) that stores security image data and an executable third program, and a third computation element (540) that executes the third program. The network may be encrypted with Transport Layer Security (TLS).

[0049] According to one embodiment, the third program can verify the source and origin of a video clip generated by the 'camera device (100)'. In response to a security video verification request from a client terminal (200), the third program receives a public key of the camera device (100) corresponding to the unique identification information of the camera device (100) from a key management server (400), receives a first authentication information from the client terminal (200), decrypts the first authentication information using the public key of the camera device, and compares it with a first hashing code to verify the source and origin of the video clip, or provides the public key of the camera device to the client terminal so that the client can verify the source and origin of the video clip.

[0050] According to another embodiment, the third program can verify the source and origin of a video clip generated by the 'video recording device (300)'. In response to a security video verification request from a client terminal (200), the third program receives a first authentication information and / or a second authentication information included in the video clip and a unique identification information of the camera device (100) and / or the video recording device (300) from a key management server (400), decrypts the first authentication information and / or the second authentication information using the public key of the camera device (100) and / or the video recording device (300), and verifies the source and origin of the video clip by comparing it with the first hashing code and / or the second hashing code, or provides the public key of the camera device (100) and the video recording device (300) to the client terminal (200) so that the client can verify the source and origin of the video clip.

[0051] According to one embodiment, a client that receives a video can verify the original and source of a video clip by obtaining the public key of the video recording device from the original and source verification service server (500) using the unique identification information of the video recording device (300) and decrypting the second authentication information.

[0052] The client receiving the video clip and the client requesting verification of the original and source of the video clip may be the same person or different people. Accordingly, the client terminal (200) receiving the video clip and the client terminal (200) requesting verification of the original and source of the video clip may be the same terminal or different terminals.

[0053] According to one embodiment, the key management server (400) may be integrated into the source and origin verification service server (500). The source and origin verification service server (500) may also perform the functions of the key management server (400).

[0054] <Description of Claim 8>

[0055] According to the example, the video clip includes a plurality of frames including a frame header and a frame body, and the first authentication information and the unique identification information of the camera device may be included in the frame header.

[0056] FIG. 5 illustrates the structure of an image clip generated by a camera device or an image recording device according to one embodiment. An image clip generated by a camera device (100) may be composed of a clip header and a packet containing a plurality of frames (Frame #1, Frame #2, Frame #3, …). A frame may refer to a unit image constituting the image clip. A frame is composed of a frame header and a frame body. The frame header contains information about the frame, and the frame body may contain content, i.e., security image data.

[0057] According to one embodiment, the frame header of each frame (Frame #1, Frame #2, Frame #3, …) may include first authentication information and unique identification information (camera ID) of the camera device. The first authentication information may be information obtained by encrypting a first hashing code with the private key of the camera device. As illustrated, the frame header of the first frame (Frame #1) may include the first authentication information and unique identification information (camera ID) of the camera device. Likewise, the frame header of the second frame (Frame #2) may include the first authentication information and unique identification information (camera ID) of the camera device.

[0058] <Description of Claim 9>

[0059] FIG. 5 illustrates the structure of a video clip generated by a camera device or a video recording device. According to one embodiment, video clip authentication block information may be stored in the video clip header (clip header). The video clip authentication block information may further include video clip source unique identification information. The video clip authentication block information may include a video clip hashing code, video clip source unique identification information, and video clip authentication information (see FIG. 5). The video clip hashing code may be the hashing code of the hashing code(s) included in all video frames (including audio).

[0060] The structure of the video clip generated by the camera device (100) may further include authentication information (first authentication information) and unique identification information of the camera device (300) (source unique identification information) in each frame header.

[0061] The structure of the video clip generated by the video recording device (300) may further include authentication information (second authentication information) and unique identification information of the video recording device (300) (source unique identification information) in each frame header.

[0062] Video clips of this structure can be transmitted to a client terminal (200) and / or an original and source verification service server (500).

[0063] <Explanation of Fig. 6>

[0064] FIG. 6 illustrates a flowchart for verifying the original and source of a video clip. As illustrated, a client terminal (200) may provide a request to transmit a video clip to a camera device (100) or an image recording device (300) (①①'). A key management server (400) may register a public key and unique identification information (②). The key management server (400) may transmit the public key and unique identification information of the camera device (100) or the image recording device (300) to an original and source verification service server (500) (②').

[0065] A camera device (100) may generate a first authentication block information containing a first authentication information, which is generated by hashing at least a portion of the secure video data and encrypted with the private key of the camera device, and a unique identification information of the camera device (100), and transmit it to a video recording device (300) and / or an original and source verification service server (500) (3). Furthermore, the video recording device (300) may transmit a video clip containing a second authentication information, which is generated by hashing at least a portion of the secure video data and encrypted with the private key of the video recording device, and a unique identification information of the video recording device to a client terminal (200) (4).

[0066] Additionally, the video recording device (300) can generate a second authentication block information including second authentication information and unique identification information of the video recording device and transmit it to an original and source verification service server (500) (③'). Furthermore, the video recording device (300) can transmit a video clip containing the second authentication block information including second authentication information and unique identification information of the video recording device to a client terminal (200) (④').

[0067] A client terminal (200) can provide a video clip verification request to an original and source verification service server (500) (⑥). The original and source verification service server (500) can perform video clip verification (⑦) in response to the video clip verification request (⑥) and provide feedback of the verification result to the client terminal (200).

[0068] The original and source verification service server (500) may receive first authentication information from a client terminal (200) requesting verification (ⓐ), or may receive second authentication information (ⓑ). The second authentication information may include the first authentication information.

[0069] According to another embodiment, the original and source verification service server (500) may provide (⑧) a public key corresponding to unique identification information to the client terminal (200) in response to a video clip verification request (⑥), and allow the client to perform video clip verification (self-) through the client terminal (200) (⑨).

[0070] Figure 7 illustrates a method for verifying the source and origin of a video clip.

[0071] <Description of Invention of Claims 10 and 11>

[0072] As illustrated in FIG. 7, a method (S1000) for verifying the source and origin of a security image according to one embodiment is,

[0073] A video clip transmission request reception step (S10) of receiving a video clip transmission request containing security video data from a client terminal via a network,

[0074] A step of generating and managing camera device information (S20) for generating and managing the private key, unique identification information, and public key of the camera device,

[0075] The method includes a step (S30) of generating a first authentication block information, wherein at least a portion of the security video data is hashed to generate first authentication block information including first authentication information and unique identification information of the camera device, wherein the first hashing code recorded in the frames of the security video data is encrypted with the private key of the camera device.

[0076] According to one embodiment, the method (S1000) further includes a step (S40) of generating an image clip of a camera device, wherein the first image clip authentication information is added to secure image data including first authentication block information to generate an image clip. The image clip may be composed of a clip header and a plurality of frames (unit images) (see FIG. 5). The first image clip authentication information may be information obtained by hashing a first hashing code and encrypting the hashing code with the private key of the camera device. The first hashing code may be multiple. The first hashing code may include hashing codes related to voice as well as image.

[0077] In the step of generating and managing camera device information (S20), the time for generating the private key, unique identification information, and public key of the camera device may be during the manufacturing stage of the camera device.

[0078] According to the proposed invention, at least a portion of the image data may be hashed. According to one embodiment, the first authentication information may be included in some frames, for example, only in the I-Frame, rather than in all frames (I-Frame, B-Frame, P-Frame). According to one embodiment, instead of the entire frame, only a portion of the frame, for example, only the first 10 columns, may be hashed. By reducing the image data to be hashed, the time required for encryption can be reduced.

[0079] A private key is a key generated in pairs with a public key in asymmetric key encryption algorithms, and such asymmetric key encryption algorithms are known technologies. The private key is distributed only to the subject and can be decrypted only by possessing the paired public key; therefore, decryption with the public key implies that the document was encrypted with that paired private key, and since only the subject possesses that private key, it can be confirmed that the document was created by that subject.

[0080] A private key is assigned to a camera device, and at least a portion of a security image generated by the camera device is encrypted with this private key to generate authentication information (first authentication information). By transmitting one's own identification information in plain text along with the authentication information to a client terminal, the client receiving the image can obtain the public key of the camera device from the identification information, decrypt (or decode) the first authentication information using the obtained public key, and compare it with the first hashing code to authenticate or verify whether the original creator of the image is the camera device.

[0081] The private key of the camera device is injected externally during product manufacturing and stored on an external device or server, or it may be granted by that external device or server (cryptographic server). The camera device is composed of one or more components and is assigned a unique, identifiable ID. For example, this unique, identifiable ID may be the camera device's unique identification information, such as a GUID (Globally Unique Identifier). The first authentication information may further include signature information. The camera device's unique identification information may consist of unencrypted plain text.

[0082] <Description of Claim 12>

[0083] As illustrated in FIG. 7, a method (S1000) for verifying the source and origin of a security image according to one embodiment is,

[0084] The method may further include a step of generating and managing video recording device information (S50), which generates and manages the private key, unique identification information, and public key of the video recording device. The registration and integrated management of the unique identification information and public key of the video recording device may be performed by a server. The server may be configured as a cloud server or an edge box, but is not limited thereto. In the step of generating and managing video recording device information (S50), the time for generating the private key, unique identification information, and public key of the video recording device information may be during the manufacturing stage of the video recording device information.

[0085] <Claim 13 Description of the Invention>

[0086] As illustrated in FIG. 7, a method for verifying the source and origin of a security image (S1000) according to one embodiment may further include a step (S60) of generating a second authentication block information, wherein the second authentication information and unique identification information of the image recording device are generated by hashing at least a portion of the security image data and encrypting the second hashing code recorded in the frames of the security image data with the private key of the image recording device.

[0087] The video recording device consists of one or more units and is assigned a unique, identifiable ID. The video recording device may be a Digital Video Recorder (DVR), a Network Video Recorder (NVR), or an Edge computer, and can perform functions for recording and editing video. A client terminal can connect to the video recording device to extract and store secure video data. The video recording device may be electrically connected to a camera device.

[0088] <Description of Claim 14>

[0089] As illustrated in FIG. 7, a method (S1000) for verifying the source and origin of a security image according to one embodiment is,

[0090] The method may further include a video clip generation step (S70) of a video recording device, which generates a video clip by adding second video clip authentication information to secure video data including first authentication block information and / or second authentication block information, and a video clip transmission step (S80), which transmits the video clip to a client terminal. The video clip authentication information may be information obtained by encrypting a hash code obtained by hashing a first hash code and / or a second hash code with the private key of the video recording device. There may be multiple first hash codes and / or second hash codes. The first hash code and the second hash code may include hash codes related to voice as well as video.

[0091] <Description of Claim 15 Invention>

[0092] As illustrated in FIG. 7, a method for verifying the source and origin of a secure video according to one embodiment (S1000) may further include: a video clip verification request receiving step (S90) of receiving a video clip verification request from a client terminal through a network; a public key providing step (S100) of providing a public key to a client terminal or a source and origin verification service server; and a video clip verification step (S110) in which the client terminal or the source and origin verification service server verifies the source of the video clip by decrypting the first video clip authentication information or the second video clip authentication information with the public key and comparing it with the first video clip hashing code or the second video clip hashing code, and verifies the source of the video clip by decrypting the first authentication information or the second authentication information and comparing it with the first hashing code or the second hashing code.

[0093] The client receiving the video clip and the client requesting verification of the source and origin of the video clip may be the same person or different people. Accordingly, the client terminal receiving the video clip and the client terminal requesting verification of the source and origin of the video clip may be the same terminal or different terminals.

[0094] The above description of FIGS. 1 through 6 can be combined by reference to FIG. 7. Each step illustrated in FIG. 7 is not limited to the order.

[0095] Although the present invention has been described above with reference to embodiments with reference to the accompanying drawings, it is not limited thereto and should be interpreted to encompass various variations that can be obviously derived from them by those skilled in the art. The claims are intended to encompass such variations. Explanation of the symbols

[0096] 1000: Security Video Source and Origin Verification Camera System 100 : Camera device 110 : Video recording element 120: 1st communication element 130: 1st memory element 140 : 1st computational element 200 : Client terminal 300: Video recording device 320: Second communication element 330 : 2nd memory element 340 : 2nd computation element 400: Key Management Server 500: Origin and Source Verification Service Server 520: Third communication element 530: Third memory element 540 : Third calculation factor

Claims

Claim 1 A security image source and origin verification camera system comprising one or more camera devices; wherein the camera device comprises: an image capturing element, a first communication element connected to a client terminal via a network, a first memory element storing a first executable program and security image data, and a first computation element executing the first program; wherein the first program comprises: a first authentication block information generation instruction set that generates first authentication block information including first authentication information and unique identification information of the camera device, wherein the first hashing code recorded in the frames of the security image data is encrypted with the private key of the camera device by hashing at least a portion of the security image data requested from the client terminal connected via the network; and wherein the security image data comprises a plurality of frames including a frame header and a frame body, and the first authentication information and the unique identification information of the camera device are included in the frame header. Claim 2 A camera system for verifying the source and origin of a security image, wherein the first program further comprises: a first video clip service instruction set for extracting security image data requested from a client terminal from a first memory element, generating a video clip by adding first video clip authentication information to security image data including first authentication block information generated by the first authentication block information generation instruction set, and transmitting the video clip including the first video clip authentication information to the client terminal; wherein the first video clip authentication information is information obtained by hashing a first hashing code and encrypting the hashing code with the private key of a camera device. Claim 3 The security image source and origin verification camera system according to claim 1 further comprises: one or more image recording devices; wherein the image recording device further comprises: a second communication element connected to a client terminal and a camera device via a network, a second memory element storing security image data and an executable second program, and a second computation element executing the second program; wherein the second program comprises: a second authentication block information generation instruction set that generates second authentication block information including second authentication information, which encrypts a second hashing code recorded in frames of security image data by the private key of the image recording device, and unique identification information of the image recording device by hashing at least a portion of the security image data requested from the client terminal. Claim 4 A camera system for verifying the source and origin of a security image, wherein the second program further comprises: a second image clip service instruction set for extracting security image data requested from a client terminal from a second memory element, generating an image clip by adding second image clip authentication information to security image data including second authentication block information generated by the second authentication block information generation instruction set, and transmitting the image clip including the second image clip authentication information to the client terminal; wherein the second image clip authentication information is information obtained by hashing a first hashing code or a second hashing code and encrypting the hashing code with the private key of a video recording device. Claim 5 The security image source and origin verification camera system of claim 3 further comprises: a key management server that registers and manages unique identification information and a public key of a camera device, or unique identification information and a public key of an image recording device. Claim 6 The security video source and origin verification camera system according to claim 5 further comprises: a source and origin verification service server including: a third communication element connecting to a client terminal, a key management server, and a camera device via a network; a third memory element storing an executable third program; and a third computation element executing the third program; wherein the third program responds to a security video verification request from a client terminal by receiving a public key corresponding to unique identification information of a camera device included in a video clip from a key management server, decrypts a first authentication information with the public key of the camera device and verifies the source and origin of the video clip by comparing it with a first hashing code, or provides the public key of the camera device to a client terminal so that the client verifies the source and origin of the video clip. Claim 7 In claim 5, the security video source and origin verification camera system further comprises: a source and origin verification service server including: a third communication element connected to a client terminal, a key management server, and a video recording device via a network; a third memory element storing an executable third program; and a third computation element executing the third program; wherein the third program: in response to a security video verification request from a client terminal, receives a public key corresponding to unique identification information of a video recording device included in a video clip from a key management server, decrypts second authentication information with the public key of the video recording device and compares it with a second hashing code to verify the source and origin of the video clip, or provides the public key of the camera device and the video recording device to the client terminal so that the client verifies the source and origin of the video clip. Claim 8 A secure image source and origin verification camera system according to claim 2, wherein the image clip comprises a plurality of frames including a frame header and a frame body, and the first authentication information and the unique identification information of the camera device are included in the frame header. Claim 9 A secure video source and source verification camera system according to claim 8, wherein the video clip: video clip authentication block information is stored in the header of the video clip, and the video clip authentication block information further includes video clip source unique identification information. Claim 10 A method for verifying the source and origin of a security video (S1000), comprising: a step of receiving a video clip transmission request (S10), in which a transmission request for a video clip containing security video data is received from a client terminal via a network; a step of generating and managing camera device information (S20), in which a private key, unique identification information, and a public key of a camera device are generated and integratedly managed; and a step of generating a first authentication block information (S30), in which at least a portion of the security video data is hashed to generate first authentication block information including first authentication information and unique identification information of a camera device, wherein the first hashing code recorded in the frames of the security video data is encrypted with the private key of the camera device. The method for verifying the source and origin of a security video comprises: a plurality of frames including a frame header and a frame body, and the first authentication information and the unique identification information of the camera device are included in the frame header. Claim 11 In claim 10, the method for verifying the source and origin of a security image (S1000) further comprises: a step (S40) of generating an image clip of a camera device, wherein the first image clip authentication information is added to security image data including first authentication block information to generate an image clip, and the first image clip authentication information is information obtained by hashing a first hashing code and encrypting the hashing code with the private key of the camera device. Claim 12 In claim 10, the method for verifying the source and origin of a security image (S1000) further comprises: a step of generating and managing image recording device information (S50), which generates and integrates the private key, unique identification information, and public key of the image recording device. Claim 13 The method for verifying the source and origin of a security image (S1000) according to claim 10 further comprises: a step of generating second authentication block information (S60), wherein the second authentication block information comprises: a second authentication information obtained by hashing at least a portion of the security image data and encrypting the second hashing code recorded in the frames of the security image data with the private key of the image recording device, and a unique identification information of the image recording device. Claim 14 In claim 13, the method for verifying the source and origin of a security image (S1000) further comprises: a video clip generation step (S70) of a video recording device, which generates a video clip by adding a second video clip authentication information to security image data including a first authentication block information or a second authentication block information; and a video clip transmission step (S80), which transmits the video clip to a client terminal, wherein the second video clip authentication information is information obtained by hashing a first hashing code or a second hashing code and encrypting the hashing code with the private key of the video recording device. Claim 15 In claim 14, the method for verifying the source and origin of a secure video (S1000) further comprises: a video clip verification request receiving step (S90) of receiving a video clip verification request from a client terminal via a network; a public key providing step (S100) of providing a public key to a client terminal or a source and origin verification service server; and a video clip verification step (S110) in which the client terminal or the source and origin verification service server verifies the source of the video clip by decrypting the first video clip authentication information or the second video clip authentication information with the public key and comparing it with the first video clip hashing code or the second video clip hashing code, and verifies the source of the video clip by decrypting the first authentication information or the second authentication information and comparing it with the first hashing code or the second hashing code.

Images