Hardware configuration method and security for encrypted system within closed space
By encrypting data storage systems with public keys and distributing storage across multiple locations, the method effectively addresses the challenges of maintaining security and integrity in top-secret facilities, ensuring delayed or prevented unauthorized access and reduced data loss.
Patent Information
- Application Number
- PCT/IB2024/061947
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2024-11-24
- Filing Date
- 2024-11-27
- Publication Date
- 2025-06-12
AI Technical Summary
Existing data storage systems in top-secret facilities face challenges in maintaining security and integrity, particularly in preventing unauthorized access and data loss when administrators are not present.
The method involves encrypting data storage systems using public keys generated from portable encryption generators, with the private key carried by administrators to prevent unauthorized access. Additionally, data storage devices are distributed across multiple locations to minimize data loss and ensure continuous surveillance.
This approach significantly delays or prevents unauthorized access to encrypted data, ensuring the integrity and security of data storage systems, even when administrators are not present. It also reduces the risk of data loss by distributing storage across multiple locations.
Smart Images

Figure IB2024061947_12062025_PF_FP_ABST
Abstract
Description
Hardware configuration method and security for encrypted systems within a closed space
[0001] The present invention relates to a data storage management method that can be utilized in places where the security and maintenance of top-secret facilities are more important than the possibility of legal or serious incidents that may arise from perfect data management.
[0002]
[0003] This relates to hardware that stores and preserves data. More specifically, it encrypts the system (especially data storage) using a public key generated by a portable encryption generator. The private key is not stored within the hardware, but rather is carried by the administrator. This prevents intruders from accessing the data when the administrator is not present, and makes it easier for the intruder to access the data if the hardware is destroyed. Future technological advancements should aim to delay operation time rather than prevent intruders from accessing data when the administrator is not present.
[0004]
[0005] If the CCTV device or CCTV data storage that protects the data storage is placed in only one location, the monitor's fatigue increases and there are many gaps, so the method of placing the data storage in multiple locations is as follows.
[0006] CCTV storage data is stored in a perfectly configured and controlled environment, rarely resulting in black screens where data is deleted. Screen tearing, afterimages, or malfunctions are rare, unless the device is aging. However, the aforementioned abnormalities are common when viewing CCTV storage in normal environments. The applicant of this application has not been able to find any prior patents from others regarding solutions to this phenomenon.
[0007]
[0008] To make existing encryption devices or data storage hardware practical, there must be a closed space that can discourage intrusion.
[0009] CCTV monitors are also living beings, so they can sleep or leave their monitoring positions while on duty. This gives time to those who steal surveillance storage data (recording devices such as HDDs and SSDs) and an opportunity to commit a crime by deleting the data or pasting general videos. Furthermore, since some of the monitors may not be trustworthy, surveillance data (especially snapshots) can be distributed and stored in multiple remote locations via a self-established intranet. This allows trusted final managers (in the case of individuals, several family members, in the case of industrial situations, several key company members) to compare and analyze various video footage to identify internal spies and secure incident data without any gaps in time.
[0010]
[0011] We researched additional measures to protect the private keys and data storage held by administrators, and devised a method to use encryption for data storage to discourage intruders from obtaining the data.
[0012] In the CCTV data viewer, the software that changes settings during initial installation and discards the program that changes settings when running, and reads or transmits data externally in a way that only registered users have set.
[0013]
[0014]
[0015] A portable device having a portable cryptographic generator within hardware, including private key output and random number generation, and an attachment point for the portable device, and an unspecified part within the hardware that encrypts an unspecified part of another system by public key.
[0016]
[0017]
[0018] A portable device having a portable cryptographic generator within hardware, including private key output and random number generation, and an attachment point for the portable device, and an unspecified part within the hardware that encrypts an unspecified part within the hardware by a public key.
[0019]
[0020]
[0021] A hardware attachment for a portable device with a portable cryptographic generator that includes private key output and random number generation.
[0022]
[0023]
[0024] Portable encryption generation with private key output and random number generation
[0025]
[0026]
[0027] Hardware attachment to a portable device with portable encryption generator that includes private key output.
[0028]
[0029]
[0030] Generate portable encryption with private key output
[0031]
[0032]
[0033] A portable device having a portable cryptographic generator with a private key output and an attachment point for a portable device having a portable cryptographic generator within hardware and an unspecified part within hardware that encrypts an unspecified part within hardware by a public key.
[0034]
[0035]
[0036] A portable device having a portable cryptographic generator with a private key output and an attachment point for the portable cryptographic generator within hardware, and an unspecified part within the hardware that encrypts an unspecified part of another system by the public key.
[0037] CCTV-related devices of the above type will discourage ordinary, non-professional intruders and increase the likelihood of failure.
[0038]
[0039] Encrypted systems within surveillance facilities using CCTV would cause significant delays even for sophisticated, expert intruders.
[0040] Multiple remote management offices must be monitored in all directions with 360-degree overlapping CCTV screens or be configured to overlap seamlessly, and each area must be connected to each other via its own intranet or the Internet to ensure constant information exchange.
[0041] CCTV and surveillance cameras are deployed in multiple remote data storage locations and data storage is managed. Data encrypted using public keys cannot be immediately accessed by external intruders, making it time-consuming or impossible to delete CCTV data and paste regular data. Evidence of crime is bound to remain. Data encrypted using public keys also suffers from time-consuming or impossible decryption, requiring destruction as the only option. Therefore, data storage is advantageous for medium-security purposes. Top-secret data is stored in a data storage facility where the administrator resides, along with the private key. Furthermore, careful management of vulnerabilities in the data storage building will ensure optimal data storage operation.
[0042]
[0043] By lowering the random number generation length of the portable encryption generator to a certain level, the risk of production and sale will be reduced, and there will be many uses suitable for ordinary users.
[0044]
[0045] Increasing the random number generation length of a portable cryptographic generator can be risky, but it may have its uses in limited situations.
[0046] By distributing CCTV data storage and installing viewers in multiple remote locations, you can minimize data loss by reducing the number of end-users leaving their positions. End-users must ensure sufficient communication between monitoring stations to prevent them from leaving.
[0047]
[0048] When the number of monitors or managers is small compared to the amount of surveillance required, CCTV equipment and data storage devices can develop vulnerabilities or malfunctions, starting from minor malfunctions by aggressive intruders. Therefore, this risk must be taken into account. Furthermore, each monitoring and management station must be meticulously designed to prevent thieves from entering. If these vulnerabilities are not properly managed or are at risk of destruction, managers must be on a 24-hour workday, allocating sleep time to a minimum. Each monitoring and management station must be equipped with sufficient power to prevent power outages.
[0049]
[0050] CCTV devices should be placed in a three-dimensional space, with sufficient overlap between screens to allow time for an intruder to react, and out of reach of human hands. If a single CCTV device is placed in a location where intrusion is possible, the entire CCTV system could collapse, like a domino effect.
[0051]
[0052] A secure method of data transmission is through a wired intranet or a dedicated line that does not go over the Internet.
[0053]
[0054] Even when there is a need to access CCTV data stored in the CCTV data viewer in Remote Monitoring Station 2 (Example) from Remote Monitoring Station 1 (Example), only READING & SAVE OUT data is performed after user logging in.
[0055]
[0056] The safe monitoring station operation method requires a wired intranet or dedicated line that does not use the Internet, and if the target to be protected is of great value, a separate monitor or monitoring station must be established to monitor it.
[0057]
[0058] As an alternative, data transmission can be done via the Internet, but in the event of a natural disaster or traffic overload, data transmission and sharing between CCTV data monitoring stations may be temporarily interrupted or may be stolen.
[0059]
[0060] Administrator settings for CCTV devices should only be changed during initial setup. Any subsequent configuration processes should be self-deleted. For actual use, only registered users should perform READ & SAVE OUT. This will minimize potential intruder delays. If a system reset is required, the software can be downloaded quickly via a downloadable path, the file can be registered, and the system can be reset to administrator mode.
[0061]
[0062] The software or hardware of CCTV devices or CCTV data storage devices must be verified by a credible institution or third-party rebuttal agency of the relevant country.
[0063]
[0064] The encrypted system mentioned in the claim must be verified by a credible agency of the country or a third party rebuttal.
[0065]
[0066] If the user arbitrarily changes the CCTV device software, changes the CCTV data storage hardware, or modifies evidence, the legal or logical ability to prove the CCTV data is excluded.
[0067]
[0068] Based on CCTV data evidence, the offender must be caught and turned in to be used as legal or logical evidence.
[0069]
[0070] CCTV data storage in multiple remote monitoring stations is not stored in just one location, but each monitoring station's CCTV data must be stored as an individual process.
[0071]
[0072] Because attempts by external intruders to breach perfectly secure facilities are extremely vicious, it's dangerous to keep your private key outside of a closed surveillance facility. If someone compromises your judgment and your private key is leaked while you're not paying attention, your data can be easily stolen. Recovering from the collapsed dominoes can be a lengthy process. Anticipating this recurrence, you should only exchange your private key in a closed surveillance facility.
[0073]
[0074] If the encryption generator is embedded in the hardware, it will naturally be destroyed if compromised, which is why a portable, attachable device is necessary. Since components other than the encryption generator are not particularly valuable, this prevents significant losses.
[0075]
[0076] In the claim, the applicable hardware device, FIRMWARE or software (excluding FIRMWARE) receives and verifies the software for checking for tampering through a quick download path.
[0077]
[0078] The above hardware or software encryption system must be disclosed and verified by a credible organization or third party rebuttal upon request for information disclosure.
[0079]
[0080] CCTV and surveillance cameras are deployed in multiple remote data storage locations and data storage is managed. Data encrypted using public keys cannot be immediately accessed by external intruders, making it time-consuming or impossible to delete CCTV data and paste regular data. Evidence of crime is bound to remain. Data encrypted using public keys also suffers from time-consuming or impossible decryption, requiring destruction as the only option. Therefore, data storage is advantageous for medium-security purposes. Top-secret data is stored in a data storage facility where the administrator resides, along with the private key. Furthermore, careful management of vulnerabilities in the data storage building will ensure optimal data storage operation.
[0081]
[0082] By lowering the random number generation length of the portable encryption generator to a certain level, the risk of production and sale will be reduced, and there will be many uses suitable for ordinary users.
[0083]
[0084] Increasing the random number generation length of a portable cryptographic generator can be risky, but it may have its uses in limited situations.
[0085] It is used in nationally important facilities, banks, and corporate locations where security is more important than the economic cost of installing CCTV, or in work facilities where important technical data must be stored. It is also used in places and workplaces where personal property and health are prioritized.
[0086]
Claims
In the CCTV data viewer, software that changes settings during initial installation and discards the program that changes settings when running, and reads or transmits data externally in a set manner only for registered users. A portable device having a portable cryptographic generator with private key output and random number generation, and an attachment point for the portable device having the portable cryptographic generator within the hardware, and an unspecified part within the hardware that encrypts an unspecified part of another system by the public key. A portable device having a portable cryptographic generator with private key output and random number generation, and an attachment point for the portable device having a portable cryptographic generator within the hardware, and an unspecified part within the hardware that encrypts an unspecified part within the hardware by the public key. Hardware attachment for portable devices with portable encryption generation including private key output and random number generation Portable encryption generation with private key printing and random number generation Hardware attachment for a portable device with portable encryption generation including private key output Generate portable encryption with private key output A portable cryptographic generator having a private key output and an attachment for a portable device having a portable cryptographic generator within hardware and an unspecified part within hardware that encrypts an unspecified part within hardware by a public key. A portable cryptographic device having a portable cryptographic generator with a private key output and an attachment portion thereof having a portable cryptographic generator within hardware and an unspecified portion within hardware that encrypts an unspecified portion of another system by means of the public key.
Citation Information
Patent Citations
Data processor
JP2006319518A
Network computing system based cloud
KR1020150102388A
Method and Apparatus for Predicting Defect of Power Semiconductor
KR1020240038395A
Distributed storage CCTV system with data leakage prevention through data encryption
KR102577403B1
Security transmission system and method of video data from CCTV camera based on key exchange encryption protocol
KR102580643B1