Video surveillance apparatus for enhanced security of CCTV account information

Abstract

The present invention, in association with CCTV account information, relates to a video surveillance apparatus for enhanced security of CCTV account information, wherein security is enhanced against the possibility of information leakage when, in a video surveillance apparatus comprising a control unit and a security device chip unit, account information encrypted in the security device chip unit is decrypted, and the decrypted CCTV account information is transmitted to the control unit. Accordingly, in the video surveillance apparatus comprising the control unit and the security device chip unit, the present invention has an effect of enhancing security by preventing potential leakage when decrypted CCTV passwords are transmitted from the security device chip unit to the control unit.

Description

Video surveillance devices to enhance CCTV account information security

[0001] The present invention relates to a video surveillance device for strengthening the security of CCTV account information, and more specifically, to a video surveillance device for strengthening the security of CCTV account information, which is configured with a control unit and a security device chip unit in relation to CCTV account information, and which strengthens security against the possibility of leakage when the account information is encrypted in the security device chip unit and then decrypted and then transmitted to the control unit after being decrypted.

[0002] Although it is difficult to find a device that is configured with a security device chip that encrypts and decrypts CCTV account information in relation to the security related to changing conventional CCTV account information, the applicant of the present invention has developed a technology that strengthens security by configuring a control unit and a security device chip unit in a video surveillance device for controlling and storing CCTV account information, thereby encrypting the CCTV account information within the security device chip unit even if the CCTV account information is attempted to be acquired by forcibly separating it from the outside and stealing or leaking it, through the technology of Republic of Korea Patent Publication No. 10-2498493 for CCTV account information security.

[0003] At this time, there is a possibility that CCTV account information may be leaked through side channel attacks and analysis in the part where the CCTV password is encrypted in the security device chip of the above-mentioned Patent Publication No. 10-2498493 and then decrypted and provided to the control unit, so more enhanced security may be required.

[0004] (Patent Document 1) Patent Document 1. Republic of Korea Patent Publication No. 10-2498493, 'Image Processing Device for Account Information Control of CCTV Camera Using Security Device Chip' (Registration Date: February 7, 2023)

[0005] Accordingly, the purpose of the present invention is to enhance security in a process in which encrypted CCTV camera account information is decrypted in the security device chip unit and transmitted to the control unit in a device including a control unit and a security device chip unit.

[0006] In addition, other purposes of the present invention can be inferred from the contents described below.

[0007] In order to achieve the above-described problem, the present invention provides a video surveillance device for enhancing the security of CCTV account information, comprising a control unit and a security device chip unit, wherein, in a process in which CCTV camera account information decrypted in the security device chip unit is transmitted to the control unit, if a PIN (Personal Identification Number) entered by a user matches a PIN previously stored in the security device chip unit and authentication is approved, a control unit decrypts the first CCTV account information already encrypted and decrypted from the security device chip unit and then receives second CCTV account information encrypted in the security device chip unit by including a decryption key program unit; and a security device chip unit transmits the second CCTV account information encrypted by an encryption key program unit to the control unit in a process in which the first CCTV account information already encrypted and decrypted in itself is transmitted to the control unit through authentication approval when the PIN requested by the control unit matches.

[0008] The present invention has the effect of enhancing security by preventing CCTV account information that has been decrypted from being leaked when transmitted from the security device chip to the control unit in a video surveillance device including a control unit and a security device chip unit.

[0009] The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood by those skilled in the art from the description below.

[0010] Figure 1 is a configuration diagram of a video surveillance device for strengthening CCTV account information security according to one embodiment of the present invention.

[0011] Figure 2 is an example of connection approval between a control unit and a security device chip unit according to one embodiment of the present invention.

[0012] Figure 3 is an example diagram showing a CCTV password encrypted and transmitted from a security device chip unit to a control unit according to one embodiment of the present invention.

[0013] Figure 4 is an example diagram of the operation of the first and second random number programs according to one embodiment of the present invention.

[0014] Figure 5 is an example of generating a decryption key encryption key using a PIN and first and second random numbers according to one embodiment of the present invention.

[0015] Figure 6 is an example diagram of random number generation using the time information flow of the control unit and random number generation using the CPU clock according to one embodiment of the present invention.

[0016] Figure 7 is an example of applying an encryption key and decryption key to a CCTV password according to one embodiment of the present invention.

[0017] Description of the symbol

[0018] 100: Control unit

[0019] 200: Security device chip section

[0020] Hereinafter, the configuration and operation of the best embodiment of the present invention will be described with reference to the attached drawings. The embodiment of the present invention may be modified in various forms, and the shapes of components in the drawings may be exaggerated to emphasize a clearer description, and a detailed description of the known technology and its configuration that may unnecessarily obscure the gist of the present invention will be omitted.

[0021] FIG. 1 is a configuration diagram of a video surveillance device for strengthening CCTV account information security according to one embodiment of the present invention, wherein the video surveillance device for strengthening CCTV account information security is composed of a control unit (100) and a security device chip unit (200).

[0022] First, before explaining the control unit (100) and the security device chip unit (200) of the present invention, in relation to the device including the security device chip unit (200), in the Korean Patent Publication No. 10-2498493 invented by the applicant, among the account information related to CCTV, even if the CCTV password is forcibly separated from the outside and theft or attack occurs to obtain the CCTV password, it is encrypted within the security device chip unit (200), so it operates safely in terms of security.

[0023] Here, the control unit (100) of the present invention is decrypted from the security device chip unit (200) and provides the CCTV password, so that there is a risk of leakage through a side channel. In order to prevent this, the control unit (100) and the security device chip unit (200) are described in detail below.

[0024] When the above control unit (100) is authenticated by matching the PIN (Personal Identification Number) entered by the user with the PIN previously stored in the security device chip unit (200), the first CCTV account information, which has already been encrypted and decrypted from the security device chip unit (200), is decrypted by including the decryption key program unit in the second CCTV account information, which is encrypted and provided again from the security device chip unit (200).

[0025] For example, the video surveillance device of the present invention can be configured in multiple units depending on the size of the control center, and each of the multiple video surveillance devices receives a different PIN from the control unit (100) and stores it in the security device chip unit (200).

[0026] Accordingly, the control unit (100) uses the PIN input by the user to check for each video surveillance device whether it matches the security device chip unit (200), and since the operating principle of each can be explained through one video surveillance device, the present invention is explained below based on one video surveillance device, and in order to help understanding of the invention, a password among various account information is used as an example.

[0027] To explain in detail, as shown in FIG. 2, the control unit (100) receives PIN1 from the user and provides an approval request to the security device chip unit (200), thereby authenticating PIN1. For example, if the information of PIN1 is 1234, if the 1234 information is stored in the security device chip unit (200), the 1234 information becomes an authentication means.

[0028] That is, when the control unit (100) receives PIN1 of 1234 as shown in FIG. 2 from the user, 1234 is provided to the security device chip unit (200) for authentication, and thus mutual compatibility for data exchange is achieved through mutual authentication of the PIN1 number 1234.

[0029] In this way, when the control unit (100) is mutually authenticated with the security device chip unit (200), first, the CCTV password encrypted as a`b`c`d` in the security device chip unit (200) as shown in FIG. 3 is decrypted to abcd in the security device chip unit (200). As described in the prior art, there is a concern that the abcd password may be exposed during transmission to the control unit (100) through a side channel attack and analysis. Therefore, the security device chip unit (200) receives a〃b〃c〃d〃 encrypted by the encryption key program unit and provides it to the control unit (100), and then receives the CCTV password a〃b〃c〃d〃 decrypted to abcd by the pre-installed decryption key program unit, that is, abcd, thereby further strengthening security when accessing the CCTV password provided by the security device chip unit (200).

[0030] The security device chip unit (200) transmits the second CCTV account information encrypted by the encryption key program unit to the control unit (100) in the process of transmitting the first CCTV account information, which has already been encrypted and decrypted by itself, to the control unit (100) through authentication approval when the PIN requested by the control unit (100) matches.

[0031] For example, as described above, the security device chip unit (200) was improved through the Korean Patent Publication No. 10-2498493, 'Image processing device for controlling account information of CCTV camera using security device chip', invented by the applicant, in order to prevent leakage of CCTV password through forced separation, but in order to first strengthen the security of the CCTV password that is decrypted and provided to the control unit (100), as illustrated in FIG. 2, the security of the CCTV password that may be leaked in the process of being transmitted from the security device chip unit (200) to the control unit is strengthened.

[0032] Next, when authentication is established between the security device chip unit (200) and the control unit (100), as shown in FIG. 3, the CCTV password is encrypted as a`b`c`d`, and the encrypted abcd is decrypted and transmitted to the control unit (100). In order to enhance security, the security device chip unit (200) transmits the encrypted a〃b〃c〃d〃 using the encryption key program unit.

[0033] Accordingly, the security device chip unit (200) transmits the CCTV camera password with encrypted a〃b〃c〃d〃 even when a side channel attack and analysis are performed when transmitting to the control unit (100), thereby enhancing security.

[0034] Meanwhile, it is preferable that the decryption key program unit of the control unit (100) includes a first random number program unit to generate a first random number and store a PIN provided by a user while transmitting the first random number and the PIN to the security device chip unit (200), and the encryption key program unit of the security device chip unit (200) includes a second random number program unit to generate a second random number and store the first random number, the PIN, and the second random number while transmitting the second random number to the control unit (100), so that the decryption key program unit generates a decryption key using the PIN and the first and second random numbers, and the encryption key program unit generates an encryption key using the PIN and the first and second random numbers.

[0035] For example, as shown in FIG. 4, the control unit (100) includes a first random number program unit to further enhance the security of CCTV account information, and the security device chip unit (200) includes a second random number program unit.

[0036] First, looking at the control unit (100) from the perspective of FIG. 5, the PIN is provided by the user, the first random number is generated by the first random number program unit included in the decryption key program unit of the control unit (100), and the second random number is provided and stored by the security device chip unit (200).

[0037] Next, looking at the security device chip unit (200) side, as shown in FIG. 5, the PIN is transmitted after being provided by the user to the control unit (100), the first random number is provided as generated by the decryption key program unit of the control unit (100), and the second random number is stored as generated by the second random number program unit included in the encryption key program unit of the security device chip unit (200).

[0038] Accordingly, the control unit (100) generates an encryption key using the security device chip unit (200) PIN and first and second random numbers, receives the corresponding CCTV password encrypted with the generated encryption key together with the second random number, and generates a decryption key, thereby decrypting the CCTV password encrypted with the PIN and first and second random numbers, accessing the corresponding CCTV camera, and performing various tasks including changing the password.

[0039] Meanwhile, it is also preferable that the first random number program unit of the control unit (100) generates a first random number based on a user input value in a software-based manner, and the second random number program unit of the security device chip unit (200) generates a second random number based on a change in the clock number of hardware equipment in a hardware-based manner.

[0040] For example, in the case of the first random number shown in FIG. 5, if the user uses the first random number program unit to generate a first random number by applying various input values ​​such as 1234, abcd, and 12ab, the same random number will not be generated, and such a first random number is transmitted to the security device chip unit (200) to generate an encryption key, and a decryption key is naturally generated on the control unit (100) side.

[0041] In addition, in the case of the second random number program section of the security device chip section (200), the clock number of hardware equipment such as the CPU, memory, I / O interface, etc., fluctuates frequently in the case of the second random number shown in FIG. 5, so the same random number will not be generated, and such second random number is transmitted to the control section (100) to generate a decryption key, and also, naturally, an encryption key is generated on the security device chip section (200) side.

[0042] Meanwhile, it is also preferable that the first random number program section of the control section (100) generates a first random number including time information according to the passage of time, and the second random number program section of the security device chip section (200) generates a second random number according to the change in the clock number of the CPU hardware.

[0043] For example, the first random number program section of the control section (100) starts at 13:00 on December 14, 2023, as shown in (a) in FIG. 6, and flows from 13:01 on December 14, 2023, to 13:02 on December 14, 2023. The flow of time is natural in terms of hardware, and if time information according to this flow of time is included, the same random number is not generated when generating the first random number.

[0044] In this way, as the control unit (100) transmits the first random number containing time information according to the passage of time to the security device chip unit (200), the encryption key generated in the security device chip unit (200) is not the same encryption key, and the control unit (100) that receives the encryption key also uses the first random number containing time information, which serves to further enhance security.

[0045] In addition, it is also desirable for the security device chip unit (200) to decrypt the CCTV password transmitted by encrypting it with an encryption key to which a second random number is applied based on a change in the hardware equipment clock number, using a decryption key to which a first random number is applied based on a user input value.

[0046] In addition, it is also desirable for the security device chip unit (200) to decrypt the CCTV password transmitted by encrypting it with an encryption key to which a second random number is applied due to CPU hardware clock frequency fluctuations, using a decryption key to which time information is applied according to the passage of time.

[0047] For example, the security device chip unit (200) may be an X`Y` encryption key to which a second random number is applied due to a change in the number of hardware equipment clocks, as shown in FIG. 7, and may be an X`Y` encryption key to which a second random number is applied due to a change in the number of CPU hardware clocks, and since the same second random number is applied when generating a decryption key in the control unit (100), decryption is possible, thereby strengthening security when provided from the security device chip unit (200) to the control unit (100).

[0048] The account information of the present invention is based on a password as an example, but it is applied to all account information that appears in the process of transmitting various account information of CCTV from the security device chip unit (200) of the present invention to the control unit (100).

[0049] As described above, the present invention relates to one embodiment for carrying out the prevention of CCTV account information leakage that may occur between the control unit and the security device chip unit in the present invention, and the present invention is not limited to the above-described embodiment, and it will be understood that the technical idea of ​​the present invention is such that various modifications can be implemented by anyone having ordinary skill in the art to which the present invention pertains without departing from the gist of the present invention as set forth in the following claims.

Claims

1. In a video surveillance device consisting of a control unit and a security device chip unit, in the process of transmitting CCTV camera account information decrypted in the security device chip unit to the control unit, If the PIN (Personal Identification Number) entered by the user matches the PIN previously stored in the security device chip and authentication is approved, a control unit for decrypting the first CCTV account information, which has already been encrypted and decrypted from the security device chip, and the second CCTV account information, which has been encrypted and provided from the security device chip, by including a decryption key program unit; When the PIN requested by the PIN authentication request from the above control unit matches, the first CCTV account information, which has already been encrypted and decrypted by itself, is transmitted to the control unit through authentication approval, and the second CCTV account information encrypted by the encryption key program unit is transmitted to the control unit, which is composed of a security device chip unit. The decryption key program unit of the above control unit includes a first random number program unit to generate a first random number and store a PIN provided by a user while transmitting the first random number and the PIN to the security device chip unit, and the encryption key program unit of the security device chip unit includes a second random number program unit to generate a second random number and store the first random number, PIN, and second random number while transmitting the second random number to the control unit, so that the decryption key program unit generates a decryption key using the PIN, the first and second random numbers, and the encryption key program unit generates an encryption key using the PIN, the first and second random numbers. A video surveillance device for enhancing CCTV account information security, characterized in that the first random number program unit of the control unit generates a first random number including time information according to the passage of time, and the second random number program unit of the security device chip unit generates a second random number by fluctuations in the clock number of CPU hardware.

2. In claim 1, A video surveillance device for enhancing CCTV account information security, characterized in that the first random number program unit of the control unit generates a first random number based on a user input value in a software-based manner, and the second random number program unit of the security device chip unit generates a second random number based on a change in the clock number of hardware equipment in a hardware-based manner.

3. In claim 2, A video surveillance device for enhancing the security of CCTV account information, characterized in that the security device chip section encrypts and transmits CCTV account information using an encryption key to which a second random number is applied based on a change in the hardware equipment clock frequency, and the control section decrypts the information using a decryption key to which a first random number is applied based on a user input value.

4. In claim 1, A video surveillance device for enhancing the security of CCTV account information, characterized in that the security device chip section encrypts transmitted CCTV account information using an encryption key to which a second random number is applied due to fluctuations in the CPU hardware clock frequency, and the control section decrypts the information using a decryption key to which time information is applied according to the passage of time.

Images