Camera Media Data Encryption Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing video surveillance systems face challenges in protecting real-time or stored media data from unauthorized access by service providers while still allowing service providers to access metadata for efficient searching services.
Innovation Solution
A method is implemented where a non-public initial user key is set in the camera, and an operational user key is acquired and set only if it is not already present, ensuring that media data is encrypted and accessible only to the user, while metadata can be encrypted with a common key accessible to both the user and the service provider.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If media data is encrypted with a user-specific key, then security against unauthorized access is improved, but service provider cannot access metadata for searching
Solution Approach 1:
The patent segments the data into two distinct types: media data and metadata. Media data is encrypted with user-specific keys to ensure security, while metadata is encrypted with service provider-accessible keys. This segmentation allows the service provider to search metadata without compromising media data security, resolving the contradiction between security and searching capability.
Solution Approach 2:
The patent extracts metadata from the encrypted media data stream and handles it separately with different encryption keys. By taking out the metadata and encrypting it with service provider-accessible keys while keeping media data encrypted with user-specific keys, the system enables searching services without compromising overall security.
2Productivity
If service provider can access metadata, then searching efficiency is improved, but media data protection is weakened
Solution Approach 1:
The patent divides the encryption scheme into two segments: user-specific encryption keys for media data and service provider-accessible encryption keys for metadata. This segmentation enables the service provider to efficiently search metadata while media data remains protected, resolving the contradiction between searching efficiency and data protection.
3Reliability
If user has exclusive access to media data, then privacy is improved, but service provider cannot provide efficient searching
Solution Approach 1:
The patent segments access rights by data type: user-specific keys protect media data for privacy, while service provider-accessible keys protect metadata for searching. This segmentation resolves the contradiction by allowing exclusive user access to media data while enabling service provider searching of metadata.
Solution Approach 2:
The patent extracts metadata from the protected media data and provides separate access to the service provider. By taking out metadata and encrypting it with service provider-accessible keys, the system maintains user privacy for media data while enabling efficient searching services through metadata access.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The disclosure relates to a method for restricting access to media data generated by a camera (10). The method, comprises: setting a non-public initial user key (KICU) in the camera (10), providing a user client (16) with the initial user key (KICU), establishing an authenticated relation between the user client (16) and the camera (10) by sending an authentication message including information based on the initial user key (KICU) from the user client (16) to the camera (10), checking if an operational user key (Kocu) is set in the camera (10), and performing, in response to the act of checking if the operational user key (KOCU) is set in the camera (10), the acts a) - d) only if the operational user key (KOCU) is not set: a) acquiring an operational user key (KOCU), b) setting the operational user key (KOCU) in the camera (10), c) sending the operational user key (KOCU) to the user client (16), and d) indicating in the camera (10) that the operational user key (KOCU) is set. The method further comprises setting, in the camera (10), a media data encryption/decryption key associated with the operational user key (KOCU), encrypting media data registered by the camera (10) using the media data encryption key, and sending the encrypted media data to a service provider management server (17).