CCTV Image Data Distribution via Segmented Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional spatial coordinate transformation schemes for protecting CCTV image data are vulnerable to proximity attacks, leading to exposure of personal information when data is outsourced, and existing order preserving encryption (OPES) technologies allow for data tracking and estimation.
Innovation Solution
A closed circuit television (CCTV) image data distribution processing apparatus and method that splits and encrypts CCTV image data into chunks using a secure index technology, distributing them across multiple storage servers with cipher block chaining (CBC) encryption and a pseudorandom number, ensuring only authorized access can restore the original data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If order preserving encryption (OPES) technology is used to distribute and store CCTV image data, then data distribution and storage across multiple servers is enabled, but data tracking and estimation become possible through frequency and query analysis
Solution Approach 1:
The patent divides CCTV image data into multiple encrypted chunks and distributes them across different storage servers. Each chunk is independently encrypted and stored, so that no single server contains complete image data. This segmentation prevents attackers from tracking complete image data by analyzing query frequencies across servers, as each server only stores partial encrypted data.
Solution Approach 2:
The patent introduces an index key as an intermediary between the data owner and storage servers. The index key is used to locate and retrieve specific encrypted chunks from storage servers without revealing information about data distribution patterns. This intermediary mechanism prevents frequency analysis and query pattern tracking while maintaining efficient data access.
2Ease of operation
If spatial coordinate transformation schemes are used to protect position data, then data outsourcing is enabled, but proximity attacks can still expose personal information
Solution Approach 1:
The patent applies segmentation by dividing image data into multiple encrypted chunks distributed across different servers. This prevents proximity attacks because the attacker cannot access complete image data or track personal information through a single data source. Each server stores only partial encrypted data, making it impossible to reconstruct complete personal information even with proximity access.
Solution Approach 2:
The patent extracts the encryption function from the data storage system by using separate encryption keys and index keys. The original image data is encrypted and stored as chunks, while the index key is separately managed to locate specific chunks. This extraction prevents proximity attacks by ensuring that even if attackers access storage servers, they cannot decrypt or track personal information without the proper keys.
3Device complexity
If CCTV image data is stored in a single server, then storage simplicity is maintained, but data retention limits and privacy exposure risks increase
Solution Approach 1:
The patent segments data storage across multiple servers while maintaining manageable system complexity through automated index processing. The data is divided into encrypted chunks distributed across different servers, improving reliability and privacy protection. The index key mechanism automates the complexity of managing distributed data, allowing simple data retrieval operations despite the distributed architecture.
Data Source
AI summary
closed circuit television (CCTV) image data distribution processing apparatus includes a CCTV image data receiver configured to receive CCTV image data from a CCTV camera, an encryption processor configured to perform encryption-processing on the CCTV image data, a data splitter configured to split the CCTV image data into chunk data, an index processor configured to perform index-processing on the chunk data with an index generated through the encryption, and a controller configured to distribute and store the index-processed chunk data in a plurality of storage servers corresponding to corresponding indexes, respectively, or to decode chunk data to restore original CCTV image data when receiving the chunk data stored in the storage server.