IP Camera Video Stream Encryption with Wrapped Stream Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of video streams, including user privacy data, during transmission, storage, and use in internet of video things networks is a key concern due to the potential leakage of encryption keys and video streams.
Innovation Solution
A secure transmission method is implemented where the IPC encrypts video streams and stream keys using pre-generated keys, ensuring encryption at multiple stages, including the use of AES, TDES, or SM4 algorithms, and a binding procedure between user equipment and IPC to generate and manage encryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If video streams are transmitted in plaintext for easy access and processing, then ease of operation is improved, but security is worsened due to potential leakage of user privacy data
Solution Approach 1:
The video stream is encrypted before transmission using a stream key generated and shared between the IPC and user equipment. This preliminary encryption action ensures that even if the transmitted stream is intercepted, the content remains protected, thus resolving the contradiction between ease of access and security.
2Ease of operation
If stream keys are transmitted in plaintext for easy decryption, then ease of operation is improved, but security is worsened due to potential leakage of stream keys
Solution Approach 1:
The stream key is generated in advance through a binding procedure between the IPC and user equipment, and is used to encrypt the video stream before transmission. This preliminary key generation and encryption action eliminates the need to transmit the stream key itself, thus preventing key leakage while maintaining decryption capability.
3Reliability
If encryption is implemented at multiple stages to enhance security, then security is improved, but device complexity is worsened
Solution Approach 1:
The encryption process is segmented into distinct functional components: stream key generation through binding procedure, video stream encryption using the stream key, and decryption at the user equipment. This segmentation allows each component to be independently implemented and managed, reducing overall system complexity while maintaining multi-stage security.
Data Source
AI summary
A secure transmission method includes an Internet Protocol (IP) camera (IPC) that encrypts a to-be-transmitted video stream based on a pre-obtained first stream key to obtain an encrypted video stream. The IPC encrypts the first stream key based on a pre-obtained first wrapping key to obtain a first encrypted stream key. The IPC sends a data stream to a cloud platform, where the data stream includes the encrypted video stream and the first encrypted stream key. The cloud platform stores the data stream. A user equipment receives the to-be-processed data stream from the cloud platform. The user equipment decrypts the first encrypted stream key based on a pre-obtained first wrapping key to obtain the first stream key. The user equipment decrypts the encrypted video stream based on the first stream key to obtain a to-be-played video stream.