Video Occlusion Access Control via Data Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In video surveillance systems, there is a security risk due to users with no permission being able to acquire and decrypt masked image data, potentially exposing sensitive areas despite encryption measures.

Innovation Solution

Implementing a method where the monitoring platform determines user permissions and sends only non-masked video data to users without access rights, while sending both masked and non-masked video data to authorized users, allowing them to merge and play the data accordingly, using H.264 encoding and specific URLs for data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If image data of masked part is sent to all user terminals with encryption, then privacy protection is improved, but security risk increases because unauthorized users can still acquire and potentially decrypt the data

Engineering Contradiction:
Improveprivacy protectionVSAvoidsecurity risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts only the necessary video data (non-masked areas) and sends it to unauthorized users, while excluding the masked area data entirely. This removes the security vulnerability by not providing unauthorized users with any encrypted masked data that could be attempted to be decrypted.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The video data is segmented into masked and non-masked areas, and different segments are sent to different user groups based on authorization. Authorized users receive both segments, while unauthorized users receive only the non-masked segment,实现ing differential data distribution.

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If masked video data is sent to authorized users along with non-masked video data, then complete viewing capability is improved, but system complexity increases due to permission management and data routing

Engineering Contradiction:
Improveviewing capabilityVSAvoidpermission management
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The system performs preliminary classification of video data into masked and non-masked segments before transmission. User authorization status is determined in advance, and appropriate data combinations are prepared beforehand, simplifying the delivery process despite the complexity of permission management.

Inventive Principle:
Principle #10Preliminary action

3Object-affected harmful factors

If only non-masked video data is sent to unauthorized users, then security is improved, but information completeness deteriorates as users cannot see masked areas at all

Engineering Contradiction:
Improvesecurity riskVSAvoidinformation completeness
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent extracts and transmits only the non-masked video data to unauthorized users, deliberately excluding the masked area information. This accepts information loss as necessary to eliminate security risks, providing users with complete viewing capability for non-sensitive areas while protecting sensitive areas.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP2741237B1Method, apparatus and system for implementing video occlusion
Publication Date: 2017.08.09 HUAWEI TECH CO LTD
  • EP2741237B1 patent drawingFigure 1
  • EP2741237B1 patent drawingFigure 2
  • EP2741237B1 patent drawingFigure 3A

AI summary

Embodiments of the present invention disclose a method, an apparatus, and a system for implementing video mask. The method includes: receiving, by a monitoring platform, a video request of a monitoring terminal, determining permission of a user of the monitoring terminal, sending, according to a determined result, only non-masked video data to a monitoring terminal of a user that has no permission to acquire masked video data, and sending the masked video data and the non-masked video data to a monitoring terminal of a user that has permission to acquire a part or all of the masked video data, so that the monitoring terminal merges and plays the masked video data and the non-masked video data, or sending video data merged from the masked video data and the non-masked video data, thereby solving a security risk problem resulting from sending image data of a masked part to terminals of users with different permission in the prior art.