Surveillance server, method of processing data of surveillance server, and surveillance system
View Patent ↗A surveillance server connected to a camera through a network is provided, the camera acquiring an image of a surveillance area. The surveillance server includes: a data acquisition unit configured to acquire from the camera image data of the image that is encrypted; a mode selection unit configured to select a processing mode of the image data; and a decryption control unit configured to decrypt the image data in response to selection of a first mode.
1. A method for protecting image within devices that share a content key, the method comprising:
receiving, by a server, image data from a camera, the image data being encrypted with the content key;
determining whether the image data is valid;
when the image data is determined to be valid, transmitting, by a decryption controller, the image data to a protected device as encrypted without decrypting the image data, the protected device having the content key; and
when the image data is required to be transmitted to an unprotected device, decrypting, by the decryption controller, the image data with the content key and transmitting the decrypted image data to the unprotected device not having the content key.
2. The method of claim 1 , wherein a validity of the image data is determined by verifying whether the image data is transmitted from the camera without alteration.
3. The method of claim 2 , wherein the verifying comprises:
receiving authentication data of the image data from the camera; and
comparing the authentication data with verification data obtained at the server based on the image data received.
4. The method of claim 1 , wherein the unprotected device comprises a display configured to display the decrypted image data.
5. The method of claim 1 , wherein the image data is stored as encrypted into the protected device comprising a storage.
6. The method of claim 1 , wherein the image data is transferred as encrypted to the protected device comprising a client device.
7. The method of claim 6 , further comprising:
generating authentication data of the image data at the server using an authentication key, the authentication key being shared with the client device; and
transmitting the authentication data to the client device together with the image data so that the authentication data is to be compared with verification data obtained at the client device to ensure validity of the image data.
8. The method of claim 7 , wherein the authentication key is shared between the server and the client device based on a public key infrastructure.
9. A server comprising:
a memory configured to store a content key;
a communication unit configured to receive image data in a form of encrypted data from a camera, and selectively transmit the image data to a protected device having the content key, and an unprotected device not having the content key; and
a processor configured to:
determine whether the image data is valid;
when the image data is determined to be valid, transmit, through the communication unit, the image data to the protected device as encrypted without decrypting the image data; and
when the image data is required to be transmitted to the unprotected device, decrypt the image data with the content key and transmit the decrypted image data to the unprotected device.
10. The server of claim 9 , wherein validity of the image data is determined by verifying whether the image data is transmitted from the camera without alteration.
11. The server of claim 10 , wherein the processor is further configured to:
receive authentication data of the image data from the camera; and
compare the authentication data with verification data obtained based on the image data received.
12. The server of claim 9 , wherein the content key is shared with the protected device based on a public key infrastructure.
13. A camera comprising:
an image sensor configured to capture an image;
a storage configured to store a content key and an authentication key; a communication unit configured to communicate with a server; and
a processor configured to:
control the image sensor to capture the image;
generate image data by encrypting the image with the content key;
generate authentication data based on the authentication key to ensure validity of the image data; and
transmit the image data and the authentication data to the server,
wherein, at the camera, the image data is transmitted as encrypted to a protected interface comprising the server and having the content key; and
wherein, at the camera, the image data is decrypted and transmitted to an unprotected device not having the content key.
14. The camera of claim 13 , wherein the validity of the image data is determined, at the server, by comparing the authentication data and verification data obtained at the server based on the image data transmitted from the camera.
15. The camera of claim 13 , wherein the content key and the authentication key are shared between the camera and the server based on a public key infrastructure.