Apparatus and method for enhancing personal information data security

Patent metadata

Field	Value
Publication number	US-11100249-B2
Application number	US-201615545285-A
Country	US
Kind code	B2
Filing date	Jan 19, 2016
Priority date	Jan 20, 2015
Publication date	Aug 24, 2021
Grant date	Aug 24, 2021

Abstract

The present disclosure relates to a communication technique for converging a 5G communication system for supporting a higher data rate beyond a 4G system with an IoT technology, and a system therefor. The present disclosure provides a method and a device for enhancing data security. The method includes when a request message including information related to a first privacy level is received from a user device, authenticating the user device. The method also includes verifying the information related to the first privacy level. The method further includes transmitting, to the terminal, an image processed on the basis of the first privacy level among images processed on the basis of a plurality of privacy levels.

First claim

The invention claimed is:

1. A method for enhancing data security performed by a first terminal, comprising:
receiving, by a transceiver, a message requesting an image from a second terminal, the message including a first privacy level related to processing of the image;
authenticating, by a processor, the second terminal, after the message is received from the second terminal;
in response to authenticating the second terminal, verifying, by the processor, the first privacy level included in the message corresponds to a privacy level associated with the second terminal;
after the second terminal is authenticated, obtaining, by the processor, a first image based on the message, wherein the first image is processed according to the verified first privacy level;
transmitting, by the transceiver, to the second terminal, the first image;
receiving, by the transceiver, a level-up request message from the second terminal, the level-up request message including information related to a second privacy level allowing access to an image similar to a raw image before being processed rather than the first image processed based on the first privacy level; and
transmitting, by the transceiver, to the second terminal, a second image processed based on the second privacy level among processed images, if the verification of the information related to the second privacy level is completed,
wherein, if an emergency situation notification message including an indicator indicating occurrence of an emergency situation is received, by the transceiver, from the second terminal while the method is performed, the method further comprises:
authenticating, by the processor, the second terminal;
verifying, by the processor, whether the emergency situation has occurred based on the indicator;
transmitting, from the processor to a sensor unit, a notification of the emergency situation including the indicator indicating occurrence of the emergency situation received from the second terminal;
transmitting, from the sensor unit to the processor, the raw image and information related to the emergency situation; and
transmitting, by the transceiver, the raw image and the information related to the emergency situation to the second terminal, an emergency center and a nearby terminal, regardless of the first privacy level and the second privacy level.

2. The method of claim 1 , wherein:
a plurality of privacy levels include a plurality of image permission levels, the plurality of image permission levels indicate whether access to the processed images is permitted,
when one of the plurality of image permission levels is high, the access to one of the processed images that is similar to the raw image is permitted.

3. The method of claim 1 , wherein verifying the first privacy level includes comparing, by the processor, the first privacy level included in the message with another privacy level that is permitted to the second terminal by a policy.

4. The method of claim 1 , further comprising transmitting, by the transceiver, to the second terminal, an image that is processed based on a privacy level with a default value, when the message does not include the first privacy level.

5. The method of claim 1 , further comprising previously setting, by the processor, the first privacy level in a call setup and registration procedure through a session description protocol (SDP) parameter or a home subscriber server (HSS).

6. The method of claim 1 , further comprising, when transmitting, by the transceiver, the raw image and the information related to the emergency situation to the emergency center, transmitting at least one of an identifier (ID) of a patient, a wearable device ID of the patient, and an health device ID of the patient.

7. The method of claim 1 , further comprising processing the raw image based on a plurality of privacy levels,
wherein processing the raw image includes one of:
excluding a remaining background except for a target shooting subject from the raw image,
leaving only contours of shooting subjects on the raw image,
processing the raw image based on a smoothing technique, and
replacing the remaining background except for the target shooting subject with another background on the raw image.

8. The method of claim 1 , further comprising transmitting, la the transceiver, to the second terminal, at least one of information related to a time stamp and information related to a random number for the raw image,
wherein at least one of the time stamp and the random number for the raw image are used to determine whether a processed image is modulated.

9. The method of claim 1 , further comprising:
storing, by the processor, raw data in a first database; and
storing, by the processor, the raw data in a second database interworking with a file system, storing the raw data in the second database, or storing an analysis result obtained by analyzing the raw data in the second database.

10. The method of claim 9 , further comprising:
receiving, by the transceiver, additional information from the second terminal or the sensor unit, when the raw data is multimedia data; and
managing, by the transceiver, usage logs or log records for similar data based on the additional information.

11. A first terminal comprising:
a transceiver;
a sensor unit; and
a processor configured to:
receive, via the transceiver, a message requesting an image from a second terminal, the message including a first privacy level related to processing of the image,
authenticate the second terminal, after the message is received from the second terminal,
in response to authenticating the second terminal, verify the first privacy level included in the message corresponds to a privacy level associated with the second terminal,
after the second terminal is authenticated, obtain a first image based on the message, wherein the first image is processed according to the verified first privacy level,
transmit, via the transceiver, to the second terminal, the first image,
receive, via the transceiver, a level-up request message from the second terminal, the level-up request message including information related to a second privacy level allowing access to an image similar to a raw image before being processed rather than the first image processed based on the first privacy level, and
transmit, via the transceiver, to the second terminal, a second image processed based on the second privacy level among processed images, if the verification of the information related to the second privacy level is completed,
wherein, if an emergency situation notification message including an indicator indicating occurrence of an emergency situation is received, by the transceiver, from the second terminal, the processor is further configured to:
authenticate, by the processor, the second terminal,
verify, by the processor, whether the emergency situation has occurred based on the indicator,
transmit, to the sensor unit, a notification of the emergency situation including the indicator indicating occurrence of the emergency situation received from the second terminal,
receive, from the sensor unit, the raw image and information related to the emergency situation, and
transmit, via the transceiver, the raw image and the information related to the emergency situation to the second terminal, an emergency center and a nearby terminal, regardless of the first privacy level and the second privacy level.

12. The first terminal of claim 11 , wherein:
a plurality of privacy levels includes a plurality of image permission levels, the plurality of image permission levels indicates whether access to the processed images is permit

Assignees

• Samsung Electronics Co Ltd

Inventors

• Suh Kyung-Joo
• Yu Han-Il
• Kim Sang-Jin
• Park Joo-Hyun
• Lee Hye-Jin
• Lee Hee-Jeong

Classifications

• H04W4/70

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/105

  Multiple levels of security · CPC title