The present invention relates generally to motion detection. More particularly, the present invention relates to systems and methods of motion detection on encrypted or scrambled video data streams.
The use of cloud technology for storing and archiving video surveillance data and other video data streams has become prevalent. In this regard, when the video surveillance data is stored on a cloud network, security and access to the data becomes a very important issue. To enhance security, data stored on a cloud network is often encrypted to prevent unauthorized data access; authorized access can be provided to a user who generates the data.
Unfortunately, it is often difficult to perform video analytics, such as motion detection, on encrypted data. For example, in known systems and methods, when a cloud service provider stores video data streams based on motion information, the raw, unencrypted video data streams must be processed through a motion detection algorithm, and the output of the motion detection algorithm is used to store key interest data and to send alerts to a customer or other user. The motion detection algorithm is typically executed and run by the cloud service provider. Accordingly, the service provider must have access to the decrypted data stream, increasing the chance of unauthorized data access.
In view of the above, there is a continuing, ongoing need for systems and methods of motion detection on encrypted or scrambled video data streams.
While this invention is susceptible of an embodiment in many different forms, there are shown in the drawings and will be described herein in detail specific embodiments thereof with the understanding that the present disclosure is to be considered as an exemplification of the principles of the invention. It is not intended to limit the invention to the specific illustrated embodiments.
Embodiments disclosed herein include systems and methods of motion detection on encrypted or scrambled video data streams. When video analytics, such as motion detection, is executed and run on encrypted data, as opposed to decrypted data, security is increased because access to the decrypted data can be denied to unauthorized users, such as cloud service providers. That is, access to the decrypted data can be granted only to authorized users, such as a customer or other user, for example, a user who generates the data.
Although not limiting, it is to be understood that some systems and methods disclosed herein can employ some or all of the system and method for detecting motion in compressed video disclosed in U.S. application Ser. No. 13/772,012 and filed Feb. 20, 2013. U.S. application Ser. No. 13/772,012 is assigned to the assignee hereof and is hereby incorporated by reference.
In some embodiments disclosed herein, motion in an encrypted or scrambled video data stream can be detected by constraining the video data stream so that it is at least partially parsable and so that the size of each macroblock in the video data stream doesn't change. That is, the macroblock size can remain the same before and after encryption or scrambling. Then, motion detection can be executed using the macroblock size information.
For example, macroblock size information can be obtained by parsing an encrypted or scrambled video data stream without analyzing the content of the data stream. When motion detection requires only macroblock size information, the remainder of the data stream, including motion vectors, residual DCT coefficients, Quantization factors, residual data, and the like, can be encrypted or scrambled during storage and/or transmission of the video data stream and need not be decrypted or descrambled to detect motion in the video data stream. Accordingly, video data streams can be stored as encrypted data on a remote storage device, such as a cloud network, and video analytics can be executed and run on the encrypted video data streams for detecting motion and/or for motion-based storage.
In accordance with the above, compressed motion detection can depend, fully, mostly, or in part, on macroblock size information. Other data stream information, including motion vectors, residual DCT coefficients, Quantization factors, residual bits, and the like, can be encrypted or scrambled to hide video content. Accordingly, decoded video that has not been decrypted will be unclear and cannot be used for unauthorized purposes.
In accordance with disclosed embodiments, video data streams can be encoded using any video coding method as would be known by those of skill in the art, including but not limited to, H.264, H.265, MPEG-2,4, and the like. Then, the video data streams can be encrypted by, (1) encrypting and/or scrambling residual DCT coefficients, (2) changing the order and/or linearizing the size of the residual DCT coefficients, (3) scrambling the motion vectors of the macroblocks in the video data stream, (4) scrambling the residual DCT coefficients, and/or (5) scrambling and/or changing the coding mode of each macroblock in the video data stream. Each of these encryption methods can ensure secrecy of the data without changing the size of the macroblocks in the video data stream. Accordingly, the encrypted video data stream can remain parsable by a decoder that is compatible with the video coding method used to encode the raw video data stream.
In some embodiments, an encrypted video data stream can be stored on a remote storage device, such as a cloud network. Then, motion can be detected in the encrypted video data stream by parsing the encrypted video data stream and measuring the size of each macroblock in every frame of the encrypted video data stream. The size of each macroblock can then be validated by comparing macroblock sizes with a ratio threshold and/or a bit threshold for the presence of motion. Accordingly, the encrypted video data stream need not be decrypted and/or descrambled to detect motion in the video data stream.
In some embodiments disclosed herein, an entire video data stream can be encrypted or scrambled without constraints as would be known by those of ordinary skill in the art. Furthermore, a data string can be attached to, appended to, and/or associated with the encrypted or scrambled video data stream such that the data string contains the size information of the macroblock for each frame of the video data stream. In these embodiments, both the encrypted video data stream and the data string containing the macroblock size information can be remotely stored, for example, on a cloud network. Then, video analytics can be executed and run using only the macroblock size information contained in the data string. Accordingly, motion detection can be executed without decrypting or descrambling the video data stream.
In accordance with the above, compressed motion detection can depend, fully, mostly, or in part, on macroblock size information. When the entire video data stream is encrypted, the encrypted video data stream can be accompanied by the data string that contains the size information of the macroblock for every frame in the video data stream. Then, motion detection can be executed using the macroblock size information that is stored with the encrypted video data stream, but without decrypting the video data stream itself.
In accordance with disclosed embodiments, video data streams can be encoded using any video coding method as would be known by those of skill in the art, including but not limited to, H.264, H.265, MPEG-2,4, and the like. Then, the video data streams can be parsed to compute the size of each macroblock in every frame of the video data stream, and the macroblock size information can be stored in a data string.
After the macroblock size information is stored in the data string, the video data streams can be encrypted using any encryption method as would be known by those of skill in the art. The encrypted video data stream and the data string with the macroblock size information can be stored on a remote storage device, such as a cloud network. In some embodiments, the encrypted video data stream and the data string with the macroblock size information for the encrypted video data stream can be stored together and/or associated with one another on the cloud network. However, in accordance with disclosed embodiments, the data string can be accessed independently from the encrypted video data stream.
Motion can be detected in the encrypted video data stream by parsing the data string to obtain the size information for each macroblock. The size information for each macroblock can then be validated by comparing the macroblock size information with a ratio threshold and/or a bit threshold for the presence of motion. Accordingly, the encrypted video data stream need not be decrypted and/or descrambled to detect motion in the video data stream.
As explained above, the presence of motion in each macroblock of a video data stream can be computed and/or detected by comparing the macroblock size information with at least two different thresholds. For example, the ratio of the size of a current macroblock with the same macroblock in two adjacent i-frames—for example, immediate past and future frames—can be computed. In some embodiments, if the ratio is greater than a ratio threshold, then the macroblock can be analyzed further for confirmation of the presence of motion. For example, the size of the current macroblock can be directly compared to a bit threshold, and the bit threshold can be computed using the average macroblock size in the current frame of the video data stream. In some embodiments, if the macroblock size is greater than the bit threshold, then systems and methods disclosed herein can determine that motion is detected in the macroblock.
As seen in
However, if the method 300 determines that the ratio computed as in 330 is greater than the predetermined ratio threshold as in 340, then the method 300 can determine whether the size information for the current macroblock, as obtained in 310, is greater than a predetermined bit threshold as 360. For example, as seen in
If the method 300 determines that the size information for the current macroblock is not greater than the predetermined bit threshold as in 360, then the method 300 can determine that the current macroblock does not include motion. However, if the method 300 determines that the size information for the current macroblock is greater than the predetermined bit threshold as in 360, then the method 300 can determine that motion is detected in the current macroblock.
As seen in
However, if the method 400 determines that the ratio computed as in 420 is greater than the predetermined ratio threshold as in 430, then the method 400 can determine whether the size information for the current macroblock is greater than a predetermined bit threshold as 450. For example, as seen in
If the method 400 determines that the size information for the current macroblock is not greater than the predetermined bit threshold as in 450, then the method 400 can determine that the current macroblock does not include motion. However, if the method 400 determines that the size information for the current macroblock is greater than the predetermined bit threshold as in 450, then the method 400 can determine that motion is detected in the current macroblock.
The control circuitry 510 can include one or more programmable processors 530 and executable control software 540 stored on a transitory or non-transitory computer readable medium, including but not limited to, computer memory, RAM, optical storage media, magnetic storage media, flash memory, and the like. In some embodiments, the programmable processors 530 and the executable control software 540 can implement some or all of the steps of methods 100, 200, 300, and 400 shown in
Although a few embodiments have been described in detail above, other modifications are possible. For example, the logic flows described above do not require the particular order described, or sequential order, to achieve desirable results. Other steps may be provided, or steps may be eliminated, from the described flows, and other components may be added to, or removed from, the described systems. Other embodiments may be within the scope of the invention.
From the foregoing, it will be observed that numerous variations and modifications may be effected without departing from the spirit and scope of the invention. It is to be understood that no limitation with respect to the specific system or method described herein is intended or should be inferred. It is, of course, intended to cover all such modifications as fall within the sprit and scope of the invention.