Back to results
US 11,599,669 B2Granted
Image distribution using composite re-encrypted images
AssigneeBitdefender IPR Management Ltd.
InventorsElena Burceanu, Madalina Bolboceanu, Emanuela Haller, Georgiana M Rosca, Bogdan C Cebere, Radu Titiu
Life of this patent
Estimating the term…
Abstract
Some embodiments enable distributing data (e.g., recorded video, photographs, recorded audio, etc.) to a plurality of users in a manner which preserves the privacy of the respective users. Some embodiments leverage homomorphic encryption and proxy re-encryption techniques to manipulate the respective data so that selected portions of it are revealed according to an identity of the user currently accessing the respective data.
Claims19
A method of distributing privacy-preserving images to a plurality of users, the method comprising employing at least one hardware processor of a privacy management server to:
- in response to receiving an encrypted source image decryptable with an administration key, perform an encrypted-domain image segmentation of the source image to determine a plurality of encrypted private masks, each mask of the plurality of encrypted private masks indicating a region of the source image selected to show a private item of a respective user of the plurality of users;
- determine a plurality of encrypted private images, each private image of the plurality of encrypted private images determined according to:
- I*⊙M,
- wherein the circled dot symbol denotes pixel-wise multiplication, I* denotes the encrypted source image, and M denotes a respective decrypted mask comprising a decryption of a respective mask of the plurality of encrypted private masks;
- perform an encrypted-domain key change procedure to generate a plurality of re-encrypted images, each re-encrypted image of the plurality of re-encrypted images comprising a result of transforming a respective private image of the plurality of encrypted private images from being decryptable with the administration key to being decryptable with a private key of the respective user;
- combine the plurality of re-encrypted images into a composite private image;
- and
- transmit the composite private image to an image distribution server for further distribution to a plurality of client devices, wherein each client device is configured to reconstruct a user-specific plaintext version of the source image according to the composite private image.
5 more elements
A computer system comprising a privacy management server configured to:
- in response to receiving an encrypted source image decryptable with an administration key, perform an encrypted-domain image segmentation of the source image to determine a plurality of encrypted private masks, each mask of the plurality of encrypted private masks indicating a region of the source image selected to show a private item of a respective user of the plurality of users;
- determine a plurality of encrypted private images, each private image of the plurality of encrypted private images determined according to:
- I*⊙M,
- wherein the circled dot symbol denotes pixel-wise multiplication, I* denotes the encrypted source image, and M denotes a respective decrypted mask comprising a decryption of a respective mask of the plurality of encrypted private masks;
- perform an encrypted-domain key change procedure to generate a plurality of re-encrypted images, each re-encrypted image of the plurality of re-encrypted images comprising a result of transforming a respective private image of the plurality of encrypted private images from being decryptable with the administration key to being decryptable with a private key of the respective user;
- combine the plurality of re-encrypted images into a composite private image;
- and
- transmit the composite private image to an image distribution server for further distribution to a plurality of client devices, wherein each client device is configured to reconstruct a user-specific plaintext version of the source image according to the composite private image.
5 more elements
A non-transitory computer-readable medium storing instructions which, when executed by at least one hardware processor of a privacy management server, cause the privacy management server to:
- in response to receiving an encrypted source image decryptable with an administration key, perform an encrypted-domain image segmentation of the source image to determine a plurality of encrypted private masks, each mask of the plurality of encrypted private masks indicating a region of the source image selected to show a private item of a respective user of the plurality of users;
- in response, determine a plurality of encrypted private images, each private image of the plurality of encrypted private images determined according to:
- I*⊙M,
- wherein the circled dot symbol denotes pixel-wise multiplication, I* denotes the encrypted source image, and M denotes a respective decrypted mask comprising a decryption of a respective mask of the plurality of encrypted private masks;
- perform an encrypted-domain key change procedure to generate a plurality of re-encrypted images, each re-encrypted image of the plurality of re-encrypted images comprising a result of transforming a respective private image of the plurality of encrypted private images from being decryptable with the administration key to being decryptable with a private key of the respective user;
- combine the plurality of re-encrypted images into a composite private image;
- and
- transmit the composite private image to an image distribution server for further distribution to a plurality of client devices, wherein each client device is configured to reconstruct a user-specific plaintext version of the source image according to the composite private image.
5 more elements
Dependencies are inferred from the claim text.