# US 12,120,464 B2 · Video security system with improved network response time using pre-authentication information > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,464 B2 - Document ID: US12120464B2 - Status: Granted - Kind: B2 - Application number: 17/838,223 - Filed: 2022-06-12 - Published: 2023-01-12 - Granted: 2024-10-15 - Earliest claimed: 2021-07-12 - Assignees: Idis Co., Ltd. - Applicants: Idis Co., Ltd. - Inventors: In Taek Lim; Sang Hoon Lee - Web page: https://patentgrep.com/patent/US12120464B2 ## CPC - H04N 7/18: Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast - H04N 7/181: {for receiving images from a plurality of remote sources} - G06F 21/31: User authentication - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/606: {by securing the transmission between two devices or processes} - G06F 21/86: Secure or tamper-resistant housings - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A video security system with improved network response speed using pre-authentication information, which is capable of improving a network response speed by simplifying handshaking for securely exchanging authentication information and an encryption key in a process of starting communication between a client terminal and a server using pre-authentication information that is valid only for the client terminal, is provided. ## Claims ### Claim 1 A video security system with improved network response speed using pre-authentication information, the video security system comprising a plurality of memories, wherein the plurality of memories store instructions to implement: a pre-authentication information issuing operation to generate pre-authentication information that is valid only for a client terminal and issue the generated pre-authentication information to the client terminal; a pre-authentication information caching operation to cache the pre-authentication information issued by the pre-authentication information issuing operation in a cache memory among the plurality of memories; a login request receiving operation to receive a login request including a user identification (ID), a client terminal public key, a pre-authentication information encryption value obtained by encrypting the pre-authentication information and a random character string with a video image security system public key, and a system control command from the client terminal; a user authorization performing operation to perform user authorization on the user ID received by the login request receiving operation; a pre-authentication information authentication operation to decrypt the pre-authentication information encryption value received by the login request receiving operation with a video security system private key to obtain the pre-authentication information, determine whether the obtained pre-authentication information is cached in the cache memory, and authenticate the pre-authentication information; and a control operation to control overall operations of the video security system and, upon succeeding in the user authorization by the user authorization performing operation and succeeding in the pre-authentication information authentication by the pre-authentication information authentication operation, process the system control command received by the login request receiving operation. ### Claim 2 (depends on 1) The video security system of claim 1, wherein the control operation further performs: in response to a pre-authentication information reissuance request from the client terminal due to failing in the pre-authentication information authentication by the pre-authentication information authentication operation, controlling the pre-authentication information issuing operation to generate new pre-authentication information and reissuing the generated new pre-authentication information to the client terminal. ### Claim 3 (depends on 2) The video security system of claim 2, wherein the pre-authentication information caching operation further performs: newly caching the pre-authentication information reissued by the pre-authentication information issuing operation in the cache memory. ### Claim 4 (depends on 1) The video security system of claim 1, wherein the pre-authentication information issuing operation further performs: encrypting the pre-authentication information with the client terminal public key and issuing the encrypted pre-authentication information to the client terminal. ### Claim 5 (depends on 1) The video security system of claim 1, wherein the system control command includes a real-time video monitoring command or a recorded video playback command. ### Claim 6 (depends on 1) The video security system of claim 1, wherein the plurality of memories further comprises instructions to implement: a login response transmission operation to transmit a login response to the client terminal according to a result of the user authorization by the user authorization performing unit operation and a result of the pre-authentication information authentication by the pre-authentication information authentication operation. ### Claim 7 (depends on 2) The video security system of claim 2, wherein the pre-authentication information issuing operation further performs: when issuing the pre-authentication information and transmitting the issued pre-authentication information to the client terminal, transmitting system-unique identification information together with the issued pre-authentication information such that the client terminal checks for forgery or tampering of video security system when the client terminal accesses the video security system later. ### Claim 8 A method, comprising: a pre-authentication information issuing operation to generate pre-authentication information that is valid only for a client terminal and issue the generated pre-authentication information to the client terminal; a pre-authentication information caching operation to cache the pre-authentication information issued by the pre-authentication information issuing operation in a cache memory; a login request receiving operation to receive a login request including a user identification (ID), a client terminal public key, a pre-authentication information encryption value obtained by encrypting the pre-authentication information and a random character string with a video image security system public key, and a system control command from the client terminal; a user authorization performing operation to perform user authorization on the user ID received by the login request receiving operation; a pre-authentication information authentication operation to decrypt the pre-authentication information encryption value received by the login request receiving operation with a video security system private key to obtain the pre-authentication information, determine whether the obtained pre-authentication information is cached in the cache memory, and authenticate the pre-authentication information; and a control operation to control overall operations of the system and, upon succeeding in the user authorization by the user authorization performing operation and succeeding in the pre-authentication information authentication by the pre-authentication information authentication operation, process the system control command received by the login request receiving operation. ### Claim 9 (depends on 8) The method of claim 8, wherein the control operation further comprises: in response to a pre-authentication information reissuance request from the client terminal due to failing in the pre-authentication information authentication by the pre-authentication information authentication operation, controlling the pre-authentication information issuing operation to generate new pre-authentication information and reissuing the generated new pre-authentication information to the client terminal. ### Claim 10 (depends on 9) The method of claim 9, wherein the pre-authentication information caching operation further comprises: newly caching the pre-authentication information reissued by the pre-authentication information issuing operation in the cache memory. ### Claim 11 (depends on 8) The method of claim 8, wherein the pre-authentication information issuing operation further comprises: encrypting the pre-authentication information with the client terminal public key and issuing the encrypted pre-authentication information to the client terminal. ### Claim 12 (depends on 8) The method of claim 8, wherein the system control command includes a real-time video monitoring command or a recorded video playback command. ### Claim 13 (depends on 8) The method of claim 8, further comprising: a login response transmission operation to transmit a login response to the client terminal according to a result of the user authorization by the user authorization performing operation and a result of the pre-authentication information authentication by the pre-authentication information authentication operation. ### Claim 14 (depends on 9) The method of claim 9, wherein the pre-authentication information issuing operation further comprises: when issuing the pre-authentication information and transmitting the issued pre-authentication information to the client terminal, transmitting system-unique identification information together with the issued pre-authentication information such that the client terminal checks for forgery or tampering of video security system when the client terminal accesses the video security system later. ### Claim 15 A system comprising: a plurality of processors; and a plurality of memories, wherein the plurality of processors are configured, when executing program instructions stored in the memories, to perform: a pre-authentication information issuing operation to generate pre-authentication information that is valid only for a client terminal and issue the generated pre-authentication information to the client terminal; a pre-authentication information caching operation to cache the pre-authentication information issued by the pre-authentication information issuing operation in a cache memory among the plurality of memories; a login request receiving operation to receive a login request including a user identification (ID), a client terminal public key, a pre-authentication information encryption value obtained by encrypting the pre-authentication information and a random character string with a video image security system public key, and a system control command from the client terminal; a user authorization performing operation to perform user authorization on the user ID received by the login request receiving operation; a pre-authentication information authentication operation to decrypt the pre-authentication information encryption value received by the login request receiving operation with a video security system private key to obtain the pre-authentication information, determine whether the obtained pre-authentication information is cached in the cache memory, and authenticate the pre-authentication information; and a control operation to control overall operations of the system and, upon succeeding in the user authorization by the user authorization performing operation and succeeding in the pre-authentication information authentication by the pre-authentication information authentication operation, process the system control command received by the login request receiving operation. ### Claim 16 (depends on 15) The system of claim 15, wherein the plurality of processors are further configured, in performing the control operation, to perform: in response to a pre-authentication information reissuance request from the client terminal due to failing in the pre-authentication information authentication by the pre-authentication information authentication operation, controlling the pre-authentication information issuing operation to generate new pre-authentication information and reissuing the generated new pre-authentication information to the client terminal. ### Claim 17 (depends on 16) The system of claim 16, wherein the plurality of processors are further configured, in performing the pre-authentication information caching operation, to perform: newly caching the pre-authentication information reissued by the pre-authentication information issuing operation in the cache memory. ### Claim 18 (depends on 15) The system of claim 15, wherein the plurality of processors are further configured, in performing the pre-authentication information issuing operation, to perform: encrypting the pre-authentication information with the client terminal public key and issuing the encrypted pre-authentication information to the client terminal. ### Claim 19 (depends on 15) The system of claim 15, wherein the system control command includes a real-time video monitoring command or a recorded video playback command. ### Claim 20 (depends on 15) The system of claim 15, wherein the plurality of processors are further configured to perform: a login response transmission operation to transmit a login response to the client terminal according to a result of the user authorization by the user authorization performing operation and a result of the pre-authentication information authentication by the pre-authentication information authentication operation.