Privacy-Preserving Image Distribution
AssigneeBitdefender IPR Management Ltd.
InventorsElena BURCEANU, Madalina BOLBOCEANU, Emanuela HALLER, Georgiana M ROSCA, Bogdan C CEBERE, Radu TITIU
Life of this patent
Estimating the term…
Abstract
Some embodiments enable distributing data (e.g., recorded video, photographs, recorded audio, etc.) to a plurality of users in a manner which preserves the privacy of the respective users. Some embodiments leverage homomorphic encryption and proxy re-encryption techniques to manipulate the respective data so that selected portions of it are revealed according to an identity of the user currently accessing the respective data.
Claims21
A method of distributing customized privacy-preserving images to a plurality of users, the method comprising employing at least one hardware processor of a privacy management server to:
- in response to receiving an encrypted source image decryptable with an administration key, perform an encrypted-domain image segmentation of the source image to produce a plurality of user-specific encrypted private images, wherein:
- a selected private image comprises a region of the source image selected to show a private item of a selected user of the plurality of users, and
- another private image comprises another region of the source image selected to show a private item of another user of the plurality of users;
- in response to the image segmentation, perform an encrypted-domain key change procedure to produce a plurality of user-specific re-encrypted images, wherein:
- a selected re-encrypted image comprises a result of transforming the selected private image from being decryptable with the administration key to being decryptable with a private key of the selected user, and
- another re-encrypted image comprises a result of transforming the other private image from being decryptable with the administration key to being decryptable with a private key of the other user;
- and
- transmit the plurality of user-specific re-encrypted images to an image distribution server for further distribution to client devices configured to reconstruct user-specific plaintext versions of the source image.
A computer system comprising a privacy management server configured to:
- in response to receiving an encrypted source image decryptable with an administration key, perform an encrypted-domain image segmentation of the source image to produce a plurality of user-specific private images, wherein:
- a selected private image comprises a region of the source image selected to show a private item of a selected user of the plurality of users, and
- another private image comprises another region of the source image selected to show a private item of another user of the plurality of users;
- in response to the image segmentation, perform an encrypted-domain key change procedure to produce a plurality of user-specific re-encrypted images, wherein:
- a selected re-encrypted image comprises a result of transforming the selected private image from being decryptable with the administration key to being decryptable with a private key of the selected user, and
- another re-encrypted image comprises a result of transforming the other private image from being decryptable with the administration key to being decryptable with a private key of the other user;
- and
- transmit the plurality of user-specific re-encrypted images to an image distribution server for further distribution to client devices configured to reconstruct user-specific plaintext versions of the source image.
A non-transitory computer-readable medium storing instructions which, when executed by at least one hardware processor of a privacy management server, cause the privacy management server to:
- in response to receiving an encrypted source image decryptable with an administration key, perform an encrypted-domain image segmentation of the source image to produce a plurality of user-specific private images, wherein:
- a selected private image comprises a region of the source image selected to show a private item of a selected user of the plurality of users, and
- another private image comprises another region of the source image selected to show a private item of another user of the plurality of users;
- in response to the image segmentation, perform an encrypted-domain key change procedure to produce a set of user-specific re-encrypted images, wherein:
- a selected re-encrypted image comprises a result of transforming the selected private image from being decryptable with the administration key to being decryptable with a private key of the selected user, and
- another re-encrypted image comprises a result of transforming the other private image from being decryptable with the administration key to being decryptable with a private key of the other user;
- and
- transmit the plurality of user-specific re-encrypted images to an image distribution server for further distribution to client devices configured to reconstruct user-specific plaintext versions of the source image.
Dependencies are inferred from the claim text.