A security framework for cloud-based video surveillance system

Utilizing cloud services in running large-scale video surveillance systems is not uncommon. However, special attention should be given to data security and privacy because, typically, data travels over insecure public networks. In this work, we propose an end-to-end security framework for a cloud-based video surveillance system that supports a large number of cameras. Our framework provides mutual authentication, session key management, data confidentiality, and data integrity. Consequently, encrypted video frames can only be sourced from authenticated cameras and only destined to authenticated cloud devices where the integrity of such frames can also be verified against potential change. As video streaming is a very delay-sensitive application, we study different variations of the proposed framework to find security options that achieve the best trade-off between the added delay and the security of the system.