Permission classification and desensitization of video data: who can watch and who can export

Why permissions need to be graded

Users of surveillance systems vary greatly: security guards only need real-time images, supervisors need to access video recordings, Operations and maintenance require configuring the device, and outsiders may only need to view it temporarily for a certain period of time. If all are given administrator accounts, a single misoperation may result in configuration loss or video leakage.

Permission model design

Special treatment of sensitive areas

• In principle, there are no spots in areas involving privacy (around the locker room, corridors inside the dormitory); If coverage is really needed, the screen should be blocked or the resolution should be reduced.
• Set "secondary authorization" for highly sensitive cameras: even if you have preview permission, Approval or a secondary password is still required when opening.
• Data involving facial features and other biometric features shall be managed separately in accordance with personal information protection requirements. Clarify the retention period and purpose.

Export and accountability

Exporting is the easiest part to get out of control. Suggestion:

• Export must go through the approval process, and the system records the applicant, time, period, and reason.
• The exported file automatically adds visible watermarks (operator, time) and invisible watermarks to facilitate tracing the source later.
• The exported file is encrypted and has a validity period set, and will automatically expire when it expires.
• Export audit reports regularly and check whether there are any abnormal batch exports.