GDPR and Product Security

Introduction to GDPR

01

02

UNV solution for GDPR

03

What the GDPR means for video surveillance?

What is the GDPR?

• The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union.
• The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
• The GDPR is a replacement of the 1995 Data Protection Directive (Directive 95/46/EC). The GDPR becomes effective in May 25^th 2018, it entitles the individual new rights, and requires a high level of corporate accountability. 
• The GDPR applies to any organization have access to EU citizens and residents’ personal data.
• Those companies fail to comply may risk a fine up to €20 million or up to 4% of the global annual turnover of the preceding financial year in case of an enterprise, whichever is greater. 

Introduction to GDPR

Data subject

Data controller

Data processor

Introduction to GDPR

Any information that could identify an individual (”data subject”), such as a name, an identification number, location data, photo, bank details, medical information and an online identifier etc.

Personal

Data

Introduction to GDPR

Introduction to GDPR

Data subject’s personal rights under GDPR regulations

Introduction to GDPR

Data controllers

• determines ‘why’ and ‘how’ the data is to be used
• process the data by its own means
• data controller will use an external service to process the data (outsource processing operations) in some cases

Data processors

• process the data on behalf of the data controller
• does not control the data and cannot change the purpose or use of the particular set of data
• is limited to the processing operations which is given by the data controller

Data controller V.S. Data processor

Introduction to GDPR

01

02

UNV solution for GDPR

03

What the GDPR means for video surveillance?

What the GDPR means for video surveillance?

Corporate Accountabilities under GDPR Regulations

Data processing principles: lawfulness, fairness and transparency

legitimate interest, public security, competent authority or data subject’s consent

• data subject be informed of the existence of the processing operation and its purposes
• any information addressed to data subject be concise, easily accessible and easy to understand in clear and plain language

72

Hours

awareness of data breach

notify to DPAs (Data Protection Authority) within 72 hours

What the GDPR means for video surveillance?

Data breach notification

notification to data subject in clear and plain language, and delivered by means that maximize the chances of communicating the information to all affected data subjects

What the GDPR means for video surveillance?

Support for Product Response Timeline

Introduction to GDPR

01

02

UNV solution for GDPR

03

What the GDPR means for video surveillance?

Cyber Issues

Hack in to see private home camera

Cyber security is now incredible serious as hacker may hack to your camera and make your surveillance camera monitoring yourself.

It is Uniview’s priority to protect customers privacy in safe.

Cyber Issues

System error to see other video stream

What do Uniview do to ensure your privacy and data secure in public and private network environment

Network

Security

Network environment surveillance to resist illegal attack

High level of safety design requirement and process specification

System Design Security

Give consideration to both usability and security

Intelligent Access Control

Private Network Solution

Environment Security Surveillance

01

02

03

IAC

Strong Password

• The Password will be encrypted during communication
• Real-time hint of default password modification
• Security level of password
• System blocked after 6 times failure of wrong password

Identity Verification

• The system will ask for user identity verification before all kinds of access or function.
• The feature applies to all network portal.

RTSP

Wrong and denied

RTSP

Verification?

IP Filtration

to allow the access from specific IP addresses

to reject the access from specific IP addresses

ESS

HTTPS

HTTPS is security version of HTTP, based on SSL protocol. And it can provide authentication and encrypted communication, which make communication over Internet secure.

ARP Protection

Network can be bound to confirmed Gateway(by its MAC address)

Devices will reject any ARP connection without this Gateway MAC address.

​

802.1x

The devices supports to work under the network using IEEE802.1X which means the RADIUS server will do verification for all devices in the network and ensure devices communication

Digital Watermark

SDS

Public Network Solution

Reliable

Independent Cloud Server

Dynamic encryption

Device unicity

Directly connection

Easy configuration

Flexible access

Usability

Independent Cloud Server

①Device Info.

②STUN Info about Device

③Login Account : Username、Password

④ Device Info、STUN Info about Client

Include：

EZCloud Server、STUN Server、TURN Server

⑥ STUN Info about Client

⑤P2P Request

⑥ STUN Info about Device

⑦Set up P2P tunnel

⑧Login Device：Username，Password

The Cloud Server will only help to set the network tunnel and keep separated with business such as live view and alarm management which means the very user is the only one who have the authentication to get access to his/her devices.

Device Share

Share the device according to user rights

Dynamic Encryption

Dynamic Password

Automatically Login

DC647EB65E************18212B3964

• The User account authentication uses encryption algorithm which is irreversible

​

• EZCloud provides dynamic random value to help generate dynamic password so that the client could login without entering device password

​

Device Unicity

• Each device has only one unique register code and serial number which are unalterable

​

• The register code is encrypted according to the device model, serial number, manufacture features and so on.

​

• The register code is the unique identification of the device and according to which the cloud, the client , the app and other UNV management devices could ensure to connect to the correct device.