Pre-event repository associated with individual privacy and public safety protection via double encrypted lock box

• US 10,277,867 B2
• Filed: 12/06/2012
• Issued: 04/30/2019
• Est. Priority Date: 07/12/2012
• Status: Active Grant

• Current Assignee: Elwha LLC (Intellectual Ventures LLC)
• Original Assignee: Elwha LLC (Intellectual Ventures LLC)
• Inventors: Jung, Edward K. Y., Levien, Royce A., Lord, Richard T., Lord, Robert W., Malamud, Mark A.
• Primary Examiner(s): Kim, Tae K
• Application Number:
  US13/707,427
• Publication Number:
  US 20140016777A1
• Time in Patent Office: 2,336 Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/18 Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast

Abstract

Computationally implemented methods and systems are described herein that are designed to, among other things, receiving a level-two encrypted output of a surveillance device; storing the level-two encrypted output of the surveillance device in association with a surveillance device identifier in a form inaccessible by a pre-event repository; and transmitting the level-two encrypted output of the surveillance device in response to a query containing at least a part of the surveillance device identifier in a form inaccessible by the pre-event repository.

Claims

1. A method performed with a repository, the method comprising:

receiving at least a level-two encrypted output of a sensing device at the repository from level-two encryption circuitry that is associated with one or more first computing devices;

storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key; and

transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier, wherein the level-two decryption circuitry is a different circuitry that is separate and apart from the level-two encryption circuitry and wherein the one or more first computing devices are different computing devices than the one or more second computing devices, the transmitting including at least;

transmitting from the repository to the level-two decryption circuitry at least the level-two encrypted output of the sensing device, the sensing device identifier, and at least the two key pair designators; and

wherein at least one of the receiving, the storing, or the transmitting at least the level-two encrypted output of the sensing device is performed at least in part with one or more processing devices associated with the repository.

2. A system comprising:

circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices;

circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key; and

circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier, wherein the level-two decryption circuitry is a different circuitry that is separate and apart from the level-two encryption circuitry and wherein the one or more first computing devices are different computing devices than the one or more second computing devices, the circuitry for transmitting including at least;

circuitry for transmitting from the repository to the level-two decryption circuitry at least the level-two encrypted output of the sensing device, the sensing device identifier, and at least the two key pair designators.

3. The system of claim 2, wherein the circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices comprises:

circuitry for receiving the level-two encrypted output of the sensing device from the level-two encryption circuitry in conjunction with a sensing device identifier.

4. The system of claim 3, wherein the circuitry for receiving the level-two encrypted output of the sensing device from the level-two encryption circuitry in conjunction with a sensing device identifier comprises:

circuitry for receiving the level-two encrypted output of the sensing device from level-two encryption circuitry in conjunction with an encrypted version of the sensing device identifier.

5. The system of claim 4, wherein the circuitry for receiving the level-two encrypted output of the sensing device from level-two encryption circuitry in conjunction with an encrypted version of the sensing device identifier comprises:

circuitry for receiving an encrypted version of the sensing device identifier at the repository.

6. The system of claim 4, wherein the circuitry for receiving the level-two encrypted output of the sensing device from level-two encryption circuitry in conjunction with an encrypted version of the sensing device identifier comprises:

circuitry for receiving an encryption of at least a part of a version of the sensing device identifier that was encrypted with a name-obscuring encryption key whose decryption key is inaccessible by a level-two encryption entity.

7. The system of claim 2, wherein the circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices comprises:

circuitry for accepting an output of level-two encryption circuitry.

8. The system of claim 2, wherein the circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices comprises:

circuitry for receiving a level-two encrypted version of an output of a surveillance device, wherein the output of the surveillance device includes at least one of an output of an image surveillance device, an output of an audio surveillance device, an output of a motion surveillance device, or an output of a tactile surveillance device.

9. The system of claim 2, wherein the circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices comprises:

circuitry for receiving the level-two encrypted output of the sensing device in a form such that the level-two encrypted output of the sensing device is substantially unusable absent combination with other information not present in the level-two encrypted output of the sensing device.

10. The system of claim 9, wherein the circuitry for receiving the level-two encrypted output of the sensing device in a form such that the level-two encrypted output of the sensing device is substantially unusable absent combination with other information not present in the level-two encrypted output of the sensing device comprises:

circuitry for receiving an output of level-two encryption circuitry that is associated with a level-two encryption which cannot practicably be decrypted by a level-two encryption entity.

11. The system of claim 10, wherein the circuitry for receiving an output of level-two encryption circuitry that is associated with a level-two encryption which cannot practicably be decrypted by a level-two encryption entity comprises:

circuitry for receiving an output of level-two encryption circuitry that is associated with an encryption of at least a part of a level-one encrypted output of the sensing device with a level-two encryption key whose corresponding decryption key is inaccessible by a level-two encryption entity, wherein the level-two decryption circuitry is configured to have access to the corresponding decryption key that is inaccessible to the level-two encryption entity.

12. The system of claim 11, wherein the circuitry for receiving an output of level-two encryption circuitry that is associated with an encryption of at least a part of a level-one encrypted output of the sensing device with a level-two encryption key whose corresponding decryption key is inaccessible by a level-two encryption entity, wherein the level-two decryption circuitry is configured to have access to the corresponding decryption key that is inaccessible to the level-two encryption entity comprises:

circuitry for receiving an output of level-two encryption circuitry that is associated with a decryption key generated by a level-two key-pair generation entity.

13. The system of claim 11, wherein the circuitry for receiving an output of level-two encryption circuitry that is associated with an encryption of at least a part of a level-one encrypted output of the sensing device with a level-two encryption key whose corresponding decryption key is inaccessible by a level-two encryption entity, wherein the level-two decryption circuitry is configured to have access to the corresponding decryption key that is inaccessible to the level-two encryption entity comprises:

circuitry for receiving an output of level-two encryption circuitry that is associated with a level-two key-pair designator generated by a level-two key-pair generation entity.

14. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier comprises:

at least one of;

circuitry for receiving a request for a double-encrypted lockbox that is associated with receipt of a request for an unlocked output of a sensing device associated with a particular time and a particular space;

circuitry for receiving a request for a double-encrypted lockbox associated with a transmission of a request for an encrypted sensing device identifier associated with a particular time and a particular space;

or

circuitry for receiving a request for a double-encrypted lockbox further associated with receipt of a request for an encrypted sensing device identifier associated with a particular time and a particular space.

15. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving a request for a double-encrypted lockbox further associated with a transmission of an encrypted sensing device identifier in association with a date-time window and a geographic location to a machine associated with a request for an encrypted sensing device identifier associated with a particular time and a particular space.

16. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving a request for a double-encrypted lockbox further associated with receipt of an encrypted sensing device identifier in association with a date-time window and a geographic location at a machine associated with a request for an encrypted sensing device identifier associated with a particular time and a particular space.

17. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving a request for a double-encrypted lockbox further associated with a transmission of an encrypted sensing device identifier in association with a date-time window and a geographic location to unlocking request circuitry operably coupled with both level-one decryption circuitry and level two decryption circuitry.

18. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving a request for a double-encrypted lockbox further associated with receipt of an instruction associated with unlocking an output identified by an encrypted sensing device identifier in association with a date-time window and a geographic location at level-one decryption circuitry.

19. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving a request for a double-encrypted lockbox further associated with receipt of an instruction associated with unlocking an output identified by an encrypted sensing device identifier in association with a date-time window and a geographic location at level-two decryption circuitry.

20. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving an instruction associated with unlocking an output identified by an encrypted sensing device identifier in association with a date-time window and a geographic location at a doubly-encrypted lockbox retrieval circuit.

21. The system of claim 20, wherein the circuitry for receiving an instruction associated with unlocking an output identified by an encrypted sensing device identifier in association with a date-time window and a geographic location at a doubly-encrypted lockbox retrieval circuit further comprises:

circuitry for receiving an instruction associated with a previous receipt of a message directing retrieval of a doubly- encrypted lockbox associated with the encrypted sensing device identifier in association with a date-time window and a geographic location at the doubly-encrypted lockbox retrieval circuit.

22. The system of claim 2, wherein the circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier further comprises:

circuitry for receiving a request at the repository for a doubly-encrypted lockbox identified at least in part by an encrypted sensing device identifier;

circuitry for retrieving a doubly-encrypted lockbox in response to the request to the repository for a doubly-encrypted lockbox identified at least in part by an encrypted sensing device identifier; and

circuitry for transmitting the doubly-encrypted lockbox to level-two decryption circuitry.

23. The system of claim 2, wherein said circuitry for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier comprises:

circuitry for transmitting a doubly-encrypted lockbox from the repository to level-two decryption circuitry in response to a request to the repository for a doubly-encrypted lockbox identified at least in part by an encrypted sensing device identifier, wherein the doubly-encrypted lockbox includes at least the level-two encrypted output of the sensing device and the key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key.

24. The system of claim 2, wherein the system comprises:

at least one of;

at least one of static or sequenced hardware elements;

or

at least one ordered matter element.

25. The system of claim 24, wherein the at least one ordered matter element further comprises:

at least one of;

at least one logic gate;

a physical reality of Boolean logic;

or

at least one logic circuit.

26. The system of claim 25, wherein the at least one logic circuit further comprises:

one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to at least partially perform one or more logical functions.

27. The system of claim 26, wherein the one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to at least partially perform one or more logical functions further comprises:

at least one of a multiplexer, a latch, or a register.

28. The system of claim 26, wherein the one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to at least partially perform one or more logical functions further comprises:

at least one of;

at least one of an arithmetic logic unit, a computer memory, or a bridge;

at least one central processing unit;

at least one configuration responsive to a defined Instruction Set Architecture;

or

at least one circuit constructed to convert a machine language instruction to at least one of a voltage control, a timing control, a selection control, or an activation control.

29. The system of claim 24, wherein the at least one ordered matter element further comprises:

at least one of;

at least one integrated electrical circuit;

at least one application specific integrated electrical circuit;

or

at least one general purpose computer configured by a computer program.

30. The system of claim 29, wherein the at least one general purpose computer configured by a computer program further comprises:

at least one general purpose computer processor operably coupled with a hardware memory having at least a part of the computer program.

31. The system of claim 2, wherein the circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key comprises:

circuitry for storing the level-two encrypted output of the sensing device at the repository indexed for retrieval at least partly with the level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key.

32. The system of claim 2, wherein the circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key comprises:

circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and with at least a level-two key pair designator configured for coordinating a level-two pseudo public encryption key with a corresponding level-two pseudo private decryption key.

33. The system of claim 2, wherein the circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key comprises:

circuitry for storing at the repository a doubly-encrypted lockbox that includes at least;

(1) the level-two encrypted output of the sensing device; and

(2) associated meta-data that includes at least the sensing device identifier, at least one of a date or a time associated with the output of the sensing device, and the level-two key pair designator.

34. The system of claim 2, wherein the circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices comprises:

circuitry for receiving a level-two encrypted output of at least one of a video portion of a camera, an audio portion of a camera, a commercially available motion detector or a commercially available vibration detector.

35. The system of claim 2, wherein the one or more first computing devices are associated with a first entity and the one or more second computing devices are associated with a second entity, the first and the second entities being different entities.

36. The system of claim 2, wherein the circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key comprises:

circuitry for storing the level-two encrypted output of the sensing device at the repository in association with metadata that includes at least a level-two key pair designator configured for identifying a level-two asymmetric decryption key that is paired with a level-two asymmetric encryption key.

37. The system of claim 2, which the circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key comprises:

circuitry for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and at least two key pair designators, including at least a level-two key pair designator configured for identifying an asymmetric level-two decryption key for decrypting the level-two encrypted output of the sensing device that was level-two encrypted with a corresponding asymmetric level-two encryption key and an encrypted level one key pair designator that when at least level-two decrypted with the asymmetric level-two decryption key is configured for identifying an asymmetric level-one decryption key for decrypting level-one encrypted output of the sensing device that was level-one encrypted with a corresponding asymmetric level-one encryption key.

38. The system of claim 2, wherein the circuitry for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices comprises:

circuitry for receiving at the repository from level-two encryption circuitry a level-two encrypted output of a sensing device, a sensing device identifier, and at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key.

39. The system of claim 2, wherein the level-two key pair designator is configured to reveal, after application of the corresponding level-two decryption key to the level-two key pair designator, at least one of a clear text or a hash of a level-one encrypted output of the sensing device;

and

wherein the encrypted level one key pair designator is configured to remain level-one encrypted after application of the corresponding level-two decryption key to the encrypted level one key pair designator.

40. The system of claim 2, wherein the encrypted level one key pair designator is configured to become unencrypted after application of the corresponding level-two decryption key to the encrypted level one key pair designator.

41. A computer program product comprising:

at least one non-transitory medium bearing at least;

one or more instructions for receiving at least a level-two encrypted output of a sensing device at a repository from level-two encryption circuitry that is associated with one or more first computing devices;

one or more instructions for storing the level-two encrypted output of the sensing device at the repository in association with at least a sensing device identifier and with at least at least two key pair designators, including at least a level-two key pair designator configured for coordinating a level-two encryption key with a corresponding level-two decryption key and an encrypted level one key pair designator that when at least level-two decrypted with the corresponding level-two decryption key is configured for coordinating a level-one encryption key with a corresponding level-one decryption key; and

one or more instructions for transmitting at least the level-two encrypted output of the sensing device from the repository to level-two decryption circuitry that is associated with one or more second computing devices in response to a query containing at least a part of the sensing device identifier, wherein the level-two decryption circuitry is a different circuitry that is separate and apart from the level-two encryption circuitry and wherein the one or more first computing devices are different computing devices than the one or more second computing devices, the one or more instructions for transmitting including at least;

one or more instructions for transmitting from the repository to the level-two decryption circuitry at least the level-two encrypted output of the sensing device, the sensing device identifier, and at least the two key pair designators.