System and method for privacy enhancement via adaptive cryptographic embedding

• US 20080267403A1
• Filed: 11/09/2007
• Published: 10/30/2008
• Est. Priority Date: 11/09/2006
• Status: Abandoned Application

• Current Assignee: The Board of Regents of the University of Colorado (University of Colorado System)
• Original Assignee: The Board of Regents of the University of Colorado (University of Colorado System)
• Inventors: Boult, Terrance E.
• Application Number:
  US11/983,698
• Publication Number:
  US 20080267403A1
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

The system and method enhances privacy and security by determining parts of a data stream that should not be publicly available and doing in-place encryption of that data while leaving the remaining data unencrypted for direct usage in security. The system is composed of a designator, that determines what parts of the data stream require protection, and a protector, that performs the in-place encryption. The resulting protected data stream can be played/displayed using the same standard technology as for the original data stream, with the encrypted portions appearing as random noise. The system also supports an extractor, which can, given access to the appropriate keys, invert the encryption and provide back the original data stream.

Claims

1. A method of privacy enhancement for surveillance, comprising the steps of:

designating a region of a data in an input data stream;

encrypting the region of data, in place within said input data stream, to form a protected data stream; and

playing the protected data stream.

2. The method of claim 1, wherein the step of designating further includes the step of compressing the input data stream to form a compressed data stream.

3. The method of claim 1, wherein the input data stream is in compressed form.

4. The method of claim 3, further including the step of encrypting the region of data in the compressed data stream to form the protected data stream.

5. The method of claim 1, wherein the step of encrypting include storing an encryption key in a comment field of the protected data stream.

6. The method of claim 1, wherein the step of encrypting includes storing an encryption key as embedded data.

7. The method of claim 6, wherein the step of storing includes storing the encryption key using a watermarking technique.

8. The method of claim 6, wherein the step of storing includes storing the public key using a steganographic technique.

9. The method of claim 1, wherein the step of encrypting include storing a check sum of an original data of the region.

10. A system of privacy enhancement for surveillance, comprising:

a designator receiving an input data stream and defining a region of data to privacy protect;

a protector receiving the input data stream and the region of data and encrypting in place the region of data to form a protected data stream.

11. The system of claim 10, further including a compressor receiving the input data stream to form a compressed data stream.

12. The system of claim 11, wherein the protector encrypts the region of data in the compressed data stream to form the protected data stream.

13. The system of claim 12, further including a standard player playing the protected data stream.

14. The system of claim 10, wherein the protector stores an encryption key in the protected data stream.

15. A method of privacy enhancement for surveillance, comprising the steps of:

designating a region of a data in an input data stream;

encrypting the region of data to form a protected data stream; and

playing the protected data stream using a standard player.

16. The method of claim 15, wherein the step of designating includes the steps of:

determining if the region of data requires expanding to be consistent with a blocking requirement;

when the region of data requires expanding to be consistent with a blocking requirement, designating an expanded region.

17. The method of claim 16, further including the steps of encrypting the expanded region to form the protected data stream.

18. The method of claim 15, wherein the step of encrypting includes the step of storing an encryption key in the protected data stream.

19. The method of claim 15, wherein the step of encrypting includes the steps of:

compressing the input data stream to form a compressed data stream;

receiving the region of data and the compressed data stream at the protector;

encrypting the region of data in the compressed data stream to form the protected data stream.

20. The method of claim 15, further including the steps of:

extracting an encryption key from the protected data stream;

receiving a decryption key;

decrypting the protected data stream in-place to regenerate the input data stream.