PRIVACY-PRESERVING EVIDENCE IN ALPR APPLICATIONS

• US 20150172056A1
• Filed: 12/17/2013
• Published: 06/18/2015
• Est. Priority Date: 12/17/2013
• Status: Active Grant

• Current Assignee: Conduent Business Services, LLC (Conduent, Inc.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Meunier, Jean-Luc, Poirier, Herve, Estehghari, Saghar
• Granted Patent: US 9,779,284 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06V 20/80 Recognising image objects characterised by unique random patterns
• CPC Class Codes: G06V 20/95 Pattern authentication; Markers therefor; Forgery detection
• CPC Class Codes: G06V 40/33 based only on signature image, e.g. static signature recognition
• CPC Class Codes: G08G 1/0175 by photographing vehicles, e.g. when violating traffic rules
• CPC Class Codes: G08G 1/04 using optical or ultrasonic detectors
• CPC Class Codes: G08G 1/054 photographing overspeeding vehicles
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A system and method for preserving privacy of evidence are provided. In the method, an encrypted first image is generated by encrypting a first image acquired at a first location with a symmetric cryptographic key that is based on first information such as a license plate number extracted from the first image and first metadata associated with the first image, such as a time at which the first image was acquired. When a link is established between a second image and the first image, for example, through visual signature matching, the symmetric cryptographic key can be reconstructed, without having access to the first image, but based instead on the first metadata and information extracted from the second image. The reconstructed symmetric cryptographic key can then be used for decryption of the encrypted image to establish evidence that the license plate number was indeed extracted from the first image.

Claims

1. A method for preserving privacy of evidence comprising:

receiving an encrypted first image which has been generated by encrypting a first image with a symmetric cryptographic key that is based on first information extracted from the first image and first metadata associated with the first image;

establishing a link between a second image and the first image;

receiving the first metadata;

extracting second information from the second image;

reconstructing the symmetric cryptographic key that was used to encrypt the first image based on the second information extracted from the second image and the first metadata, the reconstructed symmetric cryptographic key permitting the first encrypted image to be decrypted to regenerate the first image,

wherein at least one of the establishing a link between a second image and the first image and the reconstructing of the symmetric cryptographic key is performed with a processor.

2. The method of claim 1, further comprising determining whether a condition is met based on the metadata associated with the first image and metadata associated with the second image.

3. The method of claim 2, wherein the reconstructing of the symmetric cryptographic key is performed only when the condition is met.

4. The method of claim 1, wherein the establishing a link between the second image and the first image comprises comparing a first visual signature computed based on the first image with a second visual signature computed based on the second image.

5. The method of claim 1, wherein the information extracted from the first image comprises a first identifier and the information extracted from the second image comprises a second identifier, the reconstructing of the symmetric cryptographic key establishing that the first identifier matches the second identifier.

6. The method of claim 1, wherein the reconstruction of the symmetric cryptographic key comprises hashing the first metadata and the second information.

7. The method of claim 6, further comprising encrypting the hashed first metadata and second information with a shared key.

8. The method of claim 1, further comprising generating a shared key at a first location and at a second location and wherein the symmetric cryptographic key is generated at the first location with the shared key and the reconstruction of the symmetric cryptographic key is performed at the second location with the shared key.

9. The method of claim 1, wherein the shared key is generated by exchanging a public key of each of first and second key pairs and combining each of the public keys with a private key of the other of the key pairs.

10. The method of claim 1, wherein the first image and symmetric cryptographic key are generated at a first location and the reconstruction is performed at a second location, and wherein the first image and the symmetric cryptographic key generated at the first location are not made available to the second location.

11. The method of claim 1, further comprising outputting an evidence package which includes at least one of:

the first image;

the second image;

the first information;

the second information;

the first metadata;

the second metadata; and

a signature produced by hashing at least two of;

the first image,

the first information,

the first metadata, and

a first location identifier identifying a location at which the first image was captured.

12. The method of claim 1, further comprising publishing an encryption signature establishing the existence of the first image, extracted first information, and first metadata.

13. The method of claim 1, wherein the first metadata comprises a first time and the second metadata comprises a second time, later than the first time.

14. A computer program product comprising not transitory memory storing instructions, which when implemented by a computer processor, perform the method of claim 1.

15. A system comprising memory which stores instructions for performing the method of claim 1 and a computer processor, in communication with the memory, which executes the instructions.

16. A system comprising:

memory which receives;

an encrypted first image which has been generated by encrypting a first image with a symmetric cryptographic key that is based on first identifier information extracted from the first image and first metadata associated with the first image,

the first metadata, and

a first visual signature which has been extracted from the first image;

a signature matching component which compares the first visual signature with a second visual signature extracted from a second image to establish a link between the second image and the first image;

an identifier recognition component which extracts second identifier information from the second image;

a cryptographic key reconstruction component for reconstructing the symmetric cryptographic key that was used to encrypt the first image based on the second identifier information extracted from the second image and the first metadata, the reconstructed symmetric cryptographic key permitting the first encrypted image to be decrypted to regenerate the first image;

at least one processor which implements the signature matching component, identifier recognition component, and cryptographic key reconstruction component.

17. The system of claim 16, further comprising a condition computation component which determines whether a condition is met based on the metadata associated with the first image and metadata associated with the second image.

18. The system of claim 16, further comprising a first computer system, at a first location, which generates the symmetric cryptographic key and encrypted first image, and a second computer system at a second location, which includes the cryptographic key reconstruction component.

19. A method for preserving privacy of evidence comprising:

in a first location, capturing a first image of a vehicle and associated first metadata and generating an encrypted first image by encrypting the first image with a symmetric cryptographic key that is based on first identifier information extracted from the first image and the first metadata;

in a second location, spaced form the first location, capturing a second image of a vehicle and associated second metadata;

in at least one of the second location and a third location;

receiving the encrypted first image and the first metadata;

determining that a condition is met based on the first and second metadata;

and reconstructing the symmetric cryptographic key from the first metadata and the second identifier information extracted from the second image, thereby establishing that the second identifier information matches the first identifier information.

20. The method of claim 19, further comprising generating a shared key at the first location and at least one of the second and third locations through exchange of a respective public key of a respective public/private key pair, and wherein the generation of the symmetric cryptographic key comprises encrypting the first metadata and the first identifier with the shared key.

21. The method of claim 19, wherein the image and identifier information extracted are both discarded when the encrypted image has been generated and are not available to the second or third locations.