Forensic communication apparatus and method

• US 6,996,251 B2
• Filed: 09/29/2003
• Issued: 02/07/2006
• Est. Priority Date: 09/30/2002
• Status: Expired due to Fees

• Current Assignee: MyPort IP, Inc. (MyPort Technologies, Inc.)
• Original Assignee: MyPort Technologies, Inc.
• Inventors: Murphy, Frederick J., Malone, Michael F.
• Primary Examiner(s): Mehta, Bhavesh M.
• Assistant Examiner(s): SHERALI, ISHRAT I
• Application Number:
  US10/674,910
• Publication Number:
  US 20040125208A1
• Time in Patent Office: 862 Days
• Field of Search: 382/100, 382/305, 382115-119, 382/124, 713160-181, 380/246, 380252-255, 705 50- 55, 705 57- 62, 705 64- 70, 705 75- 76, 348/460, 348/552, 709217-219, 709201-203, 707/104.1, 707 1- 2
• US Class Current: 382/100
• CPC Class Codes: G06T 1/005 Robust watermarking, e.g. average attack or collusion attack resistant
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3221 interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
• CPC Class Codes: H04N 1/32272 : Encryption or ciphering
• CPC Class Codes: H04N 1/32277 : Compression
• CPC Class Codes: H04N 2201/0084 : Digital still camera
• CPC Class Codes: H04N 2201/3205 : of identification information, e.g. name or ID code H04N2201/3209 takes precedence
• CPC Class Codes: H04N 2201/3214 : of a date
• CPC Class Codes: H04N 2201/3215 : of a time or duration
• CPC Class Codes: H04N 2201/3233 : of authentication information, e.g. digital signature, watermark
• CPC Class Codes: H04N 2201/3235 : Checking or certification of the authentication information, e.g. by comparison with data stored independently
• CPC Class Codes: H04N 2201/3253 : Position information, e.g. geographical position at time of capture, GPS data
• CPC Class Codes: H04N 2201/3274 : Storage or retrieval of prestored additional information
• CPC Class Codes: H04N 2201/3281 : Encryption; Ciphering
• CPC Class Codes: H04N 2201/3283 : Compression

Abstract

Forensic communication apparatus and method. An apparatus is disclosed for recording image or other data in real time. The apparatus includes a capture device for capturing the image or other information. Once captured, a local verification device is operable to indelibly mark the captured image or other information with the date, time, location and information identifying the creator of the data. A transmitter is provided for transmitting the locally verified captured image or other information in real time to a secure storage facility. The capture device is operable, after the locally verified captured image or other information is transmitted to the secure storage facility, to receive and verify acknowledgment of the receipt of the transmitted locally verified captured image or other information to the storage facility.

Claims

1. An apparatus for recording information, comprising:

a capture device for capturing the information;

a local verification device for indelibly marking the captured information with the actual date and time of the capture of the information, and the actual location information defining the location of said capture device at the time of capture of the information, such that such date, time and location information becomes part of the captured information as bound captured information;

a signature device for creating owner information identifying the creator and owner of the bound captured information and;

placing the bound captured information in combination with the owner information in a predefined secure transmission file formated to be uniquely recognized by a secure storage facility;

a transmitter for transmitting the secure transmission file to the secure storage facility, wherein the secure storage facility is operable to store bound captured information in association with the owner; and

the secure storage facility generating an acknowledgment of the receipt of the transmitted secure transmission file to the secure storage facility, wherein the acknowledgment has associated therewith at least a portion of the information contained within the transmitted secure transmission file.

2. The apparatus of claim 1 wherein the captured information comprises a captured image and where said capture device is a digital camera.

3. The apparatus of claim 1 wherein the captured information comprises a captured image and where said capture device is a video camera.

4. The apparatus of claim 1 where said local verification device comprises a geographical position and time-of-day determination (GPS) receiver.

5. The apparatus of claim 1, and further comprising certifier for transmitting a representation of the locally verified captured information to a Certification Authority (CA) as a trusted third party for certification thereof and return of a certificate of authority, which is merged with and becomes a part of said captured information.

6. The apparatus of claim 1, and further comprising an encryption device for encrypting the bound captured information prior to transmission thereof with a first level of encryption to provided an encrypted file, which fist level of encryption constitutes a symmetrical encryption algorithm that has a secret key available only to the owner and wherein the encrypted file is placed in combination with the owner information in the predefined secure transmission file, wherein the secure storage facility is operable to store only the encrypted file in association with the owner.

7. The method of claim 6, wherein the first level of encryption comprises a hash of a unique ID associated with said capture device to create a private key with no associated public key, wherein the owner has possession of the private key.

8. The method of claim 6, wherein said encryption device is operable to wrap the encrypted file with a second layer of encryption that is comprised of an asymmetrical encryption layer that has a public and private key owned by the owner, such that the owner is the only one that can encrypt the encrypted file with the second layer of encryption, and wherein encrypted file wrapped with the second layer of encryption is placed in combination with the owner data in the predefined secure transmission file, such that the secure storage facility can recognize the owner and then determine the associated public key to unwrap the second layer of encryption and store the encrypted file.

9. The method of claim 8, wherein the encrypted file is passed through a message authentication algorithm by said encryption device to provide a hash of the encrypted file, the hash of the encryption file then combined with the encrypted file and place in combination with the owner information in the secure transmission file and wherein the secure storage facility is operable to store only the combination of the encrypted file and the hashed encrypted file in association with the owner and, wherein the secure storage facility is operable to pass the received encrypted file through the same message authentication algorithm that created the received hash of the received encrypted file to provide a new hash of the received encrypted file and then compare the newly created hash with the received hash and, if they compare true, store at least the received encrypted file in association with the owner.

10. The method of claim 8, wherein the encrypted file after wrapping with the second layer of encryption by said encryption device is wrapped with a third encryption layer that is comprised of an asymmetrical encryption layer that has a public and private key owned by the secure storage facility, such that the secure storage facility is the only one that can decrypt the third layer of encryption to expose the encrypted file wrapped with the second layer of encryption.

11. The method of claim 1, wherein the secure transmission file is created and transmitted at substantially the same time as the time of capture.

12. An apparatus for recording images for secure transmission to a secure storage facility, comprising:

a capture device for capturing a image and said capture device is owned and controlled by an owner;

a local verification device for indelibly marking the captured image with the actual date and time of the capture of the information, and the actual location defining the location of said capture device at the time of capture of the image, such that much date, time and location information becomes an integral part of the captured image as a bound image file;

a signature device for creating owner information identifying the creator and owner of the bound image file and placing the bound image file in combination with the owner data in a predefined secure transmission file formatted to be uniquely recognized by a secure storage facility;

an encryption device for encrypting the bound image file with a first level of encryption to provided an encrypted file, which first level of encryption constitutes a symmetrical encryption algorithm that has a secret key available only to the owner and wherein the encrypted file is placed in combination with owner information identifying the creator and owner of the bound image file in a predefined secure transmission file formatted to be uniquely recognized by a secure storage facility, wherein the secure storage facility is operable to store only the encrypted file in association with the owner;

a transmitter for transmitting the secure transmission file to the secure storage facility, wherein the secure storage facility is operable to store bound captured information in association with the owner; and

the secure facility generating an acknowledgment of the receipt of the transmitted secure transmission file to the secure storage facility, wherein the acknowledgment has associated therewith at least a portion of the information contained within the transmitted secure transmission file.

13. The apparatus of claim 12, and further comprising a certifier for transmitting a representation of the locally verified captured native image to a Certification Authority (CA) as a trusted third party for certification thereof and return of a certificate of authority, which is merged with and becomes a part of said locally verified captured native image.

14. The method of claim 12, wherein the first level of encryption comprises a hash of a unique ID associated with said capture device to create a private key with no associated public key, wherein the owner has possession of the private key.

15. The method of claim 12, wherein said encryption device is operable to wrap the encrypted file with a second layer of encryption that is comprised of an asymmetrical encryption layer that has a public and private key owned by the owner, such that the owner is the only one that can encrypt the encrypted file with the second layer of encryption, and wherein encrypted file wrapped with the second layer of encryption is placed in combination with the owner data in the predefined secure transmission file, such that the secure storage facility can recognize the owner and then determine the associated public key to unwrap the second layer of encryption and store the encrypted file.

16. The method of claim 15, wherein the encrypted file is passed through a message authentication algorithm to provide a hash of the encrypted file, the hash of the encryption file then combined with the encrypted file and placed in combination with the owner information in the secure transmission file and wherein the secure storage facility is operable to store only the combination of the encrypted file and the hashed encrypted file in association with the owner and, wherein the secure storage facility is operable to pass the received encrypted file through the same message authentication algorithm that created the received hash of the received encrypted file to provide a new hash of the received encrypted file and then compare the newly created hash with the received hash and, if they compare true, store at least the received encrypted file in association with the owner.

17. The method of claim 15, wherein the encrypted file after wrapping with the second layer of encryption by said encryption device is wrapped with a third encryption layer that is comprised of an asymmetrical encryption layer that has a public and private key owned by the secure storage facility, such that the secure storage facility is the only one that can decrypt the third layer of encryption to expose the encrypted file wrapped with the second layer of encryption.

18. The method of claim 12, wherein the secure transmission file is created and transmitted at substantially the same time as the time of capture.