Monitoring apparatus, computer program and network for secure data storage

• US 7,614,086 B2
• Filed: 03/19/2002
• Issued: 11/03/2009
• Est. Priority Date: 03/23/2001
• Status: Active Grant

• Current Assignee: Nederlandse Organisatie Voor Toegepast-Natuurwetenschappelijk Onderzoek Tno
• Original Assignee: Nederlandse Organisatie Voor Toegepast-Natuurwetenschappelijk Onderzoek Tno
• Inventors: Roelofsen, Gerrit, Gelbord, Boaz Simon
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): Paliwal; Yogesh
• Application Number:
  US10/472,867
• Publication Number:
  US 20040158718A1
• Time in Patent Office: 2,786 Days
• Field of Search: 713/176, 726/26
• US Class Current: 726/26
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00884 involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm
• CPC Class Codes: H04N 21/8358 involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467

Abstract

A monitoring apparatus, a computer program and a network are disclosed for monitoring a representation. The representation comprises a first data string. Subsequently, two or more output strings, based on the first data string, are generated by the monitoring apparatus such that the representative can not be reconstructed from just any of the output strings. The output strings are stored at separate storage locations. Each of the locations has different access rights from the other such that a party, authorized to solely access one such location and retrieve the single output string stored there, is unable to access the other location and retrieve the corresponding output string stored there. Consequently, that party, from just the single output string which it can access and retrieve, is unable to reconstruct the entire representation.

Claims

1. Apparatus for monitoring a representation of an object, said monitoring apparatus comprising:

means for converting said representation into a first data string, the first data string containing pixel image data for an entire image of the object;

processor means, responsive to the first data string, which generates first and second output strings from which said first data string can be reconstructed such that both said first and second output strings are responsive to data for the entire image and are required to reconstruct the first data string and obtain the representation therefrom; and

means for storing said first and second output strings in separate storage locations, each of said storage locations having differing access rights associated therewith each of first and second parties being granted a corresponding right, consistent with the access rights, to respectively access just the first and second memory locations such that neither one of the first and second parties is able to access both of the memory locations and retrieve both of the first and second output strings and reconstruct the first data string; and

wherein the processor means, in response to each of the first and second parties individually and respectively accessing the first and second memory locations and collectively retrieving both the first and second output strings there from so as to define first and second accessed output strings, reconstructs the first data string from both the first and second accessed output strings so as to define a reconstructed first data string and generates the representation from the reconstructed first data string.

2. The monitoring apparatus recited in claim 1 wherein the monitoring apparatus is a digital camera.

3. The monitoring apparatus recited in claim 1 wherein the monitoring apparatus is an analog camera, the output of said analog camera is digitized by an analog-digital conversion module so as to produce said first data string.

4. The monitoring apparatus recited in claim 1 further comprising means for combining said first and second output strings with each other and/or with said first data string so as to produce an additional output string.

5. The monitoring apparatus recited in claim 1 further comprising network communication means for transmitting said first and second output strings over a network.

6. The monitoring apparatus recited in claim 5 wherein said storage locations are not part of said monitoring apparatus, and said first and second output strings and/or an additional output string are transmitted over said network communication means to said separate storage locations.

7. The monitoring apparatus recited in claim 1 wherein at least one of the separate storage locations is located at said monitoring apparatus.

8. The monitoring apparatus recited in claim 1 further comprising means to assess access rights of each of the first and second parties requesting retrieval or access to either the first or second output string and/or an additional output string.

9. The monitoring apparatus recited in claim 1 further comprising event triggering means for generating said first and second output strings only if said representation has changed with respect to an earlier version of the representation.

10. The monitoring apparatus recited in claim 1 wherein said generating means generates more than two output strings from the first data string so as to define a group of output strings, and said apparatus further comprises means for selecting various output strings from said group of output strings so as to define selected output strings.

11. The monitoring apparatus recited in claim 10 further comprising means for combining said selected output strings with each other and with said first data string so as to produce an additional output string.

12. The monitoring apparatus recited in claim 11 further comprising means for compressing said first data string, said first and second output strings, the selected output strings and/or said additional output string.

13. The monitoring apparatus recited in claim 11 further comprising means for assigning a watermark string to said first and second output strings, said additional output string and/or a replacement string.

14. The monitoring apparatus recited in claim 11 further comprising means for encrypting said first and second output strings, said additional output string, or the selected output strings before these strings are stored within said separate storage locations.

15. The monitoring apparatus recited in claim 14 wherein said encrypting means uses an encryption key which is a function of identifiers referring to said separate storage locations.

16. The monitoring apparatus recited in claim 11 further comprising means for registering said selected output strings and/or said additional output string.

17. The monitoring apparatus recited in claim 16 wherein said registering means assigns a code to each of said selected output strings and/or said additional output string.

18. The monitoring apparatus recited in claim 1 further comprising means for assigning a watermark string to said first data string.

19. The monitoring apparatus recited in claim 18 wherein said watermark assigning means assigns a watermark string to said first data string and/or said first and second output strings, the watermark having an identifier referring to said monitoring apparatus.

20. The monitoring apparatus recited in claim 19 wherein said identifier comprises a time stamp referring to when said first and second output strings were generated or when said first and second output strings were transmitted to said separate storage locations.

21. The monitoring apparatus recited in claim 18 wherein said watermark string comprises an identifier referring to said separate storage locations.

22. A computer readable media comprising computer program instructions stored thereon which, when executed on a computer system that monitors a representation of an object, cause the computer system to:

convert said representation into a first data string, the first data string containing pixel image data for an entire image of the object;

generate first and second output strings from which said first data string can be reconstructed such that both said first and second output strings are responsive to data for the entire image and are required to reconstruct the first data string and obtain the representation therefrom;

store said first and second output strings in separate storage locations, each of said storage locations having differing access rights associated therewith each of first and second parties being granted a corresponding right, consistent with the access rights, to respectively access just the first and second memory locations such that neither one of the first and second parties is able to access both of the memory locations and retrieve both of the first and second output strings and reconstruct the first data string;

reconstruct, in response to each of the first and second parties individually and respectively accessing the first and second memory locations and collectively retrieving both the first and second output strings there from so as to define first and second accessed output strings, the first data string from the first and second accessed output strings so as to define a reconstructed first data string; and

generate the representation from the reconstructed first data string.

23. The computer readable media recited in claim 22 further comprising additional stored computer program instructions which, when executed, cause the computer to combine said first and second output strings with each other and/or with said first data string in order to produce an additional output string.

24. The computer readable media recited in claim 22 further comprising additional stored computer program instructions which, when executed, cause the computer to generate more than two output strings from the first data string so as to define a group of output strings, and select various output strings from said group of output strings so as to define selected output strings.

25. The computer readable media recited in claim 24 further comprising additional stored computer program instructions which, when executed, cause the computer to combine said selected output strings with each other and first data string to obtain in order to produce an additional output string.

26. The computer readable media recited in claim 25 further comprising additional stored computer program instructions which, when executed, cause the computer to compress said first data string, said first and second output strings, said additional output string and/or said selected output strings.

27. The computer readable media recited in claim 25 further comprising additional stored computer program instructions which, when executed, cause the computer to encrypt said first and second output strings, said additional output string and/or the selected output strings.

28. The computer readable media recited in claim 25 further comprising stored additional computer program instructions which, when executed, cause the computer to assign a watermark to said first data string, said first and second output strings, said additional output string and/or said selected output strings.

29. The computer readable media recited in claim 28 wherein said watermark comprises an identifier referring to monitoring apparatus, a time stamp referring to when said first and second output strings are generated or said first and second output strings are transmitted to said separate storage locations, or an identifier referring to said storage locations.

30. A data communication network comprising:

monitoring apparatus for monitoring a representation of an object, wherein the monitoring apparatus comprises;

means for converting said representation into a first data string, the first data string containing pixel image data for an entire image of the object;

processor means, responsive to the first data string, which generates first and second output strings from which said first data string can be reconstructed such that both said first and second output strings are responsive to data for the entire image and are required to reconstruct the first data string and obtain the representation therefrom; and

means for storing said first and second output strings in separate storage locations, each of said storage locations having differing access rights associated therewith each of first and second parties being granted a corresponding right, consistent with the access rights, to respectively access just the first and second memory locations such that neither one of the first and second parties is able to access both of the memory locations and retrieve both of the first and second output strings and reconstruct the first data string; and

wherein the processor means, in response to each of the first and second parties individually and respectively accessing the first and second memory locations and collectively retrieving both the first and second output strings there from so as to define first and second accessed output strings, reconstructs the first data string from both the first and second accessed output strings so as to define a reconstructed first data string and generates the representation from the reconstructed first data string.