Right of individual privacy and public safety protection via double encrypted lock box

• US 8,885,824 B2
• Filed: 07/12/2012
• Issued: 11/11/2014
• Est. Priority Date: 07/12/2012
• Status: Active Grant

• Current Assignee: Elwha LLC (Intellectual Ventures LLC)
• Original Assignee: Elwha LLC (Intellectual Ventures LLC)
• Inventors: Jung, Edward K. Y., Levien, Royce A., Lord, Richard T., Lord, Robert W., Malamud, Mark A.
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US13/385,598
• Publication Number:
  US 20140019744A1
• Time in Patent Office: 852 Days
• US Class Current: 380/212
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04N 1/32272 Encryption or ciphering
• CPC Class Codes: H04N 21/44055 by partially decrypting, e.g. decrypting a video stream that has been partially encrypted

Abstract

A method substantially as shown and described the detailed description and/or drawings and/or elsewhere herein. A device substantially as shown and described the detailed description and/or drawings and/or elsewhere herein. The referenced method and device including but not limited to at least a part of: a machine including but not limited to: a machine configured to create a physical reality of accepting an output of a surveillance device; a machine configured to create a physical reality of encrypting at least a part of the output of the surveillance device with a level-one encryption key whose decryption key is inaccessible by a level-one encryption entity; a machine configured to create a physical reality of transmitting a level-one encrypted output of the surveillance device; a machine configured to create a physical reality of receiving the level-one encrypted output of the surveillance device; a machine configured to create a physical reality of encrypting at least a part of the level-one encrypted output of the surveillance device with a level-two encryption key whose decryption key is inaccessible by a level-two encryption entity; a machine configured to create a physical reality of transmitting a level-two encrypted output of the surveillance device; a machine configured to create a physical reality of receiving the level-two encrypted output of the surveillance device; a machine configured to create a physical reality of storing the level-two encrypted output of the surveillance device in association with a surveillance device identifier in a form inaccessible by a pre-event repository; a machine configured to create a physical reality of transmitting the level-two encrypted output of the surveillance device in response to a query containing at least a part of the surveillance device identifier in the form inaccessible by the pre-event repository; a machine configured to create a physical reality of receiving the level-two encrypted output of the surveillance device; a machine configured to create a physical reality of decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity; a machine configured to create a physical reality of transmitting a level-one encrypted output of the surveillance device that is a result of said decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity; a machine configured to create a physical reality of receiving the level-one encrypted output of the surveillance device; a machine configured to create a physical reality of decrypting at least a part of the level-one encrypted output of the surveillance device with a level-one decryption key inaccessible by a level-one encryption entity; and a machine configured to create a physical reality of presenting an unencrypted output of the surveillance device. And related methods.

Claims

1. A method comprising:

accepting an output of a surveillance device;

encrypting at least a part of the output of the surveillance device with a level-one encryption key whose decryption key is inaccessible by a level-one encryption entity, said encrypting at least a part of the output of the surveillance device with a level-one encryption key associatable with one or more data of level-one encryption circuitry;

transmitting a level-one encrypted output of the surveillance device;

receiving the level-one encrypted output of the surveillance device;

encrypting at least a part of the level-one encrypted output of the surveillance device with a level-two encryption key whose decryption key is inaccessible by a level-two encryption entity, said encrypting at least a part of the level-one encrypted output of the surveillance device with a level-two encryption key associatable with one or more data of level-two encryption circuitry;

transmitting a level-two encrypted output of the surveillance device;

receiving the level-two encrypted output of the surveillance device;

storing the level-two encrypted output of the surveillance device in association with a surveillance device identifier in a form inaccessible by a pre-event repository;

transmitting the level-two encrypted output of the surveillance device in response to a query containing at least a part of the surveillance device identifier in the form inaccessible by the pre-event repository;

receiving the level-two encrypted output of the surveillance device;

decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity, said decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key associatable with one or more data of level-two decryption circuitry;

transmitting a level-one encrypted output of the surveillance device that is a result of said decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity;

receiving the level-one encrypted output of the surveillance device;

decrypting at least a part of the level-one encrypted output of the surveillance device with a level-one decryption key inaccessible by a level-one encryption entity, said decrypting at least a part of the level-one encrypted output of the surveillance device with a level-one decryption key associatable with one or more data of level-one decryption circuitry; and

presenting an unencrypted output of the surveillance device.

2. A machine comprising:

a machine configured to create a physical reality of accepting an output of a surveillance device;

a machine configured to create a physical reality of encrypting at least a part of the output of the surveillance device with a level-one encryption key whose decryption key is inaccessible by a level-one encryption entity;

a machine configured to create a physical reality of transmitting a level-one encrypted output of the surveillance device;

a machine configured to create a physical reality of receiving the level-one encrypted output of the surveillance device;

a machine configured to create a physical reality of encrypting at least a part of the level-one encrypted output of the surveillance device with a level-two encryption key whose decryption key is inaccessible by a level-two encryption entity;

a machine configured to create a physical reality of transmitting a level-two encrypted output of the surveillance device;

a machine configured to create a physical reality of receiving the level-two encrypted output of the surveillance device;

a machine configured to create a physical reality of storing the level-two encrypted output of the surveillance device in association with a surveillance device identifier in a form inaccessible by a pre-event repository;

a machine configured to create a physical reality of transmitting the level-two encrypted output of the surveillance device in response to a query containing at least a part of the surveillance device identifier in the form inaccessible by the pre-event repository;

a machine configured to create a physical reality of receiving the level-two encrypted output of the surveillance device;

a machine configured to create a physical reality of decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity;

a machine configured to create a physical reality of transmitting a level-one encrypted output of the surveillance device that is a result of said decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity;

a machine configured to create a physical reality of receiving the level-one encrypted output of the surveillance device;

a machine configured to create a physical reality of decrypting at least a part of the level-one encrypted output of the surveillance device with a level-one decryption key inaccessible by a level-one encryption entity; and

a machine configured to create a physical reality of presenting an unencrypted output of the surveillance device.

3. The machine of claim 2, wherein the machine further comprises:

at least one of static or sequenced hardware elements.

4. The machine of claim 2, wherein the machine further comprises:

at least one ordered matter element.

5. The machine of claim 4, wherein the at least one ordered matter element further comprises:

at least one logic gate.

6. The machine of claim 5, wherein the at least one logic gate further comprises:

at least one physical device that may be driven to change physical state in order to create a physical reality of Boolean logic.

7. The machine of claim 4, wherein the at least one ordered matter element further comprises:

at least one logic circuit.

8. The machine of claim 7, wherein the at least one logic circuit further comprises:

one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to create a physical reality of one or more logical functions.

9. The machine of claim 8, wherein one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to create a physical reality of one or more logical functions further comprises:

at least one of a multiplexer, a latch, or a register.

10. The machine of claim 8, wherein one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to create a physical reality of one or more logical functions further comprises:

at least one of an arithmetic logic unit, a computer memory, or a bridge.

11. The machine of claim 8, wherein one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to create a physical reality of one or more logical functions further comprises:

at least one central processing unit.

12. The machine of claim 8, wherein one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to create a physical reality of one or more logical functions further comprises:

at least one configuration responsive to a defined Instruction Set Architecture.

13. The machine of claim 8, wherein one or more physical logic gates that may be arranged to form physical logic circuits that may be driven to create a physical reality of one or more logical functions further comprises:

at least one circuit constructed to convert a machine language instruction to at least one of a voltage control, a timing control, a selection control, or an activation control.

14. The machine of claim 4, wherein the at least one ordered matter element further comprises:

at least one integrated electrical circuit.

15. The machine of claim 4, wherein the at least one ordered matter element further comprises:

at least one application specific integrated electrical circuit.

16. The machine of claim 4, wherein the at least one ordered matter element further comprises:

at least one general purpose computer configured by a computer program.

17. The machine of claim 16, wherein at least one general purpose computer configured by a computer program further comprises:

at least one general purpose computer processor operably coupled with a hardware memory having at least a part of the computer program.

18. The machine of claim 2, wherein transmitting a level-one encrypted output of the surveillance device further comprises:

transmitting a level-two decrypted output—

which corresponds to the level-one encrypted output of the surveillance device—

that is a result of said decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity.

19. The machine of claim 2, further comprising:

generating a pseudo-public-private key pair composed of a surveillance-device obscuring pseudo-public key and a surveillance-device obscuring pseudo private key.

20. The machine of claim 19, further comprising:

transmitting the surveillance-device obscuring pseudo-public key to a surveillance-device name obscuring circuit.

21. The machine of claim 20, further comprising:

receiving the surveillance-device obscuring pseudo-public key at the surveillance-device name obscuring circuit;

encrypting a surveillance-device identifier with the surveillance-device obscuring pseudo-public key; and

transmitting an encrypted surveillance device identifier to level-one encryption circuitry.

22. The machine of claim 19, further comprising:

transmitting the surveillance-device obscuring pseudo private key to a surveillance-device name deobscuring circuitry.

23. The machine of claim 22, further comprising:

receiving the surveillance-device obscuring pseudo private key at the surveillance-device name deobscuring circuitry;

decrypting an encrypted surveillance-device identifier with the surveillance-device obscuring pseudo private key; and

transmitting a decrypted surveillance device identifier to a useable content conversion circuit.

24. The machine of claim 23, further comprising:

receiving useable content from the useable content conversion circuit; and

presenting the useable content through a user interface.

25. The machine of claim 2, further comprising:

receiving a request for an unlocked output of a surveillance device associated with a particular time and a particular space; and

transmitting a request for an encrypted surveillance device identifier associated with the particular time and the particular space.

26. The machine of claim 25, further comprising:

receiving the request for the encrypted surveillance device identifier associated with the particular time and the particular space; and

transmitting the encrypted surveillance device identifier in association with a date-time window and a geographic location to a machine associated with the request for the encrypted surveillance device identifier associated with the particular time and the particular space.

27. The machine of claim 26, further comprising:

receiving the encrypted surveillance device identifier in association with a date-time window and a geographic location at the machine associated with the request for the encrypted surveillance device identifier associated with the particular time and the particular space; and

transmitting the encrypted surveillance device identifier in association with a date-time window and a geographic location to unlocking request circuitry operably coupled with both level-one encryption circuitry and level two encryption circuitry.

28. The machine of claim 27, further comprising:

transmitting an instruction to unlock an output identified by the encrypted surveillance device identifier in association with the date-time window and the geographic location to level-one encryption circuitry.

29. The machine of claim 27, further comprising:

transmitting an instruction to unlock an output identified by the encrypted surveillance device identifier in association with the date-time window and the geographic location to level-two encryption circuitry.

30. The machine of claim 27, further comprising:

transmitting an instruction to unlock an output identified by the encrypted surveillance device identifier in association with the date-time window and the geographic location to a doubly encrypted lockbox retrieval circuit.

31. The machine of claim 30, further comprising:

receiving an instruction to unlock an output identified by encrypted surveillance device identifier in association with the date-time window and the geographic location at the doubly encrypted lockbox retrieval circuit; and

transmitting a request to a pre-event repository for a doubly-encrypted lockbox identified at least in part by the encrypted surveillance device identifier.

32. The machine of claim 31, further comprising:

retrieving a doubly-encrypted lockbox in response to the request to the pre-event repository for a doubly-encrypted lockbox identified at least in part by the encrypted surveillance device identifier; and

transmitting the doubly-encrypted lockbox to level-two decryption circuitry.

33. The machine of claim 32, further comprising:

receiving at the level-two decryption circuitry the doubly-encrypted lockbox that was sent in response to the request to the pre-event repository for a doubly-encrypted lockbox identified at least in part by the encrypted surveillance device identifier.

34. The machine of claim 2, wherein decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key inaccessible by the level-two encryption entity further comprises:

determining a level-two decryption key corresponding to the level-two encryption key whose decryption key is inaccessible by a level-two encryption entity that was used to encrypt at least a part of the level-one encrypted output of the surveillance device.

35. The machine of claim 34, wherein determining a level-two decryption key corresponding to the level-two encryption key whose decryption key is inaccessible by a level-two encryption entity that was used to encrypt at least a part of the level-one encrypted output of the surveillance device further comprises:

obtaining a level-two decryption key inaccessible by the level-two encryption entity.

36. The machine of claim 35, wherein obtaining a level-two decryption key inaccessible by the level-two encryption entity further comprises:

receiving a level-two key-pair designator in association with a level-two decryption key which forms a pair with the level-two encryption key whose decryption key is inaccessible by a level-two encryption entity that was used by level-two encryption circuitry to encrypt at least a part of the level-one encrypted output of the surveillance device from level-two key pair generation automation.

37. The machine of claim 35, wherein obtaining a level-two decryption key inaccessible by the level-two encryption entity further comprises:

determining a level-two decryption key which forms a pair with the level-two encryption key whose decryption key is inaccessible by a level-two encryption entity that was used by level-two encryption circuitry to encrypt at least a part of the level-one encrypted output of the surveillance device by successively attempting to decrypt with one or more decryption keys on a key chain of level-two decryption circuitry.

38. The machine of claim 2, wherein decrypting at least a part of the level-one encrypted output of the surveillance device with a level-one decryption key inaccessible by a level-one encryption entity further comprises:

determining a level-one decryption key corresponding to a level-one encryption key whose decryption key is inaccessible by a level-one encryption entity that was used to encrypt at least a part of the output of the surveillance device.

39. The machine of claim 38, wherein determining a level-one decryption key corresponding to a level-one encryption key whose decryption key is inaccessible by a level-one encryption entity that was used to encrypt at least a part of the output of the surveillance device further comprises:

obtaining a level-one decryption key inaccessible by the level-one encryption entity.

40. The machine of claim 39, wherein obtaining a level-one decryption key inaccessible by the level-one encryption entity further comprises:

receiving a level-one key-pair designator in association with a level-one decryption key which forms a pair with the level-one encryption key whose decryption key is inaccessible by a level-one encryption entity that was used by level-one encryption circuitry to encrypt at least a part of the output of the surveillance device from level-one key pair generation automation.

41. The machine of claim 39, wherein entity further comprises:

determining a level-one decryption key which forms a pair with the level-one encryption key whose decryption key is inaccessible by a level-one encryption entity that was used by level-one encryption circuitry to encrypt at least a part of the output of the surveillance device by successively attempting to decrypt with one or more decryption keys on a key chain of level-one decryption circuitry.

42. The machine of claim 2, further comprising:

transmitting an encrypted surveillance device identifier in association with a date-time window and a geographic location to encrypted surveillance device identifier plus surveillance device location repository circuitry.

43. The machine of claim 42, further comprising:

receiving the encrypted surveillance device identifier in association with the date-time window and the geographic location; and

storing the encrypted surveillance device identifier in association with the date-time window and the geographic location in a memory of the encrypted surveillance device identifier plus surveillance device location repository circuitry.