Verified sensor data processing

• US 9,124,635 B2
• Filed: 11/30/2012
• Issued: 09/01/2015
• Est. Priority Date: 11/30/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Robinson, Scott H., Martin, Jason, Herbert, Howard C., LeMay, Michael, Grewal, Karanvir Ken S., Shippy, Keith L., Strongin, Geoffrey
• Primary Examiner(s): THIAW, CATHERINE B
• Application Number:
  US13/690,666
• Publication Number:
  US 20140157349A1
• Time in Patent Office: 1,005 Days
• Field of Search: 726 1- 3, 726 26- 30, 709223-225
• US Class Current: 1/1
• CPC Class Codes: G06V 40/161 Detection; Localisation; Normalisation
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

Sensor data may be filtered in a secure environment. The filtering may limit distribution of the sensor data. Filtering may modify the sensor data, for example, to prevent identification of a person depicted in a captured image or to prevent acquiring a user'"'"'s precise location. Filtering may also add or require other data use controls to access the data. Attestation that a filter policy is being applied and working properly or not may be provided as well.

Claims

1. An apparatus comprising:

a hardware platform to provide a trusted execution environment, a policy to control distribution of sensor data, and attestation of policy compliance, said platform to modify only a portion of the sensor data to limit dissemination of personal identity or location information, said platform to filter video data by blackening depth-labeled image pixels greater than a prior depth from an imaging device; and

a hardware indicator coupled to said platform to indicate policy compliance.

2. The apparatus of claim 1, said platform to pass through unmodified sensor data without distribution restriction.

3. The apparatus of claim 1 said platform to acquire and configure the policy to control the distribution of sensor data using external context data.

4. The apparatus of claim 3 said platform to provide external access control policies.

5. The apparatus of claim 4 said platform to use data about the platform or network system topology.

6. The apparatus of claim 1, said platform to identify a human face in said sensor data and to obscure said face.

7. The apparatus of claim 1, said platform to identify location information in said sensor data and to obscure said location information.

8. One or more non-volatile non-transitory computer readable media storing instructions to enable a hardware processor to perform a sequence comprising:

receiving sensor data;

acquiring a policy to control the distribution of sensor data;

applying the policy in a trusted execution environment provisioned by said hardware processor;

providing attestation of policy compliance;

modifying, using said hardware processor, only a portion of the sensor data to limit dissemination of personal identity or location information; and

filtering video data by blackening depth-labeled image pixels greater than a prior depth from an imaging device.

9. The media of claim 8 including acquiring and configuring the policy to control the distribution of sensor data using external context data.

10. The media of claim 9 including providing external access control policies.

11. The media of claim 9 including using data about platform or network system topology.

12. The media of claim 11 including applying the policy to restrict distribution of sensor data via secured communication links.

13. The media of claim 9 including using data about the identity of target entities.

14. The media of claim 9 including applying the policy to control where the sensor data may be distributed.

15. The media of claim 8 including applying the policy to control the distribution of sensor data using external context data.

16. The media of claim 8 including applying the policy to restrict distribution of sensor data.

17. The media of claim 8 including applying the policy to remove or obscure all or part of the sensor data.

18. The media of claim 8 including providing attestation of policy changes.

19. The media of claim 8 including storing the policy in a secure execution environment.

20. The media of claim 19 including switching to a new sensor data distribution policy to shut off distribution.

21. The media of claim 8 including providing an indication that said policy is being applied.

22. The media of claim 8 including trusted execution environment being provided by the Secure Enclaves processor feature.

23. The media of claim 8 including filtering user presence data to only indicate whether the user is available, in a meeting, or busy.

24. The media of claim 8, said sequence including identifying a human face in said sensor data and to obscure said face.

25. The media of claim 8, said sequence including identifying location information in said sensor data and to obscure said location information.

26. A processor based system comprising:

a sensor;

a trusted execution environment;

a hardware processor to acquire a policy to control the distribution of sensor data and apply the policy in a trusted execution environment and modify only a portion of the sensor data to limit dissemination of personal identity or location information, said processor to filter video data by blackening depth-labeled image pixels greater than a prior depth from an imaging device; and

an indicator to provide attestation of policy compliance.

27. The system of claim 26, said processor to pass through unmodified sensor data without distribution restriction.

28. The system of claim 26, said processor to acquire and configure the policy to control the distribution of sensor data using external context data.

29. The system of claim 26, said processor to provide external access control policies.