Level-two decryption associated with individual privacy and public safety protection via double encrypted lock box

• US 10,348,494 B2
• Filed: 12/21/2012
• Issued: 07/09/2019
• Est. Priority Date: 07/12/2012
• Status: Active Grant

• Current Assignee: Elwha LLC (Intellectual Ventures LLC)
• Original Assignee: Elwha LLC (Intellectual Ventures LLC)
• Inventors: Jung, Edward K. Y., Levien, Royce A., Lord, Richard T., Lord, Robert W., Malamud, Mark A.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Kaplan, Benjamin A
• Application Number:
  US13/724,941
• Publication Number:
  US 20140105387A1
• Time in Patent Office: 2,391 Days
• Field of Search: 713150
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Computationally implemented methods and systems are described herein that are designed to, among other things, receiving a level-two encrypted output of a surveillance device; decrypting at least a part of the level-two encrypted output of the surveillance device with a level-two decryption key that is practicably inaccessible by a level-two encryption entity; and transmitting a level-one encrypted output of the surveillance device.

Claims

1. A system comprising:

circuitry configured to receive doubly-encrypted data via one or more communication networks from a repository;

circuitry configured to interface with circuitry configured to generate a level two key pair, the level two key pair including at least a level two decryption key for decrypting the doubly-encrypted data and a corresponding and separate level two encryption key that was used by circuitry configured to perform level-two encryption to perform a level two encryption of level one encrypted data to create the doubly-encrypted data;

circuitry configured to identify the level two decryption key of the two key pair at least in part by selecting the level two decryption key from a plurality of decryption keys that correspond to one or more other level two two-key pairs;

circuitry configured to perform level two decryption of doubly-encrypted data at least in part with the level two decryption key to form singly encrypted data, wherein the circuitry configured to perform level two decryption of doubly-encrypted data is located on one or more computing devices that do not include the repository; and

circuitry configured to interface with circuitry configured to perform level one decryption of the singly encrypted data.

2. The system of claim 1 wherein said circuitry configured to receive doubly-encrypted data via one or more communication networks from a repository comprises:

circuitry configured to receive doubly-encrypted data from a repository configured to store a doubly-encrypted lockbox.

3. The system of claim 2 wherein said circuitry configured to receive doubly-encrypted data from a repository configured to store a doubly-encrypted lockbox comprises:

circuitry configured to receive doubly-encrypted data from a repository configured to store a doubly-encrypted sensory data that is a doubly-encrypted version of output of a sensing device, said output of the sensing device including output of at least one of an image surveillance device, an audio surveillance device, a motion surveillance device, or a tactile surveillance device.

4. The system of claim 3 wherein said circuitry configured to receive doubly-encrypted data from a repository configured to store a doubly-encrypted sensory data that is a doubly-encrypted version of output of a sensing device comprises:

circuitry configured to receive doubly-encrypted data from a repository double-locked box storage engine operably coupled with a memory of the repository.

5. The system of claim 1 wherein said circuitry configured to perform level two decryption of doubly-encrypted data at least in part with the level two decryption key to form singly encrypted data comprises:

circuitry configured to perform level two decryption further configured to store a unique key-pair designator associated with the circuitry configured to generate a level two key pair.

6. The system of claim 5 wherein said circuitry configured to perform level two decryption further configured to store a unique key-pair designator associated with the circuitry configured to generate a level two key pair comprises:

at least one of;

circuitry configured to perform level two decryption further configured to store a decryption key associated with a paired encryption key (a) generated by the circuitry configured to generate a level two key pair and (b) kept private from the circuitry configured to perform level-two encryption by an architecture associated with the circuitry configured to generate a level two key pair;

circuitry configured to perform level two decryption configured to store a unique level-two key-pair designator generated by the circuitry configured to generate a level two key pair;

circuitry configured to perform level two decryption configured to receive a unique level-two key-pair designator generated by the circuitry configured to generate a level two key pair;

circuitry configured to perform level two decryption further configured to recognize a correct decryption key associated with a level-two encryption of level-one encrypted sensor data by comparison of at least one of clear text or a hash appended to the level-one encrypted sensor data by the circuitry configured to perform level-two encryption prior to the level-two encryption with a paired encryption key generated by the circuitry configured to generate a level two key pair;

or

circuitry configured to perform level two decryption configured to recognize a correct decryption key associated with a level-two encryption of level-one encrypted sensor data at least in part by comparison of a unique key pair designator received from the repository against a unique key pair designator received from the circuitry configured to generate a level two key pair.

7. The system of claim 1 wherein said circuitry configured to interface with circuitry configured to perform level one decryption of the singly encrypted data comprises:

circuitry configured to transmit a level-one encrypted sensor data to the circuitry configured to perform level one decryption.

8. The system of claim 7 wherein said circuitry configured to perform level two decryption of doubly-encrypted data at least in part with the level two decryption key to form singly encrypted data comprises:

circuitry configured to apply a level-two decryption key against a level-two encrypted sensor data to produce the level-one encrypted sensor data.

9. The system of claim 7 further comprising:

circuitry configured to receive the level-one encrypted sensor data from the circuitry configured to perform level two decryption of doubly-encrypted data.

10. The system of claim 9 further comprising:

circuitry configured to append a version of a sensing device identifier to the level-one encrypted sensor data.

11. The system of claim 10, wherein circuitry configured to append a version of a sensing device identifier to the level-one encrypted sensor data comprises:

circuitry configured to append an encrypted version of a sensing device identifier to the level-one encrypted sensor data.

12. The system of claim 10, wherein said circuitry configured to transmit a level-one encrypted sensor data to the circuitry configured to perform level one decryption comprises:

circuitry configured to transmit at least an encrypted version of a sensing device identifier and the level-one encrypted sensor data to circuitry configured to perform level-one decryption.

13. The system of claim 1, wherein the circuitry configured to interface with circuitry configured to perform level one decryption of the singly encrypted data comprises:

circuitry configured to transmit the singly encrypted data to circuitry configured to perform level one decryption, wherein the circuitry configured to perform level one decryption is at least partly located on one or more computing devices that no not include the circuitry configured to perform level two decryption.

14. The system of claim 13, wherein the circuitry configured to transmit the singly encrypted data to circuitry configured to perform level one decryption, wherein the circuitry configured to perform level one decryption is at least partly located on one or more computing devices that no not include the circuitry configured to perform level two decryption comprises:

circuitry configured to transmit the singly encrypted data to circuitry configured to perform level one decryption, wherein the circuitry configured to perform level one decryption is at least partly located on one or more computing devices that no not include the circuitry configured to perform level two decryption and wherein the circuitry configured to perform level one decryption is separate and apart from a circuitry configured to perform level one encryption.

15. The system of claim 1, wherein the circuitry configured to interface with circuitry configured to generate a level two key pair, the level two key pair including at least a level two decryption key for decrypting the doubly-encrypted data and a corresponding and separate level two encryption key that was used by circuitry configured to perform level-two encryption to perform a level two encryption of level one encrypted data to create the doubly-encrypted data comprises:

circuitry configured to interface with circuitry configured to generate a level two key pair, the level two key pair including at least a level two decryption key for decrypting the doubly-encrypted data, wherein the level two decryption key is accessible to circuitry configured to perform level two decryption but is inaccessible to the circuitry configured to perform level two encryption of level one encrypted data and wherein the circuitry configured to perform level two decryption is associated with a first entity and the circuitry configured to perform level two encryption are associated with a second entity that is different from the first entity.

16. A system comprising:

circuitry configured to receive via one or more communication networks from a repository level-two encrypted sensor data that is the result of a level-two blind encryption process performed on level-one encrypted sensor data, said level-two blind encryption process being a one-way automated process, wherein the level-two blind encryption process is a level-two encryption in which a level-two decryption key for performing a level-two decryption of the level-two encrypted sensor data to produce level-one encrypted sensor data is inaccessible to circuitry configured to perform the level-two blind encryption process; and

circuitry configured to apply a decryption key appropriate to perform a level-two decryption of the level-two encrypted sensor data to produce level-one encrypted sensor data, wherein the circuitry configured to apply a decryption key is at least partly located on one or more computing devices that do not include the repository, including at least;

circuitry configured to determine the decryption key appropriate to perform the level-two decryption of the level-two encrypted sensor data at least in part by selecting a decryption key associated with a key pair from a plurality of decryption keys that correspond to one or more other key pairs.

17. The system of claim 16 wherein said circuitry configured to determine the decryption key appropriate to perform the level-two decryption of the level-two encrypted sensor data at least in part by selecting a decryption key associated with a key pair from a plurality of decryption keys that correspond to one or more other key pairs comprises:

circuitry configured to determine the decryption key appropriate to the level-two blind encryption, wherein the decryption key is part of a key pair associated with a pseudo-public-private key pair.

18. The system of claim 17 wherein said circuitry configured to determine the decryption key appropriate to the level-two blind encryption, wherein the decryption key is part of a key pair associated with a pseudo-public-private key pair comprises:

circuitry configured to apply a candidate decryption key to level-two encrypted sensor data that is the result of the level-two blind encryption process done on the level-one encrypted sensor data; and

circuitry configured to determine whether or not a result of an application of the candidate decryption key to the level-two encrypted sensor data that is the result of the level-two blind encryption done on the level-one encrypted sensor data matches a data block associated with a level two encryption entity, wherein the circuitry configured to determine is further configured to determine whether or not a result of an application of the candidate decryption key matches the data block at least in part as part of a test of a plurality of decryption keys that correspond to a plurality key pairs to select the appropriate decryption key from the plurality of decryption keys; and

circuitry configured to denote the candidate decryption key as that appropriate to level-two blind encryption done on the level-one encrypted sensor data if the result of the application of the candidate decryption key matches the data block associated with the level two encryption entity.

19. The system of claim 18 wherein said circuitry configured to determine whether or not a result of an application of the candidate decryption key to the level-two encrypted sensor data that is the result of the level-two blind encryption done on the level-one encrypted sensor data matches a data block associated with a level two encryption entity comprises:

at least one of;

circuitry configured to determine whether or not a result of an application of the candidate decryption key to the level-two encrypted sensor data that is the result of the level-two blind encryption done on the level-one encrypted sensor data matches a clear text string associated with a level two encryption entity;

or

circuitry configured to determine whether or not a result of an application of the candidate decryption key to the level-two encrypted sensor data that is the result of the level-two blind encryption done on the level-one encrypted sensor data matches a result of a hashing function associated with an encryption performed by a level two encryption entity.

20. The system of claim 17 wherein said circuitry configured to determine the decryption key appropriate to the level-two blind encryption, wherein the decryption key is part of a key pair associated with a pseudo-public-private key pair comprises:

circuitry configured to compare a unique key pair designator received from a repository against at least one unique key pair designator received from a level-two key pair generation automation;

circuitry configured to at least provisionally select a decryption key from a plurality of decryption keys with at least one of the unique key pair designator received from a repository or the at least one unique key pair designator received from a level-two key pair generation automation; and

circuitry configured to denote the at least provisionally selected decryption key as the appropriate decryption key based at least in part on a match between the at least one unique key pair designator received from the level-two key pair generation automation and the unique key pair designator received from the repository.

21. A computationally-implemented method comprising:

receiving via one or more communication networks from a repository level-two encrypted sensor data that is the result of a level-two blind encryption process performed on level-one encrypted sensor data said level-two blind encryption process being a one-way automated process, wherein the level-two blind encryption process is a level-two encryption in which a level-two decryption key for performing a level-two decryption of the the level-two encrypted sensor data to produce level-one encrypted sensor data was inaccessible to a circuitry that performed the level-two blind encryption process; and

applying a decryption key appropriate to perform a level-two decryption of the level-two encrypted sensor data to produce level-one encrypted sensor data, wherein the applying a decryption key is performed with one or more computing devices that do not include the repository, including at least;

determining the decryption key appropriate to perform the level-two decryption at least in part by selecting a decryption key associated with a key pair at least in part by selecting the decryption key from a plurality of decryption keys that correspond to one or more other key pairs; and

wherein at least one of the receiving or the applying is performed at least in part with one or more processing devices.

22. The computationally-implemented method of claim 21, wherein said receiving via one or more communication networks from a repository a level-two encrypted sensor data comprises:

receiving level-two encrypted sensor data that is a level-two encrypted version of sensor data produced by at least one of a video portion of a camera, an audio portion of a camera, a commercially available motion detector, or a commercially available vibration detector.