PRE-EVENT REPOSITORY ASSOCIATED WITH INDIVIDUAL PRIVACY AND PUBLIC SAFETY PROTECTION VIA DOUBLE ENCRYPTED LOCK BOX

• US 20140019770A1
• Filed: 12/07/2012
• Published: 01/16/2014
• Est. Priority Date: 07/12/2012
• Status: Active Grant

• Current Assignee: Elwha LLC (Intellectual Ventures LLC)
• Original Assignee: Elwha LLC (Intellectual Ventures LLC)
• Inventors: Jung, Edward K.Y., Levien, Royce A., Lord, Richard T., Lord, Robert W., Malamud, Mark A.
• Granted Patent: US 9,781,389 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/18 Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast

Abstract

A method substantially as shown and described the detailed description and/or drawings and/or elsewhere herein. A device substantially as shown and described the detailed description and/or drawings and/or elsewhere herein.

Claims

1-51. -51. (canceled)

52. A system comprising:

a double-encrypted lockbox repository; and

a memory control architecture forming a part of said double-encrypted lockbox repository, said memory control architecture structured to store content generated by a monitoring device associated with at least one of a specific time or a specific place, said memory control architecture structured such that at least one of the content generated by the monitoring device, the monitoring device, the specific time, or the specific place is practicably unknowable by the double-encrypted lockbox repository.

53. The system of claim 52, wherein memory control architecture forming a part of said double-encrypted lockbox repository, said memory control architecture structured to store content generated by a monitoring device associated with at least one of a specific time or a specific place, said memory control architecture structured such that at least one of the content generated by the monitoring device, the monitoring device, the specific time, or the specific place is practicably unknowable by the double-encrypted lockbox repository further comprises:

a pre-event repository double-lockbox storage engine forming a part of the double-encrypted lockbox repository, said pre-event repository double-lockbox storage engine structured to store a doubly-encrypted output of a surveillance device in association with a surveillance device identifier in a form inaccessible by the double-encrypted lockbox repository.

54. The system of claim 52, wherein memory control architecture forming a part of said double-encrypted lockbox repository, said memory control architecture structured to store content generated by a monitoring device associated with at least one of a specific time or a specific place, said memory control architecture structured such that at least one of the content generated by the monitoring device, the monitoring device, the specific time, or the specific place is practicably unknowable by the double-encrypted lockbox repository further comprises:

a pre-event repository double-encrypted lockbox retriever engine forming a part of the double-encrypted lockbox repository, said pre-event repository double-encrypted lockbox retriever engine structured to retrieve a doubly-encrypted output of a surveillance device in response to receipt of a request having a surveillance device identifier in a form inaccessible by the double-encrypted lockbox repository.

55. The system of claim 52, wherein memory control architecture forming a part of said double-encrypted lockbox repository, said memory control architecture structured to store content generated by a monitoring device associated with at least one of a specific time or a specific place, said memory control architecture structured such that at least one of the content generated by the monitoring device, the monitoring device, the specific time, or the specific place is practicably unknowable by the double-encrypted lockbox repository comprises:

circuitry of said double-encrypted lockbox repository configured to operably couple with at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository.

56. The system of claim 55, wherein at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository comprises:

level-one encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository.

57. The system of claim 56, wherein level-one encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository comprises:

said level-one encryption circuitry having at least one of practicable control, administration, or access control circuitry that renders practicable control, administration, or access of said level-one encryption circuitry physically inaccessible by said double-encrypted lockbox repository.

58. The system of claim 56, wherein level-one encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository comprises:

said level-one encryption circuitry operably coupled with level-one key-pair generation automation physically inaccessible by said double-encrypted lockbox repository.

59. The system of claim 55, wherein at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository comprises:

level-one encryption circuitry configured to create an encrypted of version of an output of the monitoring device that the level-one encryption circuitry is practicably incapable of decrypting.

60. The system of claim 52, wherein memory control architecture forming a part of said double-encrypted lockbox repository, said memory control architecture structured to store content generated by a monitoring device associated with at least one of a specific time or a specific place, said memory control architecture structured such that at least one of the content generated by the monitoring device, the monitoring device, the specific time, or the specific place is practicably unknowable by the double-encrypted lockbox repository comprises:

circuitry of said double-encrypted lockbox repository configured to operably couple with at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository.

61. The system of claim 60, wherein at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository comprises:

level-two encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository.

62. The system of claim 61, wherein level-two encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository comprises:

said level-two encryption circuitry having at least one of practicable control, administration, or access control circuitry that renders practicable control, administration, or access of said level-two encryption circuitry physically inaccessible by said double-encrypted lockbox repository.

63. The system of claim 61, wherein level-two encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository comprises:

said level-two encryption circuitry operably coupled with level-two key-pair generation automation physically inaccessible by said double-encrypted lockbox repository.

64. The system of claim 61, wherein level-two encryption circuitry that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository comprises:

said level-two encryption circuitry operably coupled with said double-encrypted lockbox repository.

65. The system of claim 60, wherein at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository comprises:

level-two encryption circuitry configured to create an encrypted of version of an output of the monitoring device that the level-two encryption circuitry is practicably incapable of decrypting.

66. The system of claim 52, wherein memory control architecture forming a part of said double-encrypted lockbox repository, said memory control architecture structured to store content generated by a monitoring device associated with at least one of a specific time or a specific place, said memory control architecture structured such that at least one of the content generated by the monitoring device, the monitoring device, the specific time, or the specific place is practicably unknowable by the double-encrypted lockbox repository comprises:

circuitry of said double-encrypted lockbox repository configured to operably couple with at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository.

67. The system of claim 66, wherein at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository comprises:

a surveillance device identifier obscuring unit that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository.

68. The system of claim 67, wherein a surveillance device identifier obscuring unit that has at least one of practicable control, administration, or access walled off from said double-encrypted lockbox repository comprises:

said surveillance device identifier obscuring unit physically inaccessible by said double-encrypted lockbox repository.

69. The system of claim 66, wherein at least one communications circuit between said double-encrypted lockbox repository and the monitoring device that includes at least one encryption circuit outside at least one of practicable control, administration, or access of said double-encrypted lockbox repository comprises:

a surveillance device identifier obscuring unit configured to create an encrypted version of a surveillance device identifier that the surveillance device identifier obscuring unit is practicably incapable of decrypting.

70. A system comprising:

a double-encrypted lockbox repository; and

a pre-event repository double-lockbox storage engine forming a part of the double-encrypted lockbox repository, said pre-event repository double-lockbox storage engine structured to store a doubly-encrypted output of a surveillance device in association with a surveillance device identifier in a form inaccessible by the double-encrypted lockbox repository.

71. A system comprising:

a double-encrypted lockbox repository; and

a pre-event repository double-encrypted lockbox retriever engine forming a part of the double-encrypted lockbox repository, said pre-event repository double-encrypted lockbox retriever engine structured to retrieve a doubly-encrypted output of a surveillance device in response to receipt of a request having a surveillance device identifier in a form inaccessible by the double-encrypted lockbox repository.