Security for scene-based sensor networks, with privacy management system
Security and access control is provided for sensor devices, the data captured by sensor devices, and the results of processing and analyzing that data. In one aspect, SceneData related to a Scene is requested from a sensor-side technology stack and at least some of the SceneData is secured, for example by encryption. Different SceneData can be secured separately and at different levels of security, thus providing fine-grained security of the SceneData. In yet another aspect, data security is implemented by a separate privacy management system. In yet another aspect, sensor devices themselves are secured against external network threats. The sensor device includes an execution environment and a separate network management layer that secures the execution environment against threats from the external network. In one implementation, the sensor device is partitioned into a trusted region and a non-trusted region, and the network security stack is implemented in the trusted region.
1. A privacy management system for managing access and privileges to a variety of different SceneData, the privacy management system implemented on a computer system comprising a processor coupled to memory, the privacy management system comprising:
a privileges manager that manages rights objects for the SceneData, the rights objects determining which non-human technological users have which privileges with respect to which SceneData; wherein:
different SceneData are produced by different non-human technological entities in a sensor side technology stack, the non-human technological entities comprising a group of one or more sensor devices;
the non-human technological users configure the non-human technological entities into different pipelines for producing SceneData;
the privacy management system receives privileges policies governing access to the SceneData produced by the different non-human technological entities in the sensor side technology stack;
the privacy management system receives requests from the non-human technological users for access to SceneData in connection with configuring the different pipelines; and
the privacy management system provides rights objects to the non-human technological users, in response to the non-human technological users' requests and in accordance with the privileges policies governing access to the SceneData.
2. The privacy management system of claim 1 wherein the SceneData is organized into SceneShots that are samples of Scenes.
3. The privacy management system of claim 1 wherein the rights object for a SceneData comprises:
a key ID that identifies the SceneData.
4. The privacy management system of claim 3 wherein the rights object for the SceneData further comprises:
a user ID that identifies the non-human technological user to which the rights object is issued; and
a decryption key encrypted by a key that is unique to the non-human technological user,
wherein the SceneData is provided to the non-human technological user in encrypted form that can be descrypted by the decryption key.
5. The privacy management system of claim 1 wherein the rights object for the SceneData further comprises:
privileges rules that define the non-human technological user's privileges with respect to the SceneData.
6. The privacy management system of claim 5 wherein at least some of the non-human technological user's privileges are conditional and the rights object for the SceneData further defines the conditions.
7. The privacy management system of claim 5 wherein the privileges rules define the non-human technological user's privileges with respect to processing of the SceneData.
8. The privacy management system of claim 7 wherein the non-human technological user is permitted to process the SceneData but the processed SceneData must be encrypted by an encryption key, and the rights object further comprises the encryption key encrypted by a key that is unique to the non-human technological user.
9. The privacy management system of claim 5 wherein the privileges rules define the non-human technological user's privileges with respect to distribution of the SceneData.
10. The privacy management system of claim 1 wherein the rights object for the SceneData further comprises:
a digital signature signed by the privacy management system or its proxy.
11. The privacy management system of claim 1 wherein the
SceneData is based on a plurality of different types of sensor data captured by the sensor group, the SceneData requiring processing and/or analysis of the captured sensor data, and the privacy management system further maintains:
a sensor map with a listing of the sensor devices; and
accounts for the sensor devices and/or their non-human operators.
12. The privacy management system of claim 11 wherein the privacy management system further maintains:
a listing of public keys for the sensor devices and/or the corresponding accounts.
13. The privacy management system of claim 11 wherein the privacy management system receives the privileges policies for the sensor devices from their non-human operators, and the privacy management system issues rights objects for SceneData produced by the sensor devices according to the applicable privileges policy.
14. The privacy management system of claim 11 wherein the privacy management system issues rights objects to sensor devices, the rights objects requiring encryption of SceneData produced by the sensor devices.
15. The privacy management system of claim 1 wherein the privacy management system receives requests for SceneData from non-human technological users and issues rights objects in response to the requests.
16. The privacy management system of claim 15 further comprising:
a credentials engine that authenticates non-human technological users requesting SceneData.
17. The privacy management system of claim 1 wherein SceneData is stored and retrieved by non-human technological users from a data repository separate from the privacy management system.
18. The privacy management system of claim 1 wherein the SceneData is a result of analysis performed by cloud-based services.
19. The privacy management system of claim 1 wherein the SceneData further includes MetaData for the SceneData.
20. The privacy management system of claim 1 wherein:
the group of one or more sensor devices includes at least one camera;
the non-human technological users comprise applications;
the applications configure the different pipelines by sending SceneModes to the sensor-side technology stack via an application programming interface (API), the SceneMode defining SceneData to be provided by the sensor-side technology stack;
the SceneData comprises artificial intelligence or machine learning analysis applied to sensor data captured by the sensor group, the sensor data including image data captured by the camera;
the SceneModes do not specify all of the sensor data used to produce the SceneData; but
the sensor-side technology stack determines, based on the received SceneMode,
the unspecified sensor data to be captured and used to produce the SceneData; and
the SceneModes also do not specify all of the analysis applied by the sensor-side technology stack to produce the SceneData; but the sensor-side technology stack determines, based on the SceneMode, the unspecified analysis to be applied to produce the SceneData.