Privacy enforcing memory system
A method and apparatus for enforcing privacy within one or more memories of a data storage system are disclosed. In one embodiment, sensor data containing personally identifiable information (PII) is provided to a memory. In some embodiments, the memory of disclosed systems and methods may be volatile, non-volatile, or a combination. Within the memory, PII is detected in some embodiments by AI-based computer vision, voice recognition, or natural language processing methods. Detected PII is obfuscated within the memory prior to making the sensor data available to other systems or memories. In some embodiments, once PII has been obfuscated, the original sensor data is overwritten, deleted, or otherwise made unavailable.
1. A system for enforcing data privacy, comprising:
a memory for storing computer-readable instructions; and
a processor configured to read and execute the computer-readable instructions;
an Input/Output (I/O) coupled to a sensor configured to produce sensor data comprising personal identifying data;
a first storage module coupled to the sensor, wherein the first storage module comprises:
an intermediate storage/interface buffer configured to receive sensor data from the sensor, wherein the intermediate storage/interface buffer is configured to protect the received sensor data such that the received sensor data cannot be accessed by an external entity; and
a blur validation module coupled to the intermediate storage/interface buffer and configured to generate a flag in response to identifying the personal identifying data in the received sensor data;
a second storage module coupled to the first storage module, wherein the second storage module comprises:
a storage unit; and
a blur validation module configured to generate a flag in response to identifying the personal identifying data in an obfuscated data; and
a blur unit coupled to the first storage module and the second storage module, and configured to identify the personal identifying data of the sensor data, produce the obfuscated sensor data by obfuscating at least a portion of the personal identifying data, and provide the obfuscated sensor data to the intermediate storage/interface buffer and the storage unit of the second storage module.
2. The system of claim 1 , wherein the blur unit is further configured to identify the personal identifying data in the obfuscated sensor data.
3. The system of claim 2 , further comprising a user interface configured to provide the obfuscated sensor data to a user.
4. The system of claim 1 , wherein the second storage module is a non-volatile data storage device.
5. The system of claim 1 , wherein the blur unit is further configured to overwrite the personal identifying data.
6. The system of claim 1 , wherein the intermediate storage/interface buffer is a volatile data storage device.
7. A method for enforcing data privacy, comprising:
producing, by a sensor, sensor data comprising personal identifying data;
receiving the sensor data from the sensor at an Intermediate Storage/Interface Buffer (IS/IB) coupled to the sensor;
protecting, by the (IS/IB), the received sensor data such that the received sensor data cannot be accessed by an external entity;
generating, by a blur validation module coupled to the (IS/IB), a flag in response to identifying the personal identifying data in the received sensor data, wherein the blur validation module and the (IS/IB) are coupled to a first storage module coupled to the sensor;
generating, by a second blur validation module coupled to a second storage module, a flag in response to identifying the personal identifying data in an obfuscated data, wherein the second storage module is coupled to the first storage module;
identifying the personal identifying data at a blurring application coupled to the first storage module and the second storage module;
generating the obfuscated sensor data at the blurring application by obfuscating at least a portion of the personal identifying data; and
providing the obfuscated sensor data to the (IS/IB) and to a storage unit belong to the second storage module.
8. The method of claim 7 , further comprising: identifying the personal identifying data in the obfuscated sensor data provided in the storage unit.
9. The method of claim 8 , further comprising providing the obfuscated sensor data to a user interface.
10. The method of claim 7 , wherein the second data storage module is a non-volatile data storage device.
11. The method of claim 7 , wherein the IS/IB is a volatile data storage device.
12. A controller for a data storage system for enforcing data privacy, comprising:
a memory for storing computer-readable instructions; and
a processor configured to read the computer-readable instructions that when executed cause the processor to:
produce, by a sensor, sensor data comprising personal identifying data;
receive the sensor data comprising the personal identifying information at an Intermediate Storage/Interface Buffer (IS/IB) coupled to the sensor;
protect, by the (IS/IB), the received sensor data such that the received sensor data cannot be accessed by an external entity;
generate, by a blur validation module coupled to the (IS/IB), a flag in response to identifying the personal identifying data in the received sensor data, wherein the blur validation module and the (IS/IB) are coupled to a first storage module coupled to the sensor;
generate, by a second blur validation module coupled to a second storage module, a flag in response to identifying the personal identifying data in an obfuscated data, wherein the second storage module is coupled to the first storage module;
identifying the personal identifying data at a blurring application coupled to the first storage module and the second storage module;
obfuscate at least a portion of the sensor data comprising the personal identifying information at the blurring application, to generate the obfuscated sensor data; and
provide the obfuscated sensor data to the (IS/IB) and to a storage unit belong to the second storage module.
13. The controller of claim 12 , wherein the computer-readable instructions further cause the processor to overwrite the personal identifying information.
14. The controller of claim 12 , wherein the computer-readable instructions further cause the processor to:
obfuscate at least a portion of the sensor data that contains personal identifying data that is not obfuscated personal identifying information, to generate additional obfuscated personal identifying information.
15. The controller of claim 14 , wherein the computer-readable instructions further cause the processor to overwrite the personal identifying information that is not obfuscated personal identifying information.