Security for scene-based sensor networks
Security and access control is provided for sensor devices, the data captured by sensor devices, and the results of processing and analyzing that data. In one aspect, SceneData related to a Scene is requested from a sensor-side technology stack and at least some of the SceneData is secured, for example by encryption. Different SceneData can be secured separately and at different levels of security, thus providing fine-grained security of the SceneData. In yet another aspect, data security is implemented by a separate privacy management system. In yet another aspect, sensor devices themselves are secured against external network threats. The sensor device includes an execution environment and a separate network management layer that secures the execution environment against threats from the external network. In one implementation, the sensor device is partitioned into a trusted region and a non-trusted region, and the network security stack is implemented in the trusted region.
1. A computer-implemented method for securing a variety of sensor data and processed sensor data related to a Scene, the method comprising, at a sensor-side technology stack comprising a group of one or more sensor devices with at least one camera:
receiving a SceneMode from an application via an application programming interface (API) between the application and the sensor-side technology stack, the SceneMode defining SceneData to be provided by the sensor-side technology stack;
producing the SceneData based on an artificial intelligence or machine learning analysis applied to sensor data captured by the sensor group, the sensor data including image data captured by the camera;
wherein the SceneMode does not specify all of the sensor data used to produce the SceneData; but the sensor-side technology stack determines, based on the received SceneMode, the unspecified sensor data to be captured and used to produce the SceneData; and
wherein the SceneMode also does not specify all of the analysis applied by the sensor-side technology stack to produce the SceneData; but the sensor-side technology stack determines, based on the SceneMode, the unspecified analysis to be applied to produce the SceneData;
securing at least some of the SceneData; and
returning the secured SceneData to the application via the API.
2. The computer-implemented method of claim 1 wherein the SceneData is organized into SceneShots that are samples of the Scene.
3. The computer-implemented method of claim 1 wherein securing the SceneData comprises securing different SceneData at different levels of security.
4. The computer-implemented method of claim 3 wherein securing the SceneData comprises permitting different access to the different SceneData.
5. The computer-implemented method of claim 3 wherein the level of security for the different SceneData is specified by a requestor of the SceneData.
6. The computer-implemented method of claim 3 wherein the different SceneData is requested by different requestors, and the level of security for the different SceneData is specified by the requestor of that specific SceneData.
7. The computer-implemented method of claim 3 wherein the different SceneData is requested by different requestors, and securing the SceneData comprises encrypting the SceneData with the requestor of that specific SceneData possessing a corresponding decryption key.
8. The computer-implemented method of claim 1 wherein securing the SceneData comprises limiting access to the SceneData.
9. The computer-implemented method of claim 1 wherein securing the SceneData comprises providing conditional access to the SceneData.
10. The computer-implemented method of claim 1 wherein securing the SceneData comprises limiting distribution of the SceneData.
11. The computer-implemented method of claim 1 wherein securing the SceneData comprises limiting analysis of the SceneData.
12. The computer-implemented method of claim 1 wherein the SceneData includes sensor data captured by the sensor group; and securing the SceneData comprises securing at least some of the captured sensor data.
13. The computer-implemented method of claim 12 wherein the SceneData further includes MetaData for the SceneData; and securing the SceneData further comprises securing at least some of the MetaData separately from securing the captured sensor data.
14. The computer-implemented method of claim 1 further comprising:
securing a SceneMark that marks a Scene of interest in the SceneData.
15. The computer-implemented method of claim 1 wherein the request for SceneData specifies a level of security for securing the SceneData.
16. The computer-implemented method of claim 1 wherein the API is a standard.
17. The computer-implemented method of claim 1 wherein the sensor data captured by the sensor group includes video, the SceneData includes results from the artificial intelligence or machine learning analysis applied to the video but does not include the video itself.
18. The computer-implemented method of claim 1 wherein the sensor data captured by the sensor group includes video of one or more persons, and the SceneData includes identities of the persons in the video but does not include the actual video of the persons.