Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/32—Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
  • H04N1/32101—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
  • H04N1/32128—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
  • G06F21/82—Protecting input, output or interconnection devices
  • G06F21/85—Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/21—Intermediate information storage
  • H04N1/2104—Intermediate information storage for one or a few pictures
  • H04N1/2112—Intermediate information storage for one or a few pictures using still video cameras
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N1/00—Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
  • H04N1/21—Intermediate information storage
  • H04N1/2104—Intermediate information storage for one or a few pictures
  • H04N1/2158—Intermediate information storage for one or a few pictures using a detachable storage unit
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
  • G06F12/14—Protection against unauthorised use of memory or access to memory
  • G06F12/1408—Protection against unauthorised use of memory or access to memory by using cryptography
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N2201/00—Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
  • H04N2201/0008—Connection or combination of a still picture apparatus with another apparatus
  • H04N2201/0034—Details of the connection, e.g. connector, interface
  • H04N2201/0048—Type of connection
  • H04N2201/0049—By wire, cable or the like
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N2201/00—Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
  • H04N2201/0008—Connection or combination of a still picture apparatus with another apparatus
  • H04N2201/0034—Details of the connection, e.g. connector, interface
  • H04N2201/0048—Type of connection
  • H04N2201/0051—Card-type connector, e.g. PCMCIA card interface
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N2201/00—Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
  • H04N2201/32—Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
  • H04N2201/3201—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
  • H04N2201/3225—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title of data relating to an image, a page or a document
  • H04N2201/3233—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title of data relating to an image, a page or a document of authentication information, e.g. digital signature, watermark
  • H04N2201/3235—Checking or certification of the authentication information, e.g. by comparison with data stored independently
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N2201/00—Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
  • H04N2201/32—Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
  • H04N2201/3201—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
  • H04N2201/3225—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title of data relating to an image, a page or a document
  • H04N2201/3233—Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title of data relating to an image, a page or a document of authentication information, e.g. digital signature, watermark
  • H04N2201/3236—Details of authentication information generation

Definitions

• the present invention relates generally to digital still and video cameras and the transfer of data from a digital camera to a computer, and more particularly to an apparatus for transparently providing embedded security of data within a storage device and of securing data while being transferred from a digital camera to a computer.
• the image data can be encrypted, or authentication data can be created to prevent an unauthorized person from modifying the data. From this point on, a witnessed chain of custody of those persons with access to the decryption key can be maintained, greatly easing the security problem. From the above description of the prior art, it is apparent that there is a need for a method and apparatus for securing camera data automatically prior to, or as part of downloading image data from a camera . Such a method and apparatus would greatly improve the security of digital camera data.
• a preferred embodiment of the present invention includes a secure storage device with the external dimensions of a PCMCIA card, for securing digital camera data at the acquisition stage.
• Original digital camera data is saved in the memory of the secure storage device which has the capability of performing one or more security functions, including encryption, creation of an authentication file, adding data to the image data such as fingerprinting, and adding secure annotations such as separate data included in an image header.
• the device prepares original authentication data from original digital camera data, and encrypts and stores both the original authentication data and the original image data.
• the use of the device includes downloading the original image data to a first computer, and encrypted original authentication data to a second computer.
• the second computer can be programmed with software whereby the encrypted original authentication data can be decrypted by a user having a key.
• the software then allows the user to prepare corresponding second authentication data from second image data of questionable authenticity. If the second authentication data is the same as the original authentication data, the questionable second image data is deemed to be an accurate copy of the original image data.
• a further advantage of the present invention is that it provides a method and apparatus for securing the chain of custody of digital data from cameras that would otherwise provide only unsecured image data.
• Another advantage of the present invention is that by putting the security function in a removable storage device, the storage can be customized for a particular user with no need for special hardware on the camera or the PC, enabling the retrofitting of otherwise unacceptable cameras with appropriate security functionality.
• a still further advantage of the method and apparatus of the present invention is that the processing provided is undetected i.e. transparent to the camera and to the computer, and as a result the method and apparatus can be applied to any digital camera, and also to a variety of other devices that utilize peer to host and peer to peer communication and/or removable storage.
• Fig. 1 is a perspective view illustrating the use of the present invention to transfer data
• Fig. 2 is a block diagram showing the method steps of secure data transfer
• Fig. 3 is a block diagram of a secure storage device
• Fig. 4 is a block diagram of a secure data transfer device
• Fig. 5 illustrates the transfer of secure data by way of data encryption
• Fig. 6 illustrates the storage device for secure data transfer through creation of authentication data
• Fig. 7 illustrates the process of a host computer for verifying image data authenticity through use of authentication data
• Fig. 8 shows a method of secure data transfer by way of fingerprinting and/or annotation
• Fig. 9 illustrates the sending of secured data from a secure storage device to a first location, and public data to a second location.
• the preferred embodiment includes an electronic digital signal processing apparatus, referred to as a secure storage device 10, and configured to physically engage with a PCMCIA card slot 12 of a prior art digital camera 14.
• a secure storage device 10 an electronic digital signal processing apparatus, referred to as a secure storage device 10.
• the camera 14 shown is typical in appearance to a still camera, the method and apparatus also applies to motion picture/video cameras.
• the device 10 is initially programmed to receive data from a digital camera, without the need of a password/key from the camera, and to perform the required processes to secure the data from the camera 14.
• the initial programming of device 10 can be either fixed, one time programming of a ROM, and/or it can be a program downloaded by a user from a PC such as PC 16.
• This programming data, as well as additional data, can be loaded into device 10 through the PCMCIA terminal 18 from a corresponding PCMCIA slot 20 in the PC 16.
• the device 10 can receive data through an input port 22 connected for example with a cable assembly 24 to a compatible port 26 of PC 16.
• the device 10 can be programmed to perform any of a variety of processes to secure the data, including encryption of image data, and/or creation of encrypted image authentication data, or watermarking, etc. In operation, the programmed device 10 is inserted in slot 12 of the still/video camera 14.
• the device 10 When the device 10 receives data from the camera 1 , it performs the programmed operations and stores the data. The device 10 is then removed from the camera 14 and inserted into the PCMCIA slot 20 of the computer 16. The device 10 is configured so that the PC 16 recognizes the device 10 as a regular storage device with readable files on the file system level without the need for presenting a password. The secure data is then transferred from the device 10 to the computer 16. In order for a user to view encrypted data, the computer 16 must be programmed to decrypt the data, generally in response to entry of a password. Referring again to Fig. 1, according to the prior art, a digital camera 14 is connected to a computer 16 by way of a direct cable connection indicated by line 28 making a direct cable connection from the camera connector 29 to the PC connector 26.
• a first alternate embodiment includes a secure data transfer device 30 having an input cable assembly 32 for making a connection from the camera 14 connector 29 to a security device 34.
• the security device 34 performs the same or similar operations as those discussed in reference to device 10 for securing the image data, and outputs the data to the PC 16 through an output cable 36, which in operation is connected to connector 26 of PC 16.
• the device 34 is programmable, and can receive additional data in the same manner as device 10, by connection to a computer through either cable assembly 32 or 36, or alternatively through a connector 38, or by way of a PCMCIA card through a PCMCIA card slot 40.
• the second alternative embodiment, also shown in Fig. 1, includes a wireless secure data transfer device 42, including a security device 44 that can be connected to a camera 14 by way of a cable assembly 46.
• the device 42 is programmable and receives additional data either from a PC through cable assembly 46 or connector 48, or by way of a PCMCIA card through slot 50.
• the device 44 includes a transceiver having a modulated infrared transmitter portion for generation of an infrared signal 52 for transmission of data to an infrared transceiver 54 which receives and demodulates the signal, and outputs the data to the computer 16 through a cable assembly 56.
• the transceiver properties of device 44 and transceiver 54 in addition allow for programming and other data to flow from PC 16 to device 44 through the wireless infrared connection.
• the devices 10, 30 and 42 present a standard interface to the camera 14 and PC 16. From the camera's point of view, the communication appears as if a direct connection is made to the PC. Similarly, the PC observes a connection that appears to be directly to the camera.
• Fig. 1 represents a destination to which the camera data is being transferred. Although a PC is illustrated, this destination can be any computerized network, system, etc. capable of receiving the data.
• Fig. 1 also shows a second destination 57 with a data input connection 59.
• the second destination 57 is shown to illustrate an important alternate embodiment of the method of the present invention, wherein a user can hook the output of device 10, 30, or 42 to a first destination 16 to download a first set of data, for example encrypted authentication data, and then to the second destination 57 to download a second set of data, which for example could be authenticated image data.
• Fig. 2 shows the basic process in block form.
• Block 58 includes the operation of a digital camera writing original digital camera data to a secure storage device without the need for presenting a password. This data is received by the storage device and secured (block 60), a process requiring a pre programmed key. The storage device then writes the secured data (block 62) , again without requiring the receipt of a password, which is read by the computer (block 64) .
• the storage device described herein presents an external behavior/interface to the camera that appears to the camera to be the same as the prior art devices into which the camera is designed to download data.
• a major distinction between the prior art storage devices designed and used for digital cameras and the secure device of the present invention is that the disclosed device upon receiving data/information, performs operations to secure the data. This is done without requiring a password or key from the camera, which is an important feature of the present invention.
• a computer can receive the secure data from the storage device without presenting a password/key.
• the advantage of this method is that no special programming or apparatus, other than the secure storage device, is required in order to securely transfer data from a conventional prior art digital camera to a computer.
• the preferred external physical configuration of the secure storage device is that of a standard PCMCIA card, for example device 10 of Fig. 1 without the connection 22. In this configuration, neither a user nor the camera nor a computer can distinguish the secure storage device from a standard PCMCIA card. The device accepts data from a camera, and sends data to a computer using standard protocol as if the device is a regular PCMCIA card.
• Fig. 3 illustrates typical circuit blocks required within the device 10.
• the connector/connection 18 passes data from the camera 14 to a card interface 66 providing the necessary protocol for communication with the camera.
• Bus line 68 interconnects the various circuit blocks as required.
• the card storage block 72 indicates the use of a floppy disk, or mini disk, etc for retaining the data for storage and transfer to a computer.
• Card controller 74 performs the standard/usual card operations, with additional processes accomplished by processor 76, which preferably includes a clock 78, counter 80, and facility for receiving additional data (block 82) from a PC through either of connectors 18 or optionally through PC interface controller 84 from connector 22.
• the processor also performs image processing activity 86 including security process 88.
• the power supply 90 is included as optional in design, including a clock, for example, or where power cannot be obtained from the camera and computer. Fig.
• Device 30 includes cable connector assemblies 32 to a camera and 36 to a computer, and security device 34.
• Device 42 includes the cable connector assemblies 46 and 56, and security device 44 which includes the circuitry in security device 34 with transceiver circuitry 54 added, and the separate transceiver 54.
• the device 34 circuitry includes a camera connection controller 92, power supply 94, memory 96, a removable storage controller 98 providing interface to card connection 50, a PC interface controller 100 providing interface to cable connector assemblies 48 and 36, a processor 102 with a clock 104, counter 106, additional data 108, image processing 110 and a security engine 112.
• the storage 114 is optional for the data transfer devices 30 and 42, and is for storing the data to be transferred from a camera to a computer, and can be a floppy disk, mini disk, etc. Since the use of the devices 30 and 42 preferably involves connecting to both the camera and destination at the same time, data can normally be transferred quickly enough so that memory 96 can provide adequate storage/buffering. If applications require longer storage, the optional storage 114 can be included in the design.
• Fig. 5 illustrates the processes of the secure storage devices 10,30,42 for encryption of original digital camera data. According to the process, the storage device is initially programmed with a security key (block 126) . This operation is done as an initial set-up of the device, prior to it's normal usage.
• This key programming can be a permanent setting, or it can be programmable.
• the devices 10, 30, 42 With the devices 10, 30, 42 ready for normal use, it is then connected to a camera and receives original digital camera data (block 128) .
• the device then encrypts the original digital camera data (block 130) .
• the device is removed from the camera and connected to a computer loaded with compatible software .
• the device 10, 30, 42 then writes the data to a computer (block 132) .
• a user knowing the security key can then operate the computer to decrypt the encrypted data (block 134) .
• the device 10, 30, 42 does not require receipt of a password/key to receive data from a camera, or to download data to a computer.
• a secure storage device can also be programmed to create authentication data. This is illustrated in Fig. 6. As in the case of Fig. 5, the storage device is initially programmed with a security key (block 136) prior to use of the device. The device is then connected to a camera to receive original camera data (block 138) . Authentication data is then created within the storage device from the original camera data and then encrypted (block 140) . Any person can then download the camera data, i.e. cause the storage device to write the camera data (block 142), and authentication data/file (block 144) to a computer. This completes the function of the storage device.
• the user can then proceed to use the computer as indicated in Fig. 7 to verify the authenticity of a set of questionable data.
• the user first uses appropriate software and the key to create verification authentication data from the questionable image data file (block 146) , and decrypts the encrypted original authentication data (block 148) .
• the two sets of data are then compared (block 150) . If they are the same, the questionable image data is considered valid, i.e. an accurate replica of the original image data. If the two sets are different, the questionable data is confirmed to be different from the original .
• Fig. 8 illustrates two similar processes called " fingerprinting" and " annotating” . Fingerprinting is a process wherein additional information is visibly or invisibly inserted into the image data itself.
• Examples of additional information that can be added include the camera serial number, date and time, unique counter, image storage ID, and any textual information that is downloaded to the storage device prior to receiving the camera image data.
• the process of annotation is similar to fingerprinting, except that the information is placed in a non-image area such as the header, rather than in the image data.
• the storage device is connected to a computer and the required data is inputted, i.e. downloaded (block 152). This can be done through connection 18 for a PCMCIA card configured device 10, or through connector 22 of the alternative device 10.
• Device 42 is configured as indicated in Fig.
• device 4 to receive data through port 48 or through cable assembly 46 or through cable assembly 50 from a PC, or through port 56 from a PC, or through port 50 from a PCMCIA card.
• device 30 is configured to receive data alternatively through cable assembly 32 or 36, or connector 38 from a PC, or through port 40 from a PCMCIA card.
• the storage device is then connected to a camera and receives camera data, i.e. camera data is downloaded (block 154).
• the device then performs programmed processes of either fingerprinting the data or annotating the data file (block 156) depending on the specific programming of the storage device.
• the storage device is then removed from the camera, connected to a computer, and the data is written, i.e. downloaded to the computer (block 158) .

Landscapes

• Engineering & Computer Science (AREA)
• Signal Processing (AREA)
• Multimedia (AREA)
• Theoretical Computer Science (AREA)
• Computer Hardware Design (AREA)
• General Engineering & Computer Science (AREA)
• Software Systems (AREA)
• General Physics & Mathematics (AREA)
• Physics & Mathematics (AREA)
• Computer Security & Cryptography (AREA)
• Studio Devices (AREA)
• Television Signal Processing For Recording (AREA)
• Storage Device Security (AREA)

Priority Applications (1)

Applications Claiming Priority (2)

Publications (2)

Family

ID=22306707

Family Applications (1)

Country Status (3)

Cited By (4)

Families Citing this family (66)

Citations (5)

Family Cites Families (29)

• 1998
  • 1998-06-26 US US09/105,593 patent/US6510520B1/en not_active Expired - Lifetime
• 1999
  • 1999-05-11 WO PCT/US1999/010390 patent/WO2000000895A1/en not_active Ceased
  • 1999-05-11 JP JP2000557400A patent/JP4596644B2/ja not_active Expired - Fee Related
• 2003
  • 2003-01-15 US US10/346,501 patent/US7680276B2/en not_active Expired - Fee Related
• 2008
  • 2008-06-30 US US12/164,608 patent/US7748049B2/en not_active Expired - Fee Related
• 2010
  • 2010-05-17 US US12/781,003 patent/US8312557B2/en not_active Expired - Fee Related

Patent Citations (5)

Also Published As

Similar Documents

Legal Events