Data-secure sensor system

A non-transitory computer-program product tangibly embodied in a machine-readable non-transitory storage medium that includes instructions configured to cause one or more processors of a data-secure system to:

• receive and analyze sensor data corresponding to a physical area;
• generate descriptive data based on the sensor data that includes information about identified objects or activity in the physical area, wherein the descriptive data is different than the sensor data;
• receive a request for information corresponding to the physical area;
• sending the descriptive data to an I/O port in response to receiving the request;
• and
• prevent the sensor data from being accessible via any external communication port of the data-secure system, including the I/O port,
• wherein the preventing the sensor data from being accessible via any external communication port of the data-secure system includes limiting a communication bandwidth of the I/O port via an I/O choke to a maximum data rate set within a range of 0-100 kbps.