# US 11,115,558 B2 · Systems and methods for maintaining chain of custody for assets offloaded from a portable electronic device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,115,558 B2
- Document ID: US11115558B2
- Status: Granted
- Kind: B2
- Application number: 16/300,645
- Filed: 2016-05-20
- Published: 2019-05-16
- Granted: 2021-09-07
- Earliest claimed: 2016-05-20
- Assignees: Motorola Solutions, Inc.
- Applicants: Motorola Solutions, Inc.
- Inventors: David B. Flowerday; Remigiusz Orlowski; Steven D. Tine; Lechoslaw Radwanski
- Web page: https://patentgrep.com/patent/US11115558B2

## CPC

- H04N 1/32101: {Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title}
- G06F 16/435: Filtering based on additional data, e.g. user or group profiles
- G06F 16/48: Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
- G06Q 10/00: Administration; Management
- G06Q 50/265: {Personal security, identity or safety}
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04N 2201/3202: of communication or activity log or report
- H04N 2201/3205: of identification information, e.g. name or ID code (H04N2201/3209 takes precedence)
- H04N 2201/3228: further additional information (metadata) being comprised in the identification information
- H04N 2201/3235: Checking or certification of the authentication information, e.g. by comparison with data stored independently
- H04N 2201/3276: of a customised additional information profile, e.g. a profile specific to a user ID
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods for maintaining chain of custody for assets offloaded from a portable electronic device. One exemplary system includes an electronic processor configured to receive, from the portable electronic device, an asset manifest including an asset identifier, a fixed-length unique identifier associated with the asset identifier, and a manifest digital signature. The electronic processor is further configured to transmit to the portable electronic device a storage message based on the asset manifest; receive, from the portable electronic device, an upload completion message; retrieve, from a data warehouse an asset file; and determine, for the asset file, an asset file fixed-length unique identifier. The electronic processor is further configured to determine whether the fixed-length unique identifier matches the asset file fixed-length unique identifier; determine whether the manifest digital signature is valid; and to transmit an asset deletion permission message when identifiers match and the digital signature is valid.

## Claims

### Claim 1

A system for maintaining chain of custody for assets offloaded from a portable electronic device, the system comprising:
an asset management controller external to the portable electronic device, the asset management controller including
a network interface; and
an electronic processor coupled to the network interface and configured to
receive, from the portable electronic device via the network interface, an asset manifest including at least one asset identifier, at least one fixed-length unique identifier associated with the at least one asset identifier, and a manifest digital signature;
transmit, to the portable electronic device via the network interface, storage message based on the asset manifest, the storage message identifying a data warehouse;
receive, from the portable electronic device via the network interface, an upload completion message;
retrieve, from the data warehouse via the network interface, at least one asset file;
determine, for the at least one asset file, at least one asset file fixed-length unique identifier;
determine whether the at least one fixed-length unique identifier matches the at least one asset file fixed-length unique identifier, wherein the at least one fixed-length unique identifier is a hash of the at least one asset file;
determine whether the manifest digital signature is valid; and
transmit, via the network interface, an asset deletion permission message when the at least one fixed-length unique identifier matches the at least one asset file fixed-length unique identifier, and the manifest digital signature is valid.

### Claim 2 (depends on 1)

The system of claim 1, wherein the upload completion message includes a request to delete assets stored in a local memory of the portable electronic device.

### Claim 3 (depends on 1)

The system of claim 1, wherein the electronic processor is further configured to
receive, via the network interface, a re-validation request including the at least one asset identifier, the at least one fixed-length unique identifier and the manifest digital signature;
in response to receiving the re-validation request,
determine at least one asset file fixed-length unique identifier based on the at least one asset identifier;
compare the at least one fixed-length unique identifier with the at least one asset file fixed-length unique identifier,
validate the manifest digital signature; and
when the at least one fixed-length unique identifier matches the at least one asset file fixed-length unique identifier, and the manifest digital signature is valid,
transmit, via the network interface, a validation message.

### Claim 4 (depends on 1)

The system of claim 1, wherein the at least one fixed-length unique identifier and the at least one asset file fixed-length unique identifier are SHA256 hash values.

### Claim 5 (depends on 1)

The system of claim 1, wherein the manifest digital signature is generated from a private key known only to the portable electronic device.

### Claim 6 (depends on 1)

The system of claim 1, wherein the electronic processor is further configured to
receive, from the portable electronic device via the network interface, a digital certificate including a public key;
validate the digital certificate; and
validate the manifest digital signature based on the public key.

### Claim 7 (depends on 1)

The system of claim 1, wherein the portable electronic device is a body-worn camera.

### Claim 8

A method for maintaining chain of custody for assets offloaded from a portable electronic device, the method comprising:
receiving, by an electronic processor external to the portable electronic device, via a network interface coupled to the electronic processor, from the portable electronic device, an asset manifest including at least one asset identifier, at least one fixed-length unique identifier associated with the at least one asset identifier, and a manifest digital signature;
transmitting, by the electronic processor via the network interface, to the portable electronic device, storage message based on the asset manifest, the storage message identifying a data warehouse;
receiving, by the electronic processor via the network interface, from the portable electronic device, an upload completion message;
retrieving, by the electronic processor via the network interface, at least one asset file from data warehouse;
determining, by the electronic processor, for the at least one asset file, at least one asset file fixed-length unique identifier;
determining, by the electronic processor, whether the at least one fixed-length unique identifier matches the at least one asset file fixed-length unique identifier, wherein the at least one fixed-length unique identifier is a hash of the at least one asset file;
determining, by the electronic processor, whether the manifest digital signature is valid; and
transmitting, by the electronic processor via the network interface, an asset deletion permission message when the at least one fixed-length unique identifier matches the at least one asset file fixed-length unique identifier, and the manifest digital signature is valid.

### Claim 9 (depends on 8)

The method of claim 8, wherein the upload completion message includes a request to delete assets stored in a local memory of the portable electronic device.

### Claim 10 (depends on 8)

The method of claim 8, further comprising:
receiving, by the electronic processor via the network interface, a re-validation request including the at least one asset identifier, the at least one fixed-length unique identifier and the manifest digital signature;
in response to receiving the re-validation request,
determining, by the electronic processor, at least one asset file fixed-length unique identifier based on the at least one asset identifier;
comparing, by the electronic processor, the at least one fixed-length unique identifier with the at least one asset file fixed-length unique identifier,
validating, by the electronic processor, the manifest digital signature; and
when the at least one fixed-length unique identifier matches the at least one asset file fixed-length unique identifier, and the manifest digital signature is valid,
transmitting, by the electronic processor via the network interface, a validation message.

### Claim 11 (depends on 8)

The method of claim 8, wherein the at least one fixed-length unique identifier and the at least one asset file fixed-length unique identifier are SHA256 hash values.

### Claim 12 (depends on 8)

The method of claim 8, wherein the manifest digital signature is generated from a private key known only to the portable electronic device.

### Claim 13 (depends on 8)

The method of claim 8, further comprising:
receiving, by the electronic processor via the network interface, from the portable electronic device, a digital certificate including a public key;
validating, by the electronic processor, the digital certificate; and
validating, by the electronic processor, the manifest digital signature based on the public key.

### Claim 14 (depends on 8)

The method of claim 8, wherein the portable electronic device is a body-worn camera.