Decentralized cryptographic key derivation

A method comprising:

• deriving, by a first computer device provided within a facility, a first cryptographic key for a first capturing component provided within the facility, wherein the first cryptographic key is derived for the first capturing component at a first time based at least in part on a second cryptographic key derived for at least the first computer device by a second computer device and at least one of an attribute or an identifier of the first capturing component, and wherein the second computer device is not provided within the facility;
• transmitting, by the first computer device, the first cryptographic key to the first capturing component;
• capturing first data by the first capturing component;
• encrypting, by the first capturing component, the first data using the first cryptographic key;
• transmitting, by the first capturing component, the encrypted first data to the first computer device;
• receiving, by the first computer device, the encrypted first data from the first capturing component;
• and
• in response to receiving the encrypted first data,
• determining, by the first computer device, the at least one of the attribute or the identifier of the first capturing component;
• deriving, by the first computer device, a third cryptographic key for the first capturing component at a second time, wherein the third cryptographic key is derived based at least in part on the second cryptographic key and the at least one of the attribute or the identifier of the first capturing component, and wherein the second time follows the first time;
• and
• decrypting, by the first computer device, the encrypted first data using the third cryptographic key.

A system comprising:

• a first computer device;
• a second computer device provided in association with a materials handling facility;
• and
• a plurality of camera devices provided within the materials handling facility, wherein each of the plurality of camera devices is in communication with the second computer device, and wherein each of the plurality of camera devices is configured to capture imaging data, and
• wherein the first computer device is programmed with one or more sets of instructions that, when executed by the first computer device, cause the first computer device to at least:
• generate a root key for at least one computer device or at least one camera device of the system;
• receive, from the second computer device, a request for a first cryptographic key, wherein the request comprises at least one of an attribute or an identifier of the second computer device;
• derive, according to a hash-based message authentication code function, the first cryptographic key for at least the second computer device based at least in part on the root key and the at least one of the attribute or the identifier of the second computer device;
• transmit the first cryptographic key to the second computer device;
• receive, from a first camera device, encrypted imaging data and metadata, wherein the first camera device is one of the plurality of camera devices, wherein the metadata identifies the first camera device and an association between then first camera device and the second computer device, and wherein the encrypted imaging data was encrypted by the first camera device using a second cryptographic key derived by the second computer device according to a hash-based message authentication code function based at least in part on the first cryptographic key and an identifier of the first camera device;
• determine the identifier of the first camera device based at least in part on the metadata;
• derive, according to a hash-based message authentication code function, a third cryptographic key for the first camera device based at least in part on the first cryptographic key and the identifier of the first camera device;
• and
• decrypt the encrypted imaging data using the third cryptographic key.