Privacy solution for images locally generated and stored in edge servers
AssigneeDatalogic IP Tech S.R.L.
InventorFrancesco D'Ercoli
Life of this patent
Estimating the term…
Abstract
A system and method of securing data, such as images, may include receiving, by an edge server operating on a local area network (LAN) and communicatively coupled to a cloud-based server, encrypted data captured and/or generated by a first device operating on the LAN. The edge server may store the encrypted data in a data repository, the encrypted data being stored as encrypted data. Responsive to a second device operating on the LAN requesting the encrypted data, the edge server may communicate the encrypted data to the second device executing a customer application configured to decrypt and display the encrypted data.
Claims18
A method of securing data, said method comprising:
- receiving, by an edge server operating on a local area network (LAN) and communicatively coupled to a cloud-based server, encrypted data captured and/or generated by a first device operating on the LAN;
- storing, by the edge server, the encrypted data in a data repository, the encrypted data being stored as encrypted data;
- and
- responsive to a second device operating on the LAN requesting the encrypted data, communicating, by the edge server, the encrypted data to the second device executing a customer application configured to decrypt and display the encrypted data,
- wherein receiving the encrypted data includes:
- receiving a plain text source payload (Ps) defined by a ciphertext (X) concatenated with a cryptographic hash function (H) of the ciphertext (X) concatenated with a first private signature (s_dev) of the first device;
- and
- wherein the ciphertext (X) is defined by an encryption of the data (IMG) concatenated with a private edge signature (s_edg) of the edge server using a private symmetric encryption key (k_app) of the customer application.
A system for securing data, said system comprising:
- an edge server operating on a local area network (LAN) and communicatively coupled to a cloud-based server, the edge server including at least one processor and storage device configured to store encrypted data, the at least one processor configured to execute software instructions that, when executed, cause the at least one processor to:
- receive encrypted data captured and/or generated by a first device operating on the LAN;
- store the encrypted data in a data repository being stored by the storage device, the encrypted data being stored in an encrypted data format;
- and
- responsive to receiving a request for the encrypted data from a second device operating on the LAN, communicate the encrypted data to the second device executing a customer application configured to decrypt and display the encrypted data;
- and
- in receiving the encrypted data, the at least one processor is further configured to:
- receive a plain text source payload (Ps) defined by a ciphertext (X) concatenated with a cryptographic hash function (H) of the ciphertext (X) concatenated with a first private signature (s_dev) of the first device;
- and
- wherein the ciphertext (X) is defined by an encryption of the data (IMG) concatenated with the private edge signature (s_edg) of the edge server using the private symmetric encryption key (k_app) of the customer application.
Dependencies are inferred from the claim text.