Shared scalable server to control confidental event traffic among recordation terminals, analysis engines, and a storage farm coupled via a public network

A method for operating an event recordation system with secure transmission and storage of assets comprising

• on an event recordation server apparatus:
• receiving and storing an encrypted asset,
• authenticating an authorized analysis client,
• decrypting the asset only at the request of an authenticated authorized analysis client, and
• delivering the decrypted asset to the authenticated authorized analysis client;
• whereby the asset is protected in storage and during transmission by an encryption at the event recordation client apparatus and not merely by a transport layer protocol.

A method for operating a event server apparatus, the apparatus comprising a command server, a network interface, a storage manager, an event recordation server;

• the method comprising the steps:
• receiving and maintaining a client session from a event recordation client apparatus,
• receiving and storing a reference,
• presenting a reference to an analysis server, and
• in processing an analysis server request for an asset, responding to a client request with a command to priority upload an asset.

A method for operating an event server apparatus, the apparatus comprising a command server, a network interface, a location server, a storage manager, an event recordation server;

• the method comprising the steps:
• receiving and maintaining a client session from a event recordation client apparatus,
• receiving and storing a reference and receiving a bandwidth shaped upload of an asset related to the reference;
• receiving a request from a PORT, which includes identification information of the PORT authenticating the PORT, comprising one or more of the steps:
• responding to the PORT request with a challenge response and receiving a subsequent request from the PORT with the appropriate response,
• and validating the PORT identification information against known good PORTs;
• responding to the PORT request with a nonce to use for authenticated access and an IP address to use for camera server transactions;
• receiving a request from a valid server for the active server to use to rendezvous with a specific PORT,
• responding to the request with identification information for the specific camera server the PORT is associated with, and
• responding with an error response if the PORT is not valid.

An event recordation system with quantifiably provable provenance apparatus comprising

• a network attached event recordation server comprising:
• a decryption circuit,
• means for receiving and storing a reference,
• means for receiving and storing an asset,
• means for validating an asset traceably to a certain network attached event recordation client comprising
• an encryption circuit,
• a event determination policy,
• an event recognition circuit, the recordation client having
• means for digitally signing an asset documenting the time and locus of an event recognition, and
• means for summarizing an asset into a compact reference.

A public network attached event recordation asset server apparatus comprising

• an event recordation server,
• analysis server,
• storage manager circuit,
• a storage server,
• a network interface coupled to at least one event recordation client apparatus
• wherein said event recordation server responds to a client initiated session to provide status, transmit references and assets, and obtain commands and
• wherein said storage manager circuit maintains location information for every asset among three classes:
• in transit between the recordation client and the server, stored at the storage server, or stored at the event recordation client.

A method for operating a public network attached event recordation asset server comprising the processes:

• receiving a client initiated protocol to establish connectivity,
• receiving a client initiated protocol to transmit a reference to an event,
• receiving a client initiated protocol to transmit an asset,
• storing a reference,
• receiving an authenticated authorized analysis client request for an asset,
• resolving an asset from storage if possible,
• locating an asset by identifying a certain event recordation server,
• operating an event recordation server, and delivering the asset to the authorized authenticated analysis client.

An event server apparatus comprising:

• a event recordation server circuit
• to receive a reference from a event recordation client,
• to receive status from and transmit commands to each event recordation client,
• to receive and store assets from a event recordation client according to an bandwidth shaping policy for incremental fulfillment or according to a demand for elaboration, a command server, to retrieve assets from an event recordation client,
• a storage manager circuit,
• to maintain storage location of assets for every event, and
• to retrieve assets from storage server, and
• an analysis server to determine which references are of interest.

A method for operating a system,

• the system comprising,
• a plurality of analysis client apparatus coupled to an analysis server apparatus by a network,
• the analysis server apparatus coupled to a storage server apparatus, and
• the storage server apparatus,
• the method comprising the following processes:
• providing access to assets which may be in any one of a plurality of states,
• determining a location for an asset currently stored,
• directing a request to retrieve an asset from a storage location, and
• fetching assets and storing them in high volume reliable storage.