Method and system for detection and protection of personal data in autonomous driving

A system for leveraging multiple data-collection entities to protect personal data, the system comprising:

• a first data collection entity including (i) a first image sensor configured to capture first images of a first scene, and (ii) a first processor programmed execute a first classifier to process first image data associated with the first images and partition personal data from non-personal data associated with the first image data;
• and
• a second data collection entity including (i) a second image sensor configured to capture second images of a second scene, and (ii) a second processor programmed execute a second classifier to process second image data associated with the second images and partition personal data from non-personal data associated with the second image data;
• wherein the first processor is programmed to:
• broadcast, to the second data collection entity, a wireless message including a request for the second data collection entity to indicate whether the second processor detected personal data at a particular time specified by the first processor,
• in response to the second data collection entity indicating that no personal data was detected at the particular time, perform a first predefined action, and
• in response to the second data collection entity indicating that personal data was detected at the particular time, perform a second predefined action.

A non-transitory computer-readable medium comprising a plurality of instructions that, when executed by one or more processors of a first data collection entity, cause the one or more processors to perform the following:

• capture image data via an image sensor;
• via a classifier, partition the captured image data into personal data and non-personal data;
• via the classifier, assign a confidence score to the partitioned personal data;
• in response to the confidence score being below a threshold, broadcast a wireless signal including a request for one or more other data collection entities to inform the first data collection entity whether personal data has been detected by the one or more other data collection entities at a particular time designated by the first data collection entity;
• and
• in response to the one or more other data collection entities indicating the presence of personal data at the particular time:
• agree with the one or more other data collection entities on a trusted third party,
• send the image data from the first data collection entity to the trusted third party for partitioning into personal data and non-personal data, and
• receive results of the partitioning from the trusted third party.