# US 7,614,086 B2 · Monitoring apparatus, computer program and network for secure data storage > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,614,086 B2 - Document ID: US7614086B2 - Status: Granted - Kind: B2 - Application number: 10/472,867 - Filed: 2002-03-19 - Published: 2004-08-12 - Granted: 2009-11-03 - Earliest claimed: 2001-03-27 - Assignees: Nederlandse Organisatie voor toegepast-natuurwetenschappelijk onderzoek TNO - Inventors: Boaz Simon Gelbord; Gerrit Roelofsen - Web page: https://patentgrep.com/patent/US7614086B2 ## CPC - G11B 20/00086: {Circuits for prevention of unauthorised reproduction or copying, e.g. piracy (indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00)} - G06T 1/0021: {Image watermarking} - G11B 20/00884: {involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm} - H04N 21/8358: involving watermark {(protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467)} - G11B: INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER (recording measured values in a way that does not require playback through a transducer G01D9/00; recording or playback apparatus using mechanically marked tape, e.g. punched paper tape, or using unit records, e.g. punched or magnetically marked cards G06K; transferring data from one type of record carrier to another G06K1/18; circuits for coupling output of reproducer to radio receiver H04B1/20; gramophone pick-ups or like acoustic electromechanical transducers or circuits therefor H04R) - G06T: IMAGE DATA PROCESSING OR GENERATION, IN GENERAL - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION ## Abstract A monitoring apparatus, a computer program and a network are disclosed for monitoring a representation. The representation comprises a first data string. Subsequently, two or more output strings, based on the first data string, are generated by the monitoring apparatus such that the representative can not be reconstructed from just any of the output strings. The output strings are stored at separate storage locations. Each of the locations has different access rights from the other such that a party, authorized to solely access one such location and retrieve the single output string stored there, is unable to access the other location and retrieve the corresponding output string stored there. Consequently, that party, from just the single output string which it can access and retrieve, is unable to reconstruct the entire representation. ## Claims ### Claim 1 Apparatus for monitoring a representation of an object, said monitoring apparatus comprising: means for converting said representation into a first data string, the first data string containing pixel image data for an entire image of the object; processor means, responsive to the first data string, which generates first and second output strings from which said first data string can be reconstructed such that both said first and second output strings are responsive to data for the entire image and are required to reconstruct the first data string and obtain the representation therefrom; and means for storing said first and second output strings in separate storage locations, each of said storage locations having differing access rights associated therewith each of first and second parties being granted a corresponding right, consistent with the access rights, to respectively access just the first and second memory locations such that neither one of the first and second parties is able to access both of the memory locations and retrieve both of the first and second output strings and reconstruct the first data string; and wherein the processor means, in response to each of the first and second parties individually and respectively accessing the first and second memory locations and collectively retrieving both the first and second output strings there from so as to define first and second accessed output strings, reconstructs the first data string from both the first and second accessed output strings so as to define a reconstructed first data string and generates the representation from the reconstructed first data string. ### Claim 2 (depends on 1) The monitoring apparatus recited in claim 1 wherein the monitoring apparatus is a digital camera. ### Claim 3 (depends on 1) The monitoring apparatus recited in claim 1 wherein the monitoring apparatus is an analog camera, the output of said analog camera is digitized by an analog-digital conversion module so as to produce said first data string. ### Claim 4 (depends on 1) The monitoring apparatus recited in claim 1 further comprising means for combining said first and second output strings with each other and/or with said first data string so as to produce an additional output string. ### Claim 5 (depends on 1) The monitoring apparatus recited in claim 1 further comprising network communication means for transmitting said first and second output strings over a network. ### Claim 6 (depends on 5) The monitoring apparatus recited in claim 5 wherein said storage locations are not part of said monitoring apparatus, and said first and second output strings and/or an additional output string are transmitted over said network communication means to said separate storage locations. ### Claim 7 (depends on 1) The monitoring apparatus recited in claim 1 wherein at least one of the separate storage locations is located at said monitoring apparatus. ### Claim 8 (depends on 1) The monitoring apparatus recited in claim 1 further comprising means to assess access rights of each of the first and second parties requesting retrieval or access to either the first or second output string and/or an additional output string. ### Claim 9 (depends on 1) The monitoring apparatus recited in claim 1 further comprising event triggering means for generating said first and second output strings only if said representation has changed with respect to an earlier version of the representation. ### Claim 10 (depends on 1) The monitoring apparatus recited in claim 1 wherein said generating means generates more than two output strings from the first data string so as to define a group of output strings, and said apparatus further comprises means for selecting various output strings from said group of output strings so as to define selected output strings. ### Claim 11 (depends on 10) The monitoring apparatus recited in claim 10 further comprising means for combining said selected output strings with each other and with said first data string so as to produce an additional output string. ### Claim 12 (depends on 11) The monitoring apparatus recited in claim 11 further comprising means for compressing said first data string, said first and second output strings, the selected output strings and/or said additional output string. ### Claim 13 (depends on 11) The monitoring apparatus recited in claim 11 further comprising means for assigning a watermark string to said first and second output strings, said additional output string and/or a replacement string. ### Claim 14 (depends on 11) The monitoring apparatus recited in claim 11 further comprising means for encrypting said first and second output strings, said additional output string, or the selected output strings before these strings are stored within said separate storage locations. ### Claim 15 (depends on 14) The monitoring apparatus recited in claim 14 wherein said encrypting means uses an encryption key which is a function of identifiers referring to said separate storage locations. ### Claim 16 (depends on 11) The monitoring apparatus recited in claim 11 further comprising means for registering said selected output strings and/or said additional output string. ### Claim 17 (depends on 16) The monitoring apparatus recited in claim 16 wherein said registering means assigns a code to each of said selected output strings and/or said additional output string. ### Claim 18 (depends on 1) The monitoring apparatus recited in claim 1 further comprising means for assigning a watermark string to said first data string. ### Claim 19 (depends on 18) The monitoring apparatus recited in claim 18 wherein said watermark assigning means assigns a watermark string to said first data string and/or said first and second output strings, the watermark having an identifier referring to said monitoring apparatus. ### Claim 20 (depends on 19) The monitoring apparatus recited in claim 19 wherein said identifier comprises a time stamp referring to when said first and second output strings were generated or when said first and second output strings were transmitted to said separate storage locations. ### Claim 21 (depends on 18) The monitoring apparatus recited in claim 18 wherein said watermark string comprises an identifier referring to said separate storage locations. ### Claim 22 A computer readable media comprising computer program instructions stored thereon which, when executed on a computer system that monitors a representation of an object, cause the computer system to: convert said representation into a first data string, the first data string containing pixel image data for an entire image of the object; generate first and second output strings from which said first data string can be reconstructed such that both said first and second output strings are responsive to data for the entire image and are required to reconstruct the first data string and obtain the representation therefrom; store said first and second output strings in separate storage locations, each of said storage locations having differing access rights associated therewith each of first and second parties being granted a corresponding right, consistent with the access rights, to respectively access just the first and second memory locations such that neither one of the first and second parties is able to access both of the memory locations and retrieve both of the first and second output strings and reconstruct the first data string; reconstruct, in response to each of the first and second parties individually and respectively accessing the first and second memory locations and collectively retrieving both the first and second output strings there from so as to define first and second accessed output strings, the first data string from the first and second accessed output strings so as to define a reconstructed first data string; and generate the representation from the reconstructed first data string. ### Claim 23 (depends on 22) The computer readable media recited in claim 22 further comprising additional stored computer program instructions which, when executed, cause the computer to combine said first and second output strings with each other and/or with said first data string in order to produce an additional output string. ### Claim 24 (depends on 22) The computer readable media recited in claim 22 further comprising additional stored computer program instructions which, when executed, cause the computer to generate more than two output strings from the first data string so as to define a group of output strings, and select various output strings from said group of output strings so as to define selected output strings. ### Claim 25 (depends on 24) The computer readable media recited in claim 24 further comprising additional stored computer program instructions which, when executed, cause the computer to combine said selected output strings with each other and first data string to obtain in order to produce an additional output string. ### Claim 26 (depends on 25) The computer readable media recited in claim 25 further comprising additional stored computer program instructions which, when executed, cause the computer to compress said first data string, said first and second output strings, said additional output string and/or said selected output strings. ### Claim 27 (depends on 25) The computer readable media recited in claim 25 further comprising additional stored computer program instructions which, when executed, cause the computer to encrypt said first and second output strings, said additional output string and/or the selected output strings. ### Claim 28 (depends on 25) The computer readable media recited in claim 25 further comprising stored additional computer program instructions which, when executed, cause the computer to assign a watermark to said first data string, said first and second output strings, said additional output string and/or said selected output strings. ### Claim 29 (depends on 28) The computer readable media recited in claim 28 wherein said watermark comprises an identifier referring to monitoring apparatus, a time stamp referring to when said first and second output strings are generated or said first and second output strings are transmitted to said separate storage locations, or an identifier referring to said storage locations. ### Claim 30 A data communication network comprising: monitoring apparatus for monitoring a representation of an object, wherein the monitoring apparatus comprises: means for converting said representation into a first data string, the first data string containing pixel image data for an entire image of the object; processor means, responsive to the first data string, which generates first and second output strings from which said first data string can be reconstructed such that both said first and second output strings are responsive to data for the entire image and are required to reconstruct the first data string and obtain the representation therefrom; and means for storing said first and second output strings in separate storage locations, each of said storage locations having differing access rights associated therewith each of first and second parties being granted a corresponding right, consistent with the access rights, to respectively access just the first and second memory locations such that neither one of the first and second parties is able to access both of the memory locations and retrieve both of the first and second output strings and reconstruct the first data string; and wherein the processor means, in response to each of the first and second parties individually and respectively accessing the first and second memory locations and collectively retrieving both the first and second output strings there from so as to define first and second accessed output strings, reconstructs the first data string from both the first and second accessed output strings so as to define a reconstructed first data string and generates the representation from the reconstructed first data string.