TECHNICAL FIELD

The present disclosure relates generally to home security systems, and in particular to video camera systems configured for monitoring a data sensitive environment.

BACKGROUND

Smart home technology has greatly improved in power and functionality in recent years and can provide an enhanced user experience that can be tailored to meet an individual user's particular needs. For instance, smart lights, smart security systems, smart entertainment systems, environmental control systems (HVAC), and the like, are becoming more and more customizable and integrated as the internet-of-things (IoT) sets a foothold in modern home designs.

Home security cameras, in particular, are more prevalent and provide sophisticated capabilities to help users better secure their home. In some systems, users can have the convenience of remotely viewing and controlling aspects of their security cameras via a laptop, smart phone, or other mobile device. That way, a user can safely investigate unexpected activity at the home, monitor visitors or guests, check for mail deliveries, and the like. However, security cameras, sensors, etc., can be vulnerable to hacking or other cybercrimes, which may give unauthorized individuals access to sensitive images or details about a user's home. For that reason, users typically do not install cameras in sensitive or private areas such as a bedroom or bathroom, or areas where security is paramount (e.g., location of a safe or valuables), despite the fact that activity in these areas may be important to the user. For instance, it can be very important to know when someone is accessing a safe or if vulnerable individuals (e.g., small children or elderly) need assistance.

Thus, home security cameras and smart homes in general have improved much over the last decade, but many limitations and vulnerabilities still exist. Better alternative solutions to these problems are needed.

BRIEF SUMMARY

In certain embodiments, a data-secure system includes one or more processors configured to: receive sensor data corresponding to a physical area; and generate descriptive data based on the sensor data, the descriptive data being different than the sensor data, and the descriptive data corresponding to information about identified objects or activity in the physical area; and an input/output (I/O) port, where the one or more processors are further configured to: prevent the sensor data from being accessible via any external port of the data-secure system, including the I/O port; and allow the descriptive data to be accessible via the I/O port. The data-secure system may further include an I/O choke communicatively coupled between the one or more processors and the I/O port, the I/O choke configured to limit a communication bandwidth of the I/O port. The I/O choke may limit the communication bandwidth to any suitable maximum data rate (e.g., including but not limited to a maximum data rate set between 5 kbps and 100 kbps.). In some aspects, the sensor data can include image data, where the descriptive data does not include the image data. The data-secure system may further include a memory block, controlled by and only accessible by the one or more processors, the memory block configured to store the image data and corresponding image analysis data, where the memory block is inaccessible via any external port of the privacy-secure camera system including the I/O port, and wherein only the one or more processors have read and write access to the memory block.

In some embodiments, the one or more processors can include a machine learning (ML) processor configured to generate the descriptive data, where the data-secure system further includes: an input port; and a second memory block communicatively coupled between input port and the one or more processors, wherein the second memory block is configured to store configuration data received via the input port, the configuration data configured to update the ML processor, and wherein the second memory block is only writeable via the input port and only readable via the one or more processors. In some implementations, the data-secure system can further include a data monitoring processor coupled to the I/O port and configured to: detect sensor data passing through the I/O port; and take remedial action in response to detecting the sensor data passing through the I/O port. In some cases, the remedial action may include at least one of: initiating an alert; ceasing all data traffic into and out of the I/O port for a predetermined time; requesting secure authorization; restoring a preset firmware configuration to a trusted environment; or shutting down the privacy-secure camera system. In some aspects, the one or more processors, the I/O port, and the I/O choke may be contained on a single integrated circuit.

Certain embodiments may include a non-transitory computer-program product tangibly embodied in a machine-readable non-transitory storage medium that includes instructions configured to cause one or more processors of a data-secure system to: receive and analyze sensor data corresponding to a physical area; generate descriptive data based on the sensor data that includes information about identified objects or activity in the physical area, wherein the descriptive data is different than the sensor data; receive a request for information corresponding to the physical area; sending the descriptive data to an I/O port in response to receiving the request; and prevent the sensor data from being accessible via any external communication port of the data-secure system, including the I/O port. In some aspects, the preventing the sensor data from being accessible via any external communication port of the data-secure system may include limiting a communication bandwidth of the I/O port via an I/O choke. In some implementations, the I/O choke limits the maximum data rate into and out of the I/O port (e.g., to less than 100 kbps, or other suitable value, as would be appreciated by one of ordinary skill in the art with the benefit of this disclosure). The instructions of the computer-program product can be further configured to cause the one or more processors of the data-secure system to: monitor the I/O port for data traffic containing structured image data or video data; and take a remedial action upon detecting data traffic having structured image data or video data. In some cases, the request can be a user-initiated inquiry about the identified objects or activity in the physical area. The data-secure system may be integrated on a single integrated circuit.

In some embodiments, the data-secure system includes a memory block configured to store the sensor data and descriptive data, wherein the memory block is inaccessible via any externally accessible electrical contact on the integrated circuit including the I/O port. In some aspects, only the one or more processors have read and write access to the memory block. The one or more processors can include a machine learning (ML) processor configured to generate the descriptive data, wherein the data-secure system further includes: an input port; and a second memory block communicatively coupled between input port and the one or more processors, wherein the second memory block is configured to store configuration data received via the input port, the configuration data configured to update the ML processor, wherein the second memory block is only writeable via the input port and only readable via the one or more processors. In certain embodiments, the one or more processors can include a processor configured external to the I/O port, the processor including machine learning capabilities and configured to: analyze data traffic passing through the I/O port; perform data-type classification of the data traffic; and take a remedial action upon detecting data traffic containing data corresponding to an unauthorized data-type classification. The data-type classification can include an image data classification, video data classification, audio data classification, or text-data classification.

This summary is not intended to identify key or essential features of the claimed subject matter, nor is it intended to be used in isolation to determine the scope of the claimed subject matter. The subject matter should be understood by reference to appropriate portions of the entire specification of this disclosure, any or all drawings, and each claim.

The foregoing, together with other features and examples, will be described in more detail below in the following specification, claims, and accompanying drawings.

