Abstract:
A method and apparatus for protecting sensed content and warning a target of sensing is disclosed. A first transceiver, (e.g., a network server), includes a database which defines at least one zone in which sensing a target is not permitted. A second transceiver, (e.g., a cell phone), senses a target to obtain content and temporarily stores the content in a memory, after being encrypted. The cell phone transmits information to the network server which indicates the location of the cell phone. The network server receives the location information from the cell phone and determines whether the target was sensed in a “Do Not Disturb Zone”. If so, the network server instructs the cell phone to delete the encrypted content from the memory. Otherwise, the network server indicates to the cell phone that the temporarily stored content may be decrypted, stored in a permanent memory and used as desired.

Description:
[0001]     This application claims priority from U.S. Provisional Patent Application No. 60/633,527 filed Dec. 6, 2004, which is incorporated by reference as if fully set forth. 
     
    
     FIELD OF INVENTION  
       [0002]     The present invention relates to controlling sensing devices embedded in cell phones. More particularly, the present invention relates to a method and apparatus for alerting a target that it is being sensed and restrict unauthorized sensing of the target by such sensing devices.  
       BACKGROUND  
       [0003]     Miniaturization is allowing sensing functionality to be embedded in many devices that previously could not house such functionality. Examples include cameras, microphones, and/or speakerphones, which were previously stand-alone devices, and are now being embedded within telephones, personal digital assistants (PDAs), and watches. The embedding of these devices has turned the cellular telephone from a simple communication tool to an efficient spy mechanism and violator of the personal rights, dignity and freedom of human beings.  
         [0004]     Currently this function is being implemented by posting signs that disallow the use of these devices in a specific area. Human beings, (e.g., security guards), may be used to physically locate the presence of these devices and prevent their usage. However, it is very difficult for human beings to police the usage of commonly used articles in crowded areas. The size of these devices allows users not to declare the presence of one or hide it in a fashion not detectable by humans.  
         [0005]     There are also existing standalone radio beacon devices that inform devices carrying beacon receivers that the use of the specified devices is prohibited in the vicinity of the beacon. However, the usage of radio beacons has not yet gained immense popularity due to the fact that the beacon reception can be blocked, additional hardware, (not in-line with the cellular hardware roadmap), has to be incorporated into cellular phones to implement such beacons, and can only be used as a “go-no” approach.  
         [0006]     Accordingly, it would be desirable to have a method and apparatus that controls the operation of a camera embedded in a cellular phone, using the existing cellular infrastructure, whereby target is alerted that it is being sensed and unauthorized sensing by such sensing devices is restricted.  
       SUMMARY  
       [0007]     The present invention relates to a method and apparatus for protecting sensed content and warning a target of sensing. A first transceiver, (e.g., a network server), includes a database which defines at least one zone in which sensing a target is not permitted. A second transceiver, (e.g., a cell phone), senses a target to obtain content and temporarily stores the content in a memory, after being encrypted. The cell phone transmits information to the network server which indicates the location of the cell phone. The network server receives the location information from the cell phone and determines whether the target was sensed in a “Do Not Disturb Zone”. If so, the network server instructs the cell phone to delete the encrypted content from the memory. Otherwise, the network server indicates to the cell phone that the temporarily stored content may be decrypted, stored in a permanent memory and used as desired. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0008]     A more detailed understanding of the invention will be understood from the following detailed description, given by way of example, and in conjunction with the accompanying drawings wherein like elements are designated by like numerals and wherein:  
         [0009]      FIG. 1  shows a sensing device transmitting a warning signal through a peer-to-peer network to alert a target that it is being sensed;  
         [0010]      FIG. 2  shows a sensing device transmitting a warning signal via a network server to alert a target that it is being sensed; and  
         [0011]      FIG. 3  shows a wireless communication system including a WTRU and a base station which determines whether a sensing unit in the WTRU which obtains sensed content has violated an established “Electronic Do Not Disturb” zone in accordance with the present invention. 
     
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS  
       [0012]     Hereafter, a wireless transmit/receive unit (WTRU) includes but is not limited to a user equipment, mobile station, fixed or mobile subscriber unit, pager, or any other type of device capable of operating in a wireless environment. When referred to hereafter, a base station includes but is not limited to a Node-B, site controller, access point or any other type of interfacing device in a wireless environment.  
         [0013]     The features of the present invention may be incorporated into an integrated circuit (IC) or be configured in a circuit comprising a multitude of interconnecting components.  
         [0014]     In accordance with one embodiment of the present invention illustrated in  FIGS. 1 and 2 , a network signaling mechanism is used to alert a target that is being sensed, (i.e., audibly and/or optically recorded), by a sensing apparatus  105 . It is assumed that the sensing apparatus  105  is embedded in a WTRU.  
         [0015]     As soon as the sensing apparatus  105  is activated, the WTRU identifies its own location and creates a field of usage (FOU). The creation of the FOU marks the location boundary of the sensing apparatus in terms of position coordinates. The sensing apparatus  105  may include various sensing devices such as a zoom lens  120  for gathering optical information of a target  150 , a microphone  125  for gathering audible information regarding the target  150 , or the like. These various sensing devices  120 ,  125  may be used in determining the FOU.  
         [0016]     The sensing apparatus  105  may analyze the location of the target  150  with the help of the FOU. The sensing apparatus attempts to identify if a communication path is available to the target  150 . If a direct communication path, as shown in  FIG. 1 , is available through some form of local, Ad-hoc, peer-to-peer network, it will try to alert the communicating devices, (e.g., cell phone  110 , pager  115 ), associated with the target  150  by sending an electronic warning signal  130 .  
         [0017]     If a direct communication path is not available, the sensing apparatus  105  sends the FOU information along with the result of analysis, (i.e., location, image, sound), of the target  150  to a network server  205  as shown in  FIG. 2 . The network server  205  attempts to identify the target  150 , which may require the network server  205  having to request information from servers of other operators, personal information databases, or the like.  
         [0018]     If the network server  205  is successful in identifying the target  150 , the network server  205  sends a warning signal  130  to a communication device associated with the target  150 , (e.g., a cell phone  110 , a pager  115 ), to alert the target  150  that is being sensed. If the target  150  is not carrying any communication device, the network server  205  may send the warning signal  130  to other devices associated with the target  150 . If the network server  205  is unable to identify the target  150 , the network server  205  may initiate a procedure for broadcasting a warning signal in the vicinity of the target, (i.e., the FOU).  
         [0019]      FIG. 3  shows a wireless communication system  300  including a WTRU  305 , (i.e., cellular phone), and a base station  310 , (i.e., server), which determines whether a sensing unit in the WTRU  305  which obtains sensed content has violated an established “Do Not Disturb Zone” in accordance with another embodiment of the present invention. The WTRU  325  includes a user interface  315 , a position locator  320 , a sensing unit  325  having a zoom lens  330  and a microphone  335  used to sense a target  340 , a temporary memory  345 , a content encryption/decryption unit  350 , a permanent memory  355 , a processor  360 , a transmitter  365  and a receiver  370 . The WTRU  305  is either permitted to, or prohibited from, accessing information that has been obtained by the sensing unit  325 . The base station  310  includes a receiver  375 , a content decryption unit  380 , a processor  385 , a “Do Not Disturb Zone” database  390  and a transmitter  395 .  
         [0020]     The government has mandated that the location of all cellular phones be pin-pointed to within a specified range of accuracy. Currently, most cellular phones have a position locator similar to the position locator  320  in the WTRU  305  built into them. In accordance with the present invention, a “Do Not Disturb Zone” is setup based on information provided by the position locator  320 .  
         [0021]     A user can define a “Do Not Disturb Zone” via the user interface  315  of the WTRU  305 . Via the user interface  315 , the user can select one or more sensing devices to gather information on the target  340 , such as the zoom lens  330  for recording a single frame, (a picture, such as taken by a camera), or a plurality of picture frames, (i.e., video, such as taken by a video camera), a microphone for recording audio, the position locator  320 , or the like. For example, a user that is concerned about his/her privacy in an area may select sensing devices located in that area, such as a photographic camera used by X and a microphone used by Y. This selection of sensing device allows sensing to be selectively blocked, (e.g., allow recordings by an audio recorder, but not by a video recorder).  
         [0022]     Furthermore, the user may also define, via the user interface  315 , a zone of coverage in various forms to suit the requirement of the moment by providing dimensions. For example, the user can define a zone as a circle around the user with a radius of 10 feet. This textual description, along with the coordinates of the center and dimension of the radius, is sent to the base station  310  for processing and enforcing privacy rules associated with the zone.  
         [0023]     The user may also select a power save criteria to determine how often the WTRU  305  will update its mobility information to the base station  310 . As previously described, the user can describe the zone where the privacy rules defined by the user will be enforced. But as the user is moving, the coordinates (in context of the previous example it is the center of the circle), of the zone might change slowly or fast depending on user mobility. Since this zone is maintained by the base station  310 , the WTRU  305  has to update the base station  310  about the changing coordinates on a regular basis. The updates may be performed in real time if the user is moving fast, or not in real time if the user is moving slowly. These updates might cost battery power. Thus, the frequency of such updates should be limited to conserve power. Alternatively, new coordinates are sent less frequently and a certain amount of approximation may be used at the network side. The base station  310  may predict the next location, depending on the velocity and the direction the user is moving at.  
         [0024]     Once the user defines the “Do Not Disturb Zone”, the WTRU  305  uses the position locator  320  to determine its current location. The WTRU  305  then sends a “Do Not Disturb Zone” request to the base station  310  to be stored in a database  390  using already available standardized mechanisms. For example, the user can create a “Do Not Disturb Zone” by sending an e-mail, short message service (SMS), enhanced messaging service (EMS) or multimedia messaging service (MMS) message, logging onto a website and registering, or any other convenient means of communicating with the base station  310 . The description of the “Do Not Disturb Zone” in terms of coordinates, radius, or the like must be conveyed to the base station  310 .  
         [0025]     As soon as the sensing unit  325  in the WTRU  305  is activated, the WTRU  305  identifies its own location via the position locator  320  and the processor  360  creates FOU information to mark the location boundary in terms of position coordinates. The capabilities of the sensing unit  325 , the zoom lens  330  and the microphone  335  may be used in determining the FOU.  
         [0026]     FOU is different from the “Do Not Disturb Zone”. For example, if a user of a sensing device is trying to sense a target, then FOU is applicable to the user and the “Do Not Disturb Zone” is applicable to the target. The base station  310  receives FOU and “Do Not Disturb Zone” information and either allows or disallows sensing.  
         [0027]     Based on the location coordinates, the sensing unit  325  will describe the area under its operational range, which is known as FOU. The area is described in the form of location coordinates x, y associated with a location at which a target may be sensed up to z feet. This determination may be performed using a focusing mechanism in a camera. Next, the angle of the camera&#39;s view may be determined based on various specifications of the camera&#39;s lens, focusing distance and light conditions. FOU may be configured as a data structure, (i.e., a previously agreed upon XML schema), containing location coordinates, distance, angle, or the like.  
         [0028]     The sensing unit  325 , through the use of the zoom lens  330  and/or the microphone  335 , senses an image and/or records sound of the target  340  and stored the associated content in the temporary memory  345  which stores content that is not authorized for viewing, listening and permanent storage.  
         [0029]     In the WTRU  305 , the processor  360  receives all content obtained by the sensing unit  325  and all position/location information obtained by the position locator  320 . The processor  360  also determines whether a copy of the content should be encrypted by the content encryption/decryption unit  350  prior to being stored in the temporary memory  345 . Once it is determined that content in the temporary memory  345  does not violate the privacy rights of any subscribers of the base station  310 , the content can be decrypted by the content encryption/decryption unit  350  and sent to the processor  360  for storage in the permanent memory  355 . The WTRU  305  may send only the FOU information to the base station  310 , or the WTRU  305  may send the FOU information and an encrypted copy of the content to the base station  310 .  
         [0030]     The receiver  375  in the base station  310  receives and decodes the FOU information, and sends the decoded FOU information to the processor  385 . The processor  385  compares the FOU information with the active list of “Do Not Disturb Zones” in the database  390 .  
         [0031]     If the FOU violates any active “Do Not Disturb Zone”, then the transmitter  395  of the base station  310  sends a command signal, (i.e., a message), to the WTRU  305  indicating that the content is not authorized for use and thus the WTRU  305  must not decrypt and/or permanently store the content of the temporary memory  345  in the permanent memory  355 . The processor  360  then initiates a process of deleting the unauthorized content stored in the temporary memory  345 . If the FOU does not violate any active “Do Not Disturb Zone” listed in the database  390 , the base station  310  sends an authorization signal indicating that content is authorized for use, and thus may be decrypted and stored in the permanent memory  355  for further processing.  
         [0032]     While the content is in the temporary memory  345 , the WTRU  305  may store the content in encrypted form or any other form, which cannot be decoded easily. The temporary memory  345  will also make it difficult for any intruder to access that area and attempt to copy the content.  
         [0033]     The processor  360  in the WTRU  305  and/or the processor  385  in the base station  310  determines how many outstanding content verifications to permit the user of the WTRU  305 . As content is obtained by the sensing unit  325 , the content is first copied in the temporary memory  345 . The WTRU  305  then sends a content verification request to the base station. When the content is in the temporary memory  345 , the WTRU  305  may not permit any more content verification requests to be sent to the base station  310 . Since the requests will form a queue, there will be certain delay in getting a response back from the base station  310 .  
         [0034]     In one scenario, if the temporary memory  345  is accessible by a user, then the WTRU  305  may not allow any additional sensing by the sensing unit  325  to take place until the first content verification request has been responded to by the base station  310 . This is a precautionary measure such that the user of the WTRU  305  is prevented from modifying or copying content residing in the temporary memory  345  until being authorized by the base station  310  to do so.  
         [0035]     In another scenario, when the temporary memory  345  is secured, (i.e., non-removable), and inaccessible to users, the WTRU  305  may allow multiple content to be recorded and stored in a queued format in the temporary memory  345 . Thus, there may be multiple outstanding content pending verifications for which corresponding responses from the base station  310  are expected. This may be useful in areas where no coverage is available and some content has to be recorded. If use of an external and/or removable memory device is desired, the content is encrypted and stored in an internal non-accessible memory device until authorization is received from the base station  310 , after which the content may be copied onto an external removable memory device.  
         [0036]     Removable memory devices may include, for example, a memory stick, a universal serial bus (USB) drive attached to a digital camera, a personal data assistant (PDA) or the like. In this context, the WTRU  305  has a temporary memory  345  and a permanent memory  355 , which may be a removable memory where the content can be stored. As the sensing unit  325  senses content, the content is encrypted by the content encryption/decryption unit  350  and stored in the temporary memory  345  until authorization is received from the base station  310  to use the content as desired. If the base station  310  authorizes use of the content, the content may be decrypted by the content encryption/decryption unit  350  and moved to the permanent memory  355 . If a network connection is not available, the content remains in the temporary memory  345 . Once the base station  310  is available and authorizes use of the content, the content is moved to permanent memory  355  or a memory, (e.g., a removable memory), external to the WTRU  305 .  
         [0037]     The number of outstanding stored contents, (e.g., photographs), is directly dependent on the amount of internal non-accessible storage space available. Since the contents are queued in the temporary memory  345 , the number of verification requests that are outstanding due to reasons like network delay and/or unavailability of the network will depend on the size of the temporary memory  345 . For example, if the temporary memory  345  can store ten different contents, and the user is located in a zone where a network connection does not exist, then after taking ten photographs, the user may be restricted from taking any more photographs using the sensing unit  325 .  
         [0038]     In accordance with another embodiment of the present invention, a “Do Not Disturb Zone” feature may be provided as a paid service provided by a third party provider, whereby both FOU information and encrypted content is sent from the WTRU  305  to the base station  310 , (i.e., a network server). All new subscribers may be required to provide their photo, calendar, or the like to the base station  310  to verify that the content does not violate the privacy rights of any other subscribers of the base station  310 .  
         [0039]     Users wishing to subscribe to the “Do Not Disturb Zone” feature preferably have to register with the service provider. While registering, the users may have to provide their credentials, contact information, access to calendar, or the like, for better service. The users may also provide personal privacy policy information. Different network providers may collaborate among each other by exchanging user credentials and privacy policy if user is visiting a foreign network. With the ability to exchange the user&#39;s privacy policy across networks, the user&#39;s privacy can be better protected. Photographs of the user may also be used to enforce the “Do Not Disturb Zone” feature. In the case of picture or video recording, the network may compare the recorded content against the photograph available to it. Multiple service providers can collaborate to ensure that their users are not violating the privacy rights of any other of their users. In this case, the content may be forwarded to the collaborating service providers for verifying that no rights have been violated.  
         [0040]     For example, a user activates an “Do Not Disturb Zone” feature. An intruder takes his WTRU  305  and starts taking pictures using the sensing unit  325 . As soon the first picture is taken, the WTRU  305  sends the FOU and encrypted content to the base station  310 , which uses the content decryption unit  380  to decrypt the content and uses the processor  385  to compare the content, (i.e., picture), and FOU information, (i.e., location information, angle, or the like), with all entries in the database  390  to determine if there is a match. On finding a match with a privacy entry of the user, the base station  310  will instruct the WTRU  305  to block and destroy the content.  
         [0041]     The database  390  on the network side contains information on users who have subscribed to a “Do Not Disturb Zone” service. For example, the user information may include the zone, privacy policy and content associated with the user. The base station  310  uses FOU information, such as the location and range, to search the database  390  for any active “Do Not Disturb Zone” in the same area. With an active “Do Not Disturb Zone”, there may be user provided photographs which the base station  310  may use to verify, based on the encrypted content, that the FOU is interfering with a “Do Not Disturb Zone,” and thus use of the encrypted content is not authorized.  
         [0042]     Although the features and elements of the present invention are described in the preferred embodiments in particular combinations, each feature or element can be used alone without the other features and elements of the preferred embodiments or in various combinations with or without other features and elements of the present invention.