A smart monitoring and evidence storage system with underlying hardware-encrypted signature and real-time compliance assessment.

Abstract

This new invention provides a smart monitoring and evidence storage system with underlying hardware encryption and signature capabilities, and real-time compliance assessment. The system includes an image sensing module, an environmental feature acquisition unit (including an environmental physical sensing unit), an edge computing processing unit, a hardware-isolated security module, irreversible computational packaging circuitry, and a non-volatile storage unit. The modules are connected point-to-point via secure buses, allowing raw image data and environmental factor data to be imported into the security module before entering the system's main memory. This completes irreversible hash operations and private key digital signatures, forming a digital evidence package with hardware-level anti-counterfeiting features. This invention eliminates the software-level tampering window and ensures that spatiotemporal metadata is independent of the operating system, making it suitable for applications requiring high-fidelity evidence storage, such as building inspections, environmental audits, and judicial evidence collection.

Claims

1. A smart monitoring and evidence storage system with underlying hardware encryption signature and real-time compliance judgment, comprising: an image sensing module (110) for capturing raw image data; an environmental feature extraction unit (120) including a global navigation satellite system receiver (121) and / or an independent hardware real-time clock (122) for acquiring environmental spatiotemporal metadata independent of the operating system; an edge computing processing unit (130) electrically connected to the image sensing module (110), with a pre-trained AI model (131) built in, for performing real-time compliance judgment on the raw image data and generating a compliance label (132); and a hardware isolation security module (140) having an encryption processor (141) and a key storage area (142) for storing a device-unique private key. An irreversible operational package circuit (150) is physically coupled between the image sensing module (110), the environmental feature acquisition unit (120), the edge processing unit (130), and the hardware isolation security module (140); a security bus (170) has point-to-point physical path characteristics to directly guide the raw image data from the image sensing module (110) to the data input terminal of the hardware isolation security module (140), bypassing the public memory space controlled by the main system CPU, so that the raw image data is imported into the secure area before entering the main system memory; and a non-volatile storage unit (160); wherein, Before the original image data is written to the non-volatile storage unit (160), the irreversible operation package circuit (150) forces the original image data, the environmental spatiotemporal metadata, the compliance tag (132), and a device unique identifier read by the hardware isolation security module (140) to perform an irreversible hash operation within the hardware isolation security module (140), and then performs a digital signature by the device's unique private key to form a digital evidence package (200) before writing it to the non-volatile storage unit (160), thereby eliminating the possibility of tampering at the operating system level.

2. The system as described in claim 1, wherein, The hardware isolation security module (140) further includes an intrusion detection line (144). If the device casing is disassembled without authorization, causing the circuit to break, the intrusion detection line (144) triggers the hardware isolation security module (140) to start a self-destruct mechanism or lock the device's unique private key to prevent the internal key from being leaked.

3. The system as described in claim 1 further includes a power-off buffer circuit (180) whose capacitance is sufficient to supply the power required for the hardware isolation security module (140) to complete the full hash operation, digital signature and write to the non-volatile storage unit (160) of the last piece of original image data; and after the system restarts, an irreversible serial number indicating an abnormal interruption is automatically generated in the digital evidence packet sequence to indicate the abnormal interruption event after the system restarts.

4. The system as described in claim 1, wherein, The hardware isolation security module (140) further includes an irreversible serial number counter (143). Each time a digital evidence package (200) is generated, the irreversible serial number counter (143) automatically increments by an irreversible serial number and includes the serial number in the irreversible hash operation range to ensure the continuity of the digital evidence package sequence in the offline environment and to facilitate the identification of abnormal interruption, deletion or replacement of the digital evidence package sequence.

5. The system as described in claim 1, wherein, When performing the irreversible hash operation, the irreversible operation package circuit (150) further includes the hash value of one of the pre-trained AI models (131) currently performing compliance determination in the hash operation range, in order to identify that the compliance label (132) is generated by a specific AI model version that has not been tampered with.

6. The system as described in claim 1, wherein, It further includes a remote cloud management platform (300) for storing an authorized public key whitelist for each device and performing trust chain management for device identity registration, key rotation management and maintenance records; and a third-party verification terminal (400) for verifying the digital signature and hash value of the digital evidence package (200) through the authorized public key whitelist to determine the validity of the digital evidence package.

7. The system as described in any one of claims 1 to 6, wherein, The device executing the system is selected from smart glasses, fixed image monitors, image devices carried by unmanned aerial vehicles, mobile tablets, industrial sensing and photography devices, or a trusted execution environment (TEE) partitioned within the main processor of a mobile device as the hardware isolation security module (140).

Images