Abstract

This disclosure describes a method by which any person present in a space with ambient AI devices, and not only the devices' owner, can ask for everything captured in a recent period to be forgotten, and receive proof that it has been. The request may be spoken, made with a gesture or sent from a phone, and names a period, such as "the last ten minutes". The space's governance hub verifies that the requester was present during the period, then sends a signed erasure order to every admitted device. Each device destroys the encryption keys of the raw buffers covering the period, withdraws events not yet released, and deletes events, inferences and summaries derived from the period, following the lineage of derived records so that nothing built from the forgotten capture survives. Each device returns a signed attestation of what it destroyed. The hub combines them into a receipt for the requester, recorded without the forgotten content. Released records that have already left the space are flagged at their custody location for the same erasure. Forgotten capture may not be recreated from other sources in the same space, and may not be used for training. A request covering a safety event is honoured for everything except the minimum record of the safety event itself.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Share

COinS