Abstract: A system configured to improve encryption architecture for camera video data. By using an unbalanced binary tree architecture, the system enables group encryption that prioritizes a constrained device (e.g., embedded camera device), thereby reducing an amount of processing required for the constrained device to encrypt video data. For example, placing the constrained device near the root of the unbalanced binary tree offloads processing from the constrained device to other group members. At each device operating as a member of the group, a privacy enforcement policy operates to authorize/authenticate messages, using time-sensitive encryption keys that enable refined control over decrypted content. In some examples, the architecture can enable end-to-end encryption by removing any cloud services from the group. Alternatively, the architecture can include a cloud service with high or low privileges, enabling refined control over decrypted content while providing additional functionality.