SECURE IMAGE PIPELINE

• US 20180089789A1
• Filed: 09/27/2016
• Published: 03/29/2018
• Est. Priority Date: 09/28/2015
• Status: Active Grant

• Current Assignee: EyeVerify, Inc. (Ant Group Co., Ltd.)
• Original Assignee: EyeVerify, Inc. (Ant Group Co., Ltd.)
• Inventors: Derakhshani, Reza R., Teply, Joel, Fields, Zikomo, Hughlett, Casey
• Granted Patent: US 10,931,455 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06T 1/0021 Image watermarking
• CPC Class Codes: G06T 1/0028 Adaptive watermarking, e.g. Human Visual System [HVS]-based watermarking
• CPC Class Codes: G06T 2201/0051 Embedding of the watermark in the spatial domain
• CPC Class Codes: G06T 2201/0064 for copy protection or copy management, e.g. CGMS, copy only once, one-time copy
• CPC Class Codes: G06T 2207/20021 Dividing image into blocks, subimages or windows
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

Computer-implemented methods and systems for image security in computer vision applications are described. A shared secret is stored at an image sensor module and a trusted element. The shared secret includes a device-specific secret value and a definition of a plurality of pixel locations. An image is received at the image sensor module, which generates a watermark based on the secret value and applies the watermark to the image, based on the pixel locations, to create a watermarked image. The watermarked image is received at the trusted element, which validates the watermarked image based on the watermark.

Claims

1. A computer-implemented method comprising:

storing a shared secret at both of an image sensor module in a computing device and a trusted element in the computing device, the shared secret comprising a device-specific secret value and a definition of a plurality of pixel locations;

receiving an image at the image sensor module;

generating, by the image sensor module, a watermark based on the secret value;

applying, by the image sensor module, the watermark to the image to create a watermarked image, the applying being based on the pixel locations;

receiving the watermarked image at the trusted element; and

validating, by the trusted element, the watermarked image based on the watermark.

2. The method of claim 1, wherein generating the watermark comprises calculating a hash value of a global value and the device-specific secret value, wherein the global value comprises a dynamic variable accessible to both the image sensor module and the trusted element.

3. The method of claim 2, wherein the global value comprises at least one of a time and a date.

4. The method of claim 1, wherein applying the watermark to the image comprises replacing one or more bit values of pixels at each pixel location with one or more bit values of the watermark.

5. The method of claim 1, wherein the validating comprises:

extracting the watermark from the watermarked images based on the pixel locations;

calculating a hash value of a global value and a device-specific secret value; and

comparing the hash value with the watermark.

21. The method of claim 1, wherein the trusted element comprises at least one of a secure hardware element and software executing in a secure space.

22. The method of claim 1, wherein the plurality of pixel locations comprises a predefined set of pixel locations.

23. The method of claim 1, wherein the pixel locations are selected based on a value known to the image sensor module and the trusted element.

24. The method of claim 1, further comprising performing, by the image sensor module, one or more alterations on the image prior to the applying of the watermark.

25. The method of claim 1, further comprising performing, by the image sensor module, one or more alterations on the image following the applying of the watermark;

and

wherein the validating comprises compensating for transformed values at the pixel locations resulting from the one or more alterations performed on the image.

6. A system comprising:

at least one memory for storing computer-executable instructions;

at least one processing unit for executing the instructions stored on the memory, wherein execution of the instructions programs the processing unit to perform operations comprising;

storing a shared secret at both of an image sensor module in a computing device and a trusted element in the computing device, the shared secret comprising a device-specific secret value and a definition of a plurality of pixel locations;

receiving an image at the image sensor module;

generating, by the image sensor module, a watermark based on the secret value;

applying, by the image sensor module, the watermark to the image to create a watermarked image, the applying being based on the pixel locations;

receiving the watermarked image at the trusted element; and

validating, by the trusted element, the watermarked image based on the watermark.

7. The system of claim 6, wherein generating the watermark comprises calculating a hash value of a global value and the device-specific secret value, wherein the global value comprises a dynamic variable accessible to both the image sensor module and the trusted element.

8. The system of claim 7, wherein the global value comprises at least one of a time and a date.

9. The system of claim 6, wherein applying the watermark to the image comprises replacing one or more bit values of pixels at each pixel location with one or more bit values of the watermark.

10. The system of claim 6, wherein the validating comprises:

extracting the watermark from the watermarked images based on the pixel locations;

calculating a hash value of a global value and a device-specific secret value; and

comparing the hash value with the watermark.

26. The system of claim 6, wherein the trusted element comprises at least one of a secure hardware element and software executing in a secure space.

27. The system of claim 6, wherein the plurality of pixel locations comprises a predefined set of pixel locations.

28. The system of claim 6, wherein the pixel locations are selected based on a value known to the image sensor module and the trusted element.

29. The system of claim 6, wherein the operations further comprise performing, by the image sensor module, one or more alterations on the image prior to the applying of the watermark.

30. The system of claim 6, wherein the operations further comprise

performing, by the image sensor module, one or more alterations on the image following the applying of the watermark;

and

wherein the validating comprises compensating for transformed values at the pixel locations resulting from the one or more alterations performed on the image.

11-20. -20. (canceled)