Photograhic system with selected area image authentication

• US 5,898,779 A
• Filed: 04/14/1997
• Issued: 04/27/1999
• Est. Priority Date: 04/14/1997
• Status: Expired due to Term

• Current Assignee: Monument Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Eastman Kodak Company
• Inventors: Rabbani, Majid, Squilla, John R., Moghadam, Omid A.
• Primary Examiner(s): Cain, David
• Application Number:
  US08/837,186
• Time in Patent Office: 743 Days
• Field of Search: 380/23, 380/7, 380/4, 380/5, 380/51
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 2101/00 Still video cameras
• CPC Class Codes: H04N 2201/3225 of data relating to an image, a page or a document
• CPC Class Codes: H04N 2201/3236 Details of authentication information generation
• CPC Class Codes: H04N 2201/325 Modified version of the image, e.g. part of the image, image reduced in size or resolution, thumbnail or screennail
• CPC Class Codes: H04N 2201/3274 Storage or retrieval of prestored additional information
• CPC Class Codes: H04N 2201/3277 The additional information being stored in the same storage device as the image data

Abstract

A public key encryption system for authenticating an image includes a digital camera having embedded therein a private key unique to the digital camera. A known public key uniquely based upon the private key is used to decrypt digital data encrypted with the private key to establish authenticity of the image. The encryption system further comprises means for generating one or more patterns each composed of at least one individual area that is visible together with the image of the object, means for designating at least one individual area as an active area of the image suitable for authentication and for generating location data identifying the active area, and means for calculating image hash from image data of the active area of the image using a predetermined hash algorithm. The image hash is then encrypted with the embedded private key, thereby producing a digital signature uniquely associated with the active area of the image, and the image data, the digital signature, and the location data of said active area are stored in a digital record. By confining encryption to this selected region of interest, power requirements for subsequent hashing and encryption are reduced, which is an advantage for portable devices such as a digital camera.

Claims

1. A public key encryption system for authenticating image data of an image processed by a digital device, said digital device having embedded therein a private key unique to said digital device and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said encryption system comprising:

means for designating at least one partial area of the image as an active area of the image suitable for authentication and for generating location data identifying the active area;

means for calculating image hash from image data of said active area of the image using a predetermined hash algorithm;

means for encrypting said image hash with said embedded private key, thereby producing a digital signature uniquely associated with said active area of the image; and

means for storing said image data, said digital signature, and the location data of said active area in a digital record.

2. An encryption system as claimed in claim 1 wherein the digital device is a digital camera that captures an image of a scene.

3. An encryption system as claimed in claim 1 wherein the digital device is a digital scanner that scans an image of a scene.

4. An encryption system as claimed in claim 1 wherein the digital device is a digital computer that processes an image captured by another device.

5. An encryption system as claimed in claim 1 wherein the digital device is a digital computer that processes an image generated by the computer.

6. An encryption system as claimed in claim 1 wherein the image data is contained in an image file that is itself composed of a grid pattern of image file tiles.

7. An encryption system as claimed in claim 6 wherein said active area suitable for authentication is expanded as needed so as to be composed of an integral number of image file tiles.

8. An encryption system as claimed in claim 6 wherein the image file is a FlashPix™

file format.

9. An encryption system as claimed in claim 1 further comprising means for generating one or more patterns each composed of at least one partial area that is visible together with an image of an object.

10. An encryption system as claimed in claim 9 wherein said means for generating one or more patterns comprises means for storing a plurality of patterns and means for selecting one of the patterns.

11. An encryption system as claimed in claim 1 wherein the image data is compressed image data.

12. An encryption system as claimed in claim 1 wherein the location data of said active area is encrypted and stored together with the digital signature.

13. A public key encryption system for authenticating image data from an image of a scene captured by a digital camera, said digital camera having embedded therein a private key unique to said digital camera and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said encryption system comprising:

means for generating one or more patterns each composed of at least one individual area that is visible together with the image of the object;

means for designating said at least one individual area as an active area of the image suitable for authentication and for generating location data identifying the active area;

means for calculating image hash from image data of said active area of the image using a predetermined hash algorithm;

means for encrypting said image hash with said embedded private key, thereby producing a digital signature uniquely associated with said active area of the image; and

means for storing said image data, said digital signature, and the location data of said active area in a digital record.

14. An encryption system as claimed in claim 13 wherein the location data of said active area is encrypted and stored together with the digital signature.

15. An encryption system as claimed in claim 13 wherein the system further includes means for generating photographer'"'"'s information including at least one of the time of the day, one or more exposure settings, the name of the photographer, information about the scene and its content, and other information required by the application.

16. An encryption system as claimed in claim 15 wherein the photographer'"'"'s information is encrypted with the image hash.

17. An encryption system as claimed in claim 13 wherein said means for generating one or more patterns comprises means for storing a plurality of patterns and means for selecting one of the patterns.

18. An encryption system as claimed in claim 13 wherein the image data is compressed image data.

19. An encryption system as claimed in claim 13 wherein the image data is contained in an image file that is itself composed of a grid pattern of image file tiles.

20. An encryption system as claimed in claim 19 wherein said active area suitable for authentication is expanded as needed so as to be composed of an integral number of image file tiles.

21. An encryption system as claimed in claim 19 wherein the image file is a FlashPix™

file format.

22. A digital camera capable of authenticating images of a scene captured by said camera, said digital camera having embedded therein a private key unique to said digital camera and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said digital camera comprising:

an image sensor for capturing image data representative of the scene;

an electronic display for displaying an image from the image data;

means for generating one or more patterns composed of a plurality of individual area that are visible through the electronic display together with the image of the object;

means for designating one or more individual areas as an active area of the image suitable for authentication and for generating location data identifying the active area;

means for calculating image hash from image data of said active area of the image using a predetermined algorithm;

means for encrypting said image hash with said embedded private key, thereby producing a digital signature uniquely associated with said active area of the image; and

means for storing said image data, said digital signature, and the location data of said active area in a digital record.

23. A digital camera as claimed in claim 22 wherein the image data is contained in an image file that is itself composed of a grid pattern of image file tiles.

24. An encryption system as claimed in claim 23 wherein said active area suitable for authentication is expanded as needed so as to be composed of an integral number of image file tiles.

25. An encryption system as claimed in claim 23 wherein the image file is a FlashPix™

file format.

26. A camera as claimed in claim 22 wherein the camera further includes means for generating photographer'"'"'s information including at least one of the time of the day, one or more exposure settings, the name of the photographer, information about the scene and its content, and other information required by the application.

27. A camera as claimed in claim 26 wherein the photographer'"'"'s information is encrypted with the image hash.

28. A digital camera capable of authenticating images of a scene captured by said camera, said digital camera having embedded therein a private key unique to said digital camera and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said digital camera comprising:

an image sensor for capturing image data representative of the scene;

an electronic display for displaying an image from the image data;

means for generating one or more patterns composed of a plurality of individual area that are visible through the electronic display together with the image of the object;

means for designating one or more individual areas as an active area of the image suitable for authentication and for generating location data identifying the active area;

means for compressing the image data;

means for calculating image hash from the compressed image data of said active area of the image using a predetermined algorithm;

means for encrypting said image hash with said embedded private key, thereby producing a digital signature uniquely associated with said active area of the image; and

means for storing said compressed image data, said digital signature, and the location data of said active area in a digital record.

29. A digital camera as claimed in claim 28 wherein said compressing means uses a lossy compression algorithm.

30. A system for reproducing authenticated images captured by a digital camera, said digital camera having embedded therein a private key unique to said digital camera and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said camera hashing image data from a selected area of the image using a predetermined hash algorithm, producing encrypted image hash using the private key and generating an image file including image data, a digital signature comprising the encrypted hash, and location data identifying the selected area of the image used for the digital signature, said system comprising:

means for identifying the selected area used for the digital signature from the image file;

means for selecting image data corresponding to the selected area from the image file;

means for calculating image hash of said selected image data from the selected area of the image file using the predetermined hash algorithm;

means for decrypting said encrypted image hash with said public key, thereby producing a decrypted digital signature uniquely associated with the selected area of the image; and

means for comparing the decrypted image hash with the calculated image hash to determine the authenticity of at least the selected area of the image contained in the image data.

31. A method for authenticating an image of a scene captured by a digital camera, said digital camera having embedded therein a private key unique to said digital camera and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said method comprising the steps of:

generating one or more patterns each composed of at least one individual area that is visible together with the image of the object;

designating said at least one individual area as an active area of the image suitable for authentication and for generating location data identifying the active area;

calculating image hash from image data of said active area of the image using a predetermined hash algorithm;

encrypting said image hash with said embedded private key, thereby producing a digital signature uniquely associated with said active area of the image; and

storing said image data, said digital signature, and the location data of said active area in a digital record.

32. A method as claimed in claim 31 wherein further including the step of generating photographer'"'"'s information including at least one of the time of the day, one or more exposure settings, the name of the photographer, information about the scene and its content, and other information required by the application.

33. A method as claimed in claim 32 wherein the photographer'"'"'s information is encrypted with the image hash.

34. A method as claimed in claim 31 further including the steps of:

identifying the active area used for the digital signature from the image file;

selecting image data corresponding to the active area from the image file;

calculating image hash of said selected image data from the active area of the image file using the predetermined hash algorithm;

decrypting said encrypted image hash with said public key, thereby producing a decrypted digital signature uniquely associated with the active area of the image; and

comparing the decrypted image hash with the calculated image hash to determine the authenticity of at least the active area of the image contained in the image data.

35. A method for authenticating an image of a scene captured by a digital camera, said digital camera compressing image data representative of the scene, said digital camera having embedded therein a private key unique to said digital camera and a known public key so uniquely based upon said private key that digital data encrypted with said private key may be decrypted using said public key, said method comprising the steps of:

generating one or more patterns each composed of at least one individual area that is visible together with the image of the object;

designating said at least one individual area as an active area of the image suitable for authentication and for generating location data identifying the active area;

calculating image hash from compressed image data of said active area of the image using a predetermined hash algorithm;

encrypting said image hash with said embedded private key, thereby producing a digital signature uniquely associated with said active area of the image; and

storing said compressed image data, said digital signature, and the location data of said active area in a digital record.

36. A method as claimed in claim 35 further including the steps of:

identifying the active area used for the digital signature from the image file;

selecting compressed image data corresponding to the active area from the image file;

calculating image hash of said selected compressed image data from the active area of the image file using the predetermined hash algorithm;

decrypting said encrypted image hash with said public key, thereby producing a decrypted digital signature uniquely associated with the active area of the image; and

comparing the decrypted image hash with the calculated image hash to determine the authenticity of at least the active area of the image contained in the image data.