Secure compressed imaging

• US 5,907,619 A
• Filed: 12/20/1996
• Issued: 05/25/1999
• Est. Priority Date: 12/20/1996
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Davis, Derek L.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/770,563
• Time in Patent Office: 886 Days
• Field of Search: 380/3, 380/4, 380/5, 380/6, 380/7, 380/8, 380/9, 380/10, 380/23, 380/25, 380/49, 380/50, 380/54, 380/59, 380/29, 380/30
• US Class Current: 713/176
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04N 1/00244 with a server, e.g. an internet server fax-servers or the like for store and forward H04N1/324
• CPC Class Codes: H04N 1/32117 in a separate transmission or protocol signal prior to or subsequent to the image data transmission, e.g. in digital identification signal [DIS], in non standard setup [NSS] or in non standard field [NSF] for mode signalling H04N1/333
• CPC Class Codes: H04N 2201/3235 Checking or certification of the authentication information, e.g. by comparison with data stored independently
• CPC Class Codes: H04N 2201/3236 Details of authentication information generation
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A secure method and apparatus for compressing and digitally signing compressed video data. The apparatus compresses video data and permits signing of the compressed video image in such a way that if only a portion of the video image is successfully transmitted, the digital signature corresponding to that portion can still be verified. An optimization scheme which allows the verification of portions of a successful digital transmission with using only one digital signature is also disclosed.

Claims

1. A method of authenticating a portion of an image, the method comprising the steps of:

compressing an image frame;

dividing the compressed image frame into a plurality of image sections including a first image section and a second image section;

separately digitally signing each of the plurality of image sections to create a digital signature corresponding to each of the plurality of image sections;

transmitting the plurality of image sections and corresponding digital signatures such that at least the first image section and a digital signature corresponding to the first image section are received in their entirety; and

authenticating at least the first image section that is received using the digital signature.

2. The method of claim 1 wherein the compressing step is accomplished using a digital cosine transform.

3. The method of claim 2 wherein the dividing step produces said first image section comprises higher order coefficients of the digital cosine transform used to render a low resolution image.

4. The method of claim 3 wherein the dividing step produces the second image section having coefficients of a lower order than the first image section.

5. The method of claim 1 wherein the compressing step produces the compressed image frame as a Joint Picture Experts Group image.

6. The method of claim 1 further comprising the step of encrypting each of the plurality of image sections prior to the transmitting step.

7. A method for authenticating that an image has been transmitted from a sending device to a receiving device, the method comprising the steps of:

compressing the image to form a compressed image;

dividing the compressed image into a plurality of sections;

individually hashing each of the plurality of sections to produce a corresponding plurality of digest elements;

combining the plurality of digest elements to produce a hash sequence table;

digitally signing the hash sequence table to generate a hash sequence table signature;

transmitting the hash sequence table signature, the hash sequence table and the plurality of sections;

authenticating the hash sequence table using the hash sequence table signature; and

authenticating at least one section of the compressed image by hashing the at least one section to produce a digest and comparing the digest with a corresponding digest element from the hash sequence table.

8. The method of claim 7 wherein said compressing step generates a plurality of discrete cosine transform coefficients.

9. The method of claim 8 wherein the dividing step includes the steps of separating the compressed image into the plurality of sections based on a resolution order of the plurality of discrete cosine transform coefficients.

10. The method of claim 7 wherein the combining step includes the step of concatenating the plurality of digest elements.

11. The method of claim 7 wherein the step of digitally signing the hash sequence table includes the steps of

hashing the hash sequence table to produce a first hash result;

and

encrypting the first hash result using a private key associated with the sending device.

12. The method of claim 11 wherein said step of authenticating said hash sequence table includes the steps of

decrypting the hash sequence table signature to using a public key of the sending device to recover the first hash result;

hashing the hash sequence table to produce a second hash result; and

comparing the first hash result and the second hash result.

13. A system for verifying the authenticity of a compressed digital image, the system comprising:

a communication link;

a sending device coupled to the communication link, the sending device including a secure compressed signing device including (i) compression circuitry to compress a digital image to produce a compressed image, (ii) a partitioning circuit to partition the compressed image into a plurality of image sections, (iii) a hash circuit to hash each of the plurality of image sections and output a plurality of digests to be concatenated together to generate a hash sequence table, and (iv) a signing circuit to digitally sign said hash sequence table to produce a hash sequence table signature; and

a receiving device configured to authenticate at least one image section of the plurality of image sections received in its entirety from the sending device by using the at least one image section, the hash sequence table signature, and the hash sequence table.

14. The system of claim 13 wherein the secure compressed signing device is fully contained within an integrated circuit package.

15. The system of claim 13 wherein said secure compressed signing device encrypts said plurality of image sections before transmission through said communications link.

16. The system of claim 13 wherein said receiving device uses a public key of the secure compressed signing device to verify the authenticity of the hash sequence table through use of the hash sequence table signature.

17. A method of forming a concatenated signed hash sequence table used for verifying the authenticity of a portion of an image frame when transmission of the image frame is interrupted or causes alterations of the image frame, said method comprising the steps of:

partitioning the image frame into a plurality of image sections;

hashing each section in said plurality of image sections to generate a corresponding plurality of hash values;

concatenating the hashed values to produce a hash sequence table; and

signing digitally the hash sequence table to form a hash sequence table signature that can be used to authenticate a portion of the image frame that contains valid data.

18. The method of claim 17 further comprising the step of compressing the image frame prior to partitioning the image frame.

19. The method of claim 18 wherein the compressing step generates a plurality of discrete cosine transform coefficients.

20. The method of claim 19 wherein the partitioning step includes the step of separating the image sections based on ordering of the discrete cosine transform coefficients.