Method and apparatus for image authentication

• US 6,532,541 B1
• Filed: 01/22/1999
• Issued: 03/11/2003
• Est. Priority Date: 01/22/1999
• Status: Expired due to Fees

• Current Assignee: National Science Foundation (Government of the United States of America)
• Original Assignee: Trustees Of Columbia University In The City Of New York (Columbia University)
• Inventors: Lin, Ching-Yung, Chang, Shih-Fu
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): Zand, Kambiz
• Application Number:
  US09/235,862
• Time in Patent Office: 1,509 Days
• Field of Search: 713/176, 380/216-217, 382/118, 382/119, 382/116, 382/113, 382/162-167, 382/246, 382/250
• US Class Current: 713/176
• CPC Class Codes: G06T 1/0028 Adaptive watermarking, e.g. Human Visual System [HVS]-based watermarking
• CPC Class Codes: G06T 1/005 Robust watermarking, e.g. average attack or collusion attack resistant
• CPC Class Codes: G06T 2201/0052 Embedding of the watermark in the frequency domain
• CPC Class Codes: G06T 2201/0065 Extraction of an embedded watermark; Reliable detection
• CPC Class Codes: G06T 2201/0081 whereby both original and watermarked images are required at decoder, e.g. destination-based, non-blind, non-oblivious
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
• CPC Class Codes: H04N 2201/3235 Checking or certification of the authentication information, e.g. by comparison with data stored independently
• CPC Class Codes: H04N 2201/3236 Details of authentication information generation

Abstract

A system for authentication of a digital image includes a signature generator for creating a robust digital signature for an original image based on instrument features of the image. An authentication processor extracts a set of invariant features for the original image from the digital signature, generates a corresponding set of invariant features for the present image to be authenticated and compares the two sets of invariant features to determine whether the image has been subjected to malicious manipulation. The invariant features include the polarity and magnitude of the difference between discrete cosine transform coefficients at corresponding coefficient locations in selected image block pairs. The intensity of the original image is also authenticated by comparing a mean value of coefficient of the original image to the mean value of the coefficient of the present image.

Claims

1. A system for authentication of a present digital image, comprising:

a signature generator, said signature generator including;

an image analyzer, said image analyzer receiving an original digital image, parsing the image into image block pairs and generating invariant features of said image based on a relationship between corresponding DCT coefficients in said at least one image block pair, said relationship between corresponding DCT coefficients including the polarity of the difference of discrete cosine transform coefficients of corresponding coefficients locations in said image block pairs and the magnitude of the difference of discrete cosine transform coefficients of corresponding coefficients locations in said image block pairs; and

an encryption processor, said encryption processor encoding the invariant features generated by said image analyzer in accordance with encryption key data to provide an encrypted signature for the original image; and

an authentication processor, said authentication processor receiving a present digital image to be authenticated and an encrypted signature for the original image, said authentication processor including;

a decryption processor, said decryption processor receiving the encrypted signature and decoding the signature in accordance with decryption key data to extract the invariant features of the original image;

means for extracting coefficients of the present image to be authenticated; and

an authentication comparator, said authentication comparator receiving the coefficients of the present image to be authenticated, extracting invariant features of the present image from the coefficients, comparing the invariant features from the original image to those of the present image and providing a signal indicative of an authentication failure if the corresponding features do not substantially match.

2. A system for authentication, as defined by claim 1, wherein said relationship includes the mean value of discrete cosine transform coefficients of image blocks.

3. A system for authentication, as defined by claim 1, wherein the present digital image to be authenticated is in the form of a raw image and said means for extracting invariant features includes a discrete cosine transform processor, said discrete cosine transform processor receiving the raw image and providing discrete cosine transform coefficients representing the raw image to said authentication comparator.

4. A system for authentication, as defined by claim 1, wherein the present digital image to be authenticated is in the form of a JPEG compressed image bit stream and said means for extracting invariant features includes a JPEG decoder providing discrete cosine transform coefficients representing the raw image to said authentication comparator.

5. A signature generator for providing a robust digital signature for an original digital image comprising an image analyzer, said image analyzer receiving the original digital image, parsing the image into image block pairs and generating substantially invariant features of the image, said invariant features corresponding to a relationship between corresponding pixel values in said image block pairs, wherein said relationship is at least partially defined by the polarity of the difference of discrete cosine transform coefficients of corresponding coefficient locations of said at least one image block pairs and the magnitude of the difference of discrete cosine transform coefficients of corresponding coefficient locations of said at least one image block pair.

6. A digital image authenticator, the authenticator receiving data representing a digital image to be authenticated and a digital signature for the original image, the authenticator comprising:

means for generating coefficients from the data representing the image to be authenticated, said means for generating coefficients representing the data representing the image into a plurality of image blocks;

means for extracting invariant features for the original image from the digital signature; and

an authentication comparator, said authentication comparator receiving the coefficients from the generating means, grouping the plurality of image blocks into at least one image block pair and generating invariant features for the image to be authenticated from a relationship between corresponding coefficients which are at least partially defined by the polarity of the difference of discrete cosine coefficients and the magnitude of the difference of discrete cosine transform coefficients of corresponding coefficient locations in the at least one image block pair, said authentication comparator comparing the generated invariant features of the present image to corresponding invariant features from the original image and providing a signal indicative of an authentication failure if the corresponding invariant features do not substantially match.

7. A digital image authenticator, as defined by claim 6, wherein said relationship includes the mean value of discrete cosine transform coefficients in the image block pairs.

8. A digital image authenticator, as defined by claim 6, wherein the data representing the digital image to be authenticated is in the form of a raw image and said means for generating coefficients includes a discrete cosine transform processor, said direct cosine transform processor receiving the raw image and providing discrete cosine transform coefficients representing the raw image to said authentication comparator.

9. A digital image authenticator, as defined by claim 6, wherein the data representing the digital image to be authenticated is in the form of a JPEG compressed image bit stream and said means for extracting coefficients includes a JPEG decoder providing discrete cosine transform coefficients representing the raw image to said authentication comparator.

10. A method for generating an invariant feature for a digital image comprising the steps:

partitioning the image into a plurality of image blocks;

assigning at least one image block pair from said plurality of image blocks;

extracting coefficients for pixels in said at least one image block pair;

determining an invariant relationship between corresponding coefficients of said at least one image block pair, said relationship being at least partially defined by the polarity of the difference and the magnitude of the difference of said corresponding coefficients.

11. A method for authenticating a present image based on a signature generated from invariant features of an original image, comprising the steps:

partitioning the present image into a plurality of image block pairs;

extracting coefficients for the image block pairs;

generating invariant features for the present image to be authenticated from a relationship between corresponding coefficients of at least one image block pair, said relationship being at least partially defined by the magnitude of the difference of said corresponding coefficients;

extracting invariant features for the original image from the signature;

comparing the invariant features of the present image to corresponding invariant features of the original image; and

providing a signal indicative of an authentication failure if the corresponding invariant features do not substantially match.

12. A method for authenticating a present image, as defined by claim 11, wherein said relationship is at least partially defined by the polarity of the difference of said corresponding coefficients.

13. A method for authenticating a present image, as defined by claim 11, further including the steps of:

generating a mean value of the coefficients of the original image and the present image; and

comparing the mean value of the coefficients of the original image to the mean value of the coefficients of the present image, whereby the intensity of the original image is authenticated.