Method for authentication of JPEG image data

• US 7,313,696 B2
• Filed: 07/22/2002
• Issued: 12/25/2007
• Est. Priority Date: 07/22/2002
• Status: Expired due to Fees

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: de Queiroz, Ricardo L
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): LEMMA, SAMSON B
• Application Number:
  US10/200,819
• Publication Number:
  US 20040013268A1
• Time in Patent Office: 1,982 Days
• Field of Search: 380/201, 380/203, 713/168, 713/176
• US Class Current: 713/168
• CPC Class Codes: G06T 9/007 Transform coding, e.g. discrete cosine transform
• CPC Class Codes: H04N 1/32144 embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp
• CPC Class Codes: H04N 1/32272 Encryption or ciphering
• CPC Class Codes: H04N 1/32277 Compression
• CPC Class Codes: H04N 1/32283 Hashing
• CPC Class Codes: H04N 2201/3235 Checking or certification of the authentication information, e.g. by comparison with data stored independently

Abstract

A method enables a recipient of JPEG image data to authenticate the JPEG image data by producing a hashing function from a first section of the JPEG image data. A first integrity checking value is produced from the hashing function produced from the first section of JPEG image data and, from a least significant transmitted bit-plane of a second section of the JPEG image data, an embedded encrypted signature string is extracted and decrypted to generate a second integrity checking value. The first and second integrity checking values are compared and the first section of the JPEG image data is authenticated when the second integrity checking value matches the first integrity checking value.

Claims

1. A method for enabling a recipient of an image file of JPEG image data to authenticate the image file of JPEG image data, the image file of JPEG image data having a first section and a second section, the first section containing a predetermined number of blocks of transformed coefficients and the second section containing a predetermined number of blocks of transformed coefficients, comprising:

(a) producing a hashing function from the first section of the image file of JPEG image data;

(b) producing a first integrity checking value from the hashing function produced from the first section of the image file of JPEG image data;

(c) identifying the second section of the image file of JPEG image data, the second section having an encrypted signature string embedded in a least significant transmitted bit plane block of the second section;

(d) extracting, from the least significant transmitted bit-plane of the second section of the image file of JPEG image data, the embedded encrypted signature string;

(e) decrypting the extracted signature string to recover a second integrity checking value;

(f) comparing the recovered second integrity checking value with the first integrity checking value;

(g) authenticating the first section of the image file of JPEG image data when the recovered second integrity checking value matches the first integrity checking value; and

(h) informing the recipient of the image file of JPEG image data that the image file of JPEG image data is authentic when each section of the image file of JPEG image data has been authenticated by comparing the recovered integrity checking value of each section with the produced integrity checking value of each section.

2. The method as claimed in claim 1, wherein said blocks of transformed coefficients within a section are contiguous.

3. The method as claimed in claim 1, wherein said blocks of transformed coefficients within a section are non-contiguous.

4. The method as claimed in claim 1, further comprising:

(i) producing a hashing function from the second section of the image file of JPEG image data;

(j) producing a second integrity checking value from the hashing function produced from the second section of the image file of JPEG image data;

(k) identifying a third section of the image file of JPEG image data, the third section having an encrypted signature string embedded in a least significant transmitted bit-plane block of the third section;

(l) extracting, from the least significant transmitted bit-plane block of the third section of the image file of JPEG image data, the signature string embedded in the third section;

(m) decrypting the signature string extracted from the third section of the image file of JPEG image data to recover a third integrity checking value;

(n) comparing the recovered third integrity checking value with the produced second integrity checking value; and

(o) authenticating the second section of the image file of JPEG image data when the recovered third integrity checking value matches the produced second integrity checking value.

5. The method as claimed in claim 4, further comprising:

(p) producing a hashing function from a third section of the image file of JPEG image data;

(q) producing a third integrity checking value from the hashing function produced from the third section of the image file of JPEG image data;

(r) identifying a fourth section of the image file of JPEG image data, the fourth section having an encrypted signature string embedded in a least significant transmitted bit-plane block of the fourth section;

(s) extracting, from the least significant transmitted bit-plane block of the fourth section of the image file of JPEG image data, the signature string embedded in the fourth section;

(t) decrypting the signature string extracted from the fourth section of the image file of JPEG image data to recover a fourth integrity checking value;

(u) comparing the recovered fourth integrity checking value with the produced third integrity checking value; and

(v) authenticating the third section of the image file of JPEG image data when the recovered fourth integrity checking value matches the produced third integrity checking value.

6. The method as claimed in claim 1, further comprising:

(i) producing a hashing function from a last section of the image file of JPEG image data;

(j) producing a self integrity checking value from the hashing function produced from the last section of the image file of JPEG image data;

(k) extracting, from a least significant transmitted bit-plane block of the last section of the image file of JPEG image data, an embedded signature string;

(l) decrypting the signature string extracted from the last section of the image file of JPEG image data to produce a recovered integrity checking value;

(m) comparing the recovered integrity checking value with the self integrity checking value; and

(n) authenticating the last section of the image file of JPEG image data when the recovered integrity checking value matches the self integrity checking value.

7. A system for enabling a recipient of an image file of JPEG image data to authenticate the image file of JPEG image data, the image file of JPEG image data having a first section and a second section, the first section containing a predetermined number of blocks of transformed coefficients and the second section containing a predetermined number of blocks of transformed coefficients, comprising:

a processor to produce a hashing function from the first section of the image file of JPEG image data;

said processor producing a first integrity checking value from the hashing function produced from the first section of the image file of JPEG image data;

said processor identifying the second section of the image file of JPEG image data, the second section having an encrypted signature string embedded in a least significant transmitted bit plane block of the second section;

said processor extracting, from the least significant transmitted bit-plane of the second section of the image file of JPEG image data, the embedded encrypted signature string;

said processor decrypting the extracted signature string to recover a second integrity checking value;

said processor comparing the recovered second integrity checking value with the first integrity checking value;

said processor authenticating the first section of the image file of JPEG image data when the recovered second integrity checking value matches the first integrity checking value;

said processor informing the recipient of the image file of JPEG image data that the image file of JPEG image data is authentic when each section of the image file of JPEG image data has been authenticated by comparing the recovered integrity checking value of each section with the produced integrity checking value of each section.

8. The system as claimed in claim 7, wherein the blocks of transformed coefficients within a section are contiguous.

9. The system as claimed in claim 7, wherein the blocks of transformed coefficients within a section are non-contiguous.

10. The system as claimed in claim 7 wherein said processor produces a hashing function from the second section of the image file of JPEG image data;

said processor produces a second integrity checking value from the hashing function produced from the second section of the image file of JPEG image data;

said processor identifies a third section of the image file of JPEG image data, the third section having an encrypted signature string embedded in a least significant transmitted bit-plane block of the third section;

said processor extracts, from the least significant transmitted bit-plane block of the third section of the image file of JPEG image data, the signature string embedded in the third section;

said processor decrypts the signature string extracted from the third section of the image file of JPEG image data to recover a third integrity checking value;

said processor compares the recovered third integrity checking value with the produced second integrity checking value; and

said processor authenticates the second section of the image file of JPEG image data when the recovered third integrity checking value matches the produced second integrity checking value.

11. The system as claimed in claim 10, wherein said processor produces a hashing function from a third section of the image file of JPEG image data;

said processor produces a third integrity checking value from the hashing function produced from the third section of the image file of JPEG image data;

said processor identifies a fourth section of the image file of JPEG image data, the fourth section having an encrypted signature string embedded in a least significant transmitted bit-plane block of the fourth section;

said processor extracts, from the least significant transmitted bit-plane block of the fourth section of the image file of JPEG image data, the signature string embedded in the fourth section;

said processor decrypts the signature string extracted from the fourth section of the image file of JPEG image data to recover a fourth integrity checking value;

said processor compares the recovered fourth integrity checking value with the produced third integrity checking value; and

said processor authenticates the third section of the image file of JPEG image data when the recovered fourth integrity checking value matches the produced third integrity checking value.

12. The method as claimed in claim 7, wherein said processor produces a hashing function from a last section of the image file of JPEG image data;

said processor produces a self integrity checking value from the hashing function produced from the last section of the image file of JPEG image data;

said processor extracts, from a least significant transmitted bit-plane block of the last section of the image file of JPEG image data, an embedded signature string;

said processor decrypts the signature string extracted from the last section of the image file of JPEG image data to produce a recovered integrity checking value;

said processor compares the recovered integrity checking value with the self integrity checking value; and

said processor authenticates the last section of the image file of JPEG image data when the recovered integrity checking value matches the self integrity checking value.