Format-compliant jpeg2000 encryption with combined packet header and packet body protection

ABSTRACT

All proposals for format-compliant encryption schemes for JPEG2000 that have been made to date only encrypt packet body data, but leave packet header data in plaintext. In this paper we show that for providing strict confidentiality, leaving the packet header in plaintext severely compromises the security of these schemes, as discriminative - and for some settings even visual - information can be extracted from the header. We propose a set of format-compliant transformations of the packet header data that confines this information leakage. Furthermore, we discuss to what extent the proposed header protection scheme may be used to increase the performance of partial/selective encryption schemes that, rather than providing full confidentiality, trade off security for a decrease in computational demands.

REFERENCES

• 1: V. Conan, Y. Sadourny, K. Jean-Marie, C. Chan, S. Wee, and J. Apostolopoulos. Study and validation of tools interoperability in JPSEC. In AG. Tescher, editor, Applications of Digital Image Processing XXVIII, volume 5909, page 59090H. SPIE, 2005.
• 2: R. H. Deng, W. S. Di Ma, and Y. Wu. Scalable trusted online dissemination of JPEG2000 images. Multimedia Systems, 11(1):60--67, Nov. 2005.
• 3: A. Descampe, P. Vandergheynst, C. D. Vleeschouwer, and B. Macq. Coarse-to-fine textures retrieval in the JPEG 2000 compressed domain for fast browsing of large image databases. In B. Günsel, A. K. Jain, A. M. Tekalp, and B. Sankur, editors, Proc. Multimedia Content Representation, Classification and Security, MRCS 2006, volume 4105 of Lecture Notes in Computer Science, pages 282--289, Berlin, Heidelberg, New York, Tokyo, Sept. 2006. Springer-Verlag.
• 4: F. Dufaux and T. Ebrahimi. Securing JPEG2000 compressed images. In AG. Tescher, editor, Applications of Digital Image Processing XXVI, volume 5203, pages 397--406. SPIE, 2003.
• 5: R. Grosbois, P. Gerbelot, and T. Ebrahimi. Authentication and access control in the JPEG2000 compressed domain. In A. Tescher, editor, Applications of Digital Image Processing XXIV, volume 4472 of Proceedings of SPIE, pages 95--104, San Diego, CA, USA, July 2001.
• 6: ISO/IEC 15444-1. Information technology - JPEG2000 image coding system, Part 1: Core coding system, Dec. 2000.
• 7: ISO/IEC 15444-4. Information technology - JPEG2000 image coding system, Part 4: Conformance testing, Dec. 2004.
• 8: ISO/IEC 15444-8. Information technology - JPEG2000 image coding system, Part 8: Secure JPEG2000, Apr. 2007.
• 9: H. Kiya, D. Imaizumi, and O. Watanabe. Partial-scrambling of image encoded using JPEG2000 without generating marker codes. In Proceedings of the IEEE International Conference on Image Processing (ICIP'03), volume III, pages 205--208, Barcelona, Spain, Sept. 2003.
• 10: Chuping Liu , Mrinal Mandal, Fast image indexing based on JPEG2000 packet header, Proceedings of the 2001 ACM workshops on Multimedia: multimedia information retrieval, October 05-05, 2001, Ottawa, Ontario, Canada [doi>10.1145/500933.500948]
• 11: B. M. Macq and J. -J. Quisquater. Cryptology for digital TV broadcasting. Proceedings of the IEEE, 83(6):944--957, June 1995.
• 12: Y. Mao and M. Wu. Security evaluation for communication-friendly encryption of multimedia. In Proceedings of the IEEE International Conference on Image Processing (ICIP'04), Singapore, Oct. 2004. IEEE Signal Processing Society.
• 13: R. Norcen and A. Uhl. Selective encryption of the JPEG2000 bitstream. In A. Lioy and D. Mazzocchi, editors, Communications and Multimedia Security. Proceedings of the IFIP TC6/TC11 Sixth Joint Working Conference on Communications and Multimedia Security, CMS '03, volume 2828 of Lecture Notes on Computer Science, pages 194--204, Turin, Italy, Oct. 2003. Springer-Verlag.
• 14: Y. Sadourny and V. Conan. A proposal for supporting selective encryption in JPSEC. IEEE Transactions on Consumer Electronics, 49(4):846--849, Nov. 2003.
• 15: A. Said. Measuring the strength of partial encryption schemes. In Proceedings of the IEEE International Conference on Image Processing (ICIP'05), volume 2, Sept. 2005.
• 16: Thomas Stutz , Andreas Uhl, On Format-Compliant Iterative Encryption of JPEG2000, Proceedings of the Eighth IEEE International Symposium on Multimedia, p.985-990, December 11-13, 2006 [doi>10.1109/ISM.2006.119]
• 17: Ali Tabesh , Ali Bilgin , Karthik Krishnan , Michael W. Marcellin, JPEG2000 and Motion JPEG2000 Content Analysis Using Codestream Length Information, Proceedings of the Data Compression Conference, p.329-337, March 29-31, 2005 [doi>10.1109/DCC.2005.48]
• 18: David S. Taubman , Michael W. Marcellin, JPEG 2000: Image Compression Fundamentals, Standards and Practice, Kluwer Academic Publishers, Norwell, MA, 2001
• 19: S. Wee and J. Apostolopoulos. Secure scalable streaming enabling transcoding without decryption. In Proceedings of the IEEE International Conference on Image Processing (ICIP'01), Thessaloniki, Greece, Oct. 2001.
• 20: S. Wee and J. Apostolopoulos. Secure scalable video streaming for wireless networks. In Proceedings of the 2001 International Conference on Acoustics, Speech and Signal Processing (ICASSP 2001), Salt Lake City, Utah, USA, Apr. 2001. invited paper.
• 21: H. Wu and D. Ma. Efficient and secure encryption schemes for JPEG2000. In Proceedings of the 2004 International Conference on Acoustics, Speech and Signal Processing (ICASSP 2004), pages 869--872, May 2004.
• 22: M. Wu and V. Mao. Communication-friendly encryption of multimedia. In Proceedings of the IEEE Multimedia Signal Processing Workshop, MMSP '02, St. Thomas, Virgin Islands, USA, Dec. 2002.
• 23: Y. Wu and R. H. Deng. Progressive protection of JPEG2000 codestreams. In Proceedings of the IEEE International Conference on Image Processing (ICIP'04), Singapure, Oct. 2004. IEEE Signal Processing Society.

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.4 IMAGE PROCESSING AND COMPUTER VISION
      I.4.2 Compression (Coding)

Additional Classification:
  E. Data
  E.3 DATA ENCRYPTION

General Terms:
Security

Keywords:
JPEG2000, format-compliant encryption, packet body encryption, packet header encryption