A flexible and scalable authentication scheme for JPEG2000 image codestreams

ABSTRACT

JPEG2000 is an emerging standard for still image compression and is becoming the solution of choice for many digital imaging fields and applications. An important aspect of JPEG2000 is its "compress once, decompress many ways" property [1], i. e., it allows extraction of various sub-images (e.g., images with various resolutions, pixel fidelities, tiles and components) all from a single compressed image codestream. In this paper, we present a flexible and scalable authentication scheme for JPEG2000 images based on the Merkle hash tree and digital signature. Our scheme is fully compatible with JPEG2000 and possesses a "sign once, verify many ways" property. That is, it allows users to verify the authenticity and integrity of different sub-images extracted from a single compressed codestream protected with a single digital signature.

REFERENCES

• 1: David S. Taubman , Michael W. Marcellin, JPEG 2000: Image Compression Fundamentals, Standards and Practice, Kluwer Academic Publishers, Norwell, MA, 2001
• 2: overview M. Rabbani and R. Joshi, "An overview of the JPEG 2000 still image compression standard", Signal Processing: Image Communication, Vol. 17, No. 1, pp. 3--48, Elsevier, 2002.
• 3: draft "Information technology - JPEG 2000 image coding system", ISO/IEC International Standard 15444-1, ITU Recommendation T.800, 2000
• 4: B. Schneier, Applied Cryptography, John Wiley & Sons, 1996.
• 5: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 6: domain R. Grosbois, P. Gerbelot and T. Ebrahimi, "Authentication and Access Control in the JPEG 2000 Compressed Domain", Proc. of the SPIE 46th Annual Meeting, Applications of Digital Image Processing XXIV, Vol. 4472, pp. 95--104, 2001.
• 7: C. Y. Lin and S. F. Chang, "Semi-Fragile Watermarking for Authenticating JPEG Visual Content", SPIE Security and Watermarking of Multimedia Contents II EI '00, 2000.
• 8: Q. Sun and S. F. Chang, "Semi-fragile image authentication using generic wavelet domain features and ECC", Proc. of ICIP 2002, 2002.
• 9: Q. Sun, S. F. Chang, M. Kurato and M. Suto, "A quantative semi-fragile JPEG2000 image authentication system", Proc. of ICIP 2002, 2002.
• 10: Ralph C. Merkle, A certified digital signature, Proceedings on Advances in cryptology, p.218-238, July 1989, Santa Barbara, California, United States
• 11: P. Devanbu , M. Gertz , A. Kwong , C. Martel , G. Nuckolls , S. G. Stubblebine, Flexible authentication of XML documents, Proceedings of the 8th ACM conference on Computer and Communications Security, November 05-08, 2001, Philadelphia, PA, USA [doi>10.1145/501983.502003]
• 12: M. T. Goodrich, R. Tamassia, and A. Schwerin, "Implementation of an Authenticated Dictionary with Skip Lists and Commutative Hashing", Proc. of DISCEX II'01, Vol. 2, pp. 1068--1083, 2001.
• 13: M. Naor and K. Nissim. "Certificate Revocation and Certificate Update", Proc. of the 7th USENIX Security Symposium, pp. 217--230, 1999.
• 14: Premkumar T. Devanbu , Michael Gertz , Charles U. Martel , Stuart G. Stubblebine, Authentic Third-party Data Publication, Proceedings of the IFIP TC11/ WG11.3 Fourteenth Annual Working Conference on Database Security: Data and Application Security, Development and Directions, p.101-112, August 21-23, 2000
• 15: R. Rivest, "The MD5 Message Digest Algorithm", RFC 1321, 1992
• 16: National Institure of Standards and Technology, "Secure Hash Standard (SHS)", FIPS Publication 180-1, 1995.
• 17: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• 18: National Institure of Standards and Technology, "Proposed Federal Information Processing Standard for Digital Signature Standard (DSS)", Federal Register, Vol. 56, No. 169, pp. 42980--42982, 1991.
• 19: R. Housley, W. Ford, W. Polk and D. Solo, "Internet X.509 Public Key Infrastructure Certificate and CRL Profile", RFC 2459, 1999.
• 20: http://www.eskimo.com/~weidai/benchmarks.html.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Intellectual property

Additional Classification:
  I. Computing Methodologies
  I.3 COMPUTER GRAPHICS
      I.3.8 Applications

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Security

General Terms:
Security

Keywords:
JPEG2000, authentication, data integrity, digital signature, image compression, merkle hash tree, message digest, one-way hash function