Protection of Intellectual Property Rights related to Images
by Daniel Augot
One of the chalenges of the Aquarelle project is to protect the intellectual
property rights of the images collected as data. The adopted solution is
the technique of watermarking. This technology embeds information into
a given image, in such a way that relevant copyright information may be
retrieved later. This mark must be invisible in order to preserve image
quality and must be impossible to remove. Furthermore, the mark must be
robust enough to image manipulations and image compression, such that an
attacker is not able to destroy it.
The Aquarelle watermarking system was developed in cooperation between
Université catholique de Louvain (UCL) and INRIA. UCL provided
the watermarking and a verifying tool, while INRIA integrated the algorithms
and designed the functional model. The functional model has a key-importance
in the design of a watermarking system.
The model and its supporting software should enable to replace easily
the watermarking algorithm by another one when more robust methodologies
become available.
The algorithm that UCL provides to INRIA is mainly designed to ensure
invisibility of the watermark, and thus can be used to watermark high quality
images (not only vignettes or small images). It is also very resistant
to JPEG compression, random noise, blurring. The algorithm is parameterized
with a long key (80 bits), which is unique for each image to be watermarked.
The counterpart is that this algorithm only writes a single bit of information.
This algorithm was initially exploited through a functional model designed
for the EOLE project, a Belgium initiative to create a national distributed
photo-archive of artworks. In this model, a trusted third party (TTP) is
introduced, which performs watermarking of an image, and also the verification
of the mark. A copyright owner conveys an image to the TTP, who marks it
using a selector which is then stored in a local database, and sends it
back to the owner. For verification, an image may be submitted to the TTP,
who retrieves the relevant key, and checks the mark.
This model can be improved by separating the person who does the watermarking
action and the person who does the verification. In the Aquarelle functional
model, the owner of the image marks the image himself, and verification
is performed by the TTP. This leads to a protocol suite involving the Diffie-Hellman
protocol which enables two parties to share a secret over a communication
which is subject to eavesdropping. This protocol was already presented
in 1977 (before RSA) and is well known to cryptologists. At the practical
level, it offers the same security as RSA. We name this combination of
the Diffie-Hellmann exchange protocol and the watermarking action the DHWM
protocol (Diffie-Hellmann Water-Marking protocol), and provide a light
implementation of it, and of the TTP running the services.
A first advantages of the DHWM protocol is that two image transmissions
are no longer needed, and are replaced by a protocol in which a few hundred
bytes are exchanged between copyright-owners and the TTP. This clearly
improves bandwidth usage. A second advantage is that there is no need for
encrypting images, as would be the case in the EOLE model. This is very
important because of various government regulations on encryption in Europe.
The TTP is implemented as an HTTP server, which provides two main actions.
The first action is launched on request from a copyright-owner to receive
a valid key. The second action is launched on request from any user to
verify the mark on an image. On the copyright-owner side, a simple stand-alone
program is provided, which opens a connection to the TTP, receives the
corresponding key, and performs the watermarking. On the side of a user
requesting a verification, a powerful enough browser is needed, since the
user fills in an HTML form which launches the verifying operation on the
TTP side. There is no need for a special program, applets or plug-ins from
the user side. In this way, the verification service may be accessed by
anyone, although in an industrial installation, this functionality could
be restricted to some categories of users.
Please contact:
Daniel Augot - INRIA
Tel: +33 01 39 63 58 71
E-mail: Daniel.Augot@inria.fr
