Abstract:This paper presents a new semi-fragile framework aiming at extending public key signature scheme from message level to content level. The content signing procedure includes signature generation and watermark embedding while the content authentication procedure includes watermark extraction and signature verification. One main unique contribution is the novel use of error correction coding (ECC) to address the incidental distortions caused by some acceptable manipulations such as lossy compression. Another unique feature is integration of PKI security infrastructure and the hashing mechanism to achieve security and short signatures/watermarks. In the signing procedure, block-based invariant features are extracted from the image content and then encoded by ECC to obtain their corresponding parity check bits (PCB). All PCBs are then embedded back into image as watermarks for the purpose of authentication and locating content alteration. In addition, codewords are concatenated, hashed and finally signed by content owner's private key to generate a global cryptographic signature. The authentication procedure is the inverse procedure of signing except using content owner's public key for signature verification. After describing the proposed algorithm in details, an implementation example is given by combining our system with invariant features explored in earlier systems. Keywords digital signature, PKI, watermarking, image authentication, integrity protection, error correction coding

A software authentication system for information integrity.

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Inter-domain authentication scheme for Pervasive Computing Environments

A software authentication system for the prevention of computer viruses

System Security Mechanism Based on Real-Name Software Authentication

Handling Dynamic Information Release

Distributed Certification Application Via a Trusted Dealer

Software Protection with Encryption and Verification

Implementation of License File Scheme Through Modified Digital Signature Scheme Based on PKI

Public Key Infrastructure based on Authentication of Media Attestments

Digital Anti-Counterfeiting Scheme Based on Symmetric Keys

Authentication scheme for distributed industrial control system terminals

A PKI-Based Authentication Approach for E-Business Systems

An Implementation Suite for a Hybrid Public Key Infrastructure

Digital Certificate Based Identity Authentication in Remote Login Linux System

ID-based Cryptographic Schemes for User Identification, Digital Signature, and Key Distribution

Identity-based Authentication and Key Agreement Protocol in System of Separating Smart Card and Set-top Box

A new semi-fragile image authentication framework combining ECC and PKI infrastructures

Attribute-based key-insulated signature and its applications

A key distributed storage mechanism based on user credibility

KeyAuth: Bringing Public-key Authentication to the Masses