Sony camera feature hopes to make digital images immune to secret manipulation
(2022/08/15)
- Reference: 1660594872
- News link: https://www.theregister.co.uk/2022/08/15/sony_launches_forgeryproof_incamera_digital/
- Source link:
Sony has announced a new camera feature that the electronics goliath claims will make digital images immune to secret manipulation and forgery.
Called [1]in-camera signing mode , the functionality cryptographically signs every image an equipped camera captures. Any subsequent pixel modification or tampering with the image will result in a picture that no longer matches its digital signature, Sony said, which will make manipulation more easily detectable.
This, we reckon, has a chance of working as long as the signing process is secure and cannot be subverted, and that there is a way for folks to easily check whether the digital signature of the snap is still valid. And to be clear: it won't stop material being altered, it just flags up that data has (or has not) been changed, from the signature.
[2]
Sony said the feature was developed as a response to "widespread issues with unauthorized editing and misconduct around digital photo data," and noted that it designed in-camera signing for corporate users concerned about images being misused.
[3]
[4]
As to use cases, Sony said passports and ID photo verification are a particularly valuable niche for the service, as is "tackling image manipulation in the media, medical and law enforcement fields." It also pointed out use in the insurance and construction sectors as a method of avoiding fraud.
Sony in-camera signing is only available on the [5]Sony Alpha 7 IV , a professional-level photo/video camera with interchangeable lenses that starts at $2,500 for just the body – no lens included. Enabling in-camera signing also requires receipt of a license that will be available for business users, Sony said.
[6]
The company said it planned to expand to other models in the future, and is also examining how it can expand in-camera signing to other industries "to further support enhanced security."
While Sony didn't mention availability for the feature in its press release, a spokesperson told The Register that Alpha 7 IV cameras in the EU, UK, US, Canada, Norway, Switzerland, Bosnia and Herzegovina, Macedonia, Moldova, Montenegro, Serbia, and Turkey will get support for the feature.
Standards
In 2019, Adobe launched its Content Authenticity Initiative (CAI), which also aims to track the legitimacy of digital images, drive work on features. Two years later, Adobe, Arm, Intel, and Microsoft founded the technical standards body C2PA, which is aimed at providing the documentation and end-to-end open technical standards. Sony [7]joined in March this year.
[8]In 2020 , Adobe added an [9]attribution tool to Photoshop that records every change made to an image into its metadata, along with the name of the person making said changes. That data can be attached to an exported image in a form Adobe calls Content Credentials, which can be used "as a tamper-evident attribution and history data."
[10]Adobe lowers 2022 forecast, blames Ukraine war, strong dollar
[11]Adobe apologizes for repeated outages of its Creative Cloud video collaboration service
[12]Adobe updates Creative Cloud: Pushes out Illustrator for iPad and full sky replacement in Photoshop
[13]Ever wondered where the 'cloud' was in Adobe Creative Cloud? Here it is in beta form
There's a catch here: Photoshop users simply [14]don't have to enable Adobe's history tracking, and the image leaves the image-editing app with just as little tracked history as it presumably had when it went in.
With Sony's digital signing happening in the camera, this cryptographic protection would presumably follow an image everywhere it goes and make manipulation traceable – provided the picture doesn't get stripped of its digital signature, edited, and somehow signed again. It seems quite a fragile process, in engineering terms.
The Japanese titan didn't provide specifics for how its digital signatures are checked for tampering, and didn't immediately respond to questions asking for clarification on the feature.
[15]
The CAI, which Adobe launched [16]along with a number of tech partners including Nvidia, Microsoft, and Twitter; news partners including the Associated Press, New York Times, and Getty Images; and camera makers including Nikon and Leika, is how Adobe plans to work against digital tampering.
According to the CAI, cryptographic asset hashing happens when images are created through its process too. Edits made to the digital image, original source photos used for composites, and other data can be searched using the CAI's [17]Verify website , which is currently in beta.
"We're creating a secure end-to-end system for digital content provenance through open-source development, cross-industry collaboration, and interoperability of tools," the CAI said. ®
Get our [18]Tech Resources
[1] https://www.sony.eu/presscentre/news/sony-unlocks-in-camera-forgery-proof-technology
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://electronics.sony.com/imaging/interchangeable-lens-cameras/all-interchangeable-lens-cameras/p/ilce7m4-b
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://petapixel.com/2022/03/17/sony-has-joined-the-standards-body-dedicated-to-content-authenticity/
[8] https://www.theregister.com/2020/10/20/adobe_updates_creative_cloud_with/
[9] https://helpx.adobe.com/photoshop/using/content-credentials.html
[10] https://www.theregister.com/2022/06/17/adobe_share_price_slides/
[11] https://www.theregister.com/2022/06/15/frame_io_outages_adobe_apology/
[12] https://www.theregister.com/2020/10/20/adobe_updates_creative_cloud_with/
[13] https://www.theregister.com/2021/10/26/abobe_creative_cloud_betas/
[14] https://www.theregister.com/2021/10/26/abobe_creative_cloud_betas/
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://contentauthenticity.org/our-members
[17] https://verify.contentauthenticity.org/
[18] https://whitepapers.theregister.com/
Called [1]in-camera signing mode , the functionality cryptographically signs every image an equipped camera captures. Any subsequent pixel modification or tampering with the image will result in a picture that no longer matches its digital signature, Sony said, which will make manipulation more easily detectable.
This, we reckon, has a chance of working as long as the signing process is secure and cannot be subverted, and that there is a way for folks to easily check whether the digital signature of the snap is still valid. And to be clear: it won't stop material being altered, it just flags up that data has (or has not) been changed, from the signature.
[2]
Sony said the feature was developed as a response to "widespread issues with unauthorized editing and misconduct around digital photo data," and noted that it designed in-camera signing for corporate users concerned about images being misused.
[3]
[4]
As to use cases, Sony said passports and ID photo verification are a particularly valuable niche for the service, as is "tackling image manipulation in the media, medical and law enforcement fields." It also pointed out use in the insurance and construction sectors as a method of avoiding fraud.
Sony in-camera signing is only available on the [5]Sony Alpha 7 IV , a professional-level photo/video camera with interchangeable lenses that starts at $2,500 for just the body – no lens included. Enabling in-camera signing also requires receipt of a license that will be available for business users, Sony said.
[6]
The company said it planned to expand to other models in the future, and is also examining how it can expand in-camera signing to other industries "to further support enhanced security."
While Sony didn't mention availability for the feature in its press release, a spokesperson told The Register that Alpha 7 IV cameras in the EU, UK, US, Canada, Norway, Switzerland, Bosnia and Herzegovina, Macedonia, Moldova, Montenegro, Serbia, and Turkey will get support for the feature.
Standards
In 2019, Adobe launched its Content Authenticity Initiative (CAI), which also aims to track the legitimacy of digital images, drive work on features. Two years later, Adobe, Arm, Intel, and Microsoft founded the technical standards body C2PA, which is aimed at providing the documentation and end-to-end open technical standards. Sony [7]joined in March this year.
[8]In 2020 , Adobe added an [9]attribution tool to Photoshop that records every change made to an image into its metadata, along with the name of the person making said changes. That data can be attached to an exported image in a form Adobe calls Content Credentials, which can be used "as a tamper-evident attribution and history data."
[10]Adobe lowers 2022 forecast, blames Ukraine war, strong dollar
[11]Adobe apologizes for repeated outages of its Creative Cloud video collaboration service
[12]Adobe updates Creative Cloud: Pushes out Illustrator for iPad and full sky replacement in Photoshop
[13]Ever wondered where the 'cloud' was in Adobe Creative Cloud? Here it is in beta form
There's a catch here: Photoshop users simply [14]don't have to enable Adobe's history tracking, and the image leaves the image-editing app with just as little tracked history as it presumably had when it went in.
With Sony's digital signing happening in the camera, this cryptographic protection would presumably follow an image everywhere it goes and make manipulation traceable – provided the picture doesn't get stripped of its digital signature, edited, and somehow signed again. It seems quite a fragile process, in engineering terms.
The Japanese titan didn't provide specifics for how its digital signatures are checked for tampering, and didn't immediately respond to questions asking for clarification on the feature.
[15]
The CAI, which Adobe launched [16]along with a number of tech partners including Nvidia, Microsoft, and Twitter; news partners including the Associated Press, New York Times, and Getty Images; and camera makers including Nikon and Leika, is how Adobe plans to work against digital tampering.
According to the CAI, cryptographic asset hashing happens when images are created through its process too. Edits made to the digital image, original source photos used for composites, and other data can be searched using the CAI's [17]Verify website , which is currently in beta.
"We're creating a secure end-to-end system for digital content provenance through open-source development, cross-industry collaboration, and interoperability of tools," the CAI said. ®
Get our [18]Tech Resources
[1] https://www.sony.eu/presscentre/news/sony-unlocks-in-camera-forgery-proof-technology
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://electronics.sony.com/imaging/interchangeable-lens-cameras/all-interchangeable-lens-cameras/p/ilce7m4-b
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://petapixel.com/2022/03/17/sony-has-joined-the-standards-body-dedicated-to-content-authenticity/
[8] https://www.theregister.com/2020/10/20/adobe_updates_creative_cloud_with/
[9] https://helpx.adobe.com/photoshop/using/content-credentials.html
[10] https://www.theregister.com/2022/06/17/adobe_share_price_slides/
[11] https://www.theregister.com/2022/06/15/frame_io_outages_adobe_apology/
[12] https://www.theregister.com/2020/10/20/adobe_updates_creative_cloud_with/
[13] https://www.theregister.com/2021/10/26/abobe_creative_cloud_betas/
[14] https://www.theregister.com/2021/10/26/abobe_creative_cloud_betas/
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YvrCEs39oenbQ5QKIjvnnAAAAA0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://contentauthenticity.org/our-members
[17] https://verify.contentauthenticity.org/
[18] https://whitepapers.theregister.com/
all photographs are manipulated
Cederic
You can't convert from RAW to (print or web format of choice) without pixel level manipulation. I guess this can validate that a source image exists that contains content seen in the eventual image, but the image being shared will invariably be marked as 'manipulated'.
E.g. my passport photograph is not as it came out of the camera - I cropped it, converted it to JPG, resized it so it would be within required file size. It's still recognisably the photograph I took but it's certainly not the same photo that came out of the camera.
Re: all photographs are manipulated
Giles C
Got to agree, I produce a club newsletter the pictures from the camera are in raw format, they are then tweaked for exposure, cropped, corrected etc before being exported as a jpeg and then imported to the newsletter for printing.
So they don’t end up anything like the original pictures the camera took as they are 30mega pixel files which are about 6x7cm on the page typically.
Yes you could argue I don’t need them that big but it helps when editing, and the larger the source file the better the smaller picture.
My first thought was that this was going to use Steganography to hold a digital certificate actually in the image. I can't really see how it would work otherwise as anything added to the file could presumably be stripped. It's actually a really cool idea and I can see it taking off to being implemented in other products if they licensed it. Manipulation of images is a big worry in this day and age, you simply cannot know if you can trust one.