System and method for processing images

Abstract

To provide a system and a method for processing images.SOLUTION: A method includes: a step of receiving an original image having at least one confidential part configured to present understandable confidential information; and a step of processing the at least one confidential part of the original image by a predetermined modification method and generating an output image including the understandable confidential information which is converted into an incomprehensible form. The confidential information in the incomprehensible form is adapted to be restored to an understandable form.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present invention relates to systems and methods for processing images, and more particularly, but not exclusively, to systems and methods for redacting sensitive information on images. [Background technology]

[0002] Image modification (redaction) may be applied to protect sensitive data on images or documents. For example, in security surveillance applications, modification of camera streams may be performed to mask license plates and / or people's faces to protect the identities of these subjects. In some countries, this must be done to comply with local privacy laws. In another common application, image modification may be performed to obscure sensitive images or information. Summary of the Invention [Means for solving the problem]

[0003] According to a first aspect of the present invention, there is provided a method for processing an image, the method comprising the steps of receiving an original image having at least one sensitive portion configured to present intelligible sensitive information, processing the at least one sensitive portion of the original image by a predetermined modification method to generate an output image comprising the intelligible sensitive information converted into an unintelligible form, the intelligible form of the sensitive information being adapted to be restored to an intelligible form.

[0004] In an embodiment of the first aspect, the step of processing the at least one secret portion of the original image comprises scrambling the at least one secret portion such that intelligible secret information becomes unintelligible.

[0005] In an embodiment of the first aspect, the confidential information in an unintelligible form is adapted to be restored to an intelligible form by descrambling at least one confidential portion in the output image.

[0006] In an embodiment of the first aspect, each of the at least one secret portion includes a plurality of partitions, and each of the plurality of partitions includes at least one image pixel.

[0007] In an embodiment of the first aspect, the compartments are combined to form an array.

[0008] In an embodiment of the first aspect, the step of processing the at least one secret portion of the original image further comprises recording a scrambling arrangement of a plurality of image pixels associated with each of the at least one secret portion.

[0009] In an embodiment of the first aspect, the scrambling sequence is embedded in the output image.

[0010] In an embodiment of the first aspect, the scrambling sequence is encrypted.

[0011] In an embodiment of the first aspect, the scrambling sequence is stored in the metadata or header of the output image.

[0012] In an embodiment of the first aspect, the method further includes the step of: the original image comprises a plurality of original images, each of the plurality of original images including comprehensible confidential information, the comprehensible confidential information being presented in at least one confidential portion of each of the original images; and processing the plurality of original images, wherein the plurality of original images are configured to be combined as a stream of image frames.

[0013] In an embodiment of the first aspect, the step of processing at least one secret portion of the original image comprises scrambling at least one secret portion on different original images with different scrambling sequences.

[0014] In an embodiment of the first aspect, the method further comprises encrypting a scrambling sequence associated with each of the image frames using a plurality of unique encryption keys.

[0015] In an embodiment of the first aspect, the method further comprises identifying at least one confidential portion in the original image.

[0016] In an embodiment of the first aspect, the comprehensible sensitive information comprises an identification feature of the subject.

[0017] According to a second aspect of the present invention, there is provided a method for recovering an image processed by the method of the first aspect, comprising the steps of retrieving a scrambling sequence of the plurality of image pixels associated with each of at least one secret portion, and descrambling the at least one secret portion in an output image to present the secret information in an understandable form.

[0018] In an embodiment of the second aspect, the method further comprises a step of authenticating the user such that, upon valid authentication, the method processes the step of retrieving the scrambling sequence and / or the step of descrambling at least one secret portion in the output image.

[0019] According to a third aspect of the present invention, there is provided an image processing system including an image processing module configured to process at least one sensitive portion of an original image by a predetermined modification method, wherein the at least one sensitive portion is configured to present understandable sensitive information, and a modified image generation module configured to generate an output image comprising the understandable sensitive information converted into an unintelligible form, wherein the unintelligible form of the sensitive information is adapted to be restored to an understandable form.

[0020] In an embodiment of the third aspect, the image processing module is configured to scramble the at least one secret portion such that the intelligible secret information becomes unintelligible.

[0021] In an embodiment of the third aspect, the confidential information in an unintelligible form is adapted to be restored to an intelligible form by descrambling at least one confidential portion in the output image.

[0022] In an embodiment of the third aspect, each of the at least one secret portion comprises a plurality of partitions, each of the plurality of partitions comprising at least one image pixel.

[0023] In an embodiment of the third aspect, the compartments are combined to form an array.

[0024] In an embodiment of the third aspect, the modified image generation module is further configured to record a scrambling sequence of the plurality of image pixels associated with each of the at least one secret portion.

[0025] In an embodiment of the third aspect, the scrambling sequence is embedded in the output image.

[0026] In an embodiment of the third aspect, the scrambling sequence is encrypted.

[0027] In an embodiment of the third aspect, the scrambling sequence is stored in the metadata or header of the output image.

[0028] In an embodiment of the third aspect, the original image comprises a plurality of original images, each of the plurality of original images including comprehensible confidential information, the comprehensible confidential information being presented in at least one confidential portion of each of the original images, and the image processing module is configured to process the plurality of original images, and the plurality of original images are configured to be combined as a stream of image frames.

[0029] In an embodiment of the third aspect, the image processing module is configured to scramble at least one secret portion on different original images with different scrambling sequences.

[0030] In an embodiment of the third aspect, the modified image generation module is further configured to encrypt the scrambling sequence associated with each of the image frames using a plurality of unique encryption keys.

[0031] In an embodiment of the third aspect, the image processing module is configured to identify at least one sensitive portion in the original image.

[0032] In an embodiment of the third aspect, the comprehensible sensitive information comprises an identifying characteristic of the subject.

[0033] According to a fourth aspect of the present invention, there is provided an image viewer configured to restore an image processed by the image processing system of the third aspect, the image viewer including a de-modification module configured to extract a scrambling sequence of a plurality of image pixels associated with each of at least one secret portion and to descramble the at least one secret portion in an output image to present the secret information in an understandable form.

[0034] In an embodiment of the fourth aspect, the image viewer further includes an authorization module configured to authenticate a user such that upon valid authentication, the de-modification module is enabled to retrieve the scrambling sequence and / or descramble at least one secret portion in the output image.

[0035] In the following, embodiments of the invention will be described by way of example with reference to the accompanying drawings, in which: [Brief explanation of the drawings]

[0036] [Figure 1] 1 is a schematic diagram of a computing server for operating as a system for use in processing images according to one embodiment of the present invention. [Figure 2] Figure 1 is a diagram of an image processing system and image viewer that may be implemented by the computing server. [Figure 3A-3C] FIG. 1 illustrates an exemplary confidential portion presenting understandable confidential information. [Figure 4] FIG. 3 is a block diagram showing the operation of the image processing system and image viewer of FIG. 2. DETAILED DESCRIPTION OF THE INVENTION

[0037] Through their own research, trials, and experiments, the inventors have determined that there are several techniques available in computer vision algorithms for modifying images, but the modifications are considered to be permanent and irremovable. This is because the modification process is performed by replacing the original pixels of the image data in order to obscure the image data. This may be performed by replacing with alternative pixels or by blurring portions of the image data.

[0038] In one preferred embodiment, the present invention provides a unique reversible modification method that allows modifications to be undone when needed. Preferably, the method utilizes jumbled blocks of sensitive portions of an image with a unique code, so that when the code is reapplied to undo the jumbled blocks, the original image is restored. This embodiment may be conceptually similar to how a Rubik's Cube is jumbled and then solved.

[0039] Referring to Figure 1, an embodiment of the present invention is shown, which is configured to provide an image processing system including an image processing module configured to process at least one sensitive portion of an original image by a predetermined modification method, where the at least one sensitive portion is configured to present understandable sensitive information, and a modified image generation module configured to generate an output image including the understandable sensitive information converted into an unintelligible form, whereby the unintelligible form of the sensitive information is recoverable or adapted to be recovered into an understandable form.

[0040] This embodiment is further configured to provide an image viewer including a de-modification module configured to retrieve a scrambling sequence of the plurality of image pixels associated with each of the at least one secret portion and de-scramble the at least one secret portion in an output image to present the secret information in an understandable form.

[0041] Preferably, in one example, the system may be used to identify sensitive information, such as license plates and human faces, presented on an original image and generate an output image in which the sensitive information is "masked" using a reversible modification method, such that the sensitive information is unintelligible until the output image is further processed to restore the masked portions of the image using a reverse or restoration processing method specifically implemented or provided in a proprietary image viewer.

[0042] In this embodiment, the image processing module, modified image generation module, and / or reverse modification module are implemented to operate by or on a computer having a suitable user interface. The computer may be implemented by any computing architecture, including a stand-alone PC, a client / server architecture, a "dumb" terminal / mainframe architecture, or any other suitable architecture. The computing device may be suitably programmed to carry out the present invention.

[0043] Referring to FIG. 1, a schematic diagram of a computer or computing server 100 is shown, including, in this embodiment, a server 100 configured to operate at least partially, if not completely, a system for use in processing images according to one embodiment of the present invention. The server 100 includes suitable components necessary to receive, store, and execute appropriate computer instructions. The components may include a processing unit 102, read-only memory (ROM) 104, random access memory (RAM) 106, a disk drive 108, and input / output devices such as an input device 110, such as an Ethernet port, a USB port, a display 112, such as a liquid crystal display, a light-emitting display, or any other suitable display, and a communications link 114. The server 100 includes instructions that may be contained in the ROM 104, RAM 106, or disk drive 108 and that may be executed by the processing unit 102. Multiple communications links 114 may be provided, which may variously connect to one or more computing devices, such as the server, a personal computer, a terminal, a wireless or handheld computing device, or the like. At least one of the plurality of communication lines may be connected to an external computing network through a telephone line or other type of communication line.

[0044] The server may include a storage device such as a disk drive 108, which may include a solid state drive, a hard disk drive, an optical drive, or a magnetic tape drive. The server 100 may use a single disk drive or multiple disk drives. The server 100 may also have a suitable operating system 116 resident on a disk drive or in ROM of the server 100.

[0045] The system has a database 120 residing on a disk or other storage device configured to store at least one record 122. The database 120 communicates with the server 100 by way of an interface implemented by computer software resident on the server 100. Alternatively, the database 120 may be implemented as a stand-alone database system that communicates with the server 100 over an external computing network or other type of communication line.

[0046] 2, an embodiment of a system 200 for use in processing and / or viewing images is shown. In this embodiment, the system 200 is used to process an original image 222 and generate an output image 224 such that at least a portion of the original image is edited or modified, e.g., a human face presented in the original image 222 is transformed into an unintelligible form as presented in the output image 224.

[0047] 3A-3C, three examples of images are shown having different sensitive portions that provide understandable sensitive information, such as identifying features of a subject or target. For example, one might believe that the entire area showing an individual's face is the sensitive portion, and therefore the entire face shown in grids 1-24 of FIG. 3A must be masked or modified so that the individual's identity is unrecognizable. Alternatively, one might instead believe that only the area of ​​the individual's face having facial features is the sensitive portion, and therefore only the central portion of the face shown in grids 31-50 of FIG. 3B must be masked or modified so that the individual's identity is unrecognizable.

[0048] In an alternative example related to FIG. 3C, the sensitive information may be a combination of alphanumeric characters that may represent the identity of a subject. This may include a name or identification number recorded on an individual's identification card, the name and address of a particular property or building, or the license plate number associated with a vehicle. Referring to FIG. 3C, these subject identities may be rendered unrecognizable by masking some or all of the alphanumeric characters presented, such as in grids 51-58 of FIG. 3C, such that the string "AB 2 EF" becomes unreadable after grids 51-58 are modified.

[0049] 2, the original image 222 may be provided to the image processing system 202 to modify the face presented on the image 222. Preferably, the image processing module 204 may process the image 222 using a predetermined modification method 210, such as scrambling the sensitive portion (in this example, the entire image 222) to transform the intelligible sensitive information into unintelligible.

[0050] In this example, the entire original image 222 is partitioned into nine sections (or blocks) 61-69, which combine to form a 3x3 array, each of which contains multiple pixels. It should be understood by those skilled in the art that the size and dimensions of the array may be different in other examples, such as the 4x6 or 4x5 shown in Figures 3A and 3B, and the size of each of the sections may also be different. For example, the size of each section may contain a single pixel, i.e., the dimensions of the array of sections may be the same as the pixel dimensions of the image or portion of the image to be modified.

[0051] After scrambling the image 222 or the confidential portion of the image 222, the modified image generation module 206 may generate an output image that includes the confidential information in an unintelligible (or scrambled) form. Preferably, when generating the output image, the modified image generation module 206 may also record a scrambling sequence for the image pixels associated with the confidential portion, such that the confidential information in an unintelligible form may be restored to an understandable (or original) form by descrambling the confidential portion in the output image 224 generated by the modified image generation module 206 by using the recorded scrambling sequence.

[0052] For example, referring to FIG. 2, in a descrambling process 220, the scrambling sequence may be recorded as 61-66-68-63-67-65-69-64-62 as shown in output image 224 such that the descrambling module 214 of the image viewer 212 may rearrange the positions of these sections or blocks in output image 224 back to their original sequence, i.e., 61-69, from left to right and top to bottom as shown in original image 222, so that the original representation may be restored to reveal the sensitive information.

[0053] In this disclosure, the terms "scramble" and "scrambling" refer to arranging multiple pixels or sections of a target area of ​​an image based on an arrangement different from the original arrangement, and the term "descrambling" refers to re-arranging those pixels or sections based on the reversal of such arrangement in the scrambling process to undo any previously performed scrambling of those pixels or sections. The inventors may also refer to such a scrambling process as a "code-block jumbling" process.

[0054] Preferably, the scrambling sequence may be embedded in the output image 224 generated by the modified image generation module 206 in the form of metadata or a header for the output image 224. Alternatively, the scrambling sequence may be stored as a separate data file having a file association with the output image 224 or multiple output images. Still alternatively, the scrambling sequence may be requested and retrieved from a remote repository only when needed to further enhance the security and integrity of the modified information.

[0055] Both the image processing module 204 and the de-modification module 214 may also be pre-programmed to process images using one or more pre-defined scrambling sequences so that further recording of the scrambling sequences is not required in some exemplary embodiments.

[0056] Optionally or additionally, to further enhance the security and integrity of the modified information, the scrambling sequence is encrypted, for example, by using the cryptographic engine 208 of the image processing system 202, which may encrypt the scrambling sequence such that the viewer 212 may perform the descrambling process after unlocking the retrieved encrypted scrambling sequence using an associated encryption key.

[0057] Additionally, the image viewer 212 may further include an authorization module 216 that authenticates the user such that, upon valid authentication, the de-modification module 214 is able to retrieve the scrambling sequence and / or descramble at least one confidential portion of the output image 224. Advantageously, this ensures that the modified confidential information is not disclosed to unauthorized individuals, even if they may be able to access the proprietary image viewer 212 and / or the processed output image 224.

[0058] Still referring to FIG. 4, in another exemplary embodiment, the image processing system 202 may be used to process multiple images 222, with the images (Image 1 through Image N ) are combined into a stream of image frames and may be played back as a video stream. In this example, each of the original image frames (1 through N) contains the same or different confidential information and is scrambled using the modification methods previously described in this disclosure.

[0059] Preferably, each of the original image frames 222 may be processed using a different scrambling sequence to further minimize the risk of confidential information in every image frame being easily hacked. Alternatively, the scrambling sequence may change at predetermined time intervals, for example, every 1000 frames, based on different designs of the image processing module 204 and / or the playback module. In addition, although the same encryption key may be used to encrypt the same or different scrambling sequences for every image frame, or the encryption key used may change at predetermined time intervals in other designs, the modified image generation module 206 may encrypt each scrambling sequence associated with each of the image frames using multiple unique encryption keys to further protect confidential information.

[0060] In one preferred embodiment, the reversible modification method allows modification of two main objects in a surveillance camera's video stream: human faces and vehicle license plates. Optionally, the image processing module 204 may be implemented to identify objects within these sensitive portions of the original image, for example, by using an AI-based object recognition module to identify target areas of the image to be processed by the reversible modification method. Alternatively, objects of interest, such as human faces or vehicle license plates, may be detected using other computer vision techniques.

[0061] Once this is done, the coordinates of the image of these objects may be enclosed in a polygon, such as, but not limited to, a rectangle or square. This polygon is then divided into blocks, and the blocks are replaced with a unique code that is unique to each customer or user. This code then becomes the key by which the image is modified.

[0062] For example, portions of an image showing a face or license plate may be cut out from the original image of the video stream. Objects in the image may be divided into multiple sections / blocks, such as 16 or 8 blocks. The number of blocks each object may be divided into determines the complexity of the correction process and may be user configurable. Once the objects are divided into blocks, the blocks may be rearranged in a specific unique order per image. The jumbled blocks are then spliced ​​back into the original image.

[0063] The order in which the objects are rearranged for the image may then be stored in the image's metadata, and that metadata may be embedded as frame data and encoded as a video stream. The encoded video stream may be an ONVIF-compliant stream and, in some exemplary applications, may be used similarly to any camera stream provided by most ONVIF-compliant video management systems or NVRs.

[0064] The encoded video stream is ONVIF compliant and can be consumed by any VMS or NVR system, but the video must be returned to a proprietary video player to undo the modifications. Otherwise, referring to Figure 4, a generic image / video viewer may only be able to generate a representation of the process output image 224 using a "modified view" 402 with sensitive information, such as people's faces and / or license plates, modified.

[0065] When the encoded modified image / video 224 is passed through a proprietary image viewer 212 or video player, the player decodes the video into individual frames and then reads the frame metadata, which contains a unique code to extract the recorded scrambling sequence. The unique code is used to determine the order in which the blocks are arranged, and the blocks are then restored in order. The restoration process recovers the original view 404 of the image, which is converted into encoded video frames. The video can then be rendered in the player for viewing by a user without modification. The original view 404 of the image or video stream should be the same, or at least not significantly different, from the view produced by a generic image viewer rendering the original image 222 without being processed by the modification method.

[0066] To further enhance data security, the data security process handled by both the above processes, as well as the modifying and undoing processes, may also be unique. The encoding process after modification and also the data retrieval process by the video player before undoing the data may be digitally secured. Secure data handling during the entire process may include one or more of the following exemplary operations:

[0067] I. The number of blocks dividing an object in an image can be variable and configurable, allowing for more complex jumbles of blocks depending on user considerations of data sensitivity.

[0068] II. The order of shuffling blocks may be encrypted using AES256 and the encryption key may be stored in the header of the same frame, which means that the encrypted data can only be decrypted by known systems such as proprietary players or image viewers.

[0069] III. Because the order in which the blocks are shuffled may change from frame to frame, the encryption key may change from frame to frame. The encrypted key may also be unique per frame. This means that even if one frame is hacked, the user may not be able to easily decrypt another frame.

[0070] IV. While the modified video may be consumed via open network standards, the undo process is controlled solely by a proprietary player. This limits the availability of the software to authorized users only.

[0071] V. Video players could be given the ability to manage authorized users, and post-authentication tokenized functions would make the stream more secure.

[0072] These embodiments may be advantageous in that the lossless modification method may be applied to any image or video stream, and may not be limited to surveillance video streams, and provides an effective method that allows for the transformation of sensitive information between understandable and unintelligible forms without sacrificing detail in the modified portion of the image.

[0073] Advantageously, the method may be used in different applications such as, but not limited to, real-time modification of surveillance camera video streams, recorded video archives, wide-ranging video evidence for regulatory firms, video evidence collected for law enforcement agencies, social media video content, and major media platforms.

[0074] It will also be understood that the methods and systems of the present invention may be implemented either entirely or partially by a computing system, and thus any suitable computing system architecture may be utilized. This includes stand-alone computers, network computers, and dedicated hardware devices. When the terms "computing system" and "computing device" are used, these terms are intended to encompass any suitable configuration of computer hardware capable of implementing the described functionality.

[0075] It will be understood by those skilled in the art that the term "database" may include any form of organized or unorganized data storage device implemented in either software, hardware, or a combination of both that is capable of implementing the described functionality.

[0076] It will be understood by those skilled in the art that many changes and / or modifications may be made to the invention as shown in the specific embodiments without departing from the spirit or scope of the invention as broadly described, and the present embodiments are, therefore, to be considered in all respects as illustrative and not restrictive.

[0077] Any reference to related art contained herein should not be construed as an admission that the information is common general knowledge unless otherwise indicated.

Claims

1. 1. A method for processing an image, comprising: processing at least one confidential portion of an original image by an image processing module according to a predetermined modification method, and generating an output image by a modified image generation module, the output image including the understandable confidential information converted into an unintelligible form, the at least one confidential portion being configured to present understandable confidential information; said processing step comprising: - scrambling the at least one secret portion by the image processing module so that the understandable secret information becomes unintelligible, the unintelligible form of the secret information being adapted to be restored to an understandable form; recording, by the modified image generation module, a scrambling sequence of a plurality of image pixels associated with each of the at least one secret portion, wherein each of the at least one secret portion includes an array of partitions, each of the arrays of partitions including at least one image pixel; the scrambling sequence is encrypted and embedded as metadata of the output image or embedded in a header of the output image; the scrambling sequence is a sequence of a plurality of pixels or sections of a target area of ​​an image that is different from the original; The method comprises: restoring the confidential information from the unintelligible form to the intelligible form by the image processing module by decoding the scrambling sequence; and descrambling, by the image processing module, the at least one secret portion in accordance with the scrambling sequence.

2. 2. The method of claim 1, wherein the confidential information in the unintelligible form is adapted to be restored to the intelligible form by descrambling the at least one confidential portion in the output image.

3. 2. The method of claim 1, wherein the original image comprises a plurality of original images, each of the plurality of original images including the comprehensible confidential information, the comprehensible confidential information being presented in the at least one confidential portion of each of the original images, and further comprising processing the plurality of original images with the image processing module, wherein the plurality of original images are configured to be combined into a stream of image frames.

4. 4. The method of claim 3, wherein the step of processing the at least one secret portion of the original image includes scrambling the at least one secret portion on different original images with different scrambling sequences by the image processing module.

5. 4. The method of claim 3, further comprising the step of encrypting, by said modified image generation module, a scrambling sequence associated with each of said image frames using a plurality of unique encryption keys.

6. The method of claim 1 , further comprising identifying the at least one confidential portion in the original image by the image processing module.

7. The method of claim 1 , wherein the comprehensible sensitive information includes identifying characteristics of a subject.

8. A method for restoring an image processed by the method of claim 2, comprising the steps of: deriving, by a de-modification module, a scrambling sequence of a plurality of image pixels associated with each of said at least one secret portion; and descrambling, by said de-modification module, said at least one secret portion in said output image to present said secret information in said understandable form.

9. 9. The method of claim 8, further comprising the step of authenticating a user by an authorization module to process, upon valid authentication, the step of retrieving the scrambling sequence by the de-modification module and / or the step of descrambling the at least one secret portion in the output image by the de-modification module.

10. an image processing module configured to process at least one sensitive portion of the original image by a predetermined modification method, the at least one sensitive portion being configured to present understandable sensitive information; a modified image generation module configured to generate an output image including the understandable sensitive information converted into an unintelligible form; adapted to restore the confidential information in the unintelligible form to an intelligible form; the image processing module is configured to scramble the at least one secret portion such that the intelligible secret information becomes unintelligible; the modified image generation module is further configured to record a scrambling sequence of a plurality of image pixels associated with each of the at least one secret portion, each of the at least one secret portion including an array of partitions, each of the arrays of partitions including at least one image pixel; the scrambling sequence is encrypted and embedded in the output image as metadata of the output image or embedded in a header of the output image; the scrambling sequence is a sequence of a plurality of pixels or sections of a target area of ​​an image that is different from the original; the image processing module is further configured to restore the secret information from the unintelligible form to the intelligible form by decoding the scrambling sequence and descrambling the at least one secret portion in accordance with the scrambling sequence.

11. 11. The image processing system of claim 10, adapted to restore the confidential information in the unintelligible form to the intelligible form by descrambling the at least one confidential portion in the output image.

12. 11. The image processing system of claim 10, wherein the original image comprises a plurality of original images, each of the plurality of original images including the understandable confidential information, the understandable confidential information being presented in the at least one confidential portion of each of the original images, and wherein the image processing module is configured to process the plurality of original images, and the plurality of original images are configured to be combined into a stream of image frames.

13. The image processing system of claim 12 , wherein the image processing module is configured to scramble the at least one secret portion on different original images with different scrambling sequences.

14. The image processing system of claim 12 , wherein the modified image generation module is further configured to encrypt a scrambling sequence associated with each of the image frames using a plurality of unique encryption keys.

15. The image processing system of claim 10 , wherein the image processing module is configured to identify the at least one sensitive portion in the original image.

16. The image processing system of claim 10 , wherein the understandable sensitive information includes identifying characteristics of a subject.

17. 12. An image viewer configured to restore an image processed by the image processing system of claim 11, comprising a de-modification module configured to extract a scrambling sequence of a plurality of image pixels associated with each of the at least one secret portion and to descramble the at least one secret portion in the output image to present the secret information in the understandable form.

18. 20. The image viewer of claim 17, further comprising an authorization module configured to authenticate a user such that valid authentication allows the de-modification module to retrieve the scrambling sequence and / or descramble the at least one secret portion in the output image.

Images