Image Data Authentication With Signed Hashes and Metadata

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The generation of highly realistic fake images using machine learning technologies, such as GANs and Diffusion Models, makes it difficult to trust the authenticity of image data, particularly in scientific contexts where false conclusions can arise from ambiguous image data.

Innovation Solution

A method for authenticating image data and metadata using cryptographic hash functions, where image data and metadata are hashed, encrypted with a private key, and verified using a public key to generate a digital signature, allowing for the tracing of processing history and ensuring authenticity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If machine learning image processing algorithms are used to generate or manipulate images, then image processing capability and realism are improved, but image authenticity and trustworthiness deteriorate

Engineering Contradiction:
Improveimage processing capabilityVSAvoidimage authenticity
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent applies preliminary action by embedding a digital signature (encrypted hash value) into the image data or its metadata at the time of image acquisition or processing, before any potential manipulation occurs. This pre-embedded signature serves as an authenticating marker that can later verify the image's origin and processing history, thus maintaining authenticity despite advanced processing capabilities.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary element - a cryptographic hash value that is encrypted with a private key and embedded in the image metadata. This intermediary acts as a trusted mediator between the image processing system and the verification system, allowing authentication without interfering with the image processing capabilities themselves.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If digital signatures are embedded in image data, then image authenticity is improved, but device complexity and processing overhead increase

Engineering Contradiction:
Improveimage authenticationVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication function into a separate, standardized component - a digital signature embedded in metadata rather than modifying the image data itself. This separation allows the authentication mechanism to be implemented as an independent module, reducing complexity in the main image processing pipeline while maintaining strong authentication capabilities.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent changes the parameter of authentication from complex multi-factor verification to a simplified hash-based verification process. By using cryptographic hash functions and encryption, the system achieves high reliability with relatively simple verification operations, reducing processing overhead while maintaining strong security.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250286724A1Method for authenticating image data
Publication Date: 2025.09.11 CARL ZEISS MICROSCOPY GMBH
  • US20250286724A1 patent drawing
  • US20250286724A1 patent drawing
  • US20250286724A1 patent drawing

AI summary

A method for authenticating image data and/or metadata of the image data involves receiving the image data and/or the metadata and an encrypted first hash value of the image data and/or the metadata (20). The metadata includes information about the image data. The method also involves decrypting the first hash value with a public key. The public key corresponds to a private key with which the first hash value is encrypted. The method also involves generating a second hash value of the image data and/or the metadata, comparing the decrypted first hash value with the second hash value, and generating a positive image authenticating signal if the first hash value matches the second hash value or a negative image authenticating signal if the first hash value does not match the second hash value.