Secure transcoding with JPSEC confidentiality and authentication

The emerging JPEG-2000 part 8 security standard (JPSEC) is being defined to provide security services for JPEG-2000 images. This paper describes how confidentiality and authentication can be applied in a manner that allows mid-network adaptation of protected JPSEC streams while preserving end-to-end security. We achieved this by designing the JPSEC syntax to support the principles of secure scalable streaming and secure transcoding. Specifically, we designed JPSEC encryption methods and signaling syntax that enable an entity to securely adapt or transcode the resulting JPSEC-protected stream without requiring decryption. We discuss tradeoffs in protection, transcoding flexibility, and complexity for the different encryption methods. Furthermore, we show how authentication can be applied to verify that the secure transcoding operation was performed in a valid and permissible manner.