Translator Disclaimer
1 August 2006 Commutative watermarking and encryption for media data
Author Affiliations +
A commutative watermarking and encryption scheme is proposed for media data protection. In the scheme, the partial encryption algorithm is adopted to encrypt the significant part of media data, while some other part is watermarked. The commutative property brings conveniences to practical applications in secure media transmission or distribution.



Several means have been proposed to protect media data, among which, media encryption1 and digital watermarking2 have been attracting more and more researchers. Media encryption encodes media data into an unintelligible form, which protects media data’s confidentiality. Digital watermarking embeds identification information into media data imperceptibly, which protects media data’s ownership. Because they realize different functionalities, the two means are often applied independently. To remain secure, they can be used together. For example, media data are first watermarked, and then encrypted. However, in this case, the encrypted media data should be decrypted before the watermark can be extracted or another watermark can be embedded.

It is secure to commutate watermarking and encryption,3 although it is still difficult to find a practical solution. As a commutative watermarking and encryption process, the following condition is satisfied:

Eq. 1

Here, P , C , M , P , and W denote the original media, cipher media, watermarked cipher media, watermarked media, and watermark, respectively; and En[] , Em[] , Kc , and Kw denote the encryption function, watermark embedding function, encryption key, and decryption key, respectively. If the scheme is practical, more convenience will result for media distribution. However, until now, no solutions have been reported.

In the past decade, some partial encryption algorithms have been reported that encrypt only some significant parts of the media data, such as the significant frequency bands, bit planes, and/or coding passes in JPEG2000 images,4, 5 the motion vectors or discrete cosine transform (DCT) coefficients in MPEG2 streams,6, 7 and the intraprediction modes and/or DCT coefficients in advanced video coding.8, 9 Similarly, media watermarking often embeds watermark information into parts of media data, such as the dc or ac’s in DCT blocks,10, 11 and the wavelet coefficients in middle frequency bands.12, 13 Considering that these operations are often applied to media data partially, it is possible to combine watermarking and encryption together. In the following, we present a commutative watermarking and encryption scheme that encrypts and marks media data partially or selectively.


Proposed Commutative Scheme

The proposed scheme is shown in Fig. 1. Here, P , C , M , P , W , Kc , and Kw denote the original media, cipher media, watermarked cipher media, watermarked media, watermark, encryption key and decryption key, respectively; and En() , De() , Em() , and Ex() denote the encryption function, decryption function, watermark embedding function, and watermark extraction function, respectively. The original media P is partitioned into two parts: the significant part X and the other part Y . Among them, X will be encrypted, and Y will be watermarked. Thus, P=XY , C=ZY , M=ZY , and P=XY . The proposed commutative scheme is defined as follows.

  • 1. The partial encryption/decryption process is

    Eq. 2


  • 2. The selective watermark embedding/extraction process is

    Eq. 3


  • 3. The commutative encryption and watermarking process is

    Eq. 4


  • 4. The watermark extraction process is

    Eq. 5


Fig. 1

Commutative encryption and watermarking based on partial encryption.



Practical Scheme Based on Wavelet Codec

Based on wavelet transformation, we propose the commutative scheme shown in Fig. 2. Here, the M×N image is transformed by a four-level wavelet.

  • 1. The subbands in the lowest level ( LL3,LH3,HL3 , and HH3 ), composed of (M8)×(N8) coefficients, are encrypted completely. The algorithms proposed in Refs. 4, 5 can be used.

  • 2. The subbands in the high level ( LH1,HL1, HH1,LH0,HL0 , and HH0 ), composed of 3×[(M4)×(N4)+(M2)×(N2)] coefficients, are encrypted with sign encryption, which keeps the coefficient amplitudes unchanged.

  • 3. The subbands in the middle level ( LH2,HL2 , and HH2 ), composed of 3×(M8)×(N8) coefficients, are both encrypted and watermarked. The encryption algorithm is sign encryption, and the watermarking algorithm can be spread spectrum method,14 the quantization index modulation (QIM) method,15 the methods proposed in Refs. 12, 13, etc.

Fig. 2

Commutative encryption and watermarking based on wavelet codec.


In our scheme, the selection of the wavelet coefficients in middle frequency depends on the requirements of security and robustness. Without considering sign encryption, the more the coefficients in the low-frequency band are encrypted, the more confused is the encrypted image. Figure 3 shows the relation between the encrypted frequency band and the quality of the encrypted image. The coefficients are encrypted with the Advanced Encryption Standard (AES) as proposed in Ref. 4. Similarly, the more watermarked coefficients are in the low-frequency bands, the more robust the watermark is to signal processing operations (compression, noise, filtering, etc.). Figure 4 gives the relation between the watermarked frequency band and the robustness to JPEG2000 compression. The QIM method15 is used as the watermark algorithm. To obtain a trade-off between the security and robustness, the coefficients in the highest level frequency bands ( LL4,HL4,LH4 , and HH4 ) should be encrypted, and the coefficients in the second highest level frequency bands ( HL3,LH3 , and HH3 ) can be watermarked.

Fig. 3

Relation between the encrypted image’s quality and the encrypted frequency band (5, level 9/7 wavelet; 1, “Lena;” 2, “Plane;” 3, “Crowd;” 4, “Baboon;” 5, “Bridge;” 6, “Couple;” 7, “Lake;” and 8, “Camera”).


Fig. 4

Relation between the bit error rate and the watermarked frequency band.


This method can be combined with JPEG2000; that is, the image can be compressed and encrypted/watermarked simultaneously. The watermark is embedded immediately after quantization, coefficient encryption, and sign encryption can be applied following the entropy encoding process. As an example, “Airplane” (colorful, 256×256 ) is encrypted partially, then watermarked with QIM, finally decrypted and extracted. The results in Fig. 5 show that the scheme is commutative.

Fig. 5

Experimental results of commutative encryption and watermarking based on JPEG2000: (a) original image, (b) encrypted image, (c) watermarked image, and (d) decrypted image.



Conclusions and Future Work

We proposed a commutative encryption and watermarking scheme that is based on partial encryption. Based on the scheme, a commutative image encryption and watermarking algorithm in wavelet codec was presented, and the trade-off between security and robustness was analyzed. The encryption/watermarking algorithm can be combined with JPEG2000 codec, which is time-efficient compared with the compression process. In future work, the commutative scheme’s security and robustness and its extension to other codecs will be further studied.


The authors want to thank editors for their great help and reviewers for their valuable advice.



W. Zeng and S. Lei, “Efficient frequency domain selective scrambling of digital video,” IEEE Trans. Multimedia, 5 (1), 118 –129 (2003). 1520-9210 Google Scholar


P. Moulin and R. Koetter, “Data-hiding codes,” 2083 –2127 (2005). Google Scholar


First summary report on hybrid systems,TR: IST-2002-507932 ECRYPT European Network of Excellence in Cryptology,” (2005) Google Scholar


S. Lian, J. Sun, D. Zhang, and Z. Wang, “A selective image encryption scheme based on JPEG2000 Codec,” 65 –72 (2004). Google Scholar


A. Pommer and A. Uhl, “Selective encryption of wavelet-packet encoded image data: efficiency and security,” 9 (3), 279 –287 (2003) Google Scholar


L. Tang, “Methods for encrypting and decrypting MPEG video data efficiently,” 219 –230 (1996). Google Scholar


C. Shi and B. Bhargava, “A fast MPEG video encryption algorithm,” 81 –88 (1998). Google Scholar


J. Ahn, H. Shim, B. Jeon, and I. Choi, “Digital video scrambling method using intra prediction mode,” 386 –393 (2004). Google Scholar


S. Lian, Z. Liu, Z. Ren, and Z. Wang, “Selective video encryption based on advanced video coding,” 281 –290 (2005). Google Scholar


J. Huang, Y. Q. Shi, and Y. Shi, “Embedding image watermarks in DC components,” IEEE Trans. Circuits Syst. Video Technol., 10 (6), 974 –979 (2000). 1051-8215 Google Scholar


J. Hernández, M. Amado, and P. Perez-Gonzalez, “DCT-domain watermarking techniques for still images: detector performance analysis and a new structure,” IEEE Trans. Image Process., 9 (1), 55 –68 (2000). 1057-7149 Google Scholar


K. Maeno, Q. Sun, S.-F. Chang, and M. Suto, “New semi-fragile image authentication watermarking techniques using random bias and non-uniform quantization,” Proc. SPIE, 4657 659 –670 (2002). 0277-786X Google Scholar


R. Dugad, K. Ratakonda, and N. Ahuja, “A new wavelet-based scheme for watermarking images,” (1998). Google Scholar


I. Cox, T. Killian, T. Leighton, and T. Shamoon, “Secure spread spectrum watermarking for multimedia,” IEEE Trans. Image Process., 6 (12), 1673 –1687 (1997). 1057-7149 Google Scholar


B. Chen and G. Wornell, “Quantization index modulation: a class of provably good methods for digital watermarking and information embedding,” IEEE Trans. Inf. Theory, 47 (4), 1423 –1443 (2001). 0018-9448 Google Scholar
©(2006) Society of Photo-Optical Instrumentation Engineers (SPIE)
Shiguo Lian, Zhongxuan Liu, Ren Zhen, and Haila Wang "Commutative watermarking and encryption for media data," Optical Engineering 45(8), 080510 (1 August 2006).
Published: 1 August 2006


Back to Top