Overview
ISO/IEC 15444-8:2023 - Secure JPEG 2000 (JPSEC) specifies a framework, syntax and methodology for applying security services to JPEG 2000 codestreams. The standard defines a normative codestream syntax (markers, templates and metadata) for interpreting secured image data, and provides informative examples and implementation guidelines for JPSEC tools and use cases. It preserves native JPEG 2000 features - scalability, region-of-interest access, resolution levels, colour components and quality layers - while enabling confidentiality, integrity and access control at flexible granularities.
Key topics and technical requirements
- JPSEC framework and syntax: Defines marker segments (e.g., SEC, INSEC), byte-aligned segments (BAS), and codestream parameters required to represent security metadata inside JPEG 2000 codestreams.
- Security services supported: Confidentiality (encryption), integrity verification, source authentication, conditional access, secure scalable streaming, and secure transcoding.
- Zone of Influence (ZOI): Formal syntax to describe spatial, resolution or packet-level regions of the image subject to protection.
- Protection method templates and tools: Templates for block/stream ciphers, decryption, key information and tool identifiers - enabling layered/packet-based protection and tool chaining.
- Granularity, processing domain and value lists: Mechanisms to apply protection at image, tile, packet or layer granularity and to express related policy metadata.
- File-format and interoperability guidance: Annexes covering file-level protection extensions, JPIP/JPWL interoperability and practical technology examples and use cases.
- Normative vs informative content: The document contains normative codestream definitions and informative guidance and examples to aid implementers.
Practical applications and target users
Who benefits:
- Software developers and codec implementers adding image encryption, authentication and access control to JPEG 2000 workflows.
- Content distribution and streaming services requiring secure scalable streaming and secure transcoding while preserving progressive features.
- Digital archives, medical imaging, surveillance and governmental agencies needing fine-grained conditional access and evidence-grade integrity/authenticity.
- Vendors of DRM, secure viewers, and secure storage systems integrating JPSEC metadata into file formats and delivery protocols.
Why use it:
- Allows selective protection (regions, resolutions, quality layers) without destroying JPEG 2000 scalability.
- Standardized syntax ensures interoperability across encoders, transcoders and viewers that support JPSEC.
Related standards
Keywords: ISO/IEC 15444-8, JPSEC, Secure JPEG 2000, JPEG 2000 security, image security, codestream protection, conditional access, secure streaming.