In this paper, we propose the first joint watermarking-encryption-compression scheme for the purpose of protecting of medical images. The main originality of this scheme stands on its ability to give access to watermarking-based security services from both encrypted and compressed image bitstreams without having to decrypt or to decompress them, even partially. More clearly, there is no need neither to decrypt the encrypted image bitstream nor to decode the compressed image bitstream in order to extract watermarks. A second contribution is that it combines in a single algorithm the bit substitution watermarking modulation with JPEG-LS and the AES block cipher algorithm in its CBC mode. On their side, decompression, decryption and message extraction are conducted separately. Doing so makes our scheme compliant to the medical image standard DICOM. This scheme allows tracing images and controlling their reliability (i.e. based on proofs of image integrity and authenticity) either from the encrypted domain or from the compressed one. Experiments conducted on broad sets of Retina and ultrasound medical images demonstrate the capability of our system to securely make available a message in both encrypted and compressed domains while minimizing image distortion. Achieved watermarking capacities are large enough to support several watermarking-based security services at the same time.

中文翻译：

---

用于加密和压缩域中医学图像可靠性控制的联合水印-加密-JPEG-LS


在本文中，我们提出了第一个用于保护医学图像的联合水印-加密-压缩方案。该方案的主要创意在于其能够从加密和压缩的图像比特流访问基于水印的安全服务，而无需解密或解压缩它们，甚至部分地解密或解压缩它们。更清楚地，既不需要解密加密的图像比特流，也不需要解码压缩的图像比特流来提取水印。第二个贡献是它在单一算法中结合了 JPEG-LS 的位替换水印调制和 CBC 模式下的 AES 块密码算法。在他们这边，解压、解密和消息提取是分开进行的。这样做使我们的方案符合医学图像标准 DICOM。该方案允许从加密域或压缩域追踪图像并控制其可靠性（即基于图像完整性和真实性的证明）。对大量视网膜和超声医学图像进行的实验证明了我们的系统能够安全地在加密和压缩域中提供消息，同时最大限度地减少图像失真。所实现的水印容量足够大，可以同时支持多种基于水印的安全服务。