# US 12,604,025 B2 · Method for verifying image data encoded in an encoder unit > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,604,025 B2 - Document ID: US12604025B2 - Status: Granted - Kind: B2 - Application number: 18/528,815 - Filed: 2023-12-05 - Published: 2024-06-06 - Granted: 2026-04-14 - Earliest claimed: 2022-12-05 - Assignees: Matthias Auchmann - Applicants: Matthias Auchmann - Inventors: Matthias Auchmann - Web page: https://patentgrep.com/patent/US12604025B2 ## CPC - H04N 19/132: Sampling, masking or truncation of coding units, e.g. adaptive resampling, frame skipping, frame interpolation or high-frequency transform coefficient masking - H04N 19/48: using compressed domain processing techniques other than decoding, e.g. modification of transform coefficients, variable length coding [VLC] data or run-length data (motion estimation in a transform domain H04N19/547; processing of decoded motion vectors H04N19/513) - H04N 19/119: Adaptive subdivision aspects, e.g. subdivision of a picture into rectangular or non-rectangular coding blocks - H04N 19/154: Measured or subjectively estimated visual quality after decoding, e.g. measurement of distortion (use of rate-distortion criteria H04N19/147) - H04N 19/17: the unit being an image region, e.g. an object - H04N 19/172: the region being a picture, frame or field - H04N 19/176: the region being a block, e.g. a macroblock - H04N 19/30: using hierarchical techniques, e.g. scalability (H04N19/63 takes precedence) - H04N 19/42: characterised by implementation details or hardware specially adapted for video compression or decompression, e.g. dedicated software implementation (H04N19/635 takes precedence) - H04N 19/46: Embedding additional information in the video signal during the compression process (H04N19/517, H04N19/68, H04N19/70 take precedence) - H04N 19/463: by compressing encoding parameters before transmission - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION ## Abstract The present invention relates to a method for verifying image data encoded in an encoder unit, wherein the encoder unit comprises a safe part and a non-safe part, and wherein the method (1) comprises the steps of: Acquiring image data in the safe part of the encoder unit (2); Encoding the acquired image data by a non-safe encoder in the non-safe part of the encoder unit (3); Decoding the encoded image data by a non-safe decoder in the non-safe part of the encoder unit (4); and Comparing the decoded image data with the acquired image data in the safe part of the encoder unit (5), wherein if the decoded image data does not match the acquired image data exactly nor within an acceptable threshold for the comparison a safety focused reaction is initiated, and wherein if the decoded image data matches the acquired image data exactly or within the acceptable threshold for the comparison a first safety sequence is generated based on the decoded image data in the safe part of the encoder unit and the encoded image data and the first safety sequence are transmitted to a decoder unit for decoding the encoded image data. ## Claims ### Claim 1 A method for verifying image data encoded in an encoder unit, wherein the encoder unit comprises a safe part and a non-safe part, the method comprising: (a) acquiring image data in the safe part of the encoder unit (2); (b) encoding the acquired image data by a non-safe encoder in the non-safe part of the encoder unit (3); (c) decoding the encoded image data by a non-safe decoder in the non-safe part of the encoder unit (4); and (d) comparing the decoded image data with the acquired image data in the safe part of the encoder unit (5), wherein if the decoded image data does not match the acquired image data exactly nor within an acceptable threshold for the comparison a safety focused reaction is initiated, and wherein if the decoded image data matches the acquired image data exactly or within the acceptable threshold for the comparison a first safety sequence is generated based on the decoded image data in the safe part of the encoder unit and the encoded image data and the first safety sequence are transmitted to a decoder unit for decoding the encoded image data, wherein safe means that the corresponding part is safety-qualified and/or has a high Integrity level and non-safe means that the corresponding part is not safety critical and does not have to be safety-qualified, wherein the safety focused reaction comprises flagging decoded image data that does not correspond to the originally acquired image data, respectively regions in the decoded image data that do not correspond to the corresponding regions in the originally acquired image data, or turning the corresponding source of image data off and/or deleting the image data acquired from the corresponding source of image data, and wherein the first safety sequence is one of a cryptographic hash, a checksum or a signature. ### Claim 2 (depends on 1) The method of claim 1, wherein comparing the decoded image data with the acquired image data (5) further comprises: dividing the decoded image data into a plurality of subregions; and for each of the plurality of subregions, respectively comparing the subregion to a corresponding region of the acquired image data. ### Claim 3 (depends on 1) The method of claim 1, wherein comparing the decoded image data with the acquired image data (5) further comprises using at least two different image comparison algorithms to respectively compare the decoded image data to the acquired image data, wherein it is determined that the decoded image data corresponds to the acquired image data only if more than a predetermined number of the at least two different image comparison algorithms have determined that the decoded image data corresponds to the acquired image data. ### Claim 4 (depends on 1) A method for verifying image data transmitted from a source of image data to a processing unit for processing the image data by means of an encoder unit, wherein the encoder unit comprises a safe part and a non-safe part, and a decoder unit, wherein the decoder unit comprises a safe part and a non-safe part, the method comprising: (a) acquiring image data from the source of image data in the safe part of the encoder unit (11); (b) encoding the image data in the non-safe part of the encoder unit (12); (c) verifying the image data encoded in the encoder unit by a method for verifying image data encoded in an encoder unit according to claim 1; (d) transmitting the encoded image data and a corresponding first safety sequence to the decoder unit (15); (e) decoding the encoded image data by a non-safe decoder in the non-safe part of the decoder unit (16); (f) generating a second safety sequence based on the decoded image data in the safe part of the decoder unit (17); and (g) comparing the first safety sequence with the second safety sequence in the safe part of the decoder unit (18), wherein the verified decoded image data is transmitted to the processing unit for further processing the image data if the first safety sequence corresponds to the second safety sequence, and wherein a safety focused reaction is initiated if the first safety sequence does not correspond to the second safety sequence, and wherein the second safety sequence is one of a cryptographic hash, a checksum or a signature. ### Claim 5 (depends on 4) The method of claim 4, wherein transmitting the first safety sequence to the decoder unit comprises transmitting the first safety sequence to the decoder over a safety layer. ### Claim 6 (depends on 4) The method of claim 4, wherein the method further comprises respectively encrypting the encoded image data and the first safety sequence, wherein the step of transmitting the encoded image data and the first safety sequence to the decoder unit (15) comprises transmitting the encrypted encoded image data and the encrypted first safety sequence to the decoder unit, or wherein the method (10) further comprises a step of adding a message authentication code to the encoded image data and the first safety sequence, and wherein the step of transmitting the encoded image data and the first safety sequence to the decoder unit (15) comprises transmitting the encoded image data and the first safety sequence together with the message authentication code to the decoder unit. ### Claim 7 An encoder unit, wherein the encoder unit (22) comprises a safe acquiring unit (26), wherein the safe acquiring unit is configured to acquire image data, a non-safe encoder (27), wherein the non-safe encoder (27) is configured to encode the acquired image data, a non-safe decoder (28), wherein the non-safe decoder (28) is configured to decode the encoded image data, and a safe comparing unit (29), wherein the safe compare the decoded image data with the acquired image data, wherein the safe comparing unit (29) is configured to initiate a safety focused reaction if the decoded image data does not match to the acquired image data exactly nor within an acceptable threshold for the comparison, and to generate a first safety sequence based on the decoded image data, wherein the encoded image data and the first safety sequence are transmitted to a decoder unit for decoding the encoded image data, if the decoded image data matches the acquired image data exactly or within the acceptable threshold for the comparison, wherein safe means that the corresponding part is safety-qualified and/or has a high integrity level and non-safe means that the corresponding part is not safety critical and does not have to be safety-qualified, wherein the safety focused reaction comprises flagging decoded image data that does not correspond to the originally acquired image data, respectively regions in the decoded image data that do not correspond to the corresponding regions in the originally acquired image data, or turning the corresponding source of image data off and/or deleting the image data acquired from the corresponding source of image data, and wherein the first safety sequence is one of a cryptographic hash, a checksum or a signature. ### Claim 8 (depends on 7) The encoder unit of claim 7, wherein the encoder unit further comprises a safe dividing unit, wherein the safe dividing unit is configured to divide the decoded image data into a plurality of subregions, and wherein the safe comparing unit (29) is configured to, for each of the plurality of subregions, respectively compare the subregion to a corresponding region of the acquired image data. ### Claim 9 (depends on 7) The encoder unit of claim 7, wherein the safe comparing unit (29) is configured to use at least two different image comparison algorithms to respectively compare the decoded image data with the acquired image data, wherein it is determined that the decoded image data corresponds to the acquired image data only if more than a predetermined number of the at least two different image comparison algorithms have determined that the decoded image data corresponds to the acquired image data. ### Claim 10 (depends on 7) A decoder unit, wherein the decoder unit (24) comprises a receiver (30) to receive encoded image data, wherein the encoded image data has been verified by an encoder unit according to claim 7, and a corresponding first safety sequence that has been generated in case of successful verification of the encoded image data in the encoder unit, a non-safe decoder, wherein the non-safe decoder (31) is configured to decode the encoded image data, a safe safety sequence generating unit (32), wherein the safe safety sequence generating unit (32) is configured to generate a second safety sequence based on the decoded image data, and a safe safety sequence matching unit (33), wherein the safe safety sequence matching unit (33) is configured to compare the first safety sequence with the second safety sequence, wherein the safe safety sequence matching unit (33) is configured to allow transmission of the verified decoded image data to a processing unit for further processing the image data if the first safety sequence corresponds to the second safety sequence, and to initiate a safety focused reaction if the first safety sequence does not correspond to the second safety sequence and wherein the second safety sequence is one of a cryptographic hash, a checksum or a signature. ### Claim 11 (depends on 7) A system for verifying image data transmitted from a source of image data to a processing unit for processing the image data, wherein the system (20) comprises a source of image data (21) for acquiring image data, an encoder unit (22) according to claim 7, a transmitting unit (23), a decoder unit (24), and a processing unit (25) for processing the acquired image data, wherein the encoder unit (22) is configured to generate encoded image databased on image data acquired from the source of image data, wherein the transmitting unit (23) is configured to transmit the encoded image data from the encoder unit (22) to the decoder unit (24), wherein the decoder unit (24) is configured to decode the encoded image data, and wherein the processing unit (25) is configured to process the decoded image data. ### Claim 12 (depends on 11) The system of claim 11, wherein the transmitting unit (23) is configured to transmit the first safety sequence to the decoder unit over a safety layer. ### Claim 13 (depends on 11) The system of claim 11, wherein the system (20) further comprises an encrypting unit, wherein the encrypting unit is configured to encrypt the encoded image data and the first safety sequence, wherein the transmitting unit (23) is configured to transmit the encrypted encoded image data and the encrypted first safety sequence to the decoder unit, and wherein the system further comprises a decrypting unit, wherein the decrypting unit is configured to respectively decrypt the encrypted encoded image data and the encrypted first safety sequence after transmission to the decoder unit, or wherein the system (20) further comprises an adding unit, wherein the adding unit is configured to add a message authentication code to the encoded image data and the first safety sequence, wherein the transmitting unit (23) is configured to transmit the encoded image data and the first safety sequence together with the message authentication code to the decoder unit, and wherein the system further comprises a removing unit, wherein the removing unit is configured to check the message authentication code to determine the integrity of the encoded image data and the first safety sequence after transmission to the decoder unit.