ISO/IEC 23000-21:2019 情報技術—マルチメディアアプリケーションフォーマット（MPEG-A）—パート21：ビジュアルアイデンティティ管理アプリケーションフォーマット | ページ 2

Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives ).

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents ) or the IEC list of patent declarations received (see http://patents.iec.ch ).

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www.iso.org/iso/foreword.html .

This document was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 29, Coding of audio, picture, multimedia and hypermedia information.

A list of all parts in the ISO/IEC 23000 series can be found on the ISO website.

Introduction

The main goal of the ISO/IEC 23000 series (also known as “MPEG-A”) is to facilitate the swift development of innovative, standards-based multimedia services and applications by selecting and combining readily tested and verified tools taken from the MPEG body of standards.

Visual identity management is designed to enable users to control and manage privacy protection by defining a new framework and tools. It also provides to industry a coherent and consistent approach to manage privacy protection in order to be implemented in a variety of scenarios, applications or systems.

The main objective of preserving privacy protection is to enable security and confidentiality in the multimedia content chain. Many usages of image/video communication services, social networking and video sharing platforms have led to an increasing interest to protect users’ privacy.

Traditionally, multimedia data security is achieved by cryptography solutions, which deal with encryption of data. This approach is called Naive Encryption Algorithm (NEA) and it treats the video bitstream as text data without paying attention to the structure of the compressed video. To this end, MPEG common encryption has been standardized in order to support encryption and key mapping methods for file format in ISO/IEC 23001-7 and for transport streaming in ISO/IEC 23001-9 ^[3]. Consequently, bitstreams encrypted by those documents are decodable only after a correct decryption process even when only parts of the video are encrypted. Nevertheless, none of these formats allow signalling the encryption of a part of the picture (region), or indicating to the decoder that the encrypted bitstream can be partially decoded.

Moreover, all the access control is provided and performed globally without taking into account the image/video content and context. To restore citizens’ confidence in online data collection practices, submitted media should be encrypted to protect privacy and only viewed with limited access that the user chooses: group of people, purpose of sharing, time, date, metadata, etc.

In order to provide privacy protection over processing and sharing of multimedia content, a flexible, effective and scalable mechanism is required to provide users a way to express their control desires in a form that can be processed and monitored systematically, consistently and persistently throughout the lifecycle of the multimedia content. There is currently no standardized format to represent privacy description information (PDI), hindering the interoperability between secured systems.

1 Scope

This document specifies the standard representation of the set of signalling and data used in the process of preserving privacy for storage sharing image/video.

2 Normative references

The following documents are referred to in the text in such a way that some or all of their content constitutes requirements of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.

3 Terms and definitions

For the purposes of this document, the terms and definitions given in ISO/IEC 14496-10, ISO/IEC 23008-2, ISO/IEC 23008-12 and the following apply.

ISO and IEC maintain terminological databases for use in standardization at the following addresses:

Bibliography