‘Apple Reference Image: A New Approach for Verified Photography’

Apple Security Research has unveiled a brief yet insightful paper that outlines the inner workings of Apple Reference Image and the reasoning behind its development. One particularly intriguing aspect of this technology pertains to privacy concerns. Unlike other industry solutions that necessitate photographers or organizations to authenticate images using their own credentials, Apple Reference Image eliminates the need for an explicit, public credential for photographers.

This design choice ensures that photographers can maintain their anonymity while still validating image authenticity.

The final reference image is secured through a signature generated by Apple's signing service, following validation by PCC. This signature carries the weight of Apple's most stringent technical assurances. Furthermore, the implementation safeguards the image's confidentiality, even from Apple's grasp. During the reference image capture process, the raw pixels remain inaccessible to Apple or any external entity.

This feat is accomplished through the robust privacy features of PCC, which are architected in such a way that Apple cannot access any image data, and Apple cannot view the information processed for Apple Intelligence via PCC.

While the revocation service needs to keep a private record of photo GUIDs and the corresponding sensors for effective revocation, it remains oblivious to the actual image data. Importantly, it also prohibits public access to this record. Additionally, final revocation checks are performed using on-device lists, ensuring that devices never disclose the specific photo they are examining to determine if it's still valid.