Apple’s Verified Photography System

{"heading_1":"The Apple Reference Image System","paragraph_1":"Apple's Reference Image system allows users to verify their iPhone photos without needing to vouch for the authenticity of the images themselves. Instead, the system relies on Apple's signing service to validate the images.","paragraph_2":"The system is designed to protect photographers in conflict zones by not requiring them to disclose their identity. It achieves this by signing the reference image with Apple's signing service, which is backed by strong technical guarantees.","paragraph_3":"The system also includes a revocation service that maintains a private record of photo GUIDs and associated sensors to allow for revocation. This ensures that a compromised device's images can be flagged retroactively without revealing which images came from the same sensor.","paragraph_4":"The system is built on the exceptional privacy properties of PCC (Privacy Capable Computing), which are designed to prevent even Apple from accessing image data. This ensures that the confidentiality of the image itself is protected, including from Apple.","paragraph_5":"The system also includes checks that a sensor and an SEP (Secure Enclave Processor) are from the same device, ensuring that the images are verified based on the device they were taken on, not the photographer.","paragraph_6":"The system is designed to be transparent and secure, with the revocation service maintaining a private record of photo GUIDs and associated sensors to allow for revocation. This ensures that the system can be trusted to protect the privacy and authenticity of the images."}