即刻签名
Signing Right Away
AI总结：
提出 Signing Right Away (SRA) 安全架构，通过可信执行环境(TEE) 保护整个成像管道，为数字媒体提供从捕获到签名的不可篡改来源证明，解决数字内容信任危机。
摘要：
高保真合成媒体的激增，加上传统成像协议中可被利用的硬件漏洞，引发了数字内容的信任危机。现有对策，从事后分类器到基于软件的签名，均未能解决在捕获时刻建立与现实之间牢不可破的联系这一根本挑战。本白皮书介绍了 Signing Right Away (SRA)，这是一种综合安全架构，保证数字媒体的来源为“从硅到硅的签名”。SRA 利用四支柱安全模型——机密性、完整性、认证和重放保护，类似于 MIPI 安全框架 (CSF)，但将其范围扩展到内部数据创建，以创建加密签名的最终资产。通过保护整个成像管道（可信执行环境，TEE)，SRA �确保捕获的内容带有匿名、可验证的来源证明。这为依赖可信视觉信息的行业（包括新闻业、法律证据和保险）提供了基础解决方案。我们提出了 SRA 架构、基于经验原型的详细实现，以及一项比较分析，将 SRA 定位为内容信任链中必不可少的“最后一英里”。
英文摘要：
The proliferation of high-fidelity synthetic media, coupled with exploitable hardware vulnerabilities in conventional imaging pipelines, has precipitated a crisis of trust in digital content. Existing countermeasures, from post-hoc classifiers to software-based signing, fail to address the fundamental challenge of establishing an unbreakable link to reality at the moment of capture. This whitepaper introduces Signing Right Away (SRA), a comprehensive security architecture that guarantees the provenance of digital media from "silicon to silicon to signed file." SRA leverages a four-pillar security model-Confidentiality, Integrity, Authentication, and Replay Protection, akin to the MIPI Camera Security Framework (CSF), but also extends its scope beyond the internal data bus to the creation of a cryptographically sealed, C2PA-compliant final asset. By securing the entire imaging pipeline within a Trusted Execution Environment (TEE), SRA ensures that every captured image and video carries an immutable, verifiable proof of origin. This provides a foundational solution for industries reliant on trustworthy visual information, including journalism, legal evidence, and insurance. We present the SRA architecture, a detailed implementation roadmap informed by empirical prototyping, and a comparative analysis that positions SRA as the essential "last mile" in the chain of content trust.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
