Abstract:
A method displays an image only to an authorized user by generating a mask image from a data image. The data and mask image are then displayed periodically in an alternating manner on a display device by a select signal. The opening end shutting of an optical shutter device is synchronized to the displaying of the selected images so that only the data image is perceived by the authorized user viewing the display device through the optical shutter device, and a gray image is perceived by an unauthorized user viewing the data and mask images directly.

Description:
FIELD OF THE INVENTION  
         [0001]    The present invention relates generally to the field of data security, and more particularity to displaying secure data on display devices in public locations.  
         BACKGROUND OF THE INVENTION  
         [0002]    With the advent of desktop and portable computer systems, the problem of maintaining the confidentiality of secure data is increased. This is a particular problem for laptop computers and hand-held personal digital assistants (PDAs) that are frequently used in public locations. Data security is also a problem for other display systems, such as automated teller machines, and Internet terminals in public locations, such as Internet shops and airports.  
           [0003]    In recent years, a great deal of effort has been expended on making flat panel display screens as readable as CRT screens by using active matrix technology. However, enhanced readability of displayed data increases the risk of confidential information being viewable by unauthorized persons when portable displays are used in public locations.  
           [0004]    One solution is to provide the display with physical “blinders” mounted on the side of the display to limit the angle at which the display can be seen. Another type of mechanical solution uses microscopic louvers to obscure the screen to any viewer not along the axis of the louvers. However, this does not prevent viewing by a person sitting directly behind the user of the display. In addition, this type of arrangement does not allow the user to leave the equipment unattended.  
           [0005]    One manufacturer, InvisiView Technologies, Inc., Boca Raton, Fla., removes the front polarizer from a LCD type of device so the displayed image is no longer visible. If the display is viewed through polarized lenses, it becomes visible. This is a partial solution because anyone wearing consumer-grade polarized sunglasses can defeat the system.  
           [0006]    U.S. Pat. No. 5,528,319“Privacy filter for a display device” issued to Austin on Jun. 18, 1996 describes a privacy filter constructed of spaced-apart opaque grids that can be fitted to a display device. The problems with this arrangement is that it requires physical modification of the device, and like the blinders above, only limits the angle at which the display can be viewed.  
           [0007]    U.S. Pat. No. 5,629,984“System and method for data security” issued to McManis on May 13, 1997 describes a display system that alternates data frames with flash frames where an overwhelming majority of pixels are illuminated so that the flash frames have an average intensity substantially greater than the data frames. The user views the display with a shutter device that is synchronized to the displayed frames. The shutter is open for the data frames, and closed for the flash frames. The interspersed flash frames are intended to make it difficult for a viewer without the optical shutter device to intelligibly read the data frames.  
           [0008]    The problem with this system is that most people can perceive images even is the relative intensity of darkest elements is only about {fraction (1/100)} that of the brightest elements. In other words, the intensity of the flash frames would have to be increased by at least 20 db in order for the device to be effective. In a practical LCD applications, the display elements are usually driven at full power to maximize brightness. Therefore, it is problematic whether the driving voltage can be increased by a factor of a hundred. Even if the flash frames can be displayed, it is well known that over illuminating the display screen greatly shortens its useable life-span. In addition, the flash frames would attract attention to bystanders, and the device is more susceptible to counter attacks.  
         SUMMARY OF THE INVENTION  
         [0009]    The invention provides a method for displaying an image only to an authorized user by generating a mask image from a data image. The data and mask image are then displayed periodically in an alternating manner on a display device by a select signal. The opening and shutting of an optical shutter device is synchronized to the displaying of the selected images so that only the data image is perceived by the authorized user viewing the display device through the optical shutter device, and a gray image is perceived by an unauthorized user viewing the data and mask images directly. Alternatively, the displaying and operation of the optical shutter device can be in a random order that is only known to the display device and the shutter. In another alternative, the displaying and operation of the optical shutter device is done on a per pixel basis, either randomly or periodically. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0010]    [0010]FIG. 1 is flow diagram of a privacy enhanced display system according to the invention;  
         [0011]    [0011]FIG. 2 is a flow diagram of a secure display according to the invention;  
         [0012]    [0012]FIG. 3 is a flow diagram of an encoded display according to the invention; and  
         [0013]    [0013]FIG. 4 is a flow diagram of an alternative embodiment of a secure display system. 
     
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT  
       [0014]    System Overview  
         [0015]    Movies, televisions and computerized display devices normally display frames at a predetermined frame rate, e.g., twenty-four per second or higher. Persistence in the human visual system causes the rapidly displayed frames to merge into a continuous image. In the present invention, this persistence is used to enable privacy-enhanced display devices.  
         [0016]    As shown in FIG. 1, input to the system is a data frame  101 , or perhaps a sequence of data frames as in a video. Each data frame, in sequential order, is negated  110  to produce a mask (reverse) frame  102 . The negation can be done by an inverter. A display device  120  than selectively displays either the data frame or the mask frame  102 . The selection is done according to a select signal  161  generated by a controller  160 . In one embodiment, the controller  160  produces a clock signal that alternatively selects either the data frame or the negative frame.  
         [0017]    The net result is a featureless neutral “gray” image  103  because the overall perceived intensity of the image is half-way between sum of the intensities of the data and mask frames. Thus, privacy of the displayed information is preserved. It should be understood that frames of a video can be similarly be processed in sequence.  
         [0018]    A user  130  perceives only the data frames  101  by viewing the neutral images  103  through a shutter device  140  that is synchronized  104  in phase and frequency to the frame rate of the display device  120 . Frequency synchronization can be done internally to the optical shutter device  140 . The shutter device  140  is open for the data frames  101  and closed for the mask frames  102  so that only the phase needs to be synchronized.  
         [0019]    One type of shutter device can use modified CrystalEyes™ eyewear manufactured by StereoGraphics Corporation of San Rafael, Calif. and described in U.S. Pat. Nos. 44,967,268, 5,117,302, 5,181,133, and 5,463,428 incorporated herein by reference. The unmodified glasses operate the left and right lenses sequentially for stereoscopic viewing, the modified lenses operate in parallel.  
         [0020]    However, nematic liquid-crystal stereographic shutter glasses are typically limited to an operating frequency of 60 Hz, or less. This leads to noticeable flickering in the perceived image. Therefore, our shutter device  140  includes polarizing lenses  141 - 142  on either side of a ferro-electric liquid crystal (FLC) polarization rotator  143 . The FLC rotator can switch polarization rotation from +π/4 to −πpi/4 at a frequency up to about 100 KHz, when driven by a bipolar ±5.0 volt control line  144  to take advantage of faster displays.  
         [0021]    Wire or wireless, e.g., infra-red, communication can be used to synchronize to the phase of the display device  120 . This allows the display device according to the invention to be used concurrently by multiple users in a public location without requiring a physical link between the users and the display device.  
         [0022]    For safety and ease-of-use reasons, the optical shutter device  140  operates continuously while worn by the user so that the user&#39;s environment remains visible even if the user is not in range of the display unit. Thus, the synchronization signal  104  only needs to control the phase, and not the frequency or amplitude, of the select signal  161 .  
         [0023]    If the data frames  101  are binary or two-tone image, then a negation simply means turning all white components of the data frames, e.g., pixels with zero or off values, to black components in the negative frames, e.g. pixels with one or on values. If the data frame use a gray scale, then the negation simply subtracts the pixel values of the data frames from the maximum pixel value, i.e., 255 for an eight bit pixel value.  
         [0024]    Although a primary use of the invention is with portable display devices, it should be noted that the display system as described above can use any number of illumination techniques including CRT, LCD, LED, laser, digital projector—rear- or front, large or small, and so forth.  
         [0025]    Color Display  
         [0026]    In the case of color images, the negation is performed independently on each of the color channels, e.g., red, green, and blue for a “RGB” display system. Thus, for a system that display each of red, green, and blue at 256 levels, such as commonly available 24-bit (3×8) color mode display devices, each pixel of the red negative frame is displayed at a value of 255 minus the corresponding red data frame pixel value. Similarly, the values for the green and blue channels are determined.  
         [0027]    The intensity of the light generated by most display devices is usually not a linear function of the applied signal. A conventional CRT has a power-law response to voltage. Therefore, the intensity of the light produced at the face of the screen of the display is approximately the applied voltage, raised to the 2.2 power. The numerical value of the exponent of this power function is colloquially known as gamma (γ). This non-linearity must be compensated for in the negated frames.  
         [0028]    To do this correction for a typical CRT type of display device, the input pixel values from 0 to 255, after negation, are remapped to output pixel values according to  
         [0029]    output=255((input/255) 1/γ )+0.5  
         [0030]    where γ is obtained from the display device CRT manufacturer&#39;s specifications.  
         [0031]    Secure Display  
         [0032]    [0032]FIG. 2 shows an alternative embodiment the input is a public image  201  and a secret image  102 . The intensity values of the images  201 - 202  are respectively scaled and off-set  211 - 212  to produce a scaled public image A  221  and a scaled secret image Z  222 . For every pixel p p  in the public image  201 , αp p +A, and the secret pixels are βp s +B. The scaled images  221 - 222  are then combined  230  to produce a mask image  240 . The mask image  240  and scaled secret image  222  are then displayed  120  according to the select signal  161  produced by the controller  160 , as described above. The result is that without the optical shutter device  140 , the perceived image  261  is the scaled public image  221 . However, when the display device  120  is viewed through the optical shutter device  140 , the perceived image  262  is the scaled secret image  222 .  
         [0033]    The scaling and off-setting are such that the intensity values of the mask image  240  are within the dynamic range of the display device. If the normalized dynamic range of the display device is 0 to 1, and the respective scaling factors are α and β, and the off-sets A and B, then α+β≦1, and α+A≦B. These inequalities constrain the respective dynamic ranges of the perceived public image  261  and the perceived secret images  262 . A high-dynamic-range public image forces a low-dynamic-range, dim perceived secret image, and vice versa. If α=β, and A=0.0 and B=0.5, the perceived public and secret images will be of equal quality. The perceived public image will lower in contrast with an elevated black level, and the perceived secret image will be dimmer, but still within a brightness range for acceptable viewing.  
         [0034]    Coded Display  
         [0035]    The above described display devices provide a reasonable level of privacy for the casual user. However, because the displayed images alternate at a constant frequency, e.g., 60 Hz, the system is still open to attack by a persistent snooper. By scanning through the frequency range, a snooper could determined the frequency of the alternating display.  
         [0036]    [0036]FIG. 3 shows an embodiment where a pseudo random (PR) generator  310  is used to generate a pseudo random sequence of zero and one bits  311 . The random sequence can be produced by a hash function that uses a seed value, half of which is stored internally, and the other half is supplied in real-time, perhaps at the frame rate. The PR generator  310  can be incorporated into the controller  160  instead of a constant frequency clock.  
         [0037]    In the case of a wireless interconnection, two pseudo-random generators can be used. Each is initialized to the same state and so will produce the same random sequence. One sequence is used in the display device, and the other in the optical shutter device. Synchronization between the sequences can be done as described above.  
         [0038]    A coder  320  converts each zero bit to a pair of select signals [0,1], and each one bit to a pair of select signals [1,0]. The resulting coding sequences  321 - 322  are fed, in parallel, to the display device  120  and a shutter device  140  to perform the appropriate selection of the order of displayed images. Note, the pairs in the select signals  321  and  322  ensure that each successive pair of input frames  340  will alternate, so the perceived effect will be as above, with the added advantage that it is impossible for a snooper to determine the random sequence  311 , without direct access to the equipment.  
         [0039]    Serial Coding  
         [0040]    So far, we have assumed that pixels are displayed and perceived in a parallel manner. This is effectively true for most LCD and CRT devices. Even though the pixels are initially generated in a serial beam and displayed in a raster scan order on a CRT, the relatively long decay time of the physical display elements, e.g., phosphor dots, parallelizes the perceived illumination. Consequently, the optical shutter device can operates at the frame rate of the display device.  
         [0041]    For a device where the pixels can truly be displayed in a serial manner, e.g., LEDs, FLCs, or laser displays, we can modify the above encoding technique to further enhance the security of the displayed images.  
         [0042]    In this embodiment, the input image is in the form of a serial stream of pixel values  350 , e.g., zeroes and ones for a binary image or byte values for gray-scale and color images. Now, we modulate the pixels and shutter on a per pixel basis. For every zero value in the coding sequence  321  we display the correct pixel value, and for every one bit in the coding sequence, we negate the pixel value, as described above with reference to FIG. 1. Similarly, the opening and closing of the optical shutter device  140  is on a pixel basis, with the optical shutters closed for negated pixel values. Thus, some one viewing the display synchronized to the frame rate of the images will still only perceive a gray image.  
         [0043]    LCD Display  
         [0044]    In the case where the display device  120  uses a low-powered liquid crystal display (LCD), such as used with many portable display systems, additional enhancement can be made, as shown in FIG. 4, for the following reasons. First, a LCD cannot change state as quickly as CRT type of display devices, therefore perceived persistence may be an issue. Second, LCDs are generally low-power, aggravating the degradation of the perceived images.  
         [0045]    Therefore, our LCD  400  is constructed as follows. A first polarizer (p 1 )  401  is disposes between a backlight (B)  420  and a first optical rotator element (R 1 )  430 . The backlight is a source of incident light of mixed polarization. We omit the customary other polarizer found in conventional LCDs. In this embodiment, the optical shutter device  440  includes a second optical rotator element (R 2 )  411  and a second polarizer (p 2 )  412 . An input image  400  is modulated  420  by angle of polarization. The modulation can be regular or random as described above.  
         [0046]    If the images is viewed by the unaided eye, then it appears uniformly white. If the image is viewed through standard polarizing lenses, as for the prior art InvisiView device, it is still unreadable. However, when the image is viewed through the optical shutter device  410  modulated synchronously to the image  400 , the image will become visible.  
         [0047]    The modulation of the rotators can be done adding ±45° off-set to the normal polarization modulation. This can be done by biasing the overall screen voltage, because in the LCD, the amount of rotation is substantially linearly proportional to the driving voltage. As described above, the modulation of the rotators can be done periodically or randomly, depending on the level of security desired.  
         [0048]    Thus, areas of the image that appear bright in one polarization direction appear dark in a perpendicular direction, and these are reverse whenever the +45 to −45 degree rotational voltage modulation occurs. The result is as before, the screen appears a featureless gray to unauthorized viewers, even those wearing polarizing sunglasses, and only properly modulated shutter devices will make the image  400  visible.  
         [0049]    This invention is described using specific terms and examples. It is to be understood that various other adaptations and modifications may be made within the spirit and scope of the invention. Therefore, it is the object of the appended claims to cover all such variations and modifications as come within the true spirit and scope of the invention.