Origin Lens: A Privacy-First Mobile Framework for Cryptographic Image Provenance and AI Detection
Organizations: Frankfurt University of Applied Sciences Frankfurt am Main, Germany · Doctoral Center for Applied Computer Science (PZAI) Germany · IMT Atlantique, UMR IRISA, Chaire Cyber CNI Rennes, France
Abstract
The proliferation of generative AI poses challenges for information integrity assurance, requiring systems that connect model governance with end-user verification. We present Origin Lens, a privacy-first mobile framework that targets visual disinformation through a layered verification architecture. Unlike server-side detection systems, Origin Lens performs cryptographic image provenance verification and metadata-based AI detection locally on the device via a Rust/Flutter hybrid architecture. Our system integrates multiple signals - including cryptographic provenance, generative-model metadata and watermarks, and optional retrieval-augmented verification - to provide users with graded confidence indicators at the point of consumption. We discuss the framework's alignment with regulatory requirements (EU AI Act, DSA) and its role in verification infrastructure that complements platform-level mechanisms.
Figures & tables
Appendix figures & tables7 assets
Supplementary material from the paper’s appendix.
Appendix
| Status | Color | Description |
|---|---|---|
| Verified | Green | Valid C2PA manifest with trusted certificate chain |
| AI Generated | Purple | Content identified as AI-generated via C2PA or EXIF markers |
| Warning | Orange | No manifest found, expired certificate, or parsing issue |
| Invalid | Red | Hash mismatch, broken certificate chain, or detected manipulation |
| Regulation | Relevant Requirements | Origin Lens Alignment |
|---|---|---|
| EU AI Act (2024/1689) | Article 50(2): Machine-readable marking of AI-generated content | C2PA manifest parsing and AI generation detection via metadata |
| GDPR (2016/679) | Article 25: Privacy by Design; Article 5(1)(c): Data minimization | On-device processing; no server transmission for core verification |
| Cyber Resilience Act (2024/2847) | Security-by-design for digital products | Rust memory safety; X.509 certificate validation |
| NIS2 Directive (2022/2555) | Supply chain security requirements | Local trust store; certificate chain verification |
AI-Generated Image Detection
AI-generated image detection identifies synthetic or AI-edited images and develops methods that generalize across generators, domains, and image transformations.
See all 198 papers