Skip to main content

A secret image sharing scheme for light images


In this study, a new (r, n)-threshold secret image sharing scheme with low information overhead for images is provided, which has a low distortion rate, and is more applicable for light images. A secret image is encoded into n noise-like shadow images to satisfy the condition that any r of the n shares can be used to reveal the secret image, and no information on the secret can be revealed from any r – 1 or fewer shares. The size of the shadow images is relatively small. The experimental results show the effectiveness of the proposed scheme.

1. Introduction

Recently, digital-image sharing has played an important role because of the increasing requirements for image transmission. Effective and secure protection for important messages is a primary concern in commercial and military applications [1]. Numerous techniques, such as image hiding and watermarking, were developed to increase the security of the secret.

For the reliability issue, particularly for large-sized images, such as satellite or medical images, the secret image sharing (SIS) approaches are useful for protecting sensitive information [1]. The basic idea of secrete sharing is to transform an image into n shadow images that are transmitted and stored separately. The original image can be reconstructed only if the shadow images that participated in the revealing process form a qualified set. To avoid the single-point failure, for example, the encoded content is corrupted during transmission, the (r, n)-threshold image sharing schemes were therefore developed. In these developed schemes, the original image can be revealed if r or more of these n shadow images are obtained; however, users who with complete knowledge of r – 1 shares cannot obtain the original image.

Currently, numerous approaches have been developed for image sharing. Blakley [2] and Shamir [3] independently proposed original concepts of secret sharing in 1979. The proposed (r, n)-threshold scheme encodes the input data D into n shares, which are then distributed among n recipients. As previously mentioned, D can be reconstructed by anyone who obtains a predefined number r, where 2 ≤ rn, of the images.

In 2002, Thien and Lin [1] proposed an elegant SIS scheme based on the (r, n)-threshold. In the scheme, the size of generated shadow images is only 1/r of that of the original image, which is advantageous in subsequent storage and transmission. Following the work of Thien and Lin, certain image sharing schemes [46] have been proposed to reduce the size of the shadow images.

Lin and Tsai [4] transformed the secret image to frequency domain, and shared the first ten coefficients of each block. Wang and Su [5] designed an SIS method applying the image difference and the algorithm of Huffman coding in the sharing process. Chang et al. [6] proposed a method for color images sharing with smaller shadow images.

For the concern of flexibility in various applications, many improved image sharing schemes were explored. Lin and Tsai [7] incorporated digital watermarking technique with the image sharing technique to have additional capabilities of steganography and authentication. Thien and Lin [8] developed a method to make the shadow images look like portraits. Chen and Lin [9] applied the sharing concept to build a fault-tolerant progressive image transmission approach. Lukac and Plataniotis [10] utilized the concept of bit-level decomposition to share color images. Bai [11] classified the sharing schemes into two categories, the first called perfect secret sharing remains the same requirement as the original idea [1], and the other called ramp secrete sharing (RSS) has the property that the exposed information is proportional to the size of the unqualified group. Bai [11] also proposed an SIS scheme by using a combination of matrix projection and Shamir’s method. For the RSS, recently, Wang et al. [12] designed an incrementing visual cryptography scheme using random grids; Chen and Tsao [13] investigated a threshold RG-based visual secret sharing scheme aiming at providing the wide-use version.

Although numerous secret sharing schemes have been developed, the Thien–Lin scheme [1] remains the first choice among various applications because of its simplicity and efficiency. In particular, for embedded systems and hand-held devices, numerous operations of SIS schemes proposed by other researchers, such as Galois Field GF(2m) and inverse matrices, might not be visible or require extra computation power. These complicated operations would increase the power consumption or chip area for the chip design process.

In the Thien–Lin scheme, the input pixel values must be truncated into 0 to 251. The light pixel values greater than 251 of the secret image are lost. This drawback might not be suitable for light images. Therefore, the proposed method mainly focuses on the improvement of the Thien–Lin scheme.

The remainder of the article is organized as follows. Section 2 reviews the Shamir and Thien–Lin’s schemes. The proposed SIS method is introduced in Section 3, and experimental results and theoretical analysis are shown in Section 4. Finally, conclusions are summarized in Section 5.

2. Review

Image sharing is a critical means in the field of digital image security and digital image hiding. The basic idea in image sharing is to divide secret data into pieces for distribution to different persons, and certain subsets of these people can recover the entire secret. In general, image sharing can be described as dividing a secret image into n sub images, which have a certain degree of viability, but do not contain each other’s information. Through the application of an indeterminate equation, the gray values of images are divided in order to achieve image sharing and encryption. The secret image can be reconstructed through the complete knowledge of r sub images, where rn.

A simple and effective algorithm for image sharing based on above description is addressed in Section 2.1.

2.1. The Shamir (r, n) SIS scheme

Shamir [3] developed an (r, n)-threshold-based secret sharing scheme for 2 ≤ rn, n is the number of shadow images. The secret can be reconstructed by obtaining the predefined number r of n shares.

The scheme is to construct a polynomial function as

f x = a 0 + a 1 x + a 2 x 2 + + a r 1 x r 1 mod p ,

where p is a prime number, a 0 is the secret data and the remaining coefficients a 1, a 2,, a r–1 are randomly chosen (known values) from the integer range [0…p – 1].

For each secret data, a secret share is a pair of (x i , y i ) where

y i = f x i , 1 £ i £ n , and 0 < x 1 < x 2 < < x n < p .

According to Equations (1) and (2), if we acquire any r or more pairs of the n shares, then at least r equations y i = f(x i ) can be held in hand, the secret data a 0 is therefore resolved.

On the other hand, the secret data a 0 can also easily be obtained by using Lagrange’s interpolation [3].

2.2. The Thien–Lin (r, n) SIS scheme

Thien and Lin [1] extended Shamir’s idea, and proposed an SIS scheme based on the (r, n)-threshold scheme, in which each generated shadow image is 1/r the size of the secret image in 2002. In their method, the arithmetic operations are evaluated in the prime Galois Field GF(251). Consequently, a preprocessing to truncate pixel values larger than 250 is necessary. They also applied a permutation step on the original image before performing a sharing process to hide the correlations among neighboring pixels.

Consider a secret image O, comprising m pixels, to encode O to n shadow images S 1, S 2, S 3,…, S n , the sharing steps of the Thien–Lin (r, n) SIS scheme, where 2 ≤ rn, are summarized below.

Step 1. Truncate the pixel values in O greater than 250 (251 to 255) to 250, O’ denotes the image after truncation.

Step 2. Generate a permutation sequence with a secret key to permute the pixels of O’, the permutated image is expressed as Q.

Step 3. Set the current processing section number j to 1.

Step 4. Sequentially take r non-processed pixels, a 0, a 1, a 2,…, a r– 1, of Q to form a section j, and create a polynomial of degree r – 1 as follows:

f j x = a 0 + a 1 x + a 2 x 2 + + a r 1 x r 1 mod 251 .

Step 5. Generate n pixels:

f j 1 , f j 2 , f j 3 , , f j n ,

and sequentially assign them to the n shadow images S 1, S 2, S 3,…,S n .

Step 6. Increase j by 1.

Step 7. Repeat Steps 4 through 6 until all pixels of Q are processed.

This method uses all the coefficients of Equation (3) to share the secret pixels so that the size of the shadow images can be 1/r. This process is a lossy SIS scheme, no prediction exists to completely recover the original image O although the visual quality is good.

For the sharing phase of the Thien–Lin (r, n)-SIS scheme, without loss of generality, we assume the r shares are S 1, S 2, S 3,…, S r , and the following steps can be used to reveal the secret image O’ using any r (2 ≤ rn) of the shadow images.

Step 1. Set the current processing section number j to 1.

Step 2. Take one non-processed pixel from each of the r shadow images.

Step 3. Use these r pixels, f j (1), f j (2), f j (3),…, f j (r), and Lagrange’s interpolation to solve the coefficients a 0, a 1, a 2,…, a r–1 in Equation (3). They are the corresponding r pixel values of the j th section in Q.

Step 4. Increase j by 1.

Step 5. Repeat Steps 2 through 4 until all pixels of the shadow images S 1, S 2, S 3, …, S r are processed.

Step 6. Apply the inverse-permutation operation to the permuted image Q to recover the secret image to O’.

3. The proposed method

For the SIS of light images, the Thien–Lin method might not be sufficient to conduct the light areas because of the truncation. In this study, the first step of the proposed method is to change the prime number 251 of Thien–Lin’s method to 257, in which the remainders are in the range of [0…256].

The purpose of extension of the prime number is to protect the light image pixels from truncation errors, but it appears impossible to store a number greater than 255 into an 8-bit pixel. However, it works correctly when the pixel values of f j (x) in Equation (3) are in the range of [0…255], the only exception we are required to satisfy is “256.”

The major difference between the proposed method and the Thien–Lin method is that we use prime number 257 instead of 251, this change makes the truncation error disappeared, but numerous details still remain crucial.

To encode an image O into n shadow images, S 1, S 2, S 3,…, S n , the sharing steps of the proposed method are summarized below.

Step 1. Generate a permutation sequence with a secret key to permute the pixels of O, Q depicts the permutated image.

Step 2. Set the current processing section number j to 1.

Step 3. Sequentially, take r not-processed yet pixels, a 0, a 1, a 2,…, a r–1, of Q to form a sharing section j. Without loss of generality, let the current processing section be the j th section of the image, and create a polynomial of degree r – 1 as follows:

f j x = a 0 + a 1 x + a 2 x 2 + + a r 1 x r 1 mod 257 .

Step 4. Generate the n shadow pixels:

f j 1 , f j 2 , f j 3 , , f j n ,

set f j (x) to zero if f j (x) is equal to 256.

Step 5. Assign f j (1), f j (2), f j (3),…, f j (n) in Equation (6) to the j th pixel of the n shadow images accordingly.

Step 6. Increase j by 1.

Step 7. Repeat Steps 3 through 6 until all pixels of Q are processed.

We set f j (x) to zero for the specific case of “256” in Step 4 to solve the overflow problem, but the normal pixel values of zero are also affected. If this case occurs, the sharing step is not lossless, and the decoding result will trend to be unacceptable. Therefore, we need to develop a decoding scheme to solve this problem.

The proposed decoding scheme uses a similarity calculation process of the surrounding pixels to avoid the distortion problem.

The following steps can be used to reveal the secret image O’.

Step 1. Set the current processing section j to 1.

Step 2. Take a not-processed yet pixel of position j from each of the r shadow images.

Step 3. If any of the r pixels is equal to zero, record position j into a file, otherwise run Step 3.1.

Step 3.1 Use these r pixels f j (1), f j (2), f j (3),…, f j (r) and Lagrange’s interpolation to solve the coefficients a 0, a 1, a 2,…,a r–1 in Equation (5). They are exactly the r pixel values of the j th section in Q.

Step 4. Increase j by 1.

Step 5. Repeat Steps 2 through 4 until all pixels of the shadow images are processed.

Step 6. Apply the inverse-permutation operation to the permuted image Q to get the secret image to Q’.

Step 7. For each j (recorded in Step 3), run Step 3.1 by different combinations of zero and 256 for the zero pixels of the shadow image (the other pixels remain the same values), then we have several candidate solution sets (the number of combinations) in hand. Calculate each pixel’s squared Euclidean distances with its known neighboring pixels (at most eight) and sum them up for every solution set, the solution set with minimal distance is the solution we need for Section j.

Store each pixel value of Section j in Q. The new image O’ is the reconstructed secret image.

The proposed method has three benefits. First, by using the prime number 257, the preprocessing of the truncation is no longer necessary, and computation time is saved. Second, the problem we are facing in our scheme is no longer the truncation but the overflow. Therefore, the distortion can be minimized by the use of correlation calculation of adjacent pixels.

Third, the only drawback of the Thien–Lin method is that the light images might not be good enough. Because the proposed method has no truncation process needed so that the light images are applicable to the proposed method.

4. Experiments

The experimental results of the proposed method are prepared in this section to show the (2, 4)-threshold SIS scheme. The 256 × 256 gray-level secret image “Lena” is shown in Figure 1. The permuted image is shown in Figure 2, and the four shadow images are shown in Figure 3. The size of each shadow image is only 1/2 of that of the secret image. Figure 4 is the reconstructed image obtaining any two out of four in Figure 3, in which the size of the reconstructed image is identical to the secret image.

Figure 1

The secret image (original image for sharing) Lena.

Figure 2

The secret image after permutation.

Figure 3

The four noise-like shadow images of the secret image.

Figure 4

The reconstructed image by using the proposed method.

For security, the following is a theoretical analysis. In this experiment, we used a 256 × 256 gray-level secret image. For this image, because each section is formed of r pixels, there are (256 × 256)/r sections, that is (256 × 256)/r polynomials. To solve the r pixels (coefficients) of the polynomial, r equations should be acquired. If a hacker acquires r – 1 shadow images, he can construct only r – 1 equations. The possibility of guessing the right solution is then only 1/256. Hence, if there are (256 × 256)/r polynomials, the possibility of obtaining the correct image is only (1/256)(256×256)/r . In the Thien–Lin method, the possibility is (1/251)(256×256)/r[1].

5. Conclusions

This proposed method gives us an insight into SIS. The concept is to use prime number 257 to replace 251 in Thien–Lin’s method [1]. The proposed method has the following properties: (i) a secret image can be reconstructed from any r shadow image nearly perfectly or without any loss; (ii) the method reduces the size of the shadow images for further storage or transmission; (iii) the proposed method can protect the secret image if any (r – 1) or fewer shadow images are stolen, and the possibility of guessing right is low; and (iv) this method can be used on light images. The experimental results and theoretically analysis show that the proposed scheme performs well.


  1. 1.

    Thien CC, Lin JC: Secret image sharing. Compt. Graph. 2002, 26(5):765-770. 10.1016/S0097-8493(02)00131-0

    Article  Google Scholar 

  2. 2.

    Blakley GR: Safeguarding cryptographic keys, in Proceedings of AFIPS 1979 National Computer Conference, New Jersey. USA 1979, 48: 313-317.

    Google Scholar 

  3. 3.

    Shamir A: How to share a secret. Commun. ACM 1979, 22(11):612-613. 10.1145/359168.359176

    MATH  MathSciNet  Article  Google Scholar 

  4. 4.

    Lin CC, Tsai WH: Secret image sharing with capability of share data reduction. Opt. Eng 2005, 42: 2340-2345.

    Article  Google Scholar 

  5. 5.

    Wang RZ, Su CH: Secret image sharing with smaller shadow images. Pattern Recognit. Lett. 2006, 27(6):551-555. 10.1016/j.patrec.2005.09.021

    Article  Google Scholar 

  6. 6.

    Chang CC, Lin CC, Chen YH: A novel secret image sharing scheme in color images using small shadow images. Inf. Sci 2008, 178: 2433-2447. 10.1016/j.ins.2007.12.016

    Article  Google Scholar 

  7. 7.

    Lin CC, Tsai WH: Secret image sharing with steganography and authentication. J. Syst. Softw. 2004, 73(3):405-414. 10.1016/S0164-1212(03)00239-5

    MathSciNet  Article  Google Scholar 

  8. 8.

    Thien CC, Lin JC: An image sharing method with user-friendly shadow images. IEEE. Trans. Circuits Syst. Video Technol. 2003, 13(12):1161-1169. 10.1109/TCSVT.2003.819176

    Article  Google Scholar 

  9. 9.

    Chen SK, Lin JC: Fault-tolerant and progressive transmission of images. Pattern Recognit. 2005, 38(12):2466-2471. 10.1016/j.patcog.2005.04.002

    Article  Google Scholar 

  10. 10.

    Lukac R, Plataniotis KN: Bit-level based secret sharing for image encryption. Pattern Recognit. 2005, 38(5):767-772. 10.1016/j.patcog.2004.11.010

    MATH  Article  Google Scholar 

  11. 11.

    Bai L: A reliable (k, n) image secret sharing scheme with low information overhead. Int. J. Compt. Appl. 2010, 32(1):9-14.

    Google Scholar 

  12. 12.

    Wang RZ, Lan YC, Lee YK, Huang SY, Shyu SJ, Chia TL: Incrementing visual cryptography using random grids. Opt. Commun 2010, 283: 4242-4249. 10.1016/j.optcom.2010.06.042

    Article  Google Scholar 

  13. 13.

    Chen TH, Tsao KH: Threshold visual secret sharing by random grids. J. Syst. Softw 2011, 84: 1197-1208. 10.1016/j.jss.2011.02.023

    Article  Google Scholar 

Download references

Author information



Corresponding author

Correspondence to Kuang-Shyr Wu.

Additional information

Competing interests

The author declares that he has no competing interests.

Authors’ original submitted files for images

Rights and permissions

Open Access This article is distributed under the terms of the Creative Commons Attribution 2.0 International License (, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

Reprints and Permissions

About this article

Cite this article

Wu, KS. A secret image sharing scheme for light images. EURASIP J. Adv. Signal Process. 2013, 49 (2013).

Download citation


  • Secret sharing
  • Image sharing