Lightweight True In-Pixel Encryption with FeFET Enabled Pixel Design for Secure Imaging
Pith reviewed 2026-05-10 19:50 UTC · model grok-4.3
The pith
A CMOS pixel design encrypts photodiode signals in-place using programmable FeFET polarization states before any readout occurs.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
SecurePix integrates a ferroelectric field-effect transistor into each CMOS pixel so that its programmable, non-volatile multidomain polarization states define a unique analog transfer characteristic. The photodiode voltage is thereby converted to an encrypted analog output within the pixel itself. Full-image tests confirm that this mapping reduces ResNet-18 recognition accuracy to near-random levels on standard datasets, while the same symmetric key enables lookup-table-based recovery for authorized users. Layouts achieve a pixel pitch of 2.33 by 3.01 square micrometers with per-pixel programming and sensing power-delay products of 17 and 1.25 microwatt-microseconds.
What carries the argument
Programmable non-volatile multidomain polarization states of the ferroelectric field-effect transistor that set each pixel's analog transfer characteristic for symmetric-key encryption.
If this is right
- Authorized receivers recover original images via lookup-table inverse mapping using the shared symmetric key.
- The design provides hardware-level security by encrypting before any data reaches readout lines or external interfaces.
- Per-pixel power-delay products remain low at 17 microwatt-microseconds for programming and 1.25 for sensing.
- The layout fits within a 2.33 by 3.01 square micrometer pitch in standard 45 nm CMOS, supporting dense arrays.
- Neural-network-based inference attacks on captured images are strongly resisted as shown by the reported accuracy collapses.
Where Pith is reading between the lines
- This analog encryption method could apply to other sensor types where pre-readout scrambling is needed to limit data leakage in edge devices.
- If the polarization states prove stable across temperature and aging, the approach might reduce dependence on software encryption layers in power-constrained imaging systems.
- Integration with existing CMOS image sensor processes appears feasible without major changes to array architecture.
- Real-world testing under varied illumination and with actual noise sources would be required to confirm the encryption strength beyond simulation.
Load-bearing premise
The FeFET polarization states can be programmed reliably and stably to produce consistent analog encryption without being undermined by process variation, noise, or readout artifacts in actual fabricated hardware.
What would settle it
Fabricate a SecurePix array in silicon and measure whether the observed neural-network accuracy drops on MNIST and CIFAR-10 match the simulated values under real process variation and readout noise, or whether decryption lookup tables fail due to inconsistent transfer characteristics.
Figures
read the original abstract
Ensuring end-to-end security in image sensors has become essential as visual data can be exposed through multiple stages of the imaging pipeline. Advanced protection requires encryption to occur before pixel values appear on any readout lines. This work introduces a secure pixel sensor (SecurePix), a compact CMOS-compatible pixel architecture that performs true in-pixel encryption using a symmetric key realized through programmable, non-volatile multidomain polarization states of a ferroelectric field-effect transistor. The pixel and array operations are designed and simulated in HSPICE, while a 45 nm CMOS process design kit is used for layout drawing. The resulting layout confirms a pixel pitch of 2.33 x 3.01 um^2. Each pixel's non-volatile programming level defines its analog transfer characteristic, enabling the photodiode voltage to be converted into an encrypted analog output within the pixel. Full-image evaluation shows that ResNet-18 recognition accuracy drops from 99.29 percent to 9.58 percent on MNIST and from 91.33 percent to 6.98 percent on CIFAR-10 after encryption, indicating strong resistance to neural-network-based inference. Lookup-table-based inverse mapping enables recovery for authorized receivers using the same symmetric key. Based on HSPICE simulation, the SecurePix achieves a per-pixel programming power-delay product of 17 uW us and a per-pixel sensing power-delay product of 1.25 uW us, demonstrating low-overhead hardware-level protection.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper introduces SecurePix, a compact CMOS-compatible pixel architecture for true in-pixel encryption. It uses programmable non-volatile multidomain polarization states in a ferroelectric field-effect transistor (FeFET) to realize a symmetric-key analog transfer function that scrambles photodiode voltage into an encrypted output before readout. HSPICE simulations with a 45 nm PDK and corresponding layout are presented, reporting a pixel pitch of 2.33 × 3.01 μm², per-pixel programming power-delay product of 17 μW·μs, sensing power-delay product of 1.25 μW·μs, and post-encryption ResNet-18 accuracy collapse from 99.29 % to 9.58 % on MNIST and from 91.33 % to 6.98 % on CIFAR-10. Authorized decryption is performed via a lookup-table inverse mapping that uses the same key.
Significance. If the reported accuracy collapses prove robust under realistic device variation, the work would constitute a meaningful hardware-level contribution to end-to-end secure imaging by moving encryption inside the pixel with modest area and power overhead. The FeFET-based analog encryption approach and the concrete MNIST/CIFAR-10 numbers are the strongest elements; the 45 nm layout and explicit power-delay products also provide useful engineering data. The absence of variability or noise analysis, however, leaves the central security claim incompletely supported.
major comments (1)
- [Abstract / Simulation Results] Abstract and simulation description: the central security claim—that the FeFET-programmed analog transfer curves produce outputs that reduce ResNet-18 accuracy to ~7–10 %—rests entirely on nominal HSPICE runs. No Monte-Carlo analysis, FeFET-specific variation models (imprint, fatigue, threshold-voltage spread), retention-drift simulation, or photodiode-to-output noise budget is reported. Because even modest variation could collapse the intended output distribution and restore usable accuracy, this omission directly undermines the evidence for “strong resistance to neural-network-based inference.”
minor comments (2)
- [Abstract] Abstract: power-delay products are written as “17 uW us” and “1.25 uW us”; standard SI notation (μW·μs) and explicit units for both programming and sensing phases would improve clarity.
- [Evaluation] The manuscript states that “full-image evaluation” was performed but provides no information on the number of images, preprocessing, or whether the encrypted analog values were quantized before being fed to ResNet-18.
Simulated Author's Rebuttal
We thank the referee for the constructive feedback and for recognizing the potential contribution of the FeFET-based in-pixel encryption approach. We address the major comment on variability analysis below and will strengthen the manuscript accordingly.
read point-by-point responses
-
Referee: [Abstract / Simulation Results] Abstract and simulation description: the central security claim—that the FeFET-programmed analog transfer curves produce outputs that reduce ResNet-18 accuracy to ~7–10 %—rests entirely on nominal HSPICE runs. No Monte-Carlo analysis, FeFET-specific variation models (imprint, fatigue, threshold-voltage spread), retention-drift simulation, or photodiode-to-output noise budget is reported. Because even modest variation could collapse the intended output distribution and restore usable accuracy, this omission directly undermines the evidence for “strong resistance to neural-network-based inference.”
Authors: We agree that the security claims would be more robust with explicit variability analysis, as the current results are based on nominal HSPICE simulations. In the revised manuscript we will add Monte-Carlo runs that incorporate FeFET variation models drawn from published literature (threshold-voltage spread, imprint, and fatigue) together with a first-order photodiode-to-output noise budget. These additions will quantify how the encrypted output distributions and downstream ResNet-18 accuracy behave under realistic device non-idealities. We expect the accuracy collapse to remain substantial, but the new data will allow readers to assess the margin directly. revision: yes
Circularity Check
No significant circularity; results derive from independent simulations
full rationale
The paper describes a FeFET-based pixel design, simulates its analog transfer characteristics and encryption behavior in HSPICE using a 45 nm PDK, then evaluates the resulting encrypted images on ResNet-18 for MNIST and CIFAR-10 accuracy drops, plus computes power-delay products from the same simulations. These quantities are produced outputs rather than quantities defined in terms of themselves or fitted parameters that presuppose the result. No self-citations are load-bearing for the core claims, no uniqueness theorems are invoked, and no ansatz or renaming reduces the derivation to its inputs by construction. The chain is self-contained against external benchmarks.
Axiom & Free-Parameter Ledger
free parameters (1)
- FeFET polarization programming levels
axioms (1)
- domain assumption FeFET devices can be integrated into standard 45 nm CMOS processes with reliable non-volatile multidomain polarization control
invented entities (1)
-
SecurePix pixel architecture
no independent evidence
Lean theorems connected to this paper
-
IndisputableMonolith/Cost/FunctionalEquation.leanwashburn_uniqueness_aczel unclear?
unclearRelation between the paper passage and the cited Recognition theorem.
SecurePix ... performs true in-pixel encryption using a symmetric key realized through programmable, non-volatile multidomain polarization states of a ferroelectric field-effect transistor ... HSPICE simulation ... ResNet-18 recognition accuracy drops from 99.29% to 9.58% on MNIST
-
IndisputableMonolith/Foundation/RealityFromDistinction.leanreality_from_one_distinction unclear?
unclearRelation between the paper passage and the cited Recognition theorem.
The pixel and array operations are designed and simulated in HSPICE, while a 45 nm CMOS process design kit is used for layout drawing
What do these tags mean?
- matches
- The paper's claim is directly supported by a theorem in the formal canon.
- supports
- The theorem supports part of the paper's argument, but the paper may add assumptions or extra steps.
- extends
- The paper goes beyond the formal theorem; the theorem is a base layer rather than the whole result.
- uses
- The paper appears to rely on the theorem as machinery.
- contradicts
- The paper's claim conflicts with a theorem or certificate in the canon.
- unclear
- Pith found a possible connection, but the passage is too broad, indirect, or ambiguous to say the theorem truly supports the claim.
Reference graph
Works this paper leans on
-
[1]
Cybersecurity in PACS and Medical Imaging: an Overview,
M. Eichelberg, K. Kleber, and M. Kämmerer, “Cybersecurity in PACS and Medical Imaging: an Overview,” J. Digit. Imaging, vol. 33, no. 6, p. 1527, Dec. 2020, doi: 10.1007/S10278-020-00393-3
-
[2]
W. Si, “Image data privacy protection technology based on reversible information hiding and robust secret sharing,” Intell. Syst. with Appl., vol. 23, p. 200396, Sep. 2024, doi: 10.1016/J.ISWA.2024.200396
-
[3]
RACSen: Residue Arithmetic and Chaotic Processing in Sensors to Enhance CMOS Imager Security,
S. Tabrizchi, N. Taheri, S. Angizi, and A. Roohi, “RACSen: Residue Arithmetic and Chaotic Processing in Sensors to Enhance CMOS Imager Security,” Proc. ACM Gt. Lakes Symp. VLSI, GLSVLSI , pp. 551–555, Jun. 2024, doi: 10.1145/3649476.3658791
-
[4]
ChaoSen: Security Enhancement of Image Sensor through in -Sensor Chaotic Computing,
N. Taheri, S. Tabrizchi, S. Angizi, and A. Roohi, “ChaoSen: Security Enhancement of Image Sensor through in -Sensor Chaotic Computing,” Proc. - IEEE Int. Conf. Comput. Des. VLSI Comput. Process., pp. 1–8, 2024, doi: 10.1109/ICCD63220.2024.00012
-
[5]
Image Encryption Techniques: A Survey,
H. A. M. Abughali and U. Kose, “Image Encryption Techniques: A Survey,” 2024 Int. Jordanian Cybersecurity Conf. IJCC 2024 , pp. 62–69, 2024, doi: 10.1109/IJCC64742.2024.10847281
-
[6]
Adversarial Examples Created by Fault Injection Attack on Image Sensor Interface,
T. Oyama, K. Yoshida, S. Okura, and T. Fujino, “Adversarial Examples Created by Fault Injection Attack on Image Sensor Interface,” IEICE Trans. Fundam. Electron. Commun. Comput. Sci., vol. E107.A, no. 3, pp. 344 –354, Mar. 2024, doi: 10.1587/TRANSFUN.2023CIP0025/_P
-
[7]
M. Wolf and K. Samal, “Attacks on image sensors,” IEEE/ACM Int. Conf. Comput. Des. Dig. Tech. Pap. ICCAD , Oct. 2022, doi: 10.1145/3508352.3561097
-
[8]
In situ cryptography in a neuromorphic vision sensor based on light-driven memristors,
L. Hu et al., “In situ cryptography in a neuromorphic vision sensor based on light-driven memristors,” Appl. Phys. Rev., vol. 11, no. 1, p. 11411, Mar. 2024, doi: 10.1063/5.0185502/3176446
-
[9]
An optimized novel lightweight block cipher for image encryption,
R. Mohanapriya and K. . Nithish, “An optimized novel lightweight block cipher for image encryption,” Sci. Reports 2025 151 , vol. 15, no. 1, pp. 36060-, Oct. 2025, doi: 10.1038/s41598-025-19951-2
-
[10]
A review of cyber attacks on sensors and perception systems in autonomous vehicle,
T. Islam, M. A. Sheakh, A. N. Jui, O. Sharif, and M. Z. Hasan, “A review of cyber attacks on sensors and perception systems in autonomous vehicle,” J. Econ. Technol. , vol. 1, pp. 242–258, Nov. 2023, doi: 10.1016/J.JECT.2024.01.002
-
[11]
Y. G. Yang, Z. J. Wang, B. P. Wang, Y. H. Zhou, W. M. Shi, and X. Liao, “A new visually meaningful double -image encryption algorithm combining 2D compressive sensing with fractional -order chaotic system,” Multimed. Tools Appl. 2023 832, vol. 83, no. 2, pp. 3621–3655, May 2023, doi: 10.1007/S11042-023-15662-W
-
[12]
T. Oyama, S. Okura, K. Yoshida, and T. Fujino, “Experimental Study of Fault Injection Attack on Image Sensor Interface for Triggering Backdoored DNN Models,” IEICE Trans. Fundam. Electron. Commun. Comput. Sci., vol. E105.A, no. 3, pp. 336–343, Mar. 2022, doi: 10.1587/TRANSFUN.2021CIP0019
-
[13]
A Survey of Hardware-Based AES SBoxes: Area, Performance, and Security,
P. S. Curlin, J. Heiges, C. Chan, and T. S. Lehman, “A Survey of Hardware-Based AES SBoxes: Area, Performance, and Security,” ACM Comput. Surv. , vol. 57, no. 9, p. 37, Apr. 2025, doi: 10.1145/3724114
-
[14]
Different channels to transmit information in scattering media,
X. Zhang et al., “Different channels to transmit information in scattering media,” PhotoniX 2023 41, vol. 4, no. 1, pp. 10-, Feb. 2023, doi: 10.1186/S43074-023-00087-3
-
[15]
Deep learning-based image reconstruction for photonic integrated interferometric imaging,
Z. Zhang et al., “Deep learning-based image reconstruction for photonic integrated interferometric imaging,” Opt. Express, Vol. 30, Issue 23, pp. 41359 -41373, vol. 30, no. 23, pp. 41359–41373, Nov. 2022, doi: 10.1364/OE.469582
-
[16]
A Review of Digital Pixel Sensors,
M. R. I. Udoy, S. Alam, M. M. Islam, A. Jaiswal, and A. Aziz, “A Review of Digital Pixel Sensors,” IEEE Access, vol. 13, pp. 8533– 8551, 2025, doi: 10.1109/ACCESS.2025.3526879
-
[17]
In-pixel foreground and contrast enhancement circuits with customizable mapping,
M. R. I. Udoy, M. M. Islam, E. Johnson, and A. Aziz, “In-pixel foreground and contrast enhancement circuits with customizable mapping,” Sci. Reports 2025 151, vol. 15, no. 1, pp. 1–10, Jan. 2025, doi: 10.1038/s41598-025-87965-x
-
[18]
Sub-Micron Binary HyperPixel Sensor Circuit: In -Pixel Binarization with ariable Thresholding,
M. R. I. Udoy, M. M. Islam, A. Jaiswal, and A. Aziz, “Sub-Micron Binary HyperPixel Sensor Circuit: In -Pixel Binarization with ariable Thresholding,” 2024 IEEE Comput. Soc. Annu. Symp. VLSI, pp. 21–26, Jul. 2024, doi: 10.1109/ISVLSI61997.2024.00016
-
[19]
A three-terminal non-volatile ferroelectric switch with an insulator– metal transition channel,
J. Vaidya, R. S. S. Kanthi, S. Alam, N. Amin, A. Aziz, and N. Shukla, “A three-terminal non-volatile ferroelectric switch with an insulator– metal transition channel,” Sci. Reports 2022 121, vol. 12, no. 1, pp. 1–7, Feb. 2022, doi: 10.1038/s41598-021-03560-w
-
[20]
S. Deng et al., “A Comprehensive Model for Ferroelectric FET Capturing the Key Behaviors: Scalability, Variation, Stochasticity, and Accumulation,” Dig. Tech. Pap. - Symp. VLSI Technol. , vol. 2020-June, Jun. 2020, doi: 10.1109/VLSITECHNOLOGY18217.2020.9265014
-
[21]
Multidomain FeFET-Based Pixel for In -Sensor Multiply -and-Accumulate Operations,
M. R. I. Udoy, D. Ferrer, W. Li, K. Ni, and A. Aziz, “Multidomain FeFET-Based Pixel for In -Sensor Multiply -and-Accumulate Operations,” IEEE Trans. Electron Devices , 2025, doi: 10.1109/TED.2025.3615918
-
[22]
J. An et al., “Effect of post-metallization anneal on monolithic co - integration of Hf0.5Zr0.5O2-based FeFET and CMOS,” Sci. Reports 2025 151, vol. 15, no. 1, pp. 17237-, May 2025, doi: 10.1038/s41598- 025-02281-8
-
[23]
An Ultra- Dense 2FeFET TCAM Design Based on a Multi -Domain FeFET Model,
X. Yin, K. Ni, D. Reis, S. Datta, M. Niemier, and X. S. Hu, “An Ultra- Dense 2FeFET TCAM Design Based on a Multi -Domain FeFET Model,” IEEE Trans. Circuits Syst. II Express Briefs, vol. 66, no. 9, pp. 1577–1581, Sep. 2019, doi: 10.1109/TCSII.2018.2889225
-
[24]
Correction Method for Power Analysis of Digital Integrated Circuits Based on Standard Cells,
Q. Li, Z. Lyu, and J. Shen, “Correction Method for Power Analysis of Digital Integrated Circuits Based on Standard Cells,” https://doi.org/10.1142/S0218126625501324, vol. 34, no. 7, Mar. 2025, doi: 10.1142/S0218126625501324
-
[25]
What is Predictive Technology Model (PTM)?,
Y. (Kevin) Cao, “What is Predictive Technology Model (PTM)?,” ACM SIGDA Newsl. , vol. 39, no. 3, pp. 1 –1, Mar. 2009, doi: 10.1145/1862891.1862892
-
[26]
J. C. Ahn et al., “A 1/4-inch 8Mpixel CMOS image sensor with 3D backside-illuminated 1.12µm pixel with front -side deep -trench isolation and vertical transfer gate,” Dig. Tech. Pap. - IEEE Int. Solid- State Circuits Conf. , vol. 57, pp. 124 –125, 2014, doi: 10.1109/ISSCC.2014.6757365
-
[27]
Event Detection Pixel Sensor (EDPS) Circuit Using Phase Transition Material,
M. R. I. Udoy, C. Schuman, G. Rose, and A. Aziz, “Event Detection Pixel Sensor (EDPS) Circuit Using Phase Transition Material,” 2025 Device Res. Conf. , pp. 1 –2, Jun. 2025, doi: 10.1109/DRC66027.2025.11105748
-
[28]
Y. Kitamura et al., “Suppression of crosstalk by using backside deep trench isolation for 1.12μm backside illuminated CMOS image sensor,” Tech. Dig. - Int. Electron Devices Meet. IEDM , 2012, doi: 10.1109/IEDM.2012.6479093
-
[29]
Fundamentals of Digital Image Processing: A Practical Approach with Examples in Matlab,
C. Solomon and T. Breckon, “Fundamentals of Digital Image Processing: A Practical Approach with Examples in Matlab,” Fundam. Digit. Image Process. A Pract. Approach with Examples Matlab, pp. 1–328, Jan. 2011, doi: 10.1002/9780470689776
-
[30]
Deep residual learning for image recognition,
K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” Proc. IEEE Comput. Soc. Conf. Comput. Vis. Pattern Recognit., vol. 2016-December, pp. 770–778, Dec. 2016, doi: 10.1109/CVPR.2016.90
-
[31]
CIFAR-10 and CIFAR -100 datasets
“CIFAR-10 and CIFAR -100 datasets.” Accessed: Nov. 23, 2025. [Online]. Available: https://www.cs.toronto.edu/~kriz/cifar.html
work page 2025
-
[32]
Gradient-based learning applied to document recognition,
Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner, “Gradient-based learning applied to document recognition,” Proc. IEEE, vol. 86, no. 11, pp. 2278–2323, 1998, doi: 10.1109/5.726791
-
[33]
S. Lee et al., “Design Guidelines of Hafnia Ferroelectrics and Gate- Stack for Multilevel -Cell FeFET,” IEEE Trans. Electron Devices , vol. 71, no. 3, pp. 1865 –1871, Mar. 2024, doi: 10.1109/TED.2024.3355873
-
[34]
Z. Jiang et al., “Asymmetric Double-Gate Ferroelectric FET to Decouple the Tradeoff Between Thickness Scaling and Memory Window,” Dig. Tech. Pap. - Symp. VLSI Technol. , vol. 2022 -June, pp. 395 –396, 2022, doi: 10.1109/VLSITECHNOLOGYANDCIR46769.2022.9830172
work page doi:10.1109/vlsitechnologyandcir46769.2022.9830172 2022
-
[35]
Robustly stable intermediate memory states in HfO2−based ferroelectric field−effect transistors,
C. Liu et al., “Robustly stable intermediate memory states in HfO2−based ferroelectric field−effect transistors,” J. Mater., vol. 8, no. 3, pp. 685–692, May 2022, doi: 10.1016/J.JMAT.2021.11.003
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.