Covert Communication for Dual Images with Two-Tier Bits Flipping

Abstract

Data hiding in digital images is a potent solution for covert communication, embedding sensitive data into cover images. However, most existing methods are tailored for one-to-one scenarios, which present security risks. To mitigate this vulnerability, we introduce an innovative one-to-two data hiding scheme that employs a two-tier bit-flipping strategy to embed sensitive data in dual images. This process produces two stego images which are then transmitted to two distinct recipients who cannot extract any sensitive data alone. The sensitive data can only be extracted when the two recipients trust each other. Through this method, we can secure the stego images. The experimental results illustrate that our method achieves an excellent data payload while maintaining high visual quality.

1. Introduction

With the proliferation of sensitive data being shared online, covert communication becomes imperative to ensure secure transmission. In response, data hiding technology has emerged as a solution to embed sensitive data within cover media [1]. However, traditional data hiding methods often cause irreversible damage to the cover media. To address this issue, reversible data hiding (RDH) schemes have been developed to allow the restoration of the original cover media after extracting sensitive data.

As digital images are ubiquitous in multimedia applications, numerous reversible data hiding (RDH) techniques have emerged in recent years. These techniques can be categorized into four types based on the processing domain: spatial domain-based methods, transform domain-based methods, compressed domain-based methods, and encryption domain-based methods. The spatial domain-based techniques [2,3,4,5,6,7,8,9,10,11,12,13] involve modifying pixel values directly to embed secret data into images. Transform domain-based techniques [14,15,16,17] convert plaintext images into frequency coefficients first and embed secret data by modifying these coefficient values. Compressed domain-based approaches [18,19,20,21,22] leverage the compressed codes of digital images as carriers for data embedding. With the rapid evolution of cloud technology, encryption domain-based methods have emerged. These techniques involve encrypting the cover image before transmission through a public channel and ensuring the confidentiality of images while concealing sensitive data [23,24,25].

However, the methods mentioned above are designed for a one-to-one model where there is only one sender and one recipient throughout the entire process. One significant concern with these approaches is that they grant the recipient considerable influence over the stego image, potentially compromising the confidentiality and integrity of the embedded data. To address this problem, the dual-image RDH method has been introduced. In 2015, Qin et al. [26] proposed a dual-image reversible data hiding (RDH) method based on the exploiting modification direction (EMD) technique. In their method, secret data are embedded into the pixels of the first cover image using the EMD technique, while the pixels of the second cover image are adaptively adjusted according to the modifications made to the first image. Later, Lu et al. [27] introduced a method to mitigate image distortion, where the value of the secret data are reduced using the center folding strategy. The reduced secret data are then embedded into two cover images using the averaging method. On this basis, Yao et al. [28] further enhanced the embedding capacity without introducing any additional distortion. In 2018, Jana et al. [29] introduced a novel RDH method for dual-image utilizing the (7, 4) Hamming code. Their approach involves adjusting the redundant Least Significant Bits (LSBs) of a block of seven pixels with an odd parity. The secret data are then embedded by introducing errors caused by tampering in suitable positions, and leveraging the properties of the Hamming code. Based on the characteristics of the EMD matrix, Chen et al. [30] embedded one secret bit and a base-5 digit into a cover pixel to generate a pixel pair and assigned to two stego images. In 2023, Kim et al. [31] employed a (3, 1) Hamming code and an optimal pixel adjustment process (OPAP) to embed secret data into the dual images. In this one-to-two model, two stego images are generated and transmitted to two recipients. In this case, the two recipients can extract the embedded sensitive data only if they establish trust in each other. By distributing sensitive data across two stego images and requiring mutual trust between the two recipients for extraction, the dual-image RDH method enhances security in covert communication scenarios. However, existing methods often have limitations in embedding capacity, which may not be sufficient for applications requiring large data payloads. Therefore, there is an urgent need for advancements in dual-image reversible data hiding techniques to accommodate these high-capacity application demands.

Given the necessity for greater embedding capacity, we present a novel two-tier bit-flipping embedding strategy within the dual-image RDH framework. The original image is transformed to form two cover images first. Then, pixels from the corresponding positions of the cover images are paired. Afterward, sensitive data are embedded using a two-tier bit-flipping strategy where the bits of the pixel pairs undergo a bit-flipping process. The resulting stego images are transmitted to the recipients who cannot extract private information from the stego image alone. Sensitive data can only be extracted when they trust each other. Our method is applicable to common public communication channels such as email and Facebook. An application example is given in Figure 1. The contributions of the proposed scheme are outlined below:

(1)

We introduce a two-tier bit-flipping embedding strategy for covert communication.

(2)

The proposed dual-image RDH method is better suited for covert communication scenarios than single-image RDH methods.

(3)

Our scheme surpasses existing methods in embedding capacity while maintaining high image quality.

The subsequent sections of this paper are structured as follows: Section 2 introduces a state-of-the-art dual-image-based RDH method. Section 3 elaborates on the proposed two-tier bit-flipping embedding strategy. Experimental results and discussions are provided in Section 4. Finally, Section 5 concludes this scheme.

2. Related Works

In this section, we introduce a reversible data hiding scheme based on dual images proposed by Kim et al. [31]. Their scheme employs a (3, 1) Hamming code and an optimal pixel adjustment process (OPAP) [32] in data embedding. It consists of two essential components: cover image generation and data embedding.

2.1. Generation of Two Cover Images

Given a grayscale image $I$ of size $M\times N$ where the pixels are denoted as $p\left(i\right), i=1,2,\cdots , M\times N$, two cover images $C{I}_1$ and $C{I}_2$ are generated based on this grayscale image. The details are outlined below. The Equations (1)–(5) are all derived from [31].

Step 1: Read a pixel $p$ in the grayscale image $I$ and assign $p$ into pixel $p_1$ and $p_2$, where $p_1=\left(p_1^1{p}_1^2{p}_1^3{p}_1^4{p}_1^5{p}_1^6{p}_1^7{p}_1^8\right)$ and $p_2=\left(p_2^1{p}_2^2{p}_2^3{p}_2^4{p}_2^5{p}_2^6{p}_2^7{p}_2^8\right)$.

Step 2: Construct a 3-bits codeword $\gamma$ from the pixel pair $\left(p_1,p_2\right)$ by

$$\gamma =\left({\gamma }_1, {\gamma }_2, {\gamma }_3\right)=\left(\mathrm{mod}\left(p_1, 2\right), \mathrm{mod}\left({\displaystyle \frac{p_2}{2}},2\right),\mathrm{mod}\left(p_2,2\right)\right).$$

(1)

Step 3: Compute the syndrome $\delta$ of the codeword $\gamma$ using

$$\delta =\left({\gamma }_1, {\gamma }_2, {\gamma }_3\right)\times H^T,$$

(2)

where $H=\left[\begin{array}{ccc}0& 1& 1\\ 1& 0& 1\end{array}\right].$

Step 4: Flip the ${\gamma }_{\delta }$-th bit of the codeword $\gamma =\left({\gamma }_1, {\gamma }_2, {\gamma }_3\right)$ when $\delta \ne 0$ to obtain the error correction codeword $\tilde{\gamma }=\left({\tilde{\gamma }}_1, {\tilde{\gamma }}_2, {\tilde{\gamma }}_3\right)$ with $\delta =0$.

Step 5: Update the pixel pair $\left(p_1,p_2\right)$ to the cover pixel pair $\left(p_1^{\prime },p_2^{″}\right)$ by

$$p_1^{\prime }=p_1-\left(p_1\mathrm{mod} 2\right)+{\tilde{\gamma }}_1,$$

(3)

$$p_2^{\prime }=\{\begin{array}{c}\begin{array}{c}{p}_2-1, if\left(p_2^7=0 \bigwedge p_2^8=0\right) \bigwedge {\tilde{\gamma }}_2=1\\ p_2+1, if\left(p_2^7=0 \bigwedge p_2^8=1\right) \bigwedge {\tilde{\gamma }}_2=1\end{array}\\ \begin{array}{c}{p}_2-1, if\left(p_2^7=1 \bigwedge p_2^8=0\right) \bigwedge {\tilde{\gamma }}_2=0\\ p_2+1, if\left(p_2^7=1 \bigwedge p_2^8=1\right) \bigwedge {\tilde{\gamma }}_2=0\end{array}\end{array},$$

(4)

and

$$p_2^{″}=\{\begin{array}{c}\begin{array}{c}{p}_2^{\prime }-1, if\left(p_2^7=1 \bigwedge p_2^8=1\right) \bigwedge {\tilde{\gamma }}_3=1\\ p_2^{\prime }+1, if\left(p_2^7=1 \bigwedge p_2^8=0\right) \bigwedge {\tilde{\gamma }}_3=0\end{array}\\ \begin{array}{c}{p}_2^{\prime }-1, if\left(p_2^7=0 \bigwedge p_2^8=1\right) \bigwedge {\tilde{\gamma }}_3=0\\ p_2^{\prime }+1, if\left(p_2^7=0 \bigwedge p_2^8=0\right) \bigwedge {\tilde{\gamma }}_3=1\end{array}\end{array}.$$

(5)

Step 6: Backfill the updated pixel pair $\left(p_1^{\prime },p_2^{″}\right)$ to their corresponding positions.

Step 7: Repeat Steps 1–6 until all pixel pairs have been processed, resulting in the generation of two cover images, $C{I}_1$ and $C{I}_2$.

2.2. Secret Data Embedding

After obtaining these two cover images $C{I}_1$ and $C{I}_2$, they are utilized for embedding secret data. The details of this process are explained below.

Step 1: Read pixels from the corresponding positions of the two cover images $C{I}_1$ and $C{I}_2$ to form the pixel pair $\left(p_1,p_2\right)$, where $p_1=\left(p_1^1{p}_1^2{p}_1^3{p}_1^4{p}_1^5{p}_1^6{p}_1^7{\tilde{\gamma }}_1\right)$ and $p_2=\left(p_2^1{p}_2^2{p}_2^3{p}_2^4{p}_2^5{p}_2^6{\tilde{\gamma }}_2{\tilde{\gamma }}_3\right)$.

Step 2: Divide the secret data into 2-bit segments.

Step 3: Construct a 3-bits codeword $\gamma$ of the pixel pair $\left(p_1,p_2\right)$ by Equation (1).

Step 4: Compute the syndrome $\delta$ of the codeword $\gamma$ using Equation (2).

Step 5: Perform an exclusive-OR operation between the syndrome $\delta$ and a secret segment to obtain a re-computed syndrome $\tilde{\delta }$.

Step 6: Flip the ${\gamma }_{\tilde{\delta }}$ bit of the codeword $\gamma =\left({\gamma }_1, {\gamma }_2, {\gamma }_3\right)$ to obtain the error-corrected codeword $\tilde{\gamma }=\left({\tilde{\gamma }}_1, {\tilde{\gamma }}_2, {\tilde{\gamma }}_3\right)$.

Step 7: Update the pixel pair $\left(p_1,p_2\right)$ to the stego pixel pair $\left(p_1^{\prime },p_2^{″}\right)$ by Equations (3)–(5).

Step 8: Backfill the updated pixel pair $\left(p_1^{\prime },p_2^{″}\right)$ to their corresponding positions.

Step 9: Repeat Steps 1–8 until all pixel pairs have been processed, resulting in the generation of two stego images, $S{I}_1$ and $S{I}_2$.

Essentially, this method reconstructs the least significant bits (LSBs) of original pixel pairs into the error correction codeword of (3, 1) Hamming code to generate cover pixel pairs. During the embedding process, the error correction codeword is adjusted based on the secret segment, resulting in the creation of stego pixel pairs. Additionally, the image distortion is reduced by modifying pixel pairs using OPAP technology.

3. Proposed Scheme

In this section, the proposed covert communication scheme for dual images is described in detail. Its flowchart is given in Figure 2. In this scheme, the image owner embeds secret data into a grayscale image through a two-tier bit-flipping embedding strategy to generate two stego images. Subsequently, these two stego images are independently transmitted to two separate recipients. In cases where mutual trust is established between the two recipients, they can accurately extract the secret data and losslessly recover the cover image.

3.1. Two-Tier Bit-Flipping Embedding Strategy

Given a grayscale image $ℐ$ of size $ℳ\times \mathcal{N}$, the pixels are represented by $p\left(i,j\right), i=1,2,\cdots , ℳ, j=1,2,\cdots ,\mathcal{N}$. As the grayscale image allows 256 distinct intensities, each pixel $p\left(i,j\right)$ can be transformed as an 8-bit pixel binary bitstream $p^k\left(i,j\right), k=1,2, \cdots ,8$. The secret data are embedded into the grayscale image $ℐ$ using a two-tier bit-flipping embedding strategy as follows:

Step 1: Assign the grayscale image $ℐ$ into two cover images ${ℐ}_1$ and ${ℐ}_2$.

Step 2: Divide the secret data into two-bit secret segments.

Step 3: Read pixels from the corresponding locations of the two cover images ${ℐ}_1$ and ${ℐ}_2$ to form the pixel pairs $\left(p_1, p_2\right)$.

Step 4: Embed two secret segments into each pixel pair using the two-tier bit-flipping embedding strategy.

Step 4.1: Embed the first secret segment $s_1$ into the pixel pair $\left(p_1, p_2\right)$ by the first-tier embedding resulting in the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$.

Step 4.2: Embed the second secret segment $s_2$ into the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$ by the second-tier embedding resulting in the stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)$.

Step 5: Repeat Step 4 until all pixel pairs are processed.

Step 6: Backfill with the stego pixel pairs to their corresponding positions in the two stego images, ${\check{ℐ}}_1$ and ${\check{ℐ}}_2$.

The rules for the first-tier and the second-tier embeddings are provided in Algorithms 1 and 2, respectively. Here, $\mathbb{F}\left(\alpha \right)$ flips the bit $\alpha$, $\mathbb{L}\left(\alpha , \beta \right)$ sets the bit $\alpha$ to the value $\beta$, $ℝ\left(\alpha \leftarrow \beta \right)$ returns the updated value $\alpha$ after processing $\beta$, and $⨁$ represents the exclusive-or operation. In essence, our two-tier bit-flipping embedding strategy involves executing the bit-flipping within a pixel pair to embed secret data. In the first-tier embedding, we may flip bit $p_1^7$, bit $p_1^8$, or both $p_2^7$ and $p_2^8$ bits depending on the values of the secret bits illustrated in Figure 3a. Consequently, the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$ is obtained. Moving to the second-tier embedding, bit flips occurred among ${\tilde{p}}_1^6$, ${\tilde{p}}_1^7$, ${\tilde{p}}_2^6$ and ${\tilde{p}}_2^7$ bits are depicted in Figure 3b. Note that the 7-th bits of the pixel pair may undergo bit flipping in both tiers. To indicate the state of the bit 7 after the first-tier embedding, ${\tilde{p}}_2^5$ serves as a label before the bit-flipping in the second tier by checking whether ${\tilde{p}}_1^7$ and ${\tilde{p}}_2^7$ are the same or not. That is, ${\tilde{p}}_2^5=0$ when ${\tilde{p}}_1^7={\tilde{p}}_2^7$ and ${\tilde{p}}_2^5=1$ when ${\tilde{p}}_1^7\ne {\tilde{p}}_2^7$. The second-tier embedding results a stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)$. After processing all pixel pairs, the resulting stego pixel pairs are backfilled into their corresponding positions in the stego images ${\check{ℐ}}_1$ and ${\check{ℐ}}_2$. The two stego images are totally transmitted to two recipients ${ℛ}_1$ and ${ℛ}_2$ afterwards, each of whom is aware of the specific stego image they receive (see Algorithms 1 and 2).

Algorithm 1: The first-tier embedding.
Input:	Original pixel pair ($p_1, p_2)$ and the first secret segment $s_1$.
Output:	Updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$.
1:	If $s_1==“00”$
2:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=(p_1, p_2).$
3:	Else if $s_1==“01”$
4:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(ℝ\left(p_1\leftarrow \mathbb{F}\left(p_1^8\right)\right), p_2\right).$
5:	Else if $s_1==“10”$
6:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(ℝ\left(p_1\leftarrow \mathbb{F}\left(p_1^7\right)\right), p_2\right).$
7:	Else if $s_1==“11”$
8:	$\left({\tilde{p}}_1\left(i,j\right), {\tilde{p}}_2\left(i,j\right)\right)=\left(p_1, ℝ\left(p_2\leftarrow \mathbb{F}\left(p_2^7\right)\&\mathbb{F}\left(p_2^8\right)\right)\right).$
9:	End

Algorithm 2: The second-tier embedding.
Input:	Updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$ and the second secret segment $s_2$.
Output:	Stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)$.
1:	If $s_2==“00”$
2:	$\left({\check{p}}_1, {\check{p}}_2\right)=\left({\tilde{p}}_1, ℝ\left({\tilde{p}}_2\leftarrow \mathbb{L}\left({\tilde{p}}_2^5, ({\tilde{p}}_1^7⨁{\tilde{p}}_2^7\right)\right)\right)).$
3:	Else if $s_2==“01”$
4:	$\left({\check{p}}_1, {\check{p}}_2\right)=\left({\tilde{p}}_1, ℝ\left({\tilde{p}}_2\leftarrow \mathbb{L}\left({\tilde{p}}_2^5, ({\tilde{p}}_1^7⨁{\tilde{p}}_2^7\right)\right) \& \mathbb{F}\left({\tilde{p}}_2^7\right)\right)).$
5:	Else if $s_2==“10”$
6:	$\left({\check{p}}_1, {\check{p}}_2\right)=\left({\tilde{p}}_1, ℝ\left({\tilde{p}}_2\leftarrow \mathbb{L}\left({\tilde{p}}_2^5, ({\tilde{p}}_1^7⨁{\tilde{p}}_2^7\right)\right) \& \mathbb{F}\left({\tilde{p}}_2^6\right)\right)).$
7:	Else if $s_2==“11”$
8:	$\left({\check{p}}_1, {\check{p}}_2\right)=\left(ℝ\left({\tilde{p}}_1\leftarrow \mathbb{F}\left({\tilde{p}}_1^6\right)\&\mathbb{F}\left({\tilde{p}}_1^7\right)\right),ℝ\left({\tilde{p}}_2\leftarrow \mathbb{L}\left({\tilde{p}}_2^5, ({\tilde{p}}_1^7⨁{\tilde{p}}_2^7\right)\right)\right)).$
9:	End

To illustrate the process of the two-tier bit-flipping embedding, we present two examples in Figure 4. In Figure 4a, the given pixel pair $\left(p_1,p_2\right)=\left(115,115\right)$ is utilized to embed the secret segments “01” and “10”. We first embed the secret segment “01” into the pixel pair by flipping ${\tilde{p}}_1^8$. The first tier embedding leads to the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(114,115\right)$. Subsequently, we set ${\tilde{p}}_2^5=0$, indicating that ${\tilde{p}}_1^7={\tilde{p}}_2^7$. Following this, the secret segment “10” is embedded by flipping ${\tilde{p}}_2^6$. The second-tier embedding yields the stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)=\left(114, 119\right)$. In Figure 4b, the given pixel pair $\left(p_1, p_2\right)=\left(67, 67\right)$ is employed to embed the secret segments “10” and “11”. The embedding process begins by flipping ${\tilde{p}}_1^7$ to embed the secret segments “10”. This operation results in the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(65, 67\right)$. Since ${\tilde{p}}_1^7\ne {\tilde{p}}_2^7$, we then set ${\tilde{p}}_2^5=1$. The stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)=\left(70, 75\right)$ is attained by flipping ${\tilde{p}}_1^6$ and ${\tilde{p}}_1^7$.

3.2. Data Extraction and Image Recovering

Despite the recipients receiving their stego images, they are incapable of discerning any information about the secret data. Only when mutual trust is established between the two recipients, they can extract the secret segments accurately and recover the original grayscale image losslessly. In this section, it is assumed that the two recipients ${ℛ}_1$ and ${ℛ}_2$ have established mutual trust. The process of data extraction and image recovery is as follows:

Step 1: Read pixels from the corresponding positions of the two stego images ${\check{ℐ}}_1$ and ${\check{ℐ}}_2$ to form pixel pairs $\left({\check{p}}_1, {\check{p}}_2\right)$.

Step 2: Extract two secret segments from each stego pixel pair and retrieve the original pixel pair.

Step 2.1: Extract the second secret segment $s_2$ from the stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)$ and retrieve the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$.

Step 2.2: Extract the first secret segment $s_1$ from the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$ and retrieve the original pixel pair $\left(p_1, p_2\right)$.

Step 3: Repeat Step 2 until all pixel pairs have been processed.

Step 4: Concatenate all the extracted secret segments to obtain the secret data.

Step 5: Backfill the original pixel pairs $\left(p_1, p_2\right)$ into their corresponding positions to generate two cover images ${ℐ}_1$ and ${ℐ}_2$.

Step 6: Choose one of the cover images to serve as the original grayscale image $ℐ$.

The rules of data extraction and image recovery are provided in Algorithms 3 and 4, respectively. Essentially, the data extraction and image recovery are the inverse process of data embedding. Therefore, we initially extract the secret segments and retrieve the pixel pair from the second tier, followed by the first tier. In the second tier, we begin by evaluating the patten of ${\check{p}}_1^6$, ${\check{p}}_1^7$, ${\check{p}}_2^5$, ${\check{p}}_2^6$ and ${\check{p}}_2^7$ to determine the flipped bits within ${\check{p}}_1^6$, ${\check{p}}_1^7$, ${\check{p}}_2^6$ and ${\check{p}}_2^7$, as illustrated in Figure 5a. Note that ${\check{p}}_2^5$ indicates the state of the 7-th bits before the second-tier embedding. After confirming the pattern, we extract the embedded secret segment $s_2$, reflip the flipped bits, and set ${\check{p}}_2^5$ to the value of ${\check{p}}_1^5$. These steps lead to the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$. In the first-tier, we extract the embedded secret segment $s_1$ and reflip the flipped bits of ${\tilde{p}}_1^7$, ${\tilde{p}}_1^8$, ${\tilde{p}}_2^7$ and ${\tilde{p}}_2^8$ to obtain the original pixel pair $\left(p_1, p_2\right)$, as shown in Figure 5b. After processing all pixel pairs, the resulting stego pixel pairs are backfilled into their corresponding positions, thus generating the cover images ${ℐ}_1$ and ${ℐ}_2$. Finally, the secret segments are concatenated to form secret data and one of the cover images ${ℐ}_1$ and ${ℐ}_2$ are used as the original cover image $ℐ$.

It is important to emphasize that neither recipient can independently extract the secret data or recover the original image. Both recipients must collaborate and share their stego images ${\check{ℐ}}_1$ and ${\check{ℐ}}_2$ to accurately retrieve the embedded secret segments and restore the original pixel pairs. Additionally, any attempt by either recipient to alter the pixel values within their respective stego images will lead to failures of the data extraction and image recovery processes. This interdependent mechanism significantly enhances the reliability and security of our method, ensuring that the embedded secret data remain protected and the original image can only be accurately recovered through the cooperation and mutual trust of both recipients (see Algorithms 3 and 4).

Algorithm 3: The second-tier secret data extraction and pixel pair retrieve.
Input:	Stego pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)$.
Output:	Updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$ and the second secret segments $s_2$.
1:	If (${\check{p}}_2^5=0 \& {\check{p}}_1^6={\check{p}}_2^6 \& {\check{p}}_1^7={\check{p}}_2^7)$ || (${\check{p}}_2^5=1 \& {\check{p}}_1^6={\check{p}}_2^6 \& {\check{p}}_1^7\ne {\check{p}}_2^7)$
2:	$s_2=00$.
3:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left({\check{p}}_1, ℝ\left({\check{p}}_2\leftarrow \mathbb{L}\left({\check{p}}_2^5, {\check{p}}_1^5\right)\right)\right).$
4:	Else if (${\check{p}}_2^5=0 \& {\check{p}}_1^6={\check{p}}_2^6 \& {\check{p}}_1^7\ne {\check{p}}_2^7)$ || (${\check{p}}_2^5=1 \& {\check{p}}_1^6={\check{p}}_2^6 \& {\check{p}}_1^7={\check{p}}_2^7)$
5:	$s_2=01$.
6:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left({\check{p}}_1, ℝ\left({\check{p}}_2\leftarrow \mathbb{L}\left({\check{p}}_2^5, {\check{p}}_1^5\right) \& \mathbb{F}\left({\check{p}}_2^7\right)\right)\right).$
7:	Else if (${\check{p}}_2^5=0 \& {\check{p}}_1^6\ne {\check{p}}_2^6 \& {\check{p}}_1^7={\check{p}}_2^7)$ || (${\check{p}}_2^5=1 \& {\check{p}}_1^6\ne {\check{p}}_2^6 \& {\check{p}}_1^7\ne {\check{p}}_2^7)$
8:	$s_2=10$.
9:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left({\check{p}}_1, ℝ\left({\check{p}}_2\leftarrow \mathbb{L}\left({\check{p}}_2^5, {\check{p}}_1^5\right) \& \mathbb{F}\left({\check{p}}_2^6\right)\right)\right).$
10:	Else if (${\check{p}}_2^5=0 \& {\check{p}}_1^6\ne {\check{p}}_2^6 \& {\check{p}}_1^7\ne {\check{p}}_2^7)$ || $\left({\check{p}}_2^5=1 \& {\check{p}}_1^6\ne {\check{p}}_2^6 \& {\check{p}}_1^7={\check{p}}_2^7\right)$
11:	$s_2=11$.
12:	$\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(ℝ\left({\check{p}}_1\leftarrow \mathbb{F}\left({\check{p}}_1^6\right)\& \mathbb{F}\left({\check{p}}_1^7\right)\right), ℝ\left({\check{p}}_2\leftarrow \mathbb{L}\left({\check{p}}_2^5, {\check{p}}_1^5\right)\right)\right).$
13:	End

Algorithm 4: The first-tier secret data extraction and pixel pair retrieve.
Input:	Updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)$.
Output:	Original pixel pair $\left(p_1, p_2\right)$ and the first secret segments $s_1$.
1:	If ${\tilde{p}}_1^8={\tilde{p}}_2^8 \& {\tilde{p}}_1^7={\tilde{p}}_2^7$
2:	$s_1=00$.
3:	$(p_1, p_2)=\left({\tilde{p}}_1, {\tilde{p}}_2\right).$
4:	Else if ${\tilde{p}}_1^8={\tilde{p}}_2^8 \& {\tilde{p}}_1^7\ne {\tilde{p}}_2^7$
5:	$s_1=01$.
6:	$(p_1, p_2)=\left(ℝ\left({\tilde{p}}_1\leftarrow \mathbb{F}\left({\tilde{p}}_1^8\right)\right), {\tilde{p}}_2\right).$
7:	Else if ${\tilde{p}}_1^8\ne {\tilde{p}}_2^8 \& {\tilde{p}}_1^7={\tilde{p}}_2^7$
8:	$s_1=10$.
9:	$(p_1, p_2)=\left(ℝ\left({\tilde{p}}_1\leftarrow \mathbb{F}\left({\tilde{p}}_1^7\right)\right), {\tilde{p}}_2\right).$
10:	Else if ${\tilde{p}}_1^8\ne {\tilde{p}}_2^8 \& {\tilde{p}}_1^7\ne {\tilde{p}}_2^7$
11:	$s_1=11$.
12:	$(p_1, p_2)=({\tilde{p}}_1,ℝ\left({\tilde{p}}_2\leftarrow \mathbb{F}\left({\tilde{p}}_2^7\right) \& \mathbb{F}\left({\tilde{p}}_2^8\right)\right).$
13:	End

To illustrate the process of the data extraction and image recovery, we present two examples in Figure 6. In Figure 6a, we extract the secret segments and retrieve original pixel pair from the given pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)=\left(114, 119\right)$. Due to ${\check{p}}_2^5=0$, ${\check{p}}_1^6\ne {\check{p}}_2^6$ and ${\check{p}}_1^7={\check{p}}_2^7$, we extract the secret segment “10” and flip ${\check{p}}_2^6$. Subsequently, we set ${\check{p}}_2^5$ to the value of ${\check{p}}_1^5$. Through these steps, we obtain the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(114, 115\right)$. Based on ${\tilde{p}}_1^7={\tilde{p}}_2^7$ and ${\tilde{p}}_1^8\ne {\tilde{p}}_2^8$, we then extract the secret segment “01” and flip ${\tilde{p}}_1^8$ and generate the original pixel pair $\left(p_1,p_2\right)=\left(115, 115\right)$. For the pixel pair $\left({\check{p}}_1, {\check{p}}_2\right)=\left(70, 75\right)$ in Figure 6b, we first extract the secret segment “11”, flip ${\tilde{p}}_1^6$ and ${\tilde{p}}_1^7$, and set ${\check{p}}_2^5$ to the value of ${\check{p}}_1^5$. After these procedures, we obtain the updated pixel pair $\left({\tilde{p}}_1, {\tilde{p}}_2\right)=\left(65, 67\right)$. Based on ${\tilde{p}}_1^7\ne {\tilde{p}}_2^7$ and ${\tilde{p}}_1^8={\tilde{p}}_2^8$, we extract the secret segment “10” and flip ${\tilde{p}}_1^7$ and generate the original pixel pair $\left(p_1,p_2\right)=\left(67, 67\right)$.

3.3. Distortion Discussion

In essence, our approach accomplishes data embedding by flipping the 6th, 7th, and 8th bits of the pixel pairs obtained from the cover images ${ℐ}_1$ and ${ℐ}_2$. In our embedding strategy, we assume a uniform distribution of 0s and 1s in the secret data, implying that the probabilities of our secret segments being “00”, “01”, “10”, and “11” are equal. For our method, the maximum distortion for the pixel $p_1$ is 7 occurring when “01” is embedded in the first tier, followed by the embedding of “11” in the second tier with non-canceling flips. In this case, the distortion for $p_2$ is 0. Additionally, the maximum distortion for $p_2$ is 15, happening when “11” is embedded for the first time, followed by “10”, and the flips are non-canceling. In this case, the distortion for $p_1$ is 0. Except for the above two cases, the embedding flips result in minor distortions. Therefore, we believe that our approach will result in an acceptable level of distortion. Moreover, we suggest re-evaluating the flipping strategy in cases which the distributions of 0s and 1s of the secret data are not equally distributed with one value occurring more frequently. This redesign is intended to further optimize the impact of bit-flipping on image quality.

4. Experimental Results

To evaluate the proposed method, we conducted an extensive set of experiments. Firstly, we assessed the visual effectiveness of the proposed approach. Secondly, we discussed the data payload. Furthermore, we performed a security analysis. Lastly, we provided comparisons with several state-of-the-art schemes to demonstrate the advantages of our proposed approach.

In our experiments, we selected four images from the “UCID” [33] dataset, as illustrated in Figure 7, to showcase the outcomes. Additionally, we employed the “Kodak” [34] dataset for a general evaluation. Finally, we used four classic grayscale images for performance comparisons. The sizes of all test images used in the experiment were adjusted to $512\times 512$ grayscale images. Moreover, to comprehensively illustrate the performance of the proposed scheme, we also evaluated the performance of the one-tier bit-flipping strategy in our experiments, which refers to a method without the second-tier embedding.

4.1. Visual Effectiveness

To showcase the visual quality of the stego images, we present the results obtained by applying one-tier bit-flipping and two-tier bit-flipping strategies to the test images in Figure 8 and Figure 9, respectively. From a visual perspective, both stego images ${\check{ℐ}}_1$ and stego images ${\check{ℐ}}_2$ cannot be distinguished from the original image.

In addition to visual observation, we also quantified the visual quality using the Peak Signal-to-Noise Ratio (PSNR) [35] and Structural Similarity Index (SSIM) [36]. The corresponding results are provided in Figure 8 and Figure 9. Observing Figure 8, when employing the one-tier bit-flipping strategy, the PSNR values of the stego images ${\check{ℐ}}_1$ exceed 47 dB, and the SSIM values surpass 0.997. With the two-tier bit-flipping strategy, the PSNR values remain above 46 dB, and the SSIM values exceed 0.997. Our findings indicate that the introduction of the second-tier embedding does not significantly degrade the image quality of the stego images ${\check{ℐ}}_1$. When examining Figure 9 for stego images ${\check{ℐ}}_2$, one-tier bit-flipping strategy yields the PSNR values exceeding 47 dB, and SSIM values exceeding 0.997. However, the PSNR values dropped to approximately 32.7 dB, and the SSIM values are about 0.95 with the two-tier bit-flipping strategy. Clearly, there are noticeable numerical decreases but they remain acceptable. We applied both one-tier and two-tier bit-flipping strategies to 24 images from the “Kodak” dataset for a general evaluation. The PSNR and SSIM results are presented in Figure 10 and Figure 11, respectively. The outcomes indicate that the proposed method maintains stable PSNR and SSIM values within an acceptable range, demonstrating its reliability.

4.2. Data Payload

To evaluate the data payload of our proposed scheme, we quantify it in terms of embedding rate (ER) measured in bits per pixel (bpp). Our method involves duplicating a grayscale image into two cover images to embed secret data. Each pixel pair can hold 4 bits of secret data, resulting in an average data payload of 2 bits per pixel. Importantly, this data payload remains consistent across all tested images, regardless of their complexity, demonstrating the adaptability of our method to various image scenarios. However, such a large data payload may not always be necessary in practical applications. Therefore, we suggest opting for the one-tier bit-flipping strategy in such scenarios, which achieves a data payload of 1 bpp.

4.3. Security Analysis

We also discussed the security aspects of the proposed method, focusing on the imperceptibility of stego images. We first employ the histogram to measure pixel changes. The results are provided in Figure 12. From the results, it can be observed that after the first-tier embedding, the histograms exhibit negligible changes, indicating that the first layer of embedding has minimal impact on the images. After the second-tier embedding, there are noticeable changes in the histograms, but these changes remain within acceptable limits. In addition, we introduced image entropy [37] as a crucial metric. The results are provided in

Table 1. Information entropy of images at different stages.

		Figure 7a	Figure 7b	Figure 7c	Figure 7d
No bit-flipping	Original image $ℐ$	7.8334	7.7054	7.0206	7.6427
One-tier bit-flipping	Stego image ${\check{ℐ}}_1$	7.8387	7.7213	7.0377	7.6461
	Stego image ${\check{ℐ}}_2$	7.8377	7.7172	7.0358	7.6453
Two-tier bit-flipping	Stego image ${\check{ℐ}}_1$	7.8390	7.7289	7.0386	7.6463
	Stego image ${\check{ℐ}}_2$	7.8679	7.7766	7.1776	7.6903

. From the data, it can be observed that when employing the one-tier bit-flipping strategy, the image entropy of both stego images ${\check{ℐ}}_1$ and ${\check{ℐ}}_2$ closely aligns with that of the original grayscale image. With the two-tier bit-flipping strategy, stego images ${\check{ℐ}}_1$ maintains high similarity to the original grayscale images in terms of image entropy, stego images ${\check{ℐ}}_2$ exhibit slightly different, albeit minimal. The close numerical proximity suggests that the embedded secret data have not significantly impacted the original image, thus demonstrating the imperceptibility of the stego images. Furthermore, we illustrate the general entropy distribution results in Figure 13, where the medians of the five violin plots closely align, indicating similarity in data distribution among these images.

4.4. Time Efficiency Analysis

To evaluate the performance of our proposed method, we conducted a time efficiency analysis using various test images. The analysis focused on two primary processes: data embedding and data extraction with image recovery. The results are presented in

Table 2. Time efficiency of test images.

Time Efficiency	Figure 7a	Figure 7b	Figure 7c	Figure 7d
Data embedding	0.6174 s	0.5821 s	0.5576 s	0.6192 s
Data extraction and image recovery	0.4826 s	0.3872 s	0.34293 s	0.4523 s

. The results demonstrate a reasonable time efficiency for both data embedding and extraction processes, making the proposed scheme suitable for practical applications requiring efficient data hiding and retrieval without significant delay.

4.5. Comparisons

To showcase the effectiveness of our approach, we compared the proposed method with existing methodologies [22,23,24,25,26,27]. In our comparison, we selected four classic grayscale images, “Lena”, “Peppers”, “Barbara”, and “Goldhill” as test images. The comparison results are provided in

Table 3. Comparisons with the existing methods and our proposed method.

Methods	Measure	Lena		Peppers		Barbara		Goldhill
		${\check{\mathit{ℐ}}}_1$	${\check{\mathit{ℐ}}}_2$	${\check{\mathit{ℐ}}}_1$	${\check{\mathit{ℐ}}}_2$	${\check{\mathit{ℐ}}}_1$	${\check{\mathit{ℐ}}}_2$	${\check{\mathit{ℐ}}}_1$	${\check{\mathit{ℐ}}}_2$
[22]	ER	1.07	1.07	1.07	1.07	1.07	1.07	1.07	1.07
	PSNR	49.76	50.42	49.75	50.34	49.75	50.44	49.77	50.54
	SSIM	0.9982	0.9982	0.9989	0.9984	0.9979	0.9987	0.9994	0.9993
[23]	ER	1.0	1.0	1.0	1.0	1.0	1.0	1.0	1.0
	PSNR	51.13	51.15	51.15	51.14	49.22	49.20	49.23	49.18
	SSIM	0.9994	0.9988	0.9988	0.9994	0.9983	0.9978	0.9988	0.9969
[24]	ER	1.56	1.56	1.56	1.56	1.56	1.56	1.56	1.56
	PSNR	46.36	46.37	46.38	46.38	46.38	46.38	46.37	46.36
	SSIM	0.9981	0.9982	0.9982	0.9982	0.9982	0.9983	0.9981	0.9981
[25]	ER	0.21	0.21	0.21	0.21	0.21	0.21	0.21	0.21
	PSNR	52.71	52.81	52.67	52.72	52.70	52.76	52.73	52.78
	SSIM	0.9994	0.9987	0.9967	0.9989	0.9991	0.9987	0.9983	0.9948
[26]	ER	1.56	1.56	1.56	1.56	1.56	1.56	1.56	1.56
	PSNR	37.26	37.28	37.25	37.27	37.25	37.28	37.26	37.26
	SSIM	0.9959	0.9460	0.9974	0.9404	0.9980	0.9530	0.9957	0.9612
[27]	ER	1.0	1.0	1.0	1.0	1.0	1.0	1.0	1.0
	PSNR	54.14	48.13	54.15	48.12	54.12	48.14	54.16	48.11
	SSIM	0.9989	0.9956	0.9982	0.9960	0.9964	0.9944	0.9976	0.9950
Ours	ER	2.0	2.0	2.0	2.0	2.0	2.0	2.0	2.0
	PSNR	46.75	32.77	46.73	32.74	46.75	32.76	46.76	32.77
	SSIM	0.9959	0.9460	0.9974	0.9404	0.9980	0.9530	0.9957	0.9612

. Upon examining Table 3, we observed that our proposed method achieved a significantly higher embedding rate (ER) across all test images compared to existing methods. Although some of the PSNR and SSIM values are slightly lower than those of other methods, the visual quality remains within an acceptable range. This demonstrates that our method effectively balances a high embedding capacity with reasonable visual quality.

5. Conclusions

In this paper, we utilize a two-tier embedding strategy to embed secret data. Specifically, we perform specific bit flips on paired pixels in dual images to embed the secret data. The resulting images are then distributed to two different recipients. Extraction of the embedded secret data requires recipients to establish mutual trust. Experimental results demonstrate that our method achieves a data payload of 2 bits per pixel. Additionally, we have evaluated the visual fidelity of the stego images against four classic grayscale images, ‘Lena’, ‘Peppers’, ‘Barbara’, and ‘Goldhill’. ${\check{ℐ}}_1$ achieves an average PSNR exceeding 46 dB and SSIM greater than 0.99, while ${\check{ℐ}}_2$ averages above 32 dB and SSIM values surpassing 0.94. This capability is crucial for applications requiring efficient data transmission without perceptible degradation in image quality. In our future work, we plan to explore further enhancements in the visual quality of stego images while maintaining a high data payload.