“It has never been more important to safeguard authentic news media,” say the organisers.

“We must strengthen our voice and hold our ground against the big tech players. It is critical that the industry works together,” said Fabrice Fries, Chief Executive Officer at AFP, in his opening remarks for the workshop in Paris.

“At AFP we are committed to ensure that both news organisations and the general public can inspect the provenance of our images. This transparency builds trust,” said Eric Baradat, the global news deputy director for photo and archives at AFP.

AFP, BBC and Media Cluster Norway jointly organised the workshop, which was hosted by AFP and supported by the International Press Telecommunications Council (IPTC). The workshop focused on image metadata and how the C2PA standard, also known as Content Credentials, can safeguard it. 

“The challenges the news industry are facing are so great that we can only succeed if we work together. Making sure the public can discern between authentic media and content made by generative AI is vital not only for news organisations, but for democratic societies,” said Helge O. Svela, CEO of Media Cluster Norway.

More than 40 people from over 20 news organisations participated in the full day workshop. Among the presentations was a study commissioned by Media Cluster Norway’s Project Reynir on how media consumers respond to being shown more detailed information about an image. The study was conducted by MediaFutures at the University of Bergen, and built on a user study conducted by the BBC.

“Trust is earned. At the BBC we have seen that users really engage when we show them how their news was made. Extra media provenance details such as when and where an image was taken, or the steps used to verify it, make a real difference to how users trust their news. The C2PA standard can allow us to share this information with the users in a secure and trustworthy way,” said Judy Parnall, Principal Technologist, BBC Research and Development.

Among the participants in the workshop were CBC-Radio Canada, Deutsche Welle, France TV, ITV, NHK and Al Jazeera. Topics discussed included carrying provenance metadata from glass to glass versus adding it at the point of publishing, as well as the importance of redaction to the media industry and content provenance for media archives.

“It is vital that the needs of the news media ecosystem are heard as this technology and standards are further developed and refined,” said Brendan Quinn, Managing Director at IPTC.

The IPTC Media Provenance Committee works on several initiatives for implementing and furthering the development of the C2PA technology for the media industry. Many of the speakers and participants of the Paris workshop are actively involved in this work.

For more information on IPTC and the Media Provenance Committee, contact the IPTC via this site.

The IPTC has developed a WordPress plugin that automatically signs all images and video content published on a WordPress site. It has been put to use to automatically sign all images attached to IPTC news posts, such as this one, at the moment of publishing.   

Based on our library of signing tools which are available to IPTC members, the “C2PA Signer” plugin  takes action when a WordPress user publishes a new post. The plugin automatically retrieves all images (in all available sizes) and signs each image using the private key associated with the publisher.

The tool also extracts relevant metadata from WordPress. Each image’s caption, alt text, image upload date and publish date are embedded into the signed C2PA Manifest using an early version of the Origin IPTC Verified News Publisher metadata assertion. The specification of this assertion is currently in flux and the example assertion should not be relied on for production use, although the assertion is supported by the IPTC’s C2PA validator tool, Origin Verify.

Click here to view the image’s signed metadata using the  Origin Verify tool.

This is in line with the goals of our IPTC Origin Verified News Publisher project, whereby publishers sign their own content using their own certificate. This enables publishers to take ownership of their content and to assert important facts about their content at the time of publishing.

In related news, the IPTC now has its own C2PA certificate, issued by GlobalSign under the IPTC’s official name, “Comite International des Telecommunications de Presse.” This means that the IPTC can be the first entity to use the new plugin.

“We are very happy to launch the new WordPress plugin, which we of course are using on our own website,” says Brendan Quinn, Managing Director, IPTC. “We believe that this makes us the first organisation to routinely sign all images that we publish using our C2PA credentials.” 

The certificates, manifests and the signed content are fully compatible with the latest version of C2PA, version 2.1. Images that we publish (including the image on this post) can be verified using the Origin Verify validator or the C2PA Content Credentials Verify validator.

For more information, contact IPTC using the Contact Us form.

The IPTC has responded to a multi-stakeholder consultation on the recently-agreed European Union Artificial Intelligence Act (EU AI Act).

Although the IPTC is officially based in the UK, many of our members and staff operate from the European Union, and of course all of our members’ content is available in the EU, so it is very important to us that the EU regulates Artificial Intelligence providers in a way that is fair to all parts of the ecosystem, including content rightsholders, AI providers, AI application developers and end users.

In particular, we drew the EU AI Office’s attention to the IPTC Photo Metadata Data Mining property, which enables rightsholders to inform web crawlers and AI training systems of the rightsholders’ agreement as to whether or not the content can be used as part of a training data set for building AI models.

The points made are the same as the ones that we made to the IETF/IAB Workshop consultation: that embedded data mining declarations should be part of the ecosystem of opt-outs, because robots.txt, W3C TDM, C2PA and other solutions are not sufficient for all use cases. 

The full consultation text and all public responses will be published by the EU in due course via the consultation home page.

AMSTERDAM, 13 September 2024 — The International Press Telecommunications Council (IPTC) has announced Phase 1 of the IPTC Verified News Publishers List at the International Broadcast Convention (IBC).

The list uses C2PA technology to enable verified provenance for the news media industry. News outlets apply for a certificate from a partner Certificate Authority (currently Truepic), with the IPTC verifying the identity of the publisher. The certificate is then used by the news outlet to sign content, in accordance with the C2PA specification’s handling of “additional trust anchor stores”. This means that the news publisher is the signer of the content. This is a key requirement for many media outlets.

Currently the BBC (UK), CBC / Radio Canada (Canada) and broadcaster WDR (Germany) have certificates on the Verified News Publishers List. Many more publishers and broadcasters are currently in the process of obtaining a certificate. To register your interest as a news publisher, please fill out the Verified News Publisher expression of interest form.

To make the process of verifying and approving certificate requests transparent and accountable, the IPTC has released a set of policies for issuing Verified News Publisher certificates covering Phase 1 of the project. The process includes a “fast track” process for media organisations that are already well known to IPTC, and also a self-certification track. The policies were approved by the IPTC membership at a recent meeting of the IPTC Media Provenance Committee.

Verifying publisher identity, not trustworthiness

Note: as we have always made clear, the IPTC is making no claims about the truth or trustworthiness of content published by news publishers on the IPTC Verified News Publisher List. We simply verify that the publisher is “who they say they are”, and then the signature will verify that the content was published by that publisher, and has not been tampered with since the point of publishing.

We make it clear in the governance policies that a certificate can be revoked if the certificate’s private key has been compromised in some way, but we will not revoke certificates for editorial reasons.

Online verifier tool

The IPTC has worked with the BBC to launch a simple Verified News Publisher content verifier tool hosted at https://originverify.iptc.org. The tool displays a special indicator when content has been signed by an organisation whose certificate is on the Verified News Publisher list. The IPTC has also published a set of Verified News Publisher sample content that can be used with the verifier to demonstrate the process in action.

Sharing best practices, resources and knowledge among news publishers

For IPTC members, the Media Provenance Committee has created an internal members-only wiki detailing best practices and lessons learned while implementing C2PA and the Verified News Publisher List at broadcasters and publishers. Information on the wiki includes technical details on how to generate a certificate signing request to obtain a certificate, how to sign content with open-source and commercial tools, how to deal with publishing and distribution technology such as streaming servers and content delivery networks, and how to add metadata to C2PA assertions embedded in media content.

The Committee has also created a public-facing area of the IPTC site describing IPTC’s work in the area of Media Provenance, helping news publishers to get up to speed and understand how C2PA technology works and how it can be implemented in publishing workflows.

Other IPTC and Media Provenance-related events at IBC this weekend:

• Judy Parnall (BBC), Lead of the IPTC Media Provenance Advocacy Working Group, spoke on a panel on “Content Tracing and Provenance” this morning (Friday) at the AI Zone.
• Judy is also presenting a paper at the IBC Conference on Saturday 14 September: Provenance: What can we Trust?, along with IPTC Individual Member John Simmons.
• Combating disinformation in News: A critical year for democracies at the IPTC Conference on Saturday. Laura Ellis (BBC) is on the panel along with representatives from CBS and GLOBO.
• On Sunday 15 September, Judy presents IBC’s Accelerator Project “Design Your Weapons in Fight Against Disinformation” on the IBC Innovation Stage, along with tech leaders from CBS, Associated Press and ITN.

The IPTC has signed a liaison agreement with the Japanese camera-makers organisation and creators of the Exif metadata standard, CIPA.

CIPA members include all of the major camera manufacturers, including Nikon, Canon, Sony, Panasonic, FUJIFILM and more. Several software vendors who work with imaging are also members, including Adobe, Apple and Microsoft.

CIPA publishes guidelines and standards for camera manufacturers and imaging software developers. The most important of these from an IPTC point of view is the Exif standard for photographic metadata.

The IPTC and CIPA have had an informal relationship for many years, staying in touch regularly regarding developments in the world of image metadata. Given that the two organisations manage two of the most important standards for embedding metadata into image and video files, it’s important that we keep each other up to date.

Now the relationship has been formalised, meaning that the organisations can request to observe each other’s meetings, exchange members-only information when needed, and share information about forthcoming developments and industry requirements for new work in the field of media metadata and in related areas.

The news has also been announced by CIPA. According to the news post on CIPA’s website, “CIPA has signed a liaison agreement regarding the development of technical standards for metadata attached to captured image with International Press Telecommunications Council (IPTC), the international organization consists of the world’s leading news agencies, publishers and industry vendors.”

The Internet Architecture Board (IAB), a Committee of the Internet Engineering Task Force (IETF) which decides on standards and protocols that are used to govern the workings of Internet infrastructure, is having a workshop in September on “AI Control”. Discussions will include whether one or more new IETF standards should be defined to govern how AI systems work with Internet content.

As part of the lead-up to this workshop, the IAB and IETF have put out a call for position papers on AI opt-out techniques.

Accordingly, the IPTC Photo Metadata Working Group, in association with partner organisation the PLUS Coalition, submitted a position paper discussing in particular the Data Mining property which was added to the IPTC Photo Metadata Standard last year.

In the paper, the IPTC and PLUS set out their position that data mining opt-out information embedded in the metadata of media files is an essential part of any opt-out solution.

Here is a relevant section of the IPTC submission:

We respectfully suggest that Robots.txt alone is not a viable solution. Robots.txt may allow for communication of rights information applicable to all image assets on a website, or within a web directory, or on specific web pages. However, it is not an efficient method for communicating rights information for individual image files published to a web platform or website; as rights information typically varies from image to image, and as the publication of images to websites is increasingly dynamic.

In addition, the use of robots.txt requires that each user agent must be blocked separately, repeating all exclusions for each AI engine crawler robot. As a result, agents can only be blocked retrospectively — after they have already indexed a site once. This requires that publishers must constantly check their server logs, to search for new user agents crawling their data, and to identify and block bad actors.

In contrast, embedding rights declaration metadata directly into image and video files provides media-specific rights information, protecting images and video resources whether the site/page structure is preserved by crawlers — or the image files are scraped and separated from the original page/site. The owner, distributor, or publisher of an image can embed a coded signal into each image file, allowing downstream systems to read the embedded XMP metadata and to use that information to sort/categorise images and to comply with applicable permissions, prohibitions and constraints.

IPTC, PLUS and XMP metadata standards have been widely adopted and are broadly supported by software developers, as well as in use by major news media, search engines, and publishers for exchanging images in a workflow as part of an “operational best practice.” For example, Google Images currently uses a number of the existing IPTC and PLUS properties to signal ownership, licensor contact info and copyright. For details see https://iptc.org/standards/photo-metadata/quick-guide-to-iptc-photo-metadata-and-google-images/

The paper in PDF format can be downloaded from the IPTC site.

Thanks to David Riecks, Margaret Warren, Michael Steidl from the IPTC Photo Metadata Working Group and to Jeff Sedlik from PLUS for their work on the paper.

A few months in, things are going very well for the IPTC’s new Media Provenance Committee.

The IPTC Committee was initiated to continue the work started by Project Origin to bring the benefits of C2PA provenance technology to the news media industry. The Committee is chaired by Bruce MacCormack of CBC / Radio Canada.

The Committee has initiated three Working Groups who will be looking at specific issues:

• The Provenance Governance Working Group, led by Charlie Halford of the BBC.
• The Provenance Best Practices and Implementation Working Group, led by Helge O. Svela of Media City Bergen.
• The Provenance Advocacy and Education Working Group, led by Judy Parnall of the BBC.

We have also started the process of onboarding participants for the next phase of the Origin Verified News Publishers List, and have had several organisations already apply.

The first publishers on the list, BBC and CBC/Radio Canada, have already published some C2PA-signed content:

• The BBC has published some images and video with C2PA-embedded metadata showing the fact-checking process that has been undertaken by the BBC Verify fact-checking team.
• CBC / Radio Canada has published images signed with the CBC certificate on the cbc.ca website.

We are planning several events in the future to promote our work and encourage more in the media industry to get involved. Look out for news about IPTC Media Provenance work at the IBC Conference in Amsterdam in September and at other events.

If your organisation would like to be added to the list in the next phase or in the future, please get in touch!

The International Press Telecommunications Council, in conjunction with Project Origin, has established a working group to create and manage a C2PA compatible list of verified news publishers.

The open C2PA 2.0 Content Credentials standard for media provenance is widely supported as a strong defence against misinformation. Recent announcements by OpenAI, Meta, Google and others have confirmed the value of an interoperable, tamper-evident way of confirming the source and technical integrity of digital media content.

Project Origin, as a co-founder of the C2PA, has brought the needs of the news publishing community to the forefront of the creation of this standard. This now includes the creation of a C2PA 2.0 compatible Origin Verified Publisher Certificate to be used by publishers to securely create a cryptographic seal on their content. The signing certificates will be available through the IPTC, who will work with C2PA validators to gain widespread acceptance. These signing certificates will be issued by the IPTC to broadcast, print and digital native media publishers.

Origin Verified Publisher Certificates will ensure that the identity of established news organisations are protected from imposters. The certificates confirm organisational identity and do not make any judgement on editorial position. Liaison agreements with other groups in the media ecosystem will be used to accelerate the distribution of certificates.

The initial implementation uses TruePic as a certificate authority, with the BBC and CBC/Radio-Canada as trial participants.

“As a founding partner of Project Origin, CBC/Radio-Canada is proud to be one of the first media organisations to trial Origin Verified Publisher Certificates,” said Claude Galipeau, Executive Vice-President, Corporate Development, CBC/Radio-Canada. “This initiative will provide our audiences with a new and easy way of confirming that the content they’re consuming is legitimately from Canada’s national public broadcaster. It’s an important step in our adoption of the Content Credentials standard and in our fight against misinformation and disinformation.”

Jatin Aythora, Director of BBC R&D, and vice chair for Partnership on AI, said “Media provenance increases trust and transparency in news, and so is an essential tool in the fight against disinformation. That fight has never been more important, and so we hope many more media organisations will join us in securing their own Origin Verified Publisher Certificate.”

Publishers interested in working cooperatively to advance the implementation of the C2PA standard in the news ecosystem are invited to join the Media Provenance Committee of the IPTC.

For further information please contact:

• Judy Parnall –  judy.parnall@bbc.co.uk – representing the BBC
• Bruce MacCormack – bruce@neuraltransform.com – representing CBC/Radio-Canada
• Brendan Quinn – mdirector@iptc.org – representing the IPTC

The IPTC Photo Metadata Working Group has updated the IPTC Photo Metadata User Guide, including guidance for accessibility and for tagging AI-generated images with metadata.