[image of digits]
Steganography - Color Laser Copier Dot Codes

Duke Library: Sharp Color Copiers, disabled:

Duke University, Perkin Librarys: Sharp, DCP 7395 MX 3100N, SN ?:
Duke University, Bostok Library: Sharp, DCP 7395 MX 3100N, SN 05013496
Duke University, Bostok Library: Sharp, DCP 7395 MX 3100N, SN 05072817

Canon:

Fedex, 601 Ninth Street, Durham: Canon, C5045, SN 827184319428, #1 clockwise from the doorway."
Fedex, 601 Ninth Street, Durham: Canon, C5045, SN 818986449313, #2 clockwise from the doorway."
Fedex, 601 Ninth Street, Durham: Canon, C5045, SN 819386509316, #3 clockwise from the doorway."
Fedex, 601 Ninth Street, Durham: Canon, C5045, SN 819786549321, #4 clockwise from the doorway."
Fedex, 601 Ninth Street, Durham: Canon, C5045, SN 818886449312, #5 clockwise from the doorway."


Fedex: Canon CS5045

SN 827184319428, #1

SN 818986449313, #2

SN 819386509316, #3

SN 819786549321, #4

SN 818886449312, #5

We consistently have 18 dots representing each machine.
The boundary of each pattern seems reasonable, but it is arbitrary.
Three other reasonable boundaries are shown above.
There could be others...

Patterns of all five machines superimposed.
Dots of a single color represent a single machine.
The dots definitely suggest a diagonal configuration.
The fact that there is so much error in dot positions suggests that these patterns are sumed over the entire document to counteract noise.
 

Ricoh:

Duke University, Perkins Library: Ricoh Aficio ARDF DF 3040, MP C4501, SN W2008404434
Duke University, Bostok Library: Ricoh Aficio ARDF DF 3040, MP C4501, SN W2008404406


BLUE CHANNEL (Perkins: Ricoh Aficio MPC 4501 / Code: D540-94 / SN: W2008404434 / 18 October 2011 / 2:42 p.m.)

BLUE CHANNEL ENHANCED (Perkins: Ricoh Aficio MPC 4501 / Code: D540-94 / SN: W2008404434 / 18 October 2011 / 2:42 p.m.)

"Automatic Counterfeit Protection System Code Classification."

The time and date could be represented as decimals:
18 October 2011, 14:22:00 = 18 10 11 14 22 00 (This is 12 digits long.)

The time and date could be represented as a Time-Since-Epoch stamp.
18 October 2011, 14:22:00 = 1 318 977 720 (This is 10 digits long.)

How many digits (what range of dates) would be important to record?
Sun, 9 Sep 2001 01:46:40 UTC = 1000000000
Wed, 18 May 2033 03:33:20 UTC = 2000000000
(Up until 2033 we could get away with 9 digits. )

1 January 2000, 00:00:00 = 0 946 684 800
1 January 2010, 00:00:00 = 1 262 304 000
1 January 2020, 00:00:00 = 1 577 836 800
1 January 2030, 00:00:00 = 1 893 456 000
1 January 2040, 00:00:00 = 2 208 988 800


Perkins Ricoh e-printer:
This coding block is an array of 7x8 dots, totalling 56.
As 56 bits, it could represent a decimal number 17 digits long, not exceeding 72,057,594,037,927,935.
Use the Windows calculator, programmer's view.
It could represent 8, 7-bit ASCII characters.
It could represent 14, 4-bit Binary Coded Decimal (BCD) characters.
How do you pack the make/model number and date/time into this block?


Rotation 0

As ASCII this reads (top to bottom, left to right):
0001001 0110000 0101011 0000000 0000010 0001010 0101011 1111101
HT......0.......+.......NUL.....STX.....LF......+.......m......

As a 56-bit decimal this reads (top to bottom, left to right):
390 608 602 607 267


Rotation 90

As a 56-bit decimal this reads (top to bottom, left to right):
40 562 427 125 445 983


Rotation 180

As ASCII this reads (top to bottom, left to right):
0001001 0110000 0101011 0000000 0000010 0001010 0101011 1111101
-.......j.......(.......SP......NUL.....j.......ACK.....H.....
.

As a 56-bit decimal this reads (top to bottom, left to right):
222 314 669 458 752 000



Rotation 270

As a 56-bit decimal this reads (top to bottom, left to right):
70 558 204 312 606 729

Wanted:
Discarded samples printed from color laser copiers.

The more white space the better. The yellow dots cover the entire width and height of the paper.

Please write the following information in the margin:

  • The make and model of the copier.
  • The serial number of the copier.
  • The time and date that the copy was made.

This is the information that is encoded in the pattern of dots.
In order to decipher the codes it would be useful to have sequential runs of times and days from the same machne.

Questions? Comments? Please email me... nick.gessler(at)duke.edu
I hope to expand this data-base on color printer codes...

Electronic Frontier Foundation: "Is Your Printer Spying On You? Part I"
Electronic Frontier Foundation: "Is Your Printer Spying On You? Part II"
Electronic Frontier Foundation: "DocuColor Tracking Dot Decoding Guide."


The yellow dots are barely visible under magnification in daylight, and much less visible under incandescent light. It is best to illuminate the document with blue light (using a blue filter or blue LED flashlight) under a microscope to confirm the presence of the yellow dots.

The images below were photographed with a Nikon D100 digital camera and 105mm Nikon AF Micro Nikkor lens in fine .jpg mode in daylight.

The images were opened in PhotoShop and enhancements made using the following procedure: Turn "off" the red and green channels. Highlight the blue channel. Convert the image to grayscale mode to loose the red and green channels. Adjust image levels to bring out the dots. Convert the image back to RGB mode which allows you to do markups in color.

A brief review of color theory is at the bottom of this page...


Unknown Printer
Kinkos, Sepulveda & Jefferson, Culver City, CA - 27 May 2006

Sample #1

Printer: unknown
Date: 27 May 2006
Day: 147 (10010011 in binary)


The full 8.5 x 11 sheet with one repeating pattern of yellow code dots inked in black.

Closeup of area inked in black.
The photograph was taken in bright sunlight
to maximize blue light.

Closeup of inked-in area in bright sunlight.
The red and green channels have been deleted.
The blue channel has been enhanced.

An enlargement of the enhanced blue channel image with red lines superimposed
to show the repititions of the pattern. The red block measures 14mm high and 11mm wide.

An enlargement of the bright sunlight image without enhancement. The yellow dots are just barely visible. To enhance the image yourself, save it and then open it in PhotoShop. Select "channels" and turn off the red and green channels. The area represented above includes one full block, the same coded block that is shown below with the blue-channel enhanced.

An enlargement of the enhanced blue channel image shown above with red lines inserted to outline one coded block of dots. White lines have been inserted to show the alignment of dots. The rows and columns have been arbitrarily labeled with upper and lower-case letters for reference. This sample has NOT been decoded. The dot spacing is 1mm, except for the dots in half-columns "x" and "y." These may represent start and stop delimiters. In that case the data field is likely 9 wide by 10 high (90 bits). It is not clear whether the words are arranged horizontally or vertically or whether they are to be read from left-to-right or right-to-left. Nevertheless, this is a binary code of some type.
Xerox DocuColor 12
Kinkos, Westwood, Westwood, CA - 30 May 2006 - S/N FU 2-051912

Color photograph in daylight.

The blue channel enhanced.

Closeup of one block in daylight.

Closeup of one block with the blue channel enhanced.
Thanks for looking...
Please email me your decodings: gessler@ucla.edu

A Brief Review of Color Theory

Red
Green
Blue
White
Cyan
Magenta
Yellow
Black

The yellow dots on paper are made of red and green light (not red and green ink or toner). On paper, the yellow toner is transparent and absorbs blue light, letting red and green pass through it. On your computer screen, the yellow you see is made up of red and green light.

The additive color primaries are red, green and blue (hence "RGB"). They are the primaries used to "paint with light" like the color on your computer monitor or TV screen. You can see these if you look closely at your screen with a magnifier.

The subtractive color primaries are cyan, magenta and yellow, with black thrown in for good measure (hence "CMYK"). These are the transparent inks and toners that most printers use, not just color copiers, but magazines and boxed paper products. You can often see the CMYK color swatches used for alignment if you open the hidden flaps on your grocery items.

The yellow dots on paper look yellow because that transparent ink or toner absorbs the blue light from sunlight and reflects both red and green. Red and green light make yellow. (Red and green paints or inks do not.) So if you illuminate a yellow dot on paper with blue light it will absorb the blue and look dark. And if you take a digital photograph of the yellow dots, the yellow that you see on the computer screen is actually red and green. Consequently, if you only display the blue color channel in PhotoShop the dots will show up dark.