# Lightweight True In-Pixel Encryption with FeFET Enabled Pixel Design for Secure Imaging

arXiv: https://arxiv.org/abs/2604.05147 · HTML: https://mlsanity.com/paper/2604.05147/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- Builds on 5 of its 35 references that are in the map.
- First posted on arXiv 6 Apr 2026.

## Builds on (most cited first, 5 of 5)

- [Deep Residual Learning for Image Recognition](https://mlsanity.com/paper/1512.03385/) (2015)
- [A Review on Digital Pixel Sensors](https://mlsanity.com/paper/2402.04507/) (2024)
- [In-Pixel Foreground and Contrast Enhancement Circuits with Customizable Mapping](https://mlsanity.com/paper/2410.18052/) (2024)
- [Multi-Domain FeFET-Based Pixel for In-Sensor Multiply-and-Accumulate Operations](https://mlsanity.com/paper/2506.22596/) (2025)
- [A Three-terminal Non-Volatile Ferroelectric Switch with an Insulator-Metal Transition Channel](https://mlsanity.com/paper/2108.12091/) (2021)

## Built on by (most cited first, 1 of 1)

- [STEMPix: A Phase-Transition-Material-Based Pixel Sensor for Resolving Edge-Movement Direction](https://mlsanity.com/paper/2609.04435/) (2026)

## Abstract (arXiv)

Ensuring end-to-end security in image sensors has become essential as visual data can be exposed through multiple stages of the imaging pipeline. Advanced protection requires encryption to occur before pixel values appear on any readout lines. This work introduces a secure pixel sensor (SecurePix), a compact CMOS-compatible pixel architecture that performs true in-pixel encryption using a symmetric key realized through programmable, non-volatile multidomain polarization states of a ferroelectric field-effect transistor. The pixel and array operations are designed and simulated in HSPICE, while a 45 nm CMOS process design kit is used for layout drawing. The resulting layout confirms a pixel pitch of 2.33 x 3.01 um^2. Each pixel's non-volatile programming level defines its analog transfer characteristic, enabling the photodiode voltage to be converted into an encrypted analog output within the pixel. Full-image evaluation shows that ResNet-18 recognition accuracy drops from 99.29 percent to 9.58 percent on MNIST and from 91.33 percent to 6.98 percent on CIFAR-10 after encryption, indicating strong resistance to neural-network-based inference. Lookup-table-based inverse mapping enables recovery for authorized receivers using the same symmetric key. Based on HSPICE simulation, the SecurePix achieves a per-pixel programming power-delay product of 17 uW us and a per-pixel sensing power-delay product of 1.25 uW us, demonstrating low-overhead hardware-level protection.