Essentially coincident with the capture of an image by the imaging device,
biometric information indicating the identity of the operator of the device is
obtained from at least one biometric sensor. The biometric information and captured
image are then stored in a manner reliably associating each with the other. At
a later time, biometric information is obtained from a supposed operator of the
imaging device. By comparing this candidate biometric information with the stored
biometric information, the supposed operator may be authenticated as the operator
of the imaging device at the time of capture of the stored image.