If my memory doesn't fail me, someone (Tony?) wrote an "Image authenticator" sample some time ago, but I cannot find it anymore. That could be a starting point.
http://svn.apache.org/repos/asf/cocoon/blocks/unsupported/scratchpad/trunk/samples/image-auth/
Vadim
