Information creation method, image file, information creation device, and program

Abstract

An information creation method includes: an acquisition step of acquiring related information related to image data; an encryption step for generating first encrypted information obtained by encrypting the related information; and an addition step for adding the first encrypted information to the image data as additional information. The additional information includes time information or reliability information relating to the time at which the first encrypted information is generated.

Description

Technical Field

[0001] The technology of the present invention relates to an information creation method, an image file, an information creation device, and a program. Background Art

[0002] Japanese Patent Application Laid-Open No. 2006-345450 discloses an image verification system, which includes: a camera device that performs tamper-proof processing on an image file including a captured image and its additional information; and an image verification device that verifies that the image file has not been tampered with. In the image verification system described in Japanese Patent Application Laid-Open No. 2006-345450, the camera device includes: a user interface providing mechanism that provides a user interface for allowing a user to select an item in the additional information that is to be subjected to tamper-proof processing; an encryption mechanism that creates encrypted additional information obtained by encrypting the additional information selected through the user interface; and an appending mechanism that appends the encrypted additional information to the image file to create an additional image file. In the image verification system described in Japanese Patent Application Laid-Open No. 2006-345450, the image verification device includes: a decryption mechanism that decrypts the encrypted additional information to create decrypted additional information; and a verification mechanism that verifies each item of the decrypted additional information with each item of the corresponding additional information.

[0003] Japanese Patent Application Laid-Open No. 2009-225229 discloses an image pickup device, which includes: an imaging element that captures a subject and outputs image data; and a condition acquisition mechanism that acquires the shooting conditions during the shooting. The image pickup device described in Japanese Patent Application Laid-Open No. 2009-225229 includes: a generation unit that generates first shooting information and second shooting information that is more detailed than the first shooting information based on the shooting conditions acquired by the condition acquisition mechanism; a conversion unit that converts the second shooting information into encrypted third shooting information; and a mechanism that generates an image file in which the first shooting information and the third shooting information are added to the image data and records the image file in a recording medium.

[0004] Japanese Patent Application Laid-Open No. 2016-122917 discloses a signature generation device. The signature generation device described in Japanese Patent Application Laid-Open No. 2016-122917 includes: a data acquisition unit that acquires a plurality of data including mutually related first data; and a signature generation unit that generates first signature data for the first data and the related information based on the first data, related information indicating a correlation between the plurality of data, and a signature key. Summary of the invention

[0005] One embodiment of the technology according to the present invention provides an information creation method, an image file, an information creation device, and a program capable of improving the security of related information related to image data.

[0006] Means for solving technical problems

[0007] The first method involved in the technology of the present invention is an information creation method, which includes: an acquisition process, acquiring relevant information related to image data; an encryption process, generating first encrypted information obtained by encrypting the relevant information; and an addition process, directly or indirectly adding additional information to the image data, the additional information including the first encrypted information and period information or reliability information related to the period when the first encrypted information was generated.

[0008] The second method involved in the technology of the present invention is an image file, which includes additional information of image data, wherein the additional information includes first encrypted information obtained by encrypting relevant information related to the image data and time information or reliability information related to the time when the first encrypted information was generated.

[0009] The third method involved in the technology of the present invention is an information creation device, which has a processor, and the processor performs the following processing: obtaining relevant information related to image data, generating first encrypted information obtained by encrypting the relevant information, and directly or indirectly adding additional information to the image data, the additional information including the first encrypted information and time information or reliability information related to the time when the first encrypted information was generated.

[0010] The fourth method involved in the technology of the present invention is a program for causing a computer to execute processing, the processing including: an acquisition step of acquiring relevant information related to image data; an encryption step of generating first encrypted information obtained by encrypting the relevant information; and an addition step of directly or indirectly adding additional information to the image data, the additional information including the first encrypted information and period information or reliability information related to the period when the first encrypted information was generated. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 This is a conceptual diagram showing an example of a method of using the imaging device.

[0012] Figure 2 This is a conceptual diagram showing an example of the relationship between the imaging device and the receiving device.

[0013] Figure 3 This is a block diagram showing an example of the hardware configuration of the electrical system of the imaging device and the functions of the main parts.

[0014] Figure 4 This is a block diagram showing an example of the hardware configuration and main functions of the electrical system of the receiving device.

[0015] Figure 5This is a conceptual diagram showing an example of the relationship between an image sensor, a distance measuring sensor, an electronic compass, an NVM, a GNSS device, a network, and an acquisition unit.

[0016] Figure 6 This is a conceptual diagram showing an example of the correlation between the acquisition unit and the association unit.

[0017] Figure 7 This is a conceptual diagram showing an example of the correlation among the NVM, the association establishing unit, and the encryption unit.

[0018] Fig. 8A This is a conceptual diagram showing an example of the processing content when metadata is directly added to image data.

[0019] Figure 8B This is a conceptual diagram showing an example of the processing content when metadata is indirectly added to image data.

[0020] Fig. 9 This is a conceptual diagram showing an example of the correlation between the transmission unit and the reception unit.

[0021] Fig.10 This is a conceptual diagram showing an example of the correlation between the receiving unit and the generating unit.

[0022] Fig.11 This is a conceptual diagram showing an example of correlation among a receiving unit, a generating unit, and a comparing unit.

[0023] Fig.12 This is a conceptual diagram showing an example of the correlation among a receiving unit, a comparing unit, and an executing unit.

[0024] Fig.13 This is a flowchart showing an example of the flow of the image file creation process according to the first embodiment.

[0025] Fig.14 This is a flowchart showing an example of the flow of the image file receiving process according to the first embodiment.

[0026] Fig.15 This is a functional block diagram showing an example of the functions of a processor included in the imaging device according to the second embodiment.

[0027] Fig.16 This is a conceptual diagram showing an example of the relationship between the UI device, the network, the acquisition unit, and the editing unit.

[0028] Fig.17 This is a conceptual diagram showing an example of the correlation between the acquisition unit and the association unit.

[0029] Fig.18 This is a conceptual diagram showing an example of the correlation among the NVM, the association establishing unit, and the encryption unit.

[0030] Fig.19 This is a flowchart showing an example of the flow of image file creation processing according to the second embodiment.

[0031] Fig. 20 It is a conceptual diagram showing a modified example of the second related information.

[0032] Fig.21 This is a conceptual diagram showing an example of the relationship between a camera device, an editing device, and a receiving device.

[0033] Fig. 22 This is a conceptual diagram showing an example of the correlation among an association establishing unit, an encryption unit, a transmission unit, an attachment unit, a network, and a storage device.

[0034] Fig.23 This is a conceptual diagram showing a modified example of the content of metadata included in an image file.

[0035] Fig.24 This is a conceptual diagram showing an example of the processing content of the comparison unit.

[0036] Fig.25 This is a conceptual diagram showing a modified example of the first related information.

[0037] Fig.26 This is a conceptual diagram showing an example of the processing content of the encryption unit generating the fourth related information.

[0038] Fig. 27 This is a conceptual diagram showing an example of the processing content of the encryption unit generating the fifth related information.

[0039] Fig.28 This is a conceptual diagram showing an example of a method in which an external device performs image file creation processing in response to a request from an imaging device, and the imaging device receives the processing result. DETAILED DESCRIPTION

[0040] Hereinafter, an example of an embodiment of an information creation method, an image file, an information creation device, and a program according to the technology of the present invention will be described with reference to the drawings.

[0041] [First embodiment]

[0042] As an example, Figure 1 As shown in FIG. 1 , the imaging device 10 captures an imaging target area 12 designated as a subject. The imaging target area 12 is set according to the angle of view designated by a user of the imaging device 10 (hereinafter referred to as a “user”). Figure 1 In the example shown, the image capturing area 12 includes a plurality of people, roads, etc. The image capturing device 10 is an example of an “information creating device” according to the technique of the present invention.

[0043] The camera device 10 generates an image file 16 by photographing the photographing object area 12 according to the instruction provided by the photographer 14. As the file format of the image file 16, for example, JPEG (Joint Photographic Experts Group) or TIFF (Tag Image File Format) can be cited. The image file 16 contains image data 18 representing the image photographed in the photographing object area 12 and metadata 20 related to the image data 18. The metadata 20 is data attached to the image data 18. As an example of the format of the metadata 20, EXIF ​​(Exchangeable image file format) can be cited.

[0044] In the first embodiment, the image file 16 is an example of the "image file" involved in the technology of the present invention. Also, the image data 18 is an example of the "image data" involved in the technology of the present invention. Furthermore, the metadata 20 is an example of the "additional information" involved in the technology of the present invention.

[0045] The camera device 10 is a civilian digital camera. As an example of a civilian digital camera, a lens-interchangeable digital camera or a lens-fixed digital camera can be cited. A civilian digital camera is just an example, and the same applies even if the camera device 10 is an industrial digital camera. The technology of the present invention is also applicable even when the camera device 10 is a camera device mounted on various electronic devices such as a driving recorder, a smart device, a wearable terminal, a cell observation device, an ophthalmic observation device, or a surgical microscope. Furthermore, the technology of the present invention is also applicable when the camera device 10 is a camera device mounted on various medical imaging devices such as an endoscope device, an ultrasonic diagnostic device, an X-ray imaging device, a CT (Computed Tomography) device, or an MRI (Magnetic Resonance Imaging) device.

[0046] As an example, Figure 2 As shown, the image file 16 is sent from the photographer 14 to the receiving site 22. A receiving device 24 is provided at the receiving site 22. As an example of the receiving device 24, a personal computer can be cited. The receiving device 24 is used by a receiver 26 at the receiving site 22. The receiver 26 receives the image file 16 sent by the photographer 14 via the receiving device 24.

[0047] Here, a personal computer is cited as an example of the receiving device 24, but this is just an example, and the receiving device 24 may also be a smart device or a server.

[0048] The image file 16 is transferred via the network 28. As an example of the network 28, a WAN (Wide Area Network) or a LAN (Local Area Network) can be cited. The camera device 10 and the receiving device 24 are connected to the network 28 so as to be communicable. The camera device 10 can be connected to the network 28 wirelessly or by wire, and the same can be said for the receiving device 24. Furthermore, the camera device 10 can be connected to the network 28 via a communication device such as a smart device, and the same can be said for the receiving device 24.

[0049] Here, the example of transferring the image file 16 via the network 28 is given, but this is only an example. For example, the image file 16 may be transferred via a portable storage medium such as a USB (Universal Serial Bus) memory, or the image file 16 may be transferred from the image camera 10 to the receiving device 24 by directly connecting the image camera 10 to the receiving device 24.

[0050] When the receiver 26 at the receiving site 22 receives the image file 16 from the photographer 14, the receiver 26 performs some processing (e.g., editing, etc.) on the image file 16 or manages the image file 16 using the receiving device 24 or the like, for example, while referring to the metadata 20 included in the received image file 16. Here, for example, if all or part of the metadata 20 is modified by a person (hereinafter referred to as a "third party") not intended by the photographer 14 or part of the metadata 20 is deleted by the third party, the receiver 26 performs some processing on the image file 16 or manages the image file 16 using the metadata 20 of the content not intended by the photographer 14. In order to avoid this situation, it is important to provide the photographer 14 with highly reliable metadata 20 to the receiver 26.

[0051] Therefore, in view of this situation, in the first embodiment, the image pickup device 10 performs image file creation processing (for example, referring to Figure 3 and Fig.13 ), and the receiving device 24 performs image file receiving processing (for example, referring to Figure 4 and Fig.14 ). The following describes this in more detail.

[0052] As an example, Figure 3As shown, the imaging device 10 includes a computer 30, an image sensor 32, a UI (User Interface) device 34, an electronic compass 36, a distance measuring sensor 38, a GNSS (Global Navigation Satellite System) device 39, and a communication I / F (Interface) 40. The computer 30 is an example of a "computer" involved in the technology of the present invention.

[0053] The computer 30 includes a processor 42, a NVM (Non-volatile memory) 44, and a RAM (Random Access Memory) 46. The processor 42, the NVM 44, and the RAM 46 are connected to a bus 48. The processor 42 is an example of a "processor" according to the technique of the present invention.

[0054] The processor 42 is a processing device including a DSP (Digital Signal Processor), a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit). The DSP and the GPU work under the control of the CPU and are responsible for performing image-related processing. Here, as an example of the processor 42, a processing device including a DSP, a CPU and a GPU is listed, but this is just an example. The processor 42 may also be one or more CPUs and one or more GPUs, one or more CPUs and DSPs with integrated GPU functions, one or more CPUs and DSPs without integrated GPU functions, or may be equipped with a TPU (Tensor Processing Unit).

[0055] NVM44 is a nonvolatile storage device that stores various programs and various parameters. As NVM44, a flash memory (for example, EEPROM (Electrically Erasable and Programmable Read Only Memory)) can be cited. RAM46 is a memory that temporarily stores information and is used as a working memory by the processor 42. As RAM46, for example, DRAM (Dynamic Random Access Memory) or SRAM (Static Random Access Memory) can be cited.

[0056] The image sensor 32 is connected to the bus 48. An example of the image sensor 32 is a CMOS (Complementary Metal Oxide Semiconductor) image sensor. The image sensor 32 is controlled by the processor 42 to capture the image of the object area 12 (reference Figure 1 ) is photographed to generate image data 18.

[0057] Here, a CMOS image sensor is cited as an example of the image sensor 32 , but this is just an example, and the image sensor 32 may be another type of image sensor such as a CCD (Charge Coupled Device) image sensor.

[0058] The UI device 34 is also connected to the bus 48. The UI device 34 receives information from the photographer 14 (see Figure 1 and Figure 2 ) and outputs a signal indicating the received instruction to the processor 42. In addition, the UI device 34 presents various information to the photographer 14 under the control of the processor 42. The presentation of various information is achieved by, for example, displaying the various information on a display or outputting the various information in the form of sound from a speaker.

[0059] The electronic compass 36 detects an orientation based on the shooting direction of the imaging device 10 (for example, the direction of the optical axis of the imaging lens mounted on the imaging device 10 ) based on geomagnetism.

[0060] The distance sensor 38 measures the shooting distance. In the first embodiment, the shooting distance refers to the distance from the imaging device 10 (for example, the light receiving surface of the image sensor 32) to the shooting object area 12 (for example, Figure 1 As a first example of the distance measuring sensor 38, a distance measuring sensor using image plane phase difference pixels applied to the image sensor 32 can be cited. As a second example of the distance measuring sensor 38, a distance measuring sensor using a plurality of phase difference pixels and provided in the imaging device 10 as a sensor separate from the image sensor 32 can be cited. As a third example of the distance measuring sensor 38, a distance measuring sensor of the TOF (Time Of Flight) method can be cited. In this way, the distance measuring sensor 38 can be any sensor as long as it is a sensor that can measure the shooting distance.

[0061] The GNSS device 39 receives radio waves transmitted from a plurality of satellites (not shown), and calculates the latitude and longitude capable of specifying the current position of the imaging device 10 based on the received radio waves.

[0062] The communication I / F 40 is an interface including a communication processor and an antenna, etc., and is connected to the bus 48. The communication standard applied to the communication I / F 40 may be, for example, a wireless communication standard including 5G (5th Generation Mobile Communication System), Wi-Fi (registered trademark), or Bluetooth (registered trademark), or a wired communication standard including Ethernet (registered trademark), Fast Ethernet (registered trademark), or Gigabit Ethernet (registered trademark).

[0063] The NVM 44 stores an image file creation program 50. The image file creation program 50 is an example of a "program" involved in the technology of the present invention. The processor 42 reads the image file creation program 50 from the NVM 44 and executes the read image file creation program 50 on the RAM 46 to perform image file creation processing. The image file creation processing is realized by the processor 42 operating as the acquisition unit 42A, the association establishment unit 42B, the encryption unit 42C, the attachment unit 42D, and the transmission unit 42E according to the image file creation program 50 executed on the RAM 46.

[0064] As an example, Figure 4 As shown, the receiving device 24 includes a computer 52, a UI device 54, and a communication I / F 56. The computer 52 includes a processor 58, an NVM 60, and a RAM 62. The processor 58, the NVM 60, the RAM 62, the UI device 54, and the communication I / F 56 are connected to a bus 64.

[0065] In addition, the hardware structure of the computer 52 (ie, the processor 58, NVM 60 and RAM 62) is similar to Figure 3 The hardware structure of the computer 30 shown in FIG. 1 is basically the same as that of the computer 30, so the description of the hardware structure of the computer 52 is omitted here. Figure 3 The role played by the UI device 34 in the camera device 10 shown in the figure is basically the same, so the description is omitted here. In addition, the role played by the communication I / F 56 in the receiving device 24 is the same as that in Figure 3 The role played by the communication I / F 40 in the illustrated imaging device 10 is basically the same, and therefore the description thereof is omitted here.

[0066] The NVM 60 stores an image file receiving program 66. The processor 58 performs image file receiving processing by reading the image file receiving program 66 from the NVM 60 and executing the read image file receiving program 66 on the RAM 62. The image file receiving processing is realized by the processor 58 operating as the receiving unit 58A, the generating unit 58B, the comparing unit 58C, and the executing unit 58D according to the image file receiving program 66 executed on the RAM 62.

[0067] exist Figures 5 to 9 An example of the processing contents of the acquisition unit 42A, the association unit 42B, the encryption unit 42C, the addition unit 42D, and the transmission unit 42E in the imaging device 10 is shown in FIG.

[0068] As an example, Figure 5 As shown, the acquisition unit 42A performs an imaging process and an acquisition process. The imaging process is a process of acquiring the image data 18 obtained by the image sensor 32 through imaging. In addition, the acquisition process is a process of acquiring related information 68 related to the image data 18. In addition, the imaging process is an example of the "imaging process" involved in the technology of the present invention. In addition, the acquisition process is an example of the "acquisition process" involved in the technology of the present invention.

[0069] Here, in order to prevent the occurrence of a time margin for the creation of non-registration related information 68 by a third party (i.e., false related information 68), the acquisition process is automatically executed after the acquisition of the image data 18. That is, the acquisition process is automatically executed after the imaging process. For example, the acquisition unit 42A performs the imaging process and the acquisition process continuously by synchronizing the end of the imaging process with the start of the acquisition process (e.g., starting the acquisition process at the time when the imaging process ends).

[0070] The related information 68 includes photographer information 68A, shooting time information 68B, camera position information 68C, and subject position information 68D. Here, the photographer information 68A is an example of the “photographer information” involved in the technology of the present invention. In addition, the shooting time information 68B is an example of the “shooting time information” involved in the technology of the present invention. In addition, the camera position information 68C is an example of the “camera position information” involved in the technology of the present invention. In addition, the subject position information 68D is an example of the “subject position information” involved in the technology of the present invention.

[0071] The photographer information 68A is information that can identify the photographer 14, who is a person who has performed photography using the imaging device 10 in order to obtain the image data 18. An example of the photographer information 68A is information indicating the name (e.g., full name or screen name) of the photographer 14. The photographer information 68A is stored in the NVM 44 and is acquired from the NVM 44 by the acquisition unit 42A.

[0072] Here, for the sake of convenience, an example is given in which the acquisition unit 42A acquires the photographer information 68A from the NVM 44, but this is only an example. For example, the acquisition unit 42A may acquire the photographer information 68A from a server or the like via the network 28, or the acquisition unit 42A may acquire the photographer information 68A manually input via the UI device 34.

[0073] The photographing time information 68B is information indicating the time at which photographing was performed using the imaging device 10 in order to obtain the image data 18. For example, the photographing time information 68B is acquired by the acquisition unit 42A via the network 28.

[0074] Here, for the sake of convenience, an example is given in which the acquisition unit 42A acquires the shooting time information 68B through the network 28, but this is only an example. For example, the acquisition unit 42A may acquire the shooting time information 68B from a real-time clock built into the camera device 10 or a real-time clock built into an external device (e.g., a smart device) connected to the camera device 10, or the acquisition unit 42A may acquire the shooting time information 68B manually input via the UI device 34.

[0075] Furthermore, here, for the sake of convenience of explanation, as the information included in the relevant information 68, the shooting time information 68B is cited, but this is just an example. For example, the information included in the relevant information 68 may be information indicating the time required for exposure performed by the image sensor 32. Furthermore, the information included in the relevant information 68 may be information indicating the time interval between frames. Furthermore, the information included in the relevant information 68 may be information indicating the moment when shooting for obtaining a dynamic image is started. Furthermore, the information included in the relevant information 68 may be information indicating the moment when shooting for obtaining a dynamic image is ended. Furthermore, the information included in the relevant information 68 may be information indicating the time from the start to the end of shooting for obtaining a dynamic image. In this way, as long as the information indicating the time related to shooting using the camera device 10 is included in the relevant information 68, it will suffice.

[0076] The camera position information 68C is information indicating the position where the camera 10 performs shooting in order to obtain the image data 18 (for example, the position of the camera 10 at the time of shooting), and is acquired by the acquisition unit 42A from the GNSS device 39. That is, the GNSS device 39 calculates the latitude and longitude that can identify the current position of the camera 10, and the acquisition unit 42A acquires information indicating the calculated latitude and longitude as the camera position information 68C.

[0077] Here, for the sake of convenience, an example is given in which the acquisition unit 42A acquires the camera position information 68C from the GNSS device 39, but this is only an example. For example, the acquisition unit 42A may acquire information indicating the latitude and longitude manually input via the UI device 34 as the camera position information 68C. Also, for example, the acquisition unit 42A may acquire information indicating the latitude and longitude calculated by a GNSS device built into an external device (e.g., a smart device, etc.) connected to the camera 10 as the camera position information 68C.

[0078] The subject position information 68D is information indicating the position of the photographing target area 12 (here, as an example, the latitude and longitude of the photographing target area 12), and is calculated by the acquisition unit 42A. The acquisition unit 42A calculates the subject position information 68D based on the camera position information 68C, the distance information 70, and the azimuth information 72. The distance information 70 is information indicating the photographing distance measured by the distance measuring sensor 38, and is acquired by the acquisition unit 42A from the distance measuring sensor 38. The azimuth information 72 is information indicating the azimuth detected by the electronic compass 36, and is acquired by the acquisition unit 42A from the electronic compass 36.

[0079] Here, for convenience of explanation, an example in which the acquisition unit 42A calculates the subject position information 68D is described, but this is merely an example. For example, the acquisition unit 42A may acquire the subject position information 68D manually input via the UI device 34 .

[0080] The camera position information 68C and the subject position information 68D include the disallowance information 74. The disallowance information 74 is information indicating that modification and deletion are not allowed. That is, the disallowance information 74 included in the camera position information 68C is information indicating that modification and deletion of the camera position information 68C are not allowed, and the disallowance information 74 included in the subject position information 68D is information indicating that modification and deletion of the subject position information 68D are not allowed.

[0081] Therefore, the photographer 14 or the receiver 26 can determine whether the information is information that is not allowed to be modified or deleted by confirming whether the information includes the non-permission information 74. For example, in the first embodiment, since the camera position information 68C and the subject position information 68D include the non-permission information 74, the photographer 14 or the receiver 26 can recognize that the camera position information 68C and the subject position information 68D are not allowed to be modified or deleted.

[0082] The acquisition unit 42A includes the disapproval information 74 in one or more information (here, as an example, the imaging device position information 68C and the subject position information 68D) selected from the plurality of information included in the related information 68 in accordance with the instruction received by the UI device 34 .

[0083] Furthermore, among the plurality of information included in the related information 68, one or more information including the disallowance information 74 may be predetermined. In this case, the acquisition unit 42A includes the disallowance information 74 in the predetermined one or more information.

[0084] As an example, Figure 6 As shown, the associating unit 42B generates the first associating information 76. The first associating information 76 is generated by associating the reliability information 78 with the related information 68 acquired by the acquiring unit 42A. The reliability information 78 is an example of the "reliability information" involved in the technique of the present invention.

[0085] The reliability information 78 is information indicating the reliability of the related information 68. Here, the related information 68 with a high degree of modification or deletion can be said to be information with low reliability. Conversely, the related information 68 with a low degree of modification or deletion can be said to be information with high reliability.

[0086] The reliability of the relevant information 68 depends on the source of the relevant information 68. That is, the source of the relevant information 68 can be an indicator for the receiver 26 and the like to judge the reliability of the relevant information 68. For example, if the source of the relevant information 68 is a source with high security (for example, a source that is difficult to modify or delete the relevant information 68), the receiver 26 and the like can judge that the reliability of the relevant information 68 is also high, and if the source of the relevant information 68 is a source with low security (for example, a source that is easy to modify or delete the relevant information 68), the receiver 26 and the like can judge that the reliability of the relevant information 68 is also low.

[0087] As an example of a source with high security, the network 28 or GNSS can be cited. As an example of a medium level of security, the processor 42 cooperates with other sensors that measure distance or direction to obtain certain information. As an example of a source with low security (i.e., a source that is more easily intervened by a third party than the network 28 or GNSS), the UI device 34 or a readable and writable memory (e.g., NVM44) can be cited. In this case, the relevant information 68 obtained by manual input or the relevant information 68 obtained from the readable and writable memory can be said to be relevant information 68 with low reliability compared to the relevant information 68 obtained through the page of the public address on the network 28. Therefore, in this first embodiment, as an example of reliability information 78, information related to whether the relevant information 68 is information obtained through the network 28 is applied.

[0088] The reliability information 78 includes first reliability information 78A, second reliability information 78B, third reliability information 78C, and fourth reliability information 78D. The association unit 42B associates the first reliability information 78A with the photographer information 68A, associates the second reliability information 78B with the shooting time information 68A, associates the third reliability information 78C with the camera position information 68C, and associates the fourth reliability information 78D with the subject position information 68D.

[0089] The first reliability information 78A is information that can identify the source of the photographer information 68A. In the first embodiment, the photographer information 68A is information acquired by the acquisition unit 42A from the NVM 44. Therefore, in the first embodiment, as an example of the first reliability information 78A, information indicating that the content of the photographer information 68A is acquired from the NVM 44 is used. The association of the first reliability information 78A with the photographer information 68A means that the photographer information 68A is not information acquired through the network 28.

[0090] Here, the associating unit 42B automatically associates the first reliability information 78A with the photographer information 68A after the acquisition unit 42A acquires the photographer information 68A from the NVM 44, in the same manner as the acquisition process is automatically performed after the image capturing process. This is done in order to avoid a time margin for a third party to create false reliability information 78 and associate it with the photographer information 68A.

[0091] The second reliability information 78B is information that can identify the source of the shooting time information 68B. In the first embodiment, the shooting time information 68B is information obtained through the network 28. Therefore, in the first embodiment, as an example of the second reliability information 78B, information indicating that the content of the shooting time information 68B is obtained through the network 28 is used. The association of the second reliability information 78B with the shooting time information 68B means that the shooting time information 68B is information obtained through the network 28.

[0092] Furthermore, in the same manner as the first reliability information 78A is associated with the photographer information 68A, the second reliability information 78B is also automatically associated with the photographing time information 68B after the photographing time information 68B is acquired through the network 28 .

[0093] The third reliability information 78C is information that can identify the source of the camera position information 68C. In the first embodiment, the camera position information 68C is information obtained through GNSS. Therefore, in the first embodiment, as an example of the third reliability information 78C, information indicating the content of the camera position information 68C obtained through GNSS is used. The association of the third reliability information 78C with the camera position information 68C means that the camera position information 68C is not information obtained through a highly reliable GNSS.

[0094] Furthermore, in the same manner as the first reliability information 78A is associated with the photographer information 68A, the third reliability information 78C is also automatically associated with the camera position information 68C after the camera position information 68C is acquired by GNSS.

[0095] The fourth reliability information 78D is information that can identify the source of the subject position information 68D. In the first embodiment, the subject position information 68D is information obtained through internal processing based on the processor 42 (i.e., calculation of the subject position information 68D by the acquisition unit 42A based on the camera position information 68C, the distance information 70, and the azimuth information 72). Therefore, in the first embodiment, as an example of the fourth reliability information 78D, information indicating the content of the subject position information 68D obtained through internal processing based on the processor 42 is used. This fourth reliability information 78D is associated with the subject position information 68D means that the subject position information 68D is information obtained through internal processing by the processor 42 with a slightly higher reliability in cooperation with other devices (for example, the electronic compass 36 or the distance measuring sensor 38, etc.).

[0096] Furthermore, in the same manner as the first reliability information 78A is associated with the photographer information 68A, the fourth reliability information 78D is also automatically associated with the subject position information 68D after the subject position information 68D is acquired through the internal processing of the processor 42 .

[0097] As an example, Figure 7 As shown, the encryption unit 42C generates the second related information 80 using the first related information 76. The second related information 80 is different from the first related information 76 in that the related information 68 is replaced with the encrypted information 82 and the included time information 86.

[0098] The encryption unit 42C executes an encryption process. The encryption process is a process of generating encrypted information 82 by encrypting the related information 68 included in the first related information 76. The encrypted information 82 is an example of the "first encrypted information" involved in the technology of the present invention.

[0099] The encryption process is automatically performed after the acquisition process in the same manner as the acquisition process is automatically performed after the photographing process. The reason for doing so is to prevent the relevant information 68 from being modified by a third party or being deleted or modified, thereby preventing the relevant information 68 from being encrypted at a time.

[0100] The NVM 44 stores a hash function 84. An example of the hash function 84 is SHA-256, SHA-384, or SHA-512. The encryption unit 42C obtains the hash function 84 from the NVM 44, and encrypts (i.e., hashes) the related information 68 using the obtained hash function 84, thereby generating encrypted information 82.

[0101] The encrypted information 82 includes a first hash value 82A, a second hash value 82B, a third hash value 82C, and a fourth hash value 82D. The first hash value 82A is a value obtained by hashing the photographer information 68A using the hash function 84. The second hash value 82B is a value obtained by hashing the shooting time information 68B using the hash function 84. The third hash value 82C is a value obtained by hashing the camera position information 68C using the hash function 84. The fourth hash value 82D is a value obtained by hashing the subject position information 68D using the hash function 84.

[0102] The reliability information 78 associated with the related information 68 is associated with the encrypted information 82 in a directly inherited manner. That is, the first reliability information 78A is associated with the first hash value 82A, the second reliability information 78B is associated with the second hash value 82B, the third reliability information 78C is associated with the third hash value 82C, and the fourth reliability information 78D is associated with the fourth hash value 82D.

[0103] The encryption unit 42C generates time information 86 related to the time when the encrypted information 82 was generated in the encryption process, and includes the generated time information 86 in the second related information 80. For example, the time information 86 is included in the second related information 80 by being associated with the encrypted information 82 in the encryption process.

[0104] In the first embodiment, information generated using the photographing time information 68B is used as an example of the time information 86. An example of the time when the time information 86 is generated is the time when the encryption (here, hashing as an example) of the related information 68 is completed.

[0105] The time information 86 includes information indicating the time when the encrypted information 82 is generated when the image is captured and the image capturing time information 68B. This is just an example, and the time information 86 may be the image capturing time information 68B itself. Furthermore, the time information 86 may be information indicating the time when the encryption of the related information 68 is actually completed. In this case, for example, the time information 86 may be obtained by the encryption unit 42C via the network 28 at the time when the encryption of the related information 68 is completed, or may be obtained by the encryption unit 42C from a real-time clock built into the camera device 10 at the time when the encryption of the related information 68 is completed.

[0106] As an example, Fig. 8A and Figure 8B As shown, the adding unit 42D performs an adding process of directly or indirectly adding the related information 68, the second related information 80, and the hash function 84 as the metadata 20 to the image data 18. The adding process includes a creating process. The creating process is a creating process of creating the image file 16. In the creating process, the image file 16 is created by filing the image data 18 and the metadata 20 in a predetermined file format. Here, in the case where the adding unit 42D directly adds the metadata 20 to the image data 18, for example, Fig. 8A As shown, the image file 16 includes related information 68 , second related information 80 , and a hash function 84 as metadata 20 .

[0107] In contrast, Figure 8B 2 shows an example in which the adding unit 42D indirectly adds the metadata 20 to the image data 18 . The indirect addition of the metadata 20 to the image data 18 is achieved by including the access information 85 in the metadata 20 in the image file 16 .

[0108] exist Figure 8B In the example shown, the additional process includes: a recording process (for example, a process in which the additional unit 42D uploads the metadata 20 to the server 2 and causes the server 2 to record it in the recording medium 4), recording the metadata 20 in the recording medium 4 of the external server 2; and a creation process, creating an image file 16 containing access information 85 for accessing the metadata 20 in the recording medium 4 (for example, information for allowing access to the metadata 20 stored in the recording medium 4 of the server 2).

[0109] Examples of the recording medium 4 include a hard disk, a magnetic tape, or a flash memory. Examples of access include a process of searching and browsing information (here, as an example, metadata 20) on the network 28, a process of reading information (here, as an example, metadata 20) from a memory (here, as an example, the recording medium 4), or a process of writing information to a memory. Examples of the access information 85 include an identification ID (identifier), a URL (Uniform Resource Locator), or a download password.

[0110] By including the access information 85 in the metadata 20 in the image file 16 in this way, a user who is officially permitted to use the image file 16 can access the metadata 20 in the recording medium 4 by using the access information 85 included in the metadata 20 in the image file 16 .

[0111] The metadata 20 included in the image file 16 and the metadata 20 included in the recording medium 20 may be the same data, or may be partially or entirely different data.

[0112] As a first example of a case where the metadata 20 included in the image file 16 is different from the metadata 20 included in the recording medium 20, there can be cited: Fig. 8A All of the related information 68, the second related information 80, and the hash function 84 shown are recorded in the recording medium 20 and Fig. 8A The illustrated example is a mode in which the metadata 20 other than the related information 68 , the second related information 80 , and the hash function 84 is recorded in the image file 16 .

[0113] As a second example of a case where the metadata 20 included in the image file 16 is different from the metadata 20 included in the recording medium 20, there can be cited: Fig. 8A The example shows a method in which a part of the related information 68, the second related information 80 and the hash function 84 (for example, the related information 68) is recorded in the recording medium 20 and the metadata 20 including the remaining part (for example, the second related information 80 and the hash function 84) is recorded in the image file 16.

[0114] As a third example of a situation where the metadata 20 included in the image file 16 is different from the metadata 20 included in the recording medium 20 , an example is given in which the access information 85 is recorded as metadata 20 in the image file 16 and metadata 20 other than the access information 85 is recorded in the recording medium 20 .

[0115] In this way, by distributing the metadata 20 in advance in the image file 16 and the recording medium 4 , the security of the metadata 20 can be improved.

[0116] In addition, in each embodiment, in order to facilitate understanding of the technology of the present invention, an example of directly adding metadata 20 to image data 18 is given for illustration, but the technology of the present invention is not limited to this. The technology of the present invention also includes an example in which the adding unit 42D indirectly adds metadata 20 to the image data 18.

[0117] The adding unit 42D automatically includes the related information 68 in the metadata 20 after the acquisition process in the same manner as the acquisition process is automatically performed after the imaging process. The reason for this is that there is no time lag for the related information 68 to be modified or deleted by a third party before the related information 68 is included in the metadata 20.

[0118] The adding unit 42D automatically includes the second related information 80 and the hash function 84 in the metadata 20 after the encryption process in the same manner as the acquisition process is automatically performed after the imaging process. The reason for this is that there is no time lag for the second related information 80 and the hash function 84 to be modified or deleted by a third party before the second related information 80 and the hash function 84 are included in the metadata 20.

[0119] As an example, Fig. 9 As shown, in the imaging device 10, the transmitting unit 42E transmits the image file 16 created by the attaching unit 42D via the communication I / F 40 (refer to Figure 3 ) is sent to the receiving device 24. In the receiving device 24, the communication I / F 56 (reference Figure 4 ) receives the image file 16 sent from the sending unit 42E. Thus, the image file 16 is transferred from the photographer 14 to the receiver 26 (refer to Figure 2 ).

[0120] exist Figure 10 to Figure 12 2 shows an example of the processing contents of the receiving unit 58A, the generating unit 58B, the comparing unit 58C, and the executing unit 58D in the receiving device 24.

[0121] As an example, Fig.10 As shown, the generating unit 58B obtains the image file 16 received by the receiving unit 58A from the receiving unit 58A. The generating unit 58B performs a generating step. The generating step is a step of generating the verification information 88 using the related information 68 and the hash function 84. The generating step is an example of the "generating step" involved in the technology of the present invention.

[0122] In the generation process, the generation unit 58B obtains the related information 68 and the hash function 84 from the metadata 20 included in the image file 16, and generates the verification information 88 by hashing the related information 68 using the hash function 84. The verification information 88 includes a fifth hash value 88A, a sixth hash value 88B, a seventh hash value 88C, and an eighth hash value 88D.

[0123] The fifth hash value 88A is obtained by analyzing the photographer information 68A (reference Figure 6 ) is hashed using the hash function 84. The sixth hash value 88B is obtained by hashing the photographing time information 68A (reference Figure 6 ) is a value obtained by hashing the image pickup device position information 68C included in the related information 68 using the hash function 84. The eighth hash value 88D is a value obtained by hashing the object position information 68D using the hash function 84.

[0124] As an example, Fig.11 As shown, the comparison unit 58C obtains the image file 16 received by the reception unit 58A (that is, the same image file 16 as the image file 16 obtained by the generation unit 58B) from the reception unit 58A. The comparison unit 58C extracts the encryption information 82 from the second related information 80 in the metadata 20 included in the image file 16 obtained by the reception unit 58A.

[0125] Comparison unit 58C obtains verification information 88 generated by generation unit 58B from generation unit 58B. Here, comparison unit 58C performs a comparison process. The comparison process is an example of a "comparison process" involved in the technology of the present invention. The comparison process is a process of comparing verification information 88 obtained from generation unit 58B with encryption information 82 extracted from second related information 80. Figure 8B As shown, in the case where metadata 20 is recorded in the recording medium 4 of server 2, verification of modification or deletion of metadata 20 in the comparison process can be performed within server 2 or by a device (such as a personal computer or a server other than server 2) that is communicatively connected to server 2.

[0126] The comparison unit 58C determines whether the fifth hash value 88A and the first hash value 82A are consistent by comparing the fifth hash value 88A included in the verification information 88 with the first hash value 82A included in the encrypted information 82. Furthermore, the comparison unit 58C determines whether the sixth hash value 88B and the second hash value 82B are consistent by comparing the sixth hash value 88B included in the verification information 88 with the second hash value 82B included in the encrypted information 82. Furthermore, the comparison unit 58C determines whether the seventh hash value 88C and the third hash value 82C are consistent by comparing the seventh hash value 88C included in the verification information 88 with the third hash value 82C included in the encrypted information 82. Furthermore, the comparison unit 58C determines whether the eighth hash value 88D and the fourth hash value 82D are consistent by comparing the eighth hash value 88D included in the verification information 88 with the fourth hash value 82D included in the encrypted information 82.

[0127] As an example, Fig.12 As shown, the execution unit 58D obtains the comparison result 90 from the comparison unit 58C. The comparison result 90 includes a first comparison result 90A, a second comparison result 90B, a third comparison result 90C, and a fourth comparison result 90D.

[0128] The first comparison result 90A is a result obtained by the comparison unit 58C comparing the fifth hash value 88A with the first hash value 82A (i.e., a result of determining whether the fifth hash value 88A is consistent with the first hash value 82A). The second comparison result 90B is a result obtained by the comparison unit 58C comparing the sixth hash value 88B with the second hash value 82B (i.e., a result of determining whether the sixth hash value 88B is consistent with the second hash value 82B). The third comparison result 90C is a result obtained by the comparison unit 58C comparing the seventh hash value 88C with the third hash value 82C (i.e., a result of determining whether the seventh hash value 88C is consistent with the third hash value 82C). The fourth comparison result 90D is a result obtained by the comparison unit 58C comparing the eighth hash value 88D with the fourth hash value 82D (i.e., a result of determining whether the eighth hash value 88D is consistent with the fourth hash value 82D).

[0129] Executing unit 58D acquires image file 16 received by receiving unit 58A (i.e., image file 16 identical to image file 16 acquired by generating unit 58B and comparing unit 58C) from receiving unit 58A. Executing unit 58D also extracts reliability information 78 and time information 86 from second related information 80 included in metadata 20 of image file 16 acquired from receiving unit 58A.

[0130] Executing unit 58D executes processing based on comparison result 90 acquired from comparing unit 58C, reliability information 78 extracted from second related information 80 , and time information 86 extracted from second related information 80 .

[0131] Preventive processing is an example of processing based on comparison result 90, reliability information 78, and time information 86. Preventive processing is processing to prevent, for example, metadata 20 being modified or part of metadata 20 being deleted, which may cause damage to receiver 26 using metadata 20.

[0132] As a first example of the preventive processing, there is a process of presenting the comparison result 90 , the reliability information 78 , and the time information 86 to the receiver 26 or notifying the photographer 14 via the UI device 34 (eg, a display).

[0133] As a second example of preventive processing, the following processing can be cited: based on the comparison result 90, the reliability information 78 and the period information 86, a numerical value representing the possibility that the relevant information 68 contained in the metadata 20 has been modified or a portion of the relevant information 68 has been deleted is calculated, and information based on the calculated numerical value is output to a specific output destination (for example, the UI device 34, the NVM 44, or an external device on the network 28, etc.).

[0134] As a third example of the preventive processing, there can be mentioned a process of calculating a numerical value indicating the possibility as described above and including information based on the calculated numerical value in the metadata 20 .

[0135] As a fourth example of the preventive processing, the following processing can be cited: the difference between the time indicated by the period information 86 and the time indicated by the shooting time information 68B included in the metadata 20 of the image file 16 is calculated, and information based on the calculated difference is output to a specific output destination. As an example of information based on the difference, information indicating the difference itself or warning information determined based on the difference can be cited. As an example of warning information, information that urges more attention as the difference increases can be cited.

[0136] As a fifth example of the preventive processing, there can be mentioned a process of calculating the degree of difference as described above and including information based on the calculated degree of difference (for example, a flag corresponding to the degree of difference) in the metadata 20 .

[0137] As a sixth example of preventive processing, a numerical value or difference indicating the possibility is calculated as described above, and when the numerical value or difference indicating the possibility exceeds a threshold, image file 16 is deleted, a mark is assigned to image file 16, or image file 16 is stored in a specific storage area.

[0138] In addition, the example in which the execution unit 58D executes the preventive process based on the comparison result 90, the reliability information 78, and the time information 86 is given here, but this is only an example. For example, the execution unit 58D may execute the preventive process based on one or both of the comparison result 90, the reliability information 78, and the time information 86.

[0139] Next, refer to Fig.13 and Fig.14 The operation of the portions of the imaging device 10 and the receiving device 24 according to the technology of the present invention will be described.

[0140] First, refer to Fig.13 The operation of the portion of the imaging device 10 that is related to the technology of the present invention will be described. Fig.13 The flow of the image file creation process represented by the flowchart is an example of the “information creation method” according to the technique of the present invention.

[0141] exist Fig.13 In the image file creation process shown, first, in step ST10, the acquisition unit 42A determines whether one frame of image capture is performed by the image sensor 32. In step ST10, if one frame of image capture is not performed by the image sensor 32 (for example, still image capture), the determination is negative, and the image file creation process proceeds to step ST26. In step ST10, if one frame of image capture is performed by the image sensor 32, the determination is positive, and the image file creation process proceeds to step ST12.

[0142] In step ST12, the acquisition section 42A acquires the image data 18 from the image sensor 32. After the process of step ST12 is performed, the image file creation process proceeds to step ST14.

[0143] In step ST14, the acquisition section 42A acquires the related information 68 related to the image data 18. After the process of step ST14 is performed, the image file creation process proceeds to step ST16.

[0144] In step ST16, the associating unit 42B generates the first associating information 76 by associating the related information 68 acquired in step ST14 with the reliability information 78. After the process of step ST16 is executed, the image file creation process proceeds to step ST18.

[0145] In step ST18, the encryption unit 42C generates encrypted information 82 by encrypting the related information 68 included in the first related information 76 generated in step ST16 using the hash function 84. After the process of step ST18 is executed, the image file creation process proceeds to step ST20.

[0146] In step ST20, the encryption unit 42C generates time information 86. Furthermore, the encryption unit 42C generates second related information 80 based on the encryption information 82 generated in step ST18, the reliability information 78 used in step ST16, and the time information 86. After executing the process of step ST20, the image file creation process proceeds to step ST22.

[0147] In step ST22, the adding unit 42D creates the image file 16 by adding the related information 68 acquired in step ST14, the second related information 80 generated in step ST20, and the hash function 84 used in step ST18 as metadata 20 to the image data 18. After the process of step ST22 is executed, the image file creation process proceeds to step ST24.

[0148] In step ST24, the transmission section 42E transmits the image file 16 created in step ST22 to the receiving device 24. After the process of step ST24 is performed, the image file creation process proceeds to step ST26.

[0149] In step ST26, the transmission unit 42E determines whether the condition for terminating the image file creation process is satisfied. As an example of the condition for terminating the image file creation process, a condition for receiving an instruction to terminate the image file creation process through the UI device 34 can be cited. In step ST26, if the condition for terminating the image file creation process is not satisfied, the determination is negative, and the image file creation process proceeds to step ST10. In step ST26, if the condition for terminating the image file creation process is satisfied, the determination is positive, and the image file creation process is terminated.

[0150] Next, refer to Fig.14 The operation of the portion of the receiving device 24 that is related to the technology of the present invention will be described.

[0151] exist Fig.14 In the receiving process shown in FIG. 1 , first, in step ST50, the receiving unit 58A executes Fig.13 In the process of step ST24 shown in the figure, it is determined whether the image file 16 transmitted from the transmitting unit 42E of the camera device 10 is received. In step ST50, if the image file 16 is not received, the determination is negative, and the image file reception process proceeds to step ST60. In step ST50, if the image file 16 is received, the determination is positive, and the image file reception process proceeds to step ST52.

[0152] In step ST52, the generating section 58B generates verification information 88 by encrypting the related information 68 included in the metadata 20 of the image file 16 received in step ST50 using the hash function 84 included in the metadata 20. After executing the process of step ST52, the image file receiving process proceeds to step ST54.

[0153] In step ST54, the comparison unit 58C extracts the encryption information 82 from the second related information 80 included in the metadata 20 of the image file 16 received in step ST50. Then, the comparison unit 58C compares the encryption information 82 extracted from the second related information 80 with the verification information 88 generated in step ST52. After the process of step ST54 is executed, the receiving process proceeds to step ST56.

[0154] In step ST56, the execution unit 58D extracts the reliability information 78 and the time information 86 from the second related information 80 included in the metadata 20 of the image file 16 received in step ST50. After the process of step ST56 is executed, the image file reception process proceeds to step ST58.

[0155] In step ST58, the execution unit 58D executes processing (for example, the above-mentioned preventive processing) based on the comparison result 90 obtained by comparing the encryption information 82 and the verification information 88 in step ST54, the reliability information 78 extracted from the second related information 80 in step ST56, and the period information 86 extracted from the second related information 80 in step ST56. After the processing of step ST58 is executed, the image file reception processing proceeds to step ST60.

[0156] In step ST60, the execution unit 58D determines whether the condition for terminating the image file receiving process is satisfied. As an example of the condition for terminating the image file receiving process, there can be cited the condition of receiving an instruction to terminate the image file receiving process through the UI device 54. In step ST60, if the condition for terminating the image file receiving process is not satisfied, the determination is negative, and the image file receiving process proceeds to step ST50. In step ST60, if the condition for terminating the image file receiving process is satisfied, the determination is positive, and the image file receiving process is terminated.

[0157] As described above, in the first embodiment, the imaging device 10 acquires the related information 68 related to the image data 18 and generates the encrypted information 82 by encrypting the related information 68. The imaging device 10 creates the image file 16 by adding the encrypted information 82 to the image data 18 as the metadata 20.

[0158] Furthermore, in the first embodiment, the camera device 10 includes the period information 86 in the metadata 20 of the image file 16. The period information 86 is information related to the period when the encrypted information 82 was generated. Therefore, for example, when the receiver 26 or the like receives the image file 16 from the photographer 14, by referring to the period information 86 included in the metadata 20 of the image file 16, it is possible to infer the appropriateness of the period when the relevant information 68 was encrypted. For example, if the receiver 26 or the like feels appropriateness at the period when the relevant information 68 was encrypted, it is possible to determine that the reliability of the relevant information 68 is high. On the contrary, if the receiver 26 or the like feels abnormality at the period when the relevant information 68 was encrypted, it is possible to determine that the reliability of the relevant information 68 is low. In this way, by including the period information 86 in the metadata 20 of the image file 16, the security of the relevant information 68 can be improved.

[0159] Furthermore, the metadata 20 includes reliability information 78 acquired by the camera 10. The reliability information 78 is information indicating the reliability of the related information 68. Therefore, for example, when the receiver 26 or the like receives the image file 16 from the photographer 14, the reliability of the related information 68 can be determined by referring to the reliability information 78 included in the metadata 20 of the image file 16. In this way, by including the reliability information 78 in the metadata 20 of the image file 16, the security of the related information 68 can be improved.

[0160] Furthermore, in the first embodiment, the related information 68 is included in the metadata 20 by the imaging device 10. In this case, for example, the receiver 26 or the like can receive the related information 68 related to the image data 18 by receiving the image file 16 itself or the metadata 20 included in the image file 16 from the photographer 14. Thus, the receiver 26 or the like can easily obtain the related information 68.

[0161] Furthermore, in the first embodiment, as an example of the reliability information 78, information related to whether the related information 68 is information obtained through the network 28 is used. Therefore, if the related information 68 is information obtained through the network 28, the receiver 26 or the like can determine that the related information 68 is information with high security obtained from a public page. If the related information 68 is not information obtained through the network 28 or GNSS, the receiver 26 or the like can determine that the related information 68 is not information with high security.

[0162] Furthermore, in the first embodiment, the image file 16 including the related information 68 and the encrypted information 82 is created by the imaging device 10. That is, not only the encrypted information 82 but also the related information 68 as information before encryption is included in the image file 16. Thus, for example, the receiving device 24 etc. can realize not only processing using the encrypted information 82 but also processing using the related information 68.

[0163] Furthermore, in the first embodiment, the related information 68 includes photographer information 68A, shooting time information 68B, camera position information 68C, and subject position information 68D. The related information 68 is encrypted and included in the metadata 20 of the image file 16 as encrypted information 82. Therefore, the security of the photographer information 68A, shooting time information 68B, camera position information 68C, and subject position information 68D can be improved.

[0164] In the first embodiment, the camera position information 68C and the subject position information 68D of the photographer information 68A, the shooting time information 68B, the camera position information 68C and the subject position information 68D include the disapproval information 74. The disapproval information 74 is information indicating that modification and deletion are not permitted.

[0165] Therefore, the photographer 14 or the receiver 26 can recognize that the camera position information 68C and the subject position information 68D are not allowed to be modified or deleted. As a result, the photographer 14 or the receiver 26 can handle information that is allowed to be modified or deleted (here, as an example, the camera position information 68C and the subject position information 68D) and information that is not allowed to be modified or deleted (here, as an example, the camera position information 68C and the subject position information 68D). In addition, it is possible to suppress the camera position information 68C and the subject position information 68D from being modified or deleted contrary to the intention of the photographer 14 or the receiver 26.

[0166] Furthermore, in the first embodiment, the hash function 84 for encrypting the related information 68 is included in the metadata 20. Therefore, the recipient 26 or the like who has received the image file 16 from the photographer 14 can easily acquire the hash function 84 for encrypting the related information 68.

[0167] Furthermore, in the first embodiment, the image file 16 transmitted from the camera 10 is received by the receiving device 24, and the hash function 84 is obtained by the receiving device 24 from the image file 16. Furthermore, the verification information 88 is generated by encrypting (i.e., hashing) the related information 68 using the hash function 84 by the receiving device 24, and the verification information 88 is compared with the encrypted information 82. Thus, for example, when the verification information 88 and the encrypted information 82 are inconsistent, the receiver 26 and the like can judge that the possibility that the related information 68 is modified or a part of the related information 68 is deleted is high. On the contrary, for example, when the verification information 88 and the encrypted information 82 are consistent, the receiver 26 and the like can judge that the possibility that the related information 68 is modified or a part of the related information 68 is deleted is low.

[0168] Furthermore, in the first embodiment, after acquiring the relevant information 68, the image pickup device 10 automatically performs a process of encrypting the relevant information 68. Thus, for example, there is no time margin for the relevant information 68 to be modified or part of the relevant information 68 to be deleted during the period from when the encrypted information 82 is generated from the relevant information 68, and thus the reliability of the relevant information 68 can be improved.

[0169] Furthermore, in the first embodiment, the image pickup device 10 automatically acquires the related information 68 after acquiring the image data 18. Thus, for example, before the related information 68 is included in the metadata 20, there is no time margin for the related information 68 to be modified by a third party, deleted by a third party, or created by a third party, so the reliability of the related information 68 can be improved.

[0170] Furthermore, in the first embodiment, after the acquisition unit 42A acquires the image data 18 obtained by shooting by the image sensor 32 from the image sensor 32, the acquisition unit 42A automatically acquires the related information 68. Thus, for example, there is no time margin for a third party to create information other than the registered related information 68 (i.e., false related information 68), and thus the reliability of the related information 68 can be improved.

[0171] In the first embodiment, the example in which the camera position information 68C and the subject position information 68D include the disallowance information 74 is described, but this is only an example. For example, the camera position information 68C or the subject position information 68D may include the disallowance information 74, or other information included in the related information 68 (for example, the photographer information 68A or the shooting time information 68B) may include the disallowance information 74. Furthermore, the disallowance information 74 may be given to the entire related information 68.

[0172] Furthermore, in the first embodiment, the example in which the time information 86 is directly included in the second related information 80 is described, but this is only an example. For example, the time information 86 may be encrypted in the same manner as the related information 68, and the encrypted information of the time information 86 may be included in the second related information 80. In this case, the time information 86 before encryption may be included in the metadata 20 of the image file 16 as a part of the related information 68.

[0173] [Second embodiment]

[0174] In the first embodiment described above, an example of a method in which the image data 18 itself obtained by shooting with the camera device 10 is transmitted from the photographer 14 to the receiver 26 is given, but in the second embodiment, an example of a method in which the image data 18 is edited by the photographer 14 or the like and the edited image data 18 is transmitted to the receiver 26 is described. In addition, in the second embodiment, the same reference numerals are given to the same constituent elements as those described in the first embodiment described above, and the description thereof is omitted, and the parts different from the first embodiment described above are described.

[0175] As an example, Fig.15 As shown, compared with the image file creation process according to the first embodiment, the image file creation process according to the second embodiment is realized by the processor 42 further operating as the editing unit 42F. The editing unit 42F executes an editing process. The editing process is a process of editing the image data 18.

[0176] In the second embodiment, the editing process is performed by the imaging device 10 , but this is only an example. For example, the editing process may be performed by a smart device, a personal computer, or a server connected to the imaging device 10 so as to be communicable.

[0177] As an example, Fig.16 As shown, the UI device 34 receives an edit instruction 92 from the photographer 14 or the like. The edit instruction 92 is, for example, an instruction to edit the specific contents of the image data 18. When the UI device 34 receives the edit instruction 92, the editing unit 42F edits the image data 18 according to the edit instruction 92.

[0178] The UI device 34 receives the editor information 68E. The editor information 68E is information related to the editor. The editor is a person who edited the image data 18. As an example of information related to the editor, the name of the editor, the nickname of the editor, information indicating the location of the editor, or the contact information of the editor can be cited. The editor can be the photographer 14 or someone other than the photographer 14.

[0179] The editing unit 42F includes information related to editing, that is, editing related information, in the related information 68. For example, in the second embodiment, the editing unit 42F includes the editor information 68E received by the UI device 34 in the related information 68. In addition, in the same manner as the acquisition unit 42A acquires the shooting time information 68B through the network 28 in the first embodiment, the editing unit 42F acquires the editing time information 68F through the network 28, and includes the editing time information 68F in the related information 68. The editing time information 68F is information indicating the time when the image data 18 is edited. As an example of the time when the image data 18 is edited, the time when the editing of the image data 18 starts or the time when the editing of the image data 18 ends can be cited. In addition, the editing time information 68F may also include information indicating the total time required to edit the image data 18.

[0180] In addition, here, the example of a method in which the UI device 34 receives the editing instruction 92 and the editor information 68E is given, but this is only an example. For example, the editing instruction 92 or the editor information 68E may be provided to the editing unit 42F from an external device (e.g., a smart device, a personal computer, or a server) that is communicably connected to the camera device 10. The editor information 68E may be stored in the NVM 44. In this case, the editing unit 42F may obtain the editor information 68E from the NVM 44 when the image data 18 is edited.

[0181] As an example, Fig.17 As shown, the association unit 42B generates the fifth reliability information 78E and the sixth reliability information 78F, and includes the generated fifth reliability information 78E and sixth reliability information 78F in the reliability information 78. Furthermore, the association unit 42B associates the fifth reliability information 78E with the editor information 68E, and associates the sixth reliability information 78F with the editing time information 68F.

[0182] The fifth reliability information 78E is information that can identify the source of the editor information 68E. In the second embodiment, the editor information 68E is information obtained by the editing unit 42F from the UI device 34. Therefore, in the second embodiment, as an example of the fifth reliability information 78E, information indicating that the content of the editor information 68E is obtained from the UI device 34 is used. The fifth reliability information 78E is associated with the editor information 68E, which means that the editor information 68E is not information obtained through the network 28.

[0183] In the second embodiment, the fifth reliability information 78E is automatically associated with the editor information 68E after the editing process in the same manner as the acquisition process is automatically performed after the imaging process. The reason for this is to avoid creating a time margin for a third party to create false reliability information 78 and associate it with the editor information 68E.

[0184] The sixth reliability information 78F is information that can identify the source of the edit time information 68F. In the second embodiment, the edit time information 68F is information acquired through the network 28. Therefore, in the second embodiment, as an example of the sixth reliability information 78F, information indicating that the content of the edit time information 68F is acquired through the network 28 is used. The association of the sixth reliability information 78F with the edit time information 68F means that the edit time information 68F is information acquired through the network 28.

[0185] In the second embodiment, the sixth reliability information 78F is automatically associated with the edit time information 68F after the edit process in the same manner as the acquisition process is automatically performed after the imaging process. This is done to avoid creating a time margin for a third party to create false reliability information 78 and associate it with the edit time information 68F.

[0186] As an example, Fig.18 As shown, the encryption unit 42C encrypts the editor information 68E and the edit time information 68F using the hash function 84 in the same manner as the encryption (i.e., hashing) described in the first embodiment. As a result, the 11th hash value 82E obtained by encrypting the editor information 68E and the 12th hash value 82F obtained by encrypting the edit time information 68F are included in the encrypted information 82. Furthermore, the 11th hash value 82E is associated with the fifth reliability information 78E, and the 12th hash value 82F is associated with the sixth reliability information 78F.

[0187] In the encryption process, the encryption unit 42C generates time information 94 which is information about the time when the eleventh hash value 82E and the twelfth hash value 82F were generated, and includes the time information 94 in the second related information 80 similarly to the time information 86 of the first embodiment.

[0188] In the second embodiment, as an example of the time information 94, the editing time information 68F (see Fig.16 and Fig.17 ) is generated. As an example of the time when the period information 94 is generated, the time when the encryption (here, hashing as an example) of the related information 68 is completed can be cited.

[0189] The time information 94 includes information indicating that the 11th hash value 82E and the 12th hash value 82F were generated when the image data 18 was edited, and the editing time information 68F. The time information 94 may also include information indicating the total time required to edit the image data 18.

[0190] The time information 94 may be the edit time information 68F itself. Furthermore, the time information 94 may be information indicating the time point at which the 11th hash value 82E and the 12th hash value 82F are actually completed. In this case, for example, the time information 94 may be acquired by the encryption unit 42C via the network 28 at the time when the encryption of the editor information 68E and the edit time information 68F is completed, or may be acquired by the encryption unit 42C from a real-time clock built into the camera device 10 at the time when the encryption of the 11th hash value 82E and the 12th hash value 82F is completed.

[0191] In the second embodiment, the ninth hash value 88E and the tenth hash value 88F are generated as information included in the verification information 88 in the same manner as the fifth hash value 88A, the sixth hash value 88B, the seventh hash value 88C, and the eighth hash value 88D are generated as information included in the verification information 88 in the first embodiment. The ninth hash value 88E is a hash value obtained by hashing the editor information 68E using the hash function 84, and the tenth hash value 88F is a hash value obtained by hashing the edit time information 68F using the hash function 84.

[0192] In the second embodiment, the ninth hash value 88E is compared with the eleventh hash value 82E, and the tenth hash value 88F is compared with the twelfth hash value 82F, in the same manner as the processing performed by the comparison unit 58C in the first embodiment. These comparison results are processed by the execution unit 58D in the first embodiment in the same manner as in the first embodiment.

[0193] exist Fig.19 An example of the flow of image file creation processing according to the second embodiment is shown in FIG. Fig.19 The flowchart shown is similar to Fig.13 Compared with the flowchart shown in FIG. 1 , the difference is that the processing of step ST21A to step ST21E is inserted between the processing of step ST20 and the processing of step ST22. Here, the processing of step ST21A to step ST21E will be described.

[0194] exist Fig.19 In step ST21A of the image file creation process shown in FIG. 1 , the editing unit 42F determines whether the edit instruction 92 and the editor information 68E are received by the UI device 34. In step ST21A, if the edit instruction 92 and the editor information 68E are not received by the UI device 34, the determination is negative, and the image file creation process proceeds to step ST22. In step ST21A, if the edit instruction 92 and the editor information 68E are received by the UI device 34, the determination is positive, and the image file creation process proceeds to step ST21B.

[0195] In step ST21B, the editing unit 42F edits the image data 18 acquired in step ST12 according to the editing instruction 92 received by the UI device 34 in step ST21A. And, the editing unit 42F generates the editing time information 68F using the information acquired through the network 28. And, the editing unit 42F updates the related information 68 by including the editor information 68E and the editing time information 68F received by the UI device 34 in step ST21A in the related information 68. After the process of step ST21B is executed, the image file creation process proceeds to step ST21C.

[0196] In step ST21C, the associating unit 42B updates the first associating information 76 by associating the fifth reliability information 78E with the editor information 68E and associating the sixth reliability information 78F with the editing time information 68F. After executing the process of step ST21C, the image file creation process proceeds to step ST21D.

[0197] In step ST21D, the encryption unit 42C generates the eleventh hash value 82E and the twelfth hash value 82F by encrypting the editor information 68E and the editing time information 68F included in the related information 68 using the hash function 84. After executing the process of step ST21D, the image file creation process proceeds to step ST21E.

[0198] In step ST21E, the encryption unit 42C generates the time information 94. Then, the encryption unit 42C updates the second associated information 80 using the 11th hash value 82E, the 12th hash value 82F, the 5th reliability information 78E, the 6th reliability information 78F, and the time information 94. That is, the update of the second associated information 80 is achieved by associating the 5th reliability information 78E with the 11th hash value 82E, associating the 6th reliability information 78F with the 12th hash value 82F, and associating the time information 94 with the encrypted information 82. After executing the process of step ST21E, the image file creation process proceeds to step ST22.

[0199] As described above, in the second embodiment, the image data 18 is edited by the camera 10, and the editing related information (here, as an example, the editor information 68E and the editing time information 68F) is included in the related information 68. The editing related information is encrypted. In the second embodiment, the 11th hash value 82E is generated by encrypting the editor information 68E, and the 12th hash value 82F is generated by encrypting the editing time information 68F. The 11th hash value 82E and the 12th hash value 82F are included in the encrypted information 82. Moreover, in the second embodiment, the period information 94 is included in the metadata 20 by the camera 10. The period information 94 is information related to the period when the 11th hash value 82E and the 12th hash value 82F are generated.

[0200] Therefore, for example, when the receiver 26 etc. receives the image file 16 from the editor (for example, the photographer 14 etc.), by referring to the period information 94 included in the metadata 20 of the image file 16, it is possible to infer the appropriateness of the period when the editing-related information was encrypted. For example, if the receiver 26 etc. feels appropriateness at the period when the editing-related information was encrypted, it is possible to judge that the reliability of the editing-related information is high. On the contrary, if the receiver 26 etc. feels abnormality at the period when the editing-related information was encrypted, it is possible to judge that the reliability of the editing-related information is low. In this way, by including the period information 94 in the metadata 20 of the image file 16, the security of the editing-related information can be improved.

[0201] Furthermore, the metadata 20 includes reliability information 78 by the camera 10, and the reliability information 78 includes fifth reliability information 78E and sixth reliability information 78F. The fifth reliability information 78E is information that can identify the source of the editor information 68E. The sixth reliability information 78F is information that can identify the source of the editing time information 68F.

[0202] Therefore, for example, when the receiver 26 or the like receives the image file 16 from the editor (e.g., the photographer 14 or the like), the reliability of the editing-related information can be determined by referring to the fifth reliability information 78E and the sixth reliability information 78F included in the metadata 20 of the image file 16. In this way, by including the fifth reliability information 78E and the sixth reliability information 78F in the metadata 20 of the image file 16, the security of the editing-related information can be improved.

[0203] In the second embodiment described above, the example of the method in which the encrypted information 82 is associated with the time information 86 and 94 is given, but this is only an example. Fig. 20 As shown, the period information 86 can be associated with the first hash value 82A, the second hash value 82B, the third hash value 82C, and the fourth hash value 82D, respectively, and the period information 94 can be associated with the eleventh hash value 82E and the twelfth hash value 82F, respectively. The second associated information 80 thus constructed is stored in the metadata 20 in the same manner as in the first and second embodiments described above.

[0204] In this way, when the period information 86 and 94 exist, the encrypted information corresponding to the period information 86 and the encrypted information corresponding to the period information 94 can be collected and stored in the metadata 20. That is, the first hash value 82A, the second hash value 82B, the third hash value 82C, and the fourth hash value 82D corresponding to the period information 86 and the 11th hash value 82E and the 12th hash value 82F corresponding to the period information 94 can be collected and stored in the metadata 20. Thus, it is clarified that in the metadata 20, the period information 86 corresponds to the first hash value 82A, the second hash value 82B, the third hash value 82C, and the fourth hash value 82D, and the period information 94 corresponds to the 11th hash value 82E and the 12th hash value 82F. As a result, the processing of the first hash value 82A, the second hash value 82B, the third hash value 82C, the fourth hash value 82D, the eleventh hash value 82E, the twelfth hash value 82F, and the time information 86 and 94 becomes easy.

[0205] In the second embodiment described above, an example of executing the editing process in the camera device 10 is given, but the technology of the present invention is not limited to this. Fig.21As shown, the editing process may also be performed by an editing device 100 used by an editor 98 at the editing site 96. As an example of the editing device 100, a device having the same specifications as the receiving device 24 can be cited. The editing device 100 is connected to the network 28 in the same manner as the receiving device 24. For example, the image file 16 is transmitted from the camera device 10 to the editing device 100 via the network 28, and the image file 16 edited by the editing device 100 is transmitted to the receiving device 24 via the network 28.

[0206] In this way, when the editing process is executed by the editing device 100, the image file creation process can be distributed and executed by the camera device 10 and the editing device 100. For example, Fig.13 The image file creation process shown is executed by the camera device 10. Fig.19 The processing of step ST21A to step ST26 included in the image file creation processing shown is executed by the editing device 100. In this case, for example, the image file 16 sent by the camera 10 is sent to the editing device 100, and the image file 16 edited by the editing device 100 is sent to the receiving device 24. In addition, when the editing process is executed by the editing device 100, the image file receiving processing can be performed by the editing device 100.

[0207] In the above-mentioned second embodiment, an example is given in which the editor information 68E and the editing time information 68F do not include the non-permission information 74, but this is only an example, and the editor information 68E or the editing time information 68F may include the non-permission information 74 in the same manner as in the above-mentioned first embodiment.

[0208] In the second embodiment described above, the example in which the time information 94 is directly included in the second related information 80 is given for explanation, but this is only an example. For example, the time information 94 may be encrypted in the same manner as the related information 68, and the encrypted information of the time information 94 may be included in the second related information 80. In this case, the time information 94 before encryption may be included in the metadata 20 of the image file 16 as a part of the related information 68.

[0209] [Third embodiment]

[0210] In the above-mentioned embodiments, an example of a method in which the encrypted information 82 is included in the metadata 20 is described, but in the third embodiment, an example of a method in which information obtained by further encrypting the encrypted information 82 is included in the metadata 20 is described. In addition, in the third embodiment, the same reference numerals are given to the same constituent elements as those described in the above-mentioned embodiments, and the description thereof is omitted, and the parts different from those in the above-mentioned embodiments are described.

[0211] As an example, Fig. 22 As shown, the encryption unit 42C involved in the third embodiment is different from the encryption unit 42C described in the above embodiments in that the third related information 102 is generated instead of the second related information 80. The third related information 102 is different from the second related information 80 in that it has re-encrypted information 104 instead of the encrypted information 82. The re-encrypted information 104 is an example of the "first encrypted information" involved in the technology of the present invention, and is generated based on the encrypted information 82 (for example, the first hash value 82A, the second hash value 82B, the third hash value 82C, and the fourth hash value 82D, etc.).

[0212] The encryption unit 42C generates the private key 106 and generates the public key 108 corresponding to the private key 106. The public key 108 is obtained by the transmission unit 42E. The transmission unit 42E transmits it to the storage device 110 on the network 28. The storage device 110 receives the public key 108 transmitted from the transmission unit 42E and stores the received public key 108. As an example of the storage device 110, a server or a personal computer connected to the network 28 in a communicable manner can be cited.

[0213] The sending section 42E provides the attaching section 42D with a URL 112 capable of identifying the location of the public key 108 stored on the network 28 (for example, the location where the public key 108 is stored by the storage device 110 ).

[0214] The encryption unit 42C generates the re-encrypted information 104 by encrypting the encrypted information 82 using the private key 106. For example, the re-encrypted information 104 is information obtained by encrypting the first hash value 82A, the second hash value 82B, the third hash value 82C, the fourth hash value 82D, the eleventh hash value 82E, and the twelfth hash value 82F using the private key 106. Here, the first hash value 82A, the second hash value 82B, the third hash value 82C, the fourth hash value 82D, the eleventh hash value 82E, and the twelfth hash value 82F are examples of the “first hash value” involved in the technology of the present invention.

[0215] As an example, Fig.23As shown, similarly to the above-mentioned embodiments, the adding unit 42D creates the image file 16 by adding the metadata 20 to the image data 18. In the third embodiment, the adding unit 42D creates the image file 16 using the image data 18, the related information 68, the hash function 84, the third related information 102 and the URL 112.

[0216] In the third embodiment, the metadata 20 includes the related information 68 and the hash function 84. In addition, in the third embodiment, the metadata 20 includes the third related information 102 instead of the second related information 80. In addition, in the third embodiment, the metadata 20 includes the URL 112 as information required to obtain the public key 108.

[0217] As an example, Fig.24 As shown, the comparison unit 58C extracts the re-encrypted information 104 from the third related information 102 included in the metadata 20 of the image file 16. Furthermore, the comparison unit 58C obtains the public key 108 through the network 28 using the URL 112 included in the metadata 20 of the image file 16. That is, the comparison unit 58C specifies the location of the public key 108 stored on the network 28 (for example, the location where the public key 108 is stored in the storage device 110) from the URL 112, and obtains the public key 108 from the specified location.

[0218] Comparison unit 58C generates encrypted information 82 (e.g., first hash value 82A, second hash value 82B, third hash value 82C, fourth hash value 82D, 11th hash value 82E, and 12th hash value 82F) by decrypting re-encrypted information 104 using public key 108. Here, encrypted information 82 obtained by decrypting re-encrypted information 104 using public key 108 is the "first information" involved in the technology of the present invention. Furthermore, first hash value 82A, second hash value 82B, third hash value 82C, fourth hash value 82D, 11th hash value 82E, and 12th hash value 82F included in encrypted information 82 obtained by decrypting re-encrypted information 104 using public key 108 are examples of "second hash values" involved in the technology of the present invention.

[0219] The comparison unit 58C compares the verification information 88 with the encrypted information 82 in the same manner as in the above-described embodiments. That is, the comparison unit 58C compares the fifth hash value 88A, the sixth hash value 88B, the seventh hash value 88C, the eighth hash value 88D, the ninth hash value 88E, and the tenth hash value 88F with the first hash value 82A, the second hash value 82B, the third hash value 82C, the fourth hash value 82D, the eleventh hash value 82E, and the twelfth hash value 82F.

[0220] As described above, in the third embodiment, the comparison unit 58C compares the verification information 88 with the encrypted information 82 generated based on the re-encrypted information 104. This can achieve the same effects as those of the above-described embodiments.

[0221] In the third embodiment, the re-encrypted information 104 is generated based on the encrypted information 82 obtained by hashing the related information 68 and the private key 106. In other words, the re-encrypted information 104 can be said to be information obtained by doubly encrypting the related information 68.

[0222] The re-encrypted information 104 is included in the metadata 20 of the image file 16. The image file 16 is received and processed by the receiver 26 or the editor 98 in the same manner as in the above-described embodiments. The information compared with the verification information 88 by the comparison unit 58C in the receiving device 24 used by the receiver 26 or the editing device 100 used by the editor 98 is the encrypted information 82 generated by decrypting the re-encrypted information 104 with the public key 108. Therefore, compared with the case where the related information 68 is only hashed, it is possible to determine whether the related information 68 has been modified, etc., while ensuring a high degree of security.

[0223] Furthermore, in the third embodiment, the comparison unit 58C obtains the public key 108 from the network 28 by using the URL 112 in the metadata 20 of the image file 16. Therefore, a registered user (for example, the receiver 26 or the editor 98) who handles the image file 16 can easily obtain the public key 108.

[0224] In the third embodiment described above, the example of including the URL 112 in the metadata 20 is described, but this is only an example, and the public key 108 may be included in the metadata 20. In this case, a registered user (e.g., the receiver 26 or the editor 98) who handles the image file 16 can quickly obtain the public key 108.

[0225] [Fourth embodiment]

[0226] In the above-mentioned embodiments, the example of including the photographer information 68A, the shooting time information 68B, the camera position information 68C, the subject position information 68D, the editor information 68E and the editing time information 68F in the related information 68 is described. However, in the fourth embodiment, for example, Fig.25 As shown, an example of a mode in which the related information 68 further includes the thumbnail image 114 will be described. In the fourth embodiment, the same components as those described in the above embodiments are denoted by the same reference numerals and the description thereof is omitted, and the parts different from the above embodiments will be described.

[0227] As an example, Fig.25 As shown, the acquisition unit 42A generates a thumbnail image 114 by thumbnailing (ie, reducing) the image data 18. The acquisition unit 42A includes the thumbnail image 114 in the related information 68. The thumbnail image 114 is an example of a "thumbnail image" involved in the technique of the present invention.

[0228] The associating unit 42B generates the first associating information 76 . In the first associating information 76 , the seventh reliability information 78G is associated with the thumbnail image 114 .

[0229] The seventh reliability information 78G is information that can identify the source of the thumbnail image 114. In the fourth embodiment, the thumbnail image 114 is information obtained by internal processing based on the processor 42 (that is, the processing of thumbnailing the image data 18 by the acquisition unit 42A). Therefore, in the fourth embodiment, as an example of the seventh reliability information 78G, information indicating the content of the thumbnail image 114 obtained by the internal processing based on the processor 42 is used. The association of the seventh reliability information 78G with the thumbnail image 114 means that the thumbnail image 114 is not information obtained through the network 28.

[0230] Furthermore, the seventh reliability information 78G is also automatically associated with the thumbnail image 114 after the thumbnail image 114 is acquired by the internal processing of the processor 42 in the same manner as the first reliability information 78A is associated with the photographer information 68A.

[0231] As an example, Fig.26 As shown, the encryption unit 42C generates the fourth related information 116. The fourth related information 116 includes the image encryption information 118, the seventh reliability information 78G, and the period information 120. The encryption unit 42C generates the image encryption information 118 by encrypting the thumbnail image 114 in the same manner as in the above-mentioned embodiments, and includes the generated image encryption information 118 in the fourth related information 116. In addition, the encryption unit 42C also includes the above-mentioned second related information 80 or the third related information 102 in the fourth related information 116.

[0232] The image encryption information 118 is associated with the seventh reliability information 78G and the time information 120. The time information 120 includes information indicating the content of the generated thumbnail image 114 and information indicating the time when the thumbnail image 114 was generated.

[0233] As described above, in the fourth embodiment, the fourth related information 116 including the image encryption information 118 (i.e., information that the thumbnail image 114 is encrypted) is included in the metadata 20 of the image file 16 in the same manner as in the above-mentioned embodiments. In other words, the adding unit 42D creates the image file 16 by adding the fourth related information 116 including the image encryption information 118 as the metadata 20 to the image data 18. Therefore, the security of the thumbnail image 114 can be improved.

[0234] In addition, in the fourth embodiment, an example in which the related information 68 includes the thumbnail image 114 is given for explanation, but the technology of the present invention is not limited to this, and text information may also be included in the related information 68. In this case, the text information is encrypted in the same manner as in the above-mentioned embodiments and included in the metadata 20 of the image file 16, so that the security of the text information can be improved.

[0235] Furthermore, the thumbnail image 114 may be an image that does not change with changes (for example, editing by the editing unit 42F) in the image data 18. In this case, the security of the thumbnail image 114 that does not change with changes in the image data 18 can be improved.

[0236] In the fourth embodiment described above, an example is given in which the fourth related information 116 includes the encrypted image information 118 obtained by encrypting the thumbnail image 114, but the technology of the present invention is not limited to this. Fig. 27 As shown, the encryption unit 42C may generate the fifth related information 122 and include the encrypted image information 124 in the fifth related information 122. The encrypted image information 124 is information generated by encrypting the image data 18. The encrypted image information 124 is an example of the "second encrypted information" involved in the technology of the present invention.

[0237] The fifth related information 122 further includes the second related information 80, the third related information 102, or the fourth related information 116. The fifth related information 122 is associated with the eighth reliability information 78H and the time information 86. The eighth reliability information 78H is information that can identify the source of the image data 18. The eighth reliability information 78H includes information indicating that the image was taken to obtain the image data 18 and information corresponding to the shooting time information 68B (see Figure 5 ) information.

[0238] In this way, the fifth related information 122 including the image encryption information 124 (i.e., information that the image data 18 is encrypted) is included in the metadata 20 of the image file 16 in the same manner as in the above-mentioned embodiments. In other words, the adding unit 42D creates the image file 16 by adding the fifth related information 122 including the image encryption information 124 to the image data 18 as the metadata 20. Thus, the security of the image data 18 can be improved.

[0239] [Other Modifications]

[0240] In the above-mentioned embodiments, the computer 30 in the imaging device 10 is used to execute the image file creation process, but the technology of the present invention is not limited to this. Fig.28 As shown, the image file creation process may also be performed by a computer 128 in an external device 126 that is communicably connected to the camera device 10 via the network 28. As an example of the computer 128, a server computer for a cloud service can be cited. The computer 128 is an example of an "information creation device" and a "computer" involved in the technology of the present invention.

[0241] exist Fig.28 In the example shown, the computer 128 includes a processor 130, an NVM 132, and a RAM 134. The NVM 132 stores an image file creation program 50.

[0242] The camera 10 requests the external device 126 to execute the image file creation process via the network 28. In response, the processor 130 of the external device 126 reads the image file creation program 50 from the NVM 132 and executes the image file creation program 50 on the RAM 134. The processor 130 performs the image file creation process according to the image file creation program 50 executed on the RAM 134. Furthermore, the processor 130 provides the processing result obtained by executing the image file creation process to the camera 10 via the network 28.

[0243] exist Fig.28 2 shows an example of a method for making the external device 126 execute the image file creation process, but this is only an example. For example, the image capture device 10 and the external device 126 may execute the image file creation process in a distributed manner, or the image capture device 10 and a plurality of devices including the external device 126 may execute the image file creation process in a distributed manner.

[0244] And, in Fig.28In the example shown, the processor 130 of the external device 126 is caused to perform image file creation processing, but the technology of the present invention is not limited to this. For example, the processor 130 may be caused to perform image file reception processing in response to a request from the receiving device 24 in the same manner as the processor 130 is caused to perform image file creation processing.

[0245] In the above-mentioned embodiments, the image file creation program 50 is stored in the NVM 44, but the technology of the present invention is not limited to this. For example, the image file creation program 50 can be stored in a non-temporary storage medium readable by a portable computer such as an SSD (Solid State Drive), a USB memory, or a magnetic tape. The image file creation program 50 stored in the non-temporary storage medium is installed in the camera device 10. The processor 42 executes the image file creation process according to the image file creation program 50.

[0246] Alternatively, the image file creation program 50 may be stored in advance in a storage device such as another computer or server device connected to the imaging device 10 via a network, and downloaded in response to a request from the imaging device 10 and installed in the imaging device 10 .

[0247] The storage device such as another computer or server device connected to the imaging device 10 or the NVM 44 does not need to store all of the image file creation program 50 in advance, and a part of the image file creation program 50 may be stored in advance.

[0248] And, in Figure 3 The imaging device 10 shown in the figure has a built-in computer 30 , but the technology of the present invention is not limited to this, and for example, the computer 30 may be provided outside the imaging device 10 .

[0249] In the above-mentioned embodiments, the technology of the present invention is described by citing an example of a method of realizing the technology of the present invention through a software structure, but the technology of the present invention is not limited to this, and devices including ASIC (Application Specific Integrated Circuit), FPGA (Field Programmable Gate Array) or PLD (Programmable Logic Device) can also be applied. In addition, a combination of hardware structure and software structure can be used.

[0250] As hardware resources for executing the image file creation processing described in each of the above embodiments, various processors shown below can be used. As a processor, for example, a general-purpose processor CPU that functions as a hardware resource for executing the image file creation processing by executing software, that is, a program can be cited. Also, as a processor, for example, a processor, that is, a dedicated electronic circuit, such as FPGA, PLD, or ASIC, that has a circuit structure specially designed for executing a specific process can be cited. Each processor has a built-in or connected memory, and each processor executes the image file creation processing by using the memory.

[0251] The hardware resource for executing the image file creation process may be composed of one of these various processors, or may be composed of a combination of two or more processors of the same or different types (for example, a combination of multiple FPGAs or a combination of a CPU and an FPGA). Furthermore, the hardware resource for executing the image file creation process may also be a single processor.

[0252] As an example of a processor, there is first a method in which a processor is composed of a combination of one or more CPUs and software and the processor functions as a hardware resource for executing image file creation processing. There is second a method in which a processor that realizes the overall function of a system including multiple hardware resources for executing image file creation processing is implemented by using a single IC (Integrated Circuit) chip represented by SoC (System-on-a-chip). In this way, the image file creation processing is implemented using one or more of the above-mentioned processors as hardware resources.

[0253] Furthermore, as the hardware structure of these various processors, more specifically, a circuit composed of a combination of circuit elements such as semiconductor elements can be used. Furthermore, the above-mentioned image file creation process is only an example. Therefore, it is of course possible to delete unnecessary steps, add new steps, or change the processing order within the scope of the main purpose.

[0254] In addition, here, the image file creation processing performed by the imaging device 10 is described, but the same content can also be said about the image file creation processing performed by the receiving device 24.

[0255] The recorded contents and illustrated contents shown above are detailed descriptions of the parts involved in the technology of the present invention, and are only an example of the technology of the present invention. For example, the descriptions related to the above-mentioned structure, function, action and effect are descriptions related to an example of the structure, function, action and effect of the parts involved in the technology of the present invention. Therefore, without departing from the scope of the main purpose of the technology of the present invention, the recorded contents and illustrated contents shown above can be processed as follows: delete unnecessary parts, add new elements or replace them. In addition, in order to avoid complexity and make it easy to understand the parts involved in the technology of the present invention, in the recorded contents and illustrated contents shown above, descriptions related to technical common sense, etc. that do not need to be specifically explained are omitted on the basis of being able to implement the technology of the present invention.

[0256] In this specification, the grammatical concept of "A or B" includes not only the concept of "any one of A and B", but also the concept with the same meaning as "at least one of A and B". That is, "A or B" includes the following meanings: it can be only A, it can be only B, or it can be a combination of A and B. Furthermore, in this specification, even when three or more things are expressed by connecting "or", the same way of thinking as "A or B" is applied.

[0257] All documents, patent applications, and technical standards described in this specification are incorporated herein by reference to the same extent as if each document, patent application, and technical standard was specifically and individually indicated to be incorporated by reference.

[0258] Regarding the above embodiment, the following supplementary notes are further disclosed.

[0259] (Note 1)

[0260] A method for creating information, comprising:

[0261] An acquisition process for acquiring relevant information related to the image data;

[0262] An encryption step of generating first encrypted information by encrypting the relevant information;

[0263] an adding step of adding the first encrypted information as additional information to the image data,

[0264] The additional information includes time information or reliability information related to the time when the first encrypted information was generated.

[0265] (Note 2)

[0266] A method for creating information, comprising:

[0267] An acquisition process for acquiring relevant information related to the image data;

[0268] an encryption step of generating first encrypted information by encrypting the related information; and

[0269] an adding step of adding additional information directly or indirectly to the image data,

[0270] The additional information includes the first encrypted information and time information or reliability information related to a time when the first encrypted information was generated.

[0271] (Note 3)

[0272] The information creation method according to Supplement 1 or Supplement 2, wherein:

[0273] The reliability information is information related to whether the relevant information is information obtained through a network.

[0274] (Note 4)

[0275] The information creation method according to any one of Notes 1 to 3, wherein:

[0276] The additional information includes a plurality of first encrypted information having different time information.

[0277] (Note 5)

[0278] The information creation method according to any one of Notes 1 to 4, wherein:

[0279] The adding step includes a creating step of creating an image file including the related information and the first encrypted information.

[0280] (Note 6)

[0281] The information creation method according to any one of Notes 1 to 5, wherein:

[0282] The related information includes information indicating contents that are not allowed to be modified or deleted.

[0283] (Note 7)

[0284] The information creation method according to any one of Notes 1 to 6, wherein:

[0285] The related information contains text information or thumbnail images.

[0286] (Note 8)

[0287] The information creation method according to Supplement 7, wherein:

[0288] The thumbnail image is an image that does not change when the image data is changed.

[0289] (Note 9)

[0290] The information creation method according to any one of Notes 1 to 8, wherein:

[0291] The encryption process generates the first encrypted information by hashing the relevant information.

[0292] The additional information contains the hash function used for hashing.

[0293] (Note 10)

[0294] The information creation method according to Supplementary Note 9 comprises:

[0295] A generation process, using the relevant information and a hash function to generate verification information; and

[0296] The comparison step compares the verification information with the first encrypted information or the first information generated based on the first encrypted information.

[0297] (Note 11)

[0298] The information creation method according to Supplement 10, wherein:

[0299] When the first information is generated based on the first encrypted information,

[0300] The first encrypted information is information generated based on a first hash value obtained by hashing the relevant information and a private key.

[0301] The first information is a second hash value generated based on the first encrypted information and the public key.

[0302] (Note 12)

[0303] The information creation method according to Supplement 11, wherein:

[0304] The additional information contains the public key or the information required to obtain the public key.

[0305] (Note 13)

[0306] The information creation method according to any one of Supplementary Notes 1 to 12, wherein:

[0307] The encryption process is automatically performed after the acquisition process.

[0308] (Note 14)

[0309] The information creation method according to Supplement 13, wherein:

[0310] After the image data is acquired, the acquisition process is automatically performed.

[0311] (Note 15)

[0312] The information creation method according to Supplementary Note 14 comprises:

[0313] The camera process acquires image data by taking pictures.

[0314] The acquisition process is automatically performed after the imaging process.

[0315] (Note 16)

[0316] The information creation method according to any one of Supplementary Notes 1 to 15, wherein:

[0317] The relevant information includes photographer information, shooting time information, camera position information or object position information.

[0318] (Note 17)

[0319] The information creation method according to any one of Supplementary Notes 1 to 16, wherein:

[0320] In the encryption step, second encrypted information is generated by encrypting the image data.

[0321] In the adding step, the second encrypted information is added to the image data as additional information.

[0322] (Note 18)

[0323] The information creation method according to any one of Supplement 1 to Supplement 17, wherein:

[0324] In the adding process, the additional information is indirectly added to the image data by recording the additional information in a recording medium and recording access information to the additional information in an image file including the image data.

[0325] (Note 19)

[0326] An image file containing additional information of image data, wherein:

[0327] Additional information includes:

[0328] first encrypted information obtained by encrypting relevant information related to the image data; and

[0329] time information or reliability information related to the time when the first encrypted information was generated,

[0330] And the additional information contains relevant information.

Claims

1. A method for creating information, comprising: An acquisition process for acquiring relevant information related to the image data; An encryption step of generating first encrypted information by encrypting the related information; and an adding step of adding additional information directly or indirectly to the image data, The additional information includes the first encrypted information and time information or reliability information related to a time when the first encrypted information was generated.

2. The information creation method according to claim 1, wherein: The reliability information is information related to whether the relevant information is information obtained through a network.

3. The information creation method according to claim 1, wherein: The additional information includes a plurality of the first encrypted information having different time information.

4. The information creation method according to claim 1, wherein: The adding step includes a creating step of creating an image file including the related information and the first encrypted information.

5. The information creation method according to claim 1, wherein: The related information includes information indicating contents that are not allowed to be modified or deleted.

6. The information creation method according to claim 1, wherein: The related information includes text information or thumbnail images.

7. The information creation method according to claim 6, wherein: The thumbnail image is an image that does not change when the image data is changed.

8. The information creation method according to claim 1, wherein: The encryption step generates the first encrypted information by hashing the related information. The additional information includes a hash function used for the hashing.

9. The information creation method according to claim 8, comprising: A generation step of generating verification information using the relevant information and the hash function; and The comparison step is to compare the verification information with the first encrypted information or the first information generated based on the first encrypted information.

10. The information creation method according to claim 9, wherein: When the first information is generated based on the first encrypted information, The first encrypted information is information generated based on a first hash value obtained by hashing the related information and a private key, The first information is a second hash value generated based on the first encrypted information and a public key.

11. The information creation method according to claim 10, wherein: The additional information includes the public key or information required to obtain the public key.

12. The information creation method according to claim 1, wherein: The encryption process is automatically performed after the acquisition process.

13. The information creation method according to claim 12, wherein: The acquisition process is automatically performed after the image data is acquired.

14. The information creation method according to claim 13, comprising: a photographing step of acquiring the image data by photographing, The acquisition process is automatically performed after the imaging process.

15. The information creation method according to claim 1, wherein: The relevant information includes photographer information, shooting time information, camera position information or object position information.

16. The information creation method according to claim 1, wherein: In the encryption step, second encrypted information is generated by encrypting the image data. In the adding step, the second encrypted information is added to the image data as the additional information.

17. The information creation method according to claim 1, wherein: In the adding step, the additional information is indirectly added to the image data by recording the additional information in a recording medium and recording access information to the additional information in an image file including the image data.

18. An image file comprising additional information of image data, wherein: The additional information includes: first encrypted information obtained by encrypting relevant information related to the image data; and Time information or reliability information related to the time when the first encrypted information was generated.

19. An information creation device comprising a processor, wherein: The processor performs the following processing: Get relevant information related to the image data, generating first encrypted information obtained by encrypting the related information, adding additional information directly or indirectly to the image data, The additional information includes the first encrypted information and time information or reliability information related to a time when the first encrypted information was generated.

20. A program for causing a computer to execute a process, wherein: The processing includes: An acquisition process for acquiring relevant information related to the image data; an encryption step of generating first encrypted information by encrypting the related information; and an adding step of adding additional information directly or indirectly to the image data, The additional information includes the first encrypted information and time information or reliability information related to a time when the first encrypted information was generated.

Images