Imaging apparatus, method for controlling imaging apparatus, and program

Abstract

To disable an electronic signature function when there is a possibility that an imaging apparatus has been modified in hardware.SOLUTION: An imaging apparatus has: detection means that detects that a housing of the imaging apparatus is opened; and control means that disables an electronic signature application function when the detection means detects that the housing of the imaging apparatus is opened.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to an imaging device, and a control method and program for the imaging device. [Background technology]

[0002] Nowadays, electronic signature technology is widely used as a technology for verifying the authenticity of static electronic data. This electronic signature technology is a combination of public key encryption technology and cryptographic hash technology, but the performance of conventional information processing devices was low, making it difficult to apply electronic signatures to dynamically generated electronic data.

[0003] However, in recent years, with the improvement in the performance of information processing devices, it has become possible to add a digital signature to dynamically generated electronic data in real time. One application example of this is a technology for encoding video captured by an imaging device and adding a digital signature to the encoded data.

[0004] This technology makes it possible to prove that the encoded data was captured by a specific imaging device and that the encoded data has not been tampered with. This means that it can be clearly distinguished from realistic fictitious video data created using computer graphics, dramatically improving the evidential value of encoded data captured by an imaging device.

[0005] Furthermore, Patent Document 1 describes a technique for detecting when the housing of a security-function-equipped card reader device has been opened. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] JP 2001-291050 A Summary of the Invention [Problem to be solved by the invention]

[0007] However, for example, surveillance network cameras, which are one type of imaging device, are often installed away from the location where the images are to be monitored and in sparsely populated areas, so it is difficult to say that modifying the hardware is difficult.

[0008] In addition, the interface between the imaging element inside the imaging device and the information processing device is generally publicly available, such as MIPI (registered trademark), and it is not impossible to input fake images that have not been captured on the spot into the information processing device.

[0009] As a result, a digital signature will be attached to false encoded data, which could lead to abuse of the aforementioned technology.

[0010] An object of the present disclosure is to make it possible to invalidate the electronic signature function when there is a possibility that the hardware of an imaging device has been tampered with. [Means for solving the problem]

[0011] The imaging device has a detection means for detecting that a housing of the imaging device has been opened, and a control means for disabling an electronic signature assignment function when the detection means detects that the housing of the imaging device has been opened. Effect of the Invention

[0012] According to the present disclosure, if there is a possibility that the hardware of an imaging device has been tampered with, the electronic signature function can be invalidated. [Brief description of the drawings]

[0013] [Figure 1] FIG. 2 is a diagram illustrating an example of a hardware configuration of an imaging apparatus. [Diagram 2] FIG. 2 is a diagram illustrating an example of a functional configuration of an imaging apparatus. [Diagram 3] 4 is a flowchart showing the operation of the imaging apparatus. [Figure 4] 4 is a flowchart showing the operation of the imaging apparatus. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] Hereinafter, the embodiments will be described in detail with reference to the drawings. Note that the following embodiments do not limit the scope of the claims, and not all of the combinations of features described in the embodiments are necessarily essential to the solution. Note that a network camera will be used as an example of an imaging device according to the embodiments. However, the scope of application is not limited to network cameras, and may be any imaging device having an electronic signature function.

[0015] (First embodiment) 1 is a block diagram showing an example of the hardware configuration of an image capturing apparatus 100 according to the first embodiment. The image capturing apparatus 100 is, for example, a network camera, and includes a camera engine 110 and a network engine 120.

[0016] The camera engine 110 has an image sensor and a signal processing device (not shown), and outputs captured video in a data format that is easy to process by the network engine 120. The network engine 120 receives video data from the camera engine 110, performs image processing and encoding, and outputs the encoded data to an external device (not shown) via a network.

[0017] Next, a description will be given of the network engine 120. The network engine 120 includes a CPU 101, a ROM 102, a RAM 103, a network control unit 104, a camera communication unit 105, a display unit 106, an open / close sensor unit 107, and a bus 109.

[0018] The CPU 101 executes the program of the network engine 120 and controls the image capturing apparatus 100 .

[0019] The ROM 102 is a read-only memory, and stores programs executed by the CPU 101. In recent years, it is common for the ROM 102 to be an electrically rewritable read-only memory (flash memory).

[0020] The RAM 103 is a random access memory, and is used for storing programs and temporary data when the CPU 101 controls the network engine 120 .

[0021] A network control unit 104 controls transmission and reception of data to and from a counterpart device on a network (not shown).

[0022] The camera communication unit 105 controls the camera engine 110 and receives video data from the camera engine 110 .

[0023] The display unit 106 displays various internal states of the network engine 120 or the camera engine 110 .

[0024] The open / close sensor unit 107 detects whether the housing of the imaging device 100 is open or not.

[0025] The bus 109 connects the CPU 101, the ROM 102, the RAM 103, the network control unit 104, the camera communication unit 105, the display unit 106, and the opening / closing sensor unit 107 to one another.

[0026] 2 is a block diagram showing an example of a functional configuration of the imaging device 100 according to the first embodiment. The imaging device 100 includes an imaging unit 200, an encoding unit 210, a signature assignment unit 220, a distribution unit 230, an open / close detection unit 240, and a notification unit 250.

[0027] The imaging unit 200 corresponds to the camera engine 110 in FIG. 1, and performs imaging processing, noise removal processing, color space conversion processing, and the like, and outputs video data.

[0028] The encoding unit 210 encodes the video data captured by the imaging unit 200 so as to facilitate network distribution. In this embodiment, the encoding unit 210 is assumed to be a software process in which the CPU 101 transfers a program stored in the ROM 102 to the RAM 103 and executes it, but the encoding unit 210 may be equipped with a hardware encoding circuit and perform the encoding process in hardware.

[0029] The signature adding unit 220 generates a digital signature for the video data encoded by the encoding unit 210, and adds the digital signature to the encoded video data. The digital signature technology is a widely used and well-known technology, so a description thereof will be omitted. In addition, a method of adding a digital signature to encoded data is also well-known, so a description thereof will be omitted.

[0030] The distribution unit 230 distributes the encoded data with the digital signature over the network. Furthermore, when the opening / closing detection unit 240 described later detects that the housing is opened, the distribution unit 230 distributes the detection result over the network.

[0031] 1, and detects whether the housing of the imaging device 100 is open or not. The detection method is assumed to use a physical switch that is attached so that the state changes when the housing is opened, but other methods such as an optical sensor that utilizes the fact that the inside becomes bright when the housing is opened may also be used. The open / close detection unit 240 also includes a storage means that electrically stores information that the housing has been opened and allows the CPU 101 to refer to it, and a power supply necessary to maintain the state of the storage means even when the imaging device 100 is not connected to a power supply.

[0032] The notification section 250 corresponds to the display section 106 in FIG. 1, and when the open / close detection section 240 detects that the housing of the imaging device 100 has been opened, the notification section 250 displays the detection result.

[0033] 3 is a flowchart showing a control method of the imaging device 100 according to the first embodiment, and is a flowchart showing a part of the processing executed by the CPU 101 when the power is turned on. This processing may be executed while the CPU 101 reads the program from the ROM 102, with the program stored in the ROM 102. This processing may also be executed while the CPU 101 reads the program from the RAM 103 after the program has been transferred from the ROM 102 to the RAM 103 in advance.

[0034] In step S3010, CPU 101 functions as a detection unit and detects whether or not the housing of imaging device 100 is opened using open / close sensor unit 107. Specifically, this is realized by CPU 101 making an inquiry to open / close sensor unit 107 via bus 109. If CPU 101 detects that the housing of imaging device 100 is opened, CPU 101 advances the process to step S3020, and if CPU 101 does not detect that the housing of imaging device 100 is opened, CPU 101 ends the process of FIG.

[0035] In step S3020, CPU 101 functions as a control unit and disables the electronic signature attachment function. This corresponds to open / close detection unit 240 in Fig. 2 issuing an instruction to signature attachment unit 220 that the housing of imaging device 100 has been opened. In this case, thereafter, signature attachment unit 220 outputs the coded data output by coding unit 210 to distribution unit 230 without attaching a signature to the coded data. As a result, after the housing of imaging device 100 is opened, imaging device 100 will no longer output coded data to which a signature has been attached.

[0036] The signature adding unit 220 adds a digital signature to the encoded video data if the digital signature adding function is not disabled, and does not add a digital signature to the encoded video data if the digital signature adding function is disabled. The distribution unit 230 distributes data to which a digital signature has been added by the signature adding unit 220, or data to which no digital signature has been added.

[0037] Also, in step S3020, the open / close detection unit 240 outputs the detection result that the housing of the imaging device 100 is open to the distribution unit 230, and the distribution unit 230 can then distribute a notification to that effect to a counterpart device (not shown).

[0038] Furthermore, in step S3020, the open / close detection unit 240 outputs the detection result that the housing of the imaging device 100 is open to the notification unit 250, so that the notification unit 250 can notify the same. For example, the display unit 106 can display the same. This makes it possible for a user in a remote location or a user near the imaging device 100 to notice the abnormality.

[0039] As described above, according to this embodiment, the imaging device 100 can detect the possibility that the housing of the imaging device 100 has been opened and the hardware of the imaging device 100 has been tampered with, and can prevent a signature attachment process from being performed on the encoded data output by the imaging device 100. This makes it possible to prevent abuse of the digital signature attachment function of the imaging device 100.

[0040] Second embodiment In the first embodiment, an example was shown in which, when it is detected in step S3010 that the housing of the imaging device 100 has been opened, the electronic signature assignment function is disabled in step S3020, and then the startup process of the imaging device 100 continues.

[0041] On the other hand, there is also a view that it is safer from the viewpoint of security to stop operation of the imaging device 100 rather than continuing the startup process when the housing of the imaging device 100 is opened and there is a possibility of tampering with the hardware of the imaging device 100. In response to this, it is also possible to configure so that the operation to be performed after it is detected that the housing of the imaging device 100 has been opened can be set.

[0042] Therefore, it is also conceivable to adopt an imaging device 100 in which the user can set whether to continue the operation of the imaging device 100 or to stop the operation. In this case, the display unit 106 is configured to receive input from the user's operation or receives input from a connected device (not shown), and the CPU 101 stores the setting states of these inputs in the ROM 102. Then, the CPU 101 may be configured to refer to the setting states when the imaging device 100 is started and operate according to the setting states.

[0043] FIG. 4 is a flowchart showing a method for controlling the image capture device 100 according to the second embodiment, and is a flowchart showing part of the processing executed by the CPU 101 when the image capture device 100 is powered on.

[0044] In step S3010, CPU 101 detects whether or not the housing of imaging device 100 is open using open / close sensor unit 107. Specifically, this is achieved by CPU 101 making an inquiry to open / close sensor unit 107 via bus 109. If CPU 101 detects that the housing of imaging device 100 is open, CPU 101 advances the process to step S4030, and if CPU 101 does not detect that the housing of imaging device 100 is open, CPU 101 ends the process of FIG.

[0045] In step S4030, the CPU 101 determines whether or not the setting state stored in the ROM 102 is a setting state that stops the startup process of the imaging device 100. This setting state is stored in the ROM 102 by the CPU 101 as a setting state corresponding to a user input to the display unit 106 or an input from a counterpart device.

[0046] If the setting state (first setting) for not stopping the startup process of the imaging device 100 is stored in the ROM 102, the CPU 101 advances the process to step S3020. The process of this step S3020 is similar to the process of step S302 in FIG.

[0047] Furthermore, when a setting state (second setting) for stopping the start-up process of the imaging device 100 is stored in the ROM 102, the CPU 101 stops the start-up process of the imaging device 100. At this time, the open / close detection unit 240 outputs the detection result that the housing of the imaging device 100 is open to the notification unit 250, so that the notification unit 250 can notify the fact. That is, the display unit 106 can display the fact. Furthermore, when the initialization process of the distribution unit 230 is completed and this process is executed, the open / close detection unit 240 outputs the detection result that the housing of the imaging device 100 is open to the distribution unit 230, so that the distribution unit 230 can distribute the notification to the other device. This makes it possible for a user near the imaging device 100 or a user in a remote location to notice an abnormality.

[0048] As described above, according to this embodiment, when the housing of the imaging device 100 is opened and it is detected that the hardware of the imaging device 100 may have been tampered with, it is possible to set whether to continue or stop the startup process of the imaging device 100. This makes it possible to more strictly prevent the misuse of the digital signature assignment function of the imaging device 100.

[0049] (Third embodiment) In the first and second embodiments, the user cannot enable / disable the digital signature attachment function. However, an imaging device 100 may be conceived in which the user can enable / disable the digital signature attachment function. In this case, the display unit 106 is configured to receive input from a user's operation or from an opposing device (not shown), and the CPU 101 stores the setting state of this input in the ROM 102. The signature attachment unit 220 is then configured to refer to this and operate in accordance with the setting state.

[0050] CPU 101 stores the setting state of the digital signature attachment function, enabled / disabled, in ROM 102 in response to a user operation input on display unit 106 or an input from a counterpart device. ROM 102 is an example of a non-volatile storage unit. When the setting of the digital signature attachment function in ROM 102 is enabled, signature attachment unit 220 attaches a digital signature to data, and when the setting of the digital signature attachment function in ROM 102 is disabled, signature attachment unit 220 does not attach a digital signature to data.

[0051] When the open / close detection unit 240 detects that the housing of the imaging device 100 is open at the time of starting up the imaging device 100, the CPU 101 determines whether or not the setting state stored in the ROM 102 is a setting for enabling the electronic signature attachment function. If the setting state is a setting for enabling the electronic signature attachment function, the CPU 101 rewrites the setting of the electronic signature attachment function in the ROM 102 from an enabled setting to a disabled setting, and disables the electronic signature attachment function.

[0052] Furthermore, when open / close detection unit 240 detects that the housing of imaging device 100 has been opened, CPU 101 controls the function so that the user cannot change the setting of the electronic signature assignment function from a disabled setting to an enabled setting, thereby preventing abuse even more strictly.

[0053] In addition, if the open / close detection unit 240 does not detect that the housing of the imaging device 100 has been opened when the imaging device 100 is started up, the CPU 101 enables or disables the electronic signature assignment function according to the setting state stored in the ROM 102.

[0054] An electrical fuse can be used as a method for the CPU 101 to retain the detection that the housing of the image capture device 100 has been opened by the open / close detection unit 240. If the CPU 101 performs control to cut the electrical fuse when it detects that the housing of the image capture device 100 has been opened, it becomes impossible to later return the electrical fuse to a state in which it was not detected that the housing had been opened, and misuse can be prevented even more strictly.

[0055] Furthermore, in the first and second embodiments, a description has been given of a case where a digital signature is added to data obtained by encoding a video image captured by the camera engine 110, but data to which a digital signature is added is not limited to this.

[0056] According to the first to third embodiments, if the imaging device 100 is modified in terms of hardware, the generated encoded data will no longer be given a digital signature, making it possible to prevent the technology from being misused.

[0057] (Other embodiments) The present disclosure can also be realized by a process in which a program for implementing one or more functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. It can also be realized by a circuit (e.g., ASIC) for implementing one or more functions.

[0058] It should be noted that the above-described embodiments are merely illustrative of specific examples of implementing the present disclosure, and the technical scope of the present disclosure should not be interpreted as being limited by these embodiments. In other words, the present disclosure can be implemented in various forms without departing from its technical concept or main features.

[0059] The disclosure of this embodiment includes the following configuration, method, and program. (Configuration 1) 1. An imaging device, comprising: a detection means for detecting that a housing of the imaging device has been opened; a control means for disabling a digital signature attachment function when the detection means detects that a housing of the imaging device has been opened; An imaging device comprising: (Configuration 2) The imaging device described in configuration 1, further comprising an attachment means for attaching an electronic signature to data when the electronic signature attachment function is not disabled, and not attaching an electronic signature to data when the electronic signature attachment function is disabled. (Configuration 3) 3. The imaging device according to configuration 2, further comprising a distribution unit that distributes the data to which the digital signature is added. (Configuration 4) 4. The imaging device according to configuration 3, wherein the distribution means distributes a notification when the detection means detects that a housing of the imaging device has been opened. (Configuration 5) 5. The imaging device according to any one of configurations 1 to 4, further comprising a notification means for issuing a notification when the detection means detects that a housing of the imaging device has been opened. (Configuration 6) 5. The imaging device according to any one of configurations 2 to 4, wherein the adding means adds a digital signature to the video data. (Configuration 7) The image capturing device further includes an encoding unit for encoding the image data captured by the image capturing unit, 5. The imaging device according to any one of configurations 2 to 4, wherein the adding means adds a digital signature to the video data encoded by the encoding means. (Configuration 8) The control means when the detection means detects that a housing of the imaging device has been opened and a first setting is set, disables an electronic signature attachment function; The imaging device described in any one of configurations 1 to 7, characterized in that when the detection means detects that the housing of the imaging device has been opened and a second setting has been made, the startup process of the imaging device is stopped. (Configuration 9) The imaging device according to configuration 8, further comprising a distribution means for distributing a notification when the detection means detects that a housing of the imaging device has been opened and the second setting has been set. (Configuration 10) The imaging device according to configuration 8 or 9, further comprising a notification means for providing a notification when the detection means detects that the housing of the imaging device has been opened and the second setting has been set. (Configuration 11) the adding means adds an electronic signature to the data when the setting of the electronic signature adding function is set to an enabled setting, and does not add an electronic signature to the data when the setting of the electronic signature adding function is set to an disabled setting; The imaging device described in any one of configurations 2 to 4, characterized in that when the detection means detects that the housing of the imaging device has been opened and the setting of the electronic signature attachment function is an enabled setting, the control means changes the setting of the electronic signature attachment function to a disabled setting. (Configuration 12) 12. The imaging device according to claim 11, wherein the setting of the electronic signature adding function is stored in a non-volatile storage unit. (Configuration 13) The imaging device described in configuration 11 or 12, characterized in that when the detection means detects that the housing of the imaging device has been opened, the control means controls the setting of the electronic signature assignment function so that it cannot be changed from a disabled setting to an enabled setting. (Method 1) A control method for an imaging device, comprising: a detection step of detecting that a housing of the imaging device has been opened; a control step of disabling an electronic signature attachment function when it is detected that a housing of the imaging device has been opened in the detection step; 13. A method for controlling an imaging apparatus comprising: (Program 1) a detection step of detecting that a housing of the imaging device has been opened; a control step of disabling a digital signature attachment function of the imaging device when it is detected that a housing of the imaging device has been opened in the detection step; A program for causing a computer to execute the following. [Explanation of symbols]

[0060] 100 imaging device, 110 camera engine, 120 network engine, 200 imaging unit, 210 encoding unit, 220 signature assignment unit, 230 distribution unit, 240 open / close detection unit, 250 notification unit

Claims

1. 1. An imaging device, comprising: a detection means for detecting that a housing of the imaging device has been opened; a control means for disabling a digital signature attachment function when the detection means detects that a housing of the imaging device has been opened; An imaging device comprising:

2. 2. The imaging device according to claim 1, further comprising an attachment means for attaching an electronic signature to data when the electronic signature attachment function is not disabled, and not attaching an electronic signature to data when the electronic signature attachment function is disabled.

3. 3. The imaging apparatus according to claim 2, further comprising a distribution unit that distributes the data to which the digital signature is added.

4. 4. The imaging device according to claim 3, wherein the distribution unit distributes a notification when the detection unit detects that a housing of the imaging device has been opened.

5. 2. The image pickup apparatus according to claim 1, further comprising a notification unit that issues a notification when the detection unit detects that a housing of the image pickup apparatus has been opened.

6. 3. The image pickup apparatus according to claim 2, wherein the adding means adds a digital signature to the video data.

7. The image capturing device further includes an encoding unit for encoding the image data captured by the image capturing unit, 3. The image pickup apparatus according to claim 2, wherein the adding means adds a digital signature to the video data encoded by the encoding means.

8. The control means when the detection means detects that the housing of the imaging device has been opened and a first setting is set, disables an electronic signature attachment function; 2. The imaging device according to claim 1, wherein when the detection means detects that the housing of the imaging device has been opened and a second setting has been set, a startup process of the imaging device is stopped.

9. 9. The imaging device according to claim 8, further comprising a distribution means for distributing a notification when the detection means detects that a housing of the imaging device has been opened and the second setting is set.

10. 9. The imaging device according to claim 8, further comprising a notification means for issuing a notification when the detection means detects that a housing of the imaging device has been opened and the second setting has been set.

11. the adding means adds an electronic signature to the data when the setting of the electronic signature adding function is set to an enabled setting, and does not add an electronic signature to the data when the setting of the electronic signature adding function is set to an disabled setting; The imaging device according to claim 2, characterized in that the control means changes the setting of the electronic signature granting function to a disabled setting when the detection means detects that the housing of the imaging device has been opened and the setting of the electronic signature granting function is an enabled setting.

12. 12. The imaging device according to claim 11, wherein the setting of the electronic signature adding function is stored in a non-volatile storage unit.

13. The imaging device according to claim 11, characterized in that, when the detection means detects that a housing of the imaging device has been opened, the control means controls the setting of the electronic signature assignment function so that it cannot be changed from a disabled setting to an enabled setting.

14. A control method for an imaging device, comprising: a detection step of detecting that a housing of the imaging device has been opened; a control step of disabling an electronic signature attachment function when it is detected that a housing of the imaging device has been opened in the detection step; 13. A method for controlling an imaging apparatus comprising:

15. a detection step of detecting that a housing of the imaging device has been opened; a control step of disabling a digital signature attachment function of the imaging device when it is detected that a housing of the imaging device has been opened in the detection step; A program for causing a computer to execute the following.

Images